This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa File: 3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: t3pqsE2Lj5Aca/9wq942eEOWi1b1rU/oYRTKW/nSAZI= Subject key identifier: AA:FA:A5:7E:9A:3C:12:12:48:1F:68:8E:F5:F3:01:DE:F8:95:34:53 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4E15D0187934FA0670D725F84CD99BD711A173A1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 201341 IP address blocks: 193.32.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:15:d0:18:79:34:fa:06:70:d7:25:f8:4c:d9:9b:d7:11:a1:73:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=AAFAA57E9A3C1212481F688EF5F301DEF8953453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9a:7b:4f:72:ca:7a:66:2a:46:15:5d:b7:62: a2:fb:d3:78:22:37:35:4f:25:6b:f4:71:f1:02:4c: 8f:f5:68:e2:81:b1:20:af:9f:45:07:72:4d:ae:ed: 68:03:3d:96:4c:04:9c:9c:cd:2e:cd:b6:ad:6b:97: 0f:e0:78:2c:cc:f2:06:0d:68:2d:a9:17:13:9f:7c: 18:9c:6d:1e:5c:8e:73:4a:90:83:4e:d6:6e:74:57: a8:f1:5a:50:20:da:a9:c4:f9:72:c0:69:02:27:a8: 1f:20:65:da:f7:c0:3b:0f:7f:a3:ff:8a:a0:49:6a: ea:9d:dc:b9:28:fe:02:65:7c:6e:01:d5:30:a6:05: ed:93:07:cf:04:be:4c:13:c0:1b:4b:21:a5:05:2e: 7c:17:27:5c:43:27:d0:1f:dc:ff:6b:e7:44:11:d9: b5:2b:80:d7:41:08:73:e9:4f:be:87:50:d1:75:33: fc:e0:ef:b5:70:46:de:81:b7:53:ee:e3:e3:d3:75: 3f:00:91:f8:88:31:56:5e:7d:e0:3d:84:ba:91:e0: e2:47:c4:e5:0e:8a:5d:21:01:ed:5e:5d:96:81:d3: 86:ec:c9:fe:f2:4a:25:ab:69:80:43:68:dc:fd:69: 32:9b:c8:d2:d9:ef:c8:8f:ba:f7:23:40:07:ab:4d: a3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FA:A5:7E:9A:3C:12:12:48:1F:68:8E:F5:F3:01:DE:F8:95:34:53 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137332e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.173.0/24 Signature Algorithm: sha256WithRSAEncryption 15:aa:d9:78:ad:a2:ce:7e:63:a1:a5:aa:13:6c:a4:26:55:08: 27:39:6b:7f:f0:8c:c0:41:8c:9b:dd:7f:a0:ca:6d:1e:d9:a6: 3c:6e:e9:4c:19:9c:2b:78:d4:92:76:bf:d7:70:0c:36:0f:5e: b4:40:11:d3:87:fd:2b:28:4b:d9:40:7e:fd:a5:a2:0d:15:b3: 9e:e7:13:c5:9f:63:1d:ff:7c:3e:3e:ba:da:4b:2d:3e:5c:f5: 88:db:2c:5f:12:11:62:d0:f2:23:d6:f7:58:6c:81:ed:d0:d4: ca:ff:e7:1c:4e:b4:43:6d:68:da:ba:e7:32:6a:8a:16:35:71: 28:5f:3c:d1:05:63:5b:78:bd:3e:01:2e:47:44:60:e6:f5:74: 93:a1:21:75:64:d7:93:67:2e:ef:ad:29:f0:1a:7c:2f:d9:41: 1a:e0:48:3b:51:40:2a:14:18:e5:1b:df:2c:17:46:14:1c:49: 2c:d4:15:7d:35:7a:b8:86:14:4a:18:34:8a:e1:2e:5c:e0:68: d1:55:1f:e9:5d:6f:fb:02:ef:f4:5b:04:aa:22:47:f1:99:1c: 78:c2:98:2d:82:86:40:3a:72:e5:59:34:7a:ad:7d:67:26:8a: 54:dd:8e:4a:18:26:5e:f8:f9:58:9a:ea:79:2b:76:42:40:7a: 2e:62:e1:f7 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUThXQGHk0+gZw1yX4TNmb1xGhc6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKEFBRkFBNTdFOUEzQzEyMTI0ODFGNjg4RUY1RjMwMURFRjg5NTM0NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAmntPcsp6ZipGFV23YqL703gi NzVPJWv0cfECTI/1aOKBsSCvn0UHck2u7WgDPZZMBJyczS7Ntq1rlw/geCzM8gYN aC2pFxOffBicbR5cjnNKkINO1m50V6jxWlAg2qnE+XLAaQInqB8gZdr3wDsPf6P/ iqBJauqd3Lko/gJlfG4B1TCmBe2TB88EvkwTwBtLIaUFLnwXJ1xDJ9Af3P9r50QR 2bUrgNdBCHPpT76HUNF1M/zg77VwRt6Bt1Pu4+PTdT8AkfiIMVZefeA9hLqR4OJH xOUOil0hAe1eXZaB04bsyf7ySiWraYBDaNz9aTKbyNLZ78iPuvcjQAerTaPxAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUqvqlfpo8EhJIH2iO9fMB3viVNFMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzIy ZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEgrTANBgkqhkiG9w0BAQsFAAOCAQEAFarZeK2izn5joaWqE2ykJlUI Jzlrf/CMwEGMm91/oMptHtmmPG7pTBmcK3jUkna/13AMNg9etEAR04f9KyhL2UB+ /aWiDRWznucTxZ9jHf98Pj662kstPlz1iNssXxIRYtDyI9b3WGyB7dDUyv/nHE60 Q21o2rrnMmqKFjVxKF880QVjW3i9PgEuR0Rg5vV0k6EhdWTXk2cu760p8Bp8L9lB GuBIO1FAKhQY5RvfLBdGFBxJLNQVfTV6uIYUShg0iuEuXOBo0VUf6V1v+wLv9FsE qiJH8ZkceMKYLYKGQDpy5Vk0eq19ZyaKVN2OShgmXvj5WJrqeSt2QkB6LmLh9w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:16 2025 by rpki-client