This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa File: 3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: brPEFpkSfp7O+dy7V344soeZBfmN4n1QoNOn/vgBRj4= Subject key identifier: 8D:BA:98:2F:7D:D4:3F:8E:0A:26:65:D4:C5:A7:A7:34:72:0C:1F:93 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 28D1DC1E0DAA2B7C4D3A47338F8225BEA2328583 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:15 +0000 ROA not before: Fri 28 Nov 2025 11:44:15 +0000 ROA not after: Fri 27 Nov 2026 11:49:15 +0000 asID: 201341 IP address blocks: 193.32.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:d1:dc:1e:0d:aa:2b:7c:4d:3a:47:33:8f:82:25:be:a2:32:85:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:15 2025 GMT Not After : Nov 27 11:49:15 2026 GMT Subject: CN=8DBA982F7DD43F8E0A2665D4C5A7A734720C1F93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:34:77:9d:ec:39:a8:d4:e4:e4:79:97:61:ca: 14:d5:50:9e:a2:b5:18:d9:a8:ff:07:ff:7e:84:6d: 6b:81:b5:c3:bf:4b:19:b3:68:fb:63:2b:f4:cc:60: 97:40:ba:b2:4f:a0:d3:54:2c:39:be:6c:d3:eb:83: 5f:cd:54:be:5d:c9:7c:4e:ac:e2:81:05:4c:d1:37: 4a:38:6f:6b:e1:d8:71:37:d8:5a:b5:4b:5b:5e:da: dd:8c:6c:9e:06:b6:47:4b:ea:34:f2:8c:f0:69:d9: 2f:4d:97:5e:fa:b4:4b:8b:2d:a7:50:79:3d:c6:29: 20:44:bb:d9:48:d4:6e:b3:9e:90:08:cc:b4:fa:86: fa:f9:14:27:e7:78:92:08:a9:bf:4c:05:da:22:54: 82:21:07:72:6c:5b:fe:de:1c:a4:e7:9e:ac:58:3b: 19:ef:23:04:63:dd:7a:f1:2b:4f:3d:9b:95:f7:7a: bb:b4:e8:68:bf:1d:a9:61:78:7d:72:8a:a0:d2:e2: bf:12:c5:c8:31:23:a6:15:36:df:5c:4b:a1:0b:96: 54:c3:00:c7:6a:48:c9:97:9d:40:a5:31:d6:22:83: a0:48:f0:b1:8c:29:17:53:09:2e:11:0b:58:ae:94: 66:74:6a:56:09:e6:76:d7:42:49:8c:51:7e:c3:b1: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BA:98:2F:7D:D4:3F:8E:0A:26:65:D4:C5:A7:A7:34:72:0C:1F:93 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137342e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.174.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:64:72:2a:c6:59:b5:11:2d:b9:c6:80:a0:cb:04:5a:56:e9: 98:40:8e:f8:ef:4e:81:c4:c8:b3:75:22:1f:df:45:ec:f1:5d: b0:71:6c:46:c1:dc:1d:14:66:08:6a:f1:cd:6e:a8:b9:e5:bb: 56:78:9f:87:6d:3b:25:ab:99:0e:b9:46:a7:ef:3b:28:23:31: 28:dd:93:29:b0:9d:35:94:81:1f:8d:68:0b:4e:6c:f9:3b:b6: f0:b3:de:aa:77:6f:3b:53:ef:db:5d:55:e7:af:ef:ab:36:a4: 8d:68:08:48:e8:a0:80:3a:e4:3f:31:61:3f:0e:56:81:db:ff: bb:ac:d1:11:6b:17:ca:ef:08:75:0c:bf:14:6d:52:70:11:40: ff:2f:6f:fe:59:92:cb:df:2c:89:62:aa:eb:38:44:9c:c3:1d: 8e:6b:43:5c:94:b9:99:20:61:38:47:e9:a7:c1:91:b9:3e:df: d0:dd:fb:dd:ef:1d:5b:8a:c8:b8:00:24:fc:e6:5b:44:44:3b: be:46:a4:68:dc:e5:c4:6c:d5:78:74:ee:e1:90:44:d7:e4:86: 44:5b:6f:48:21:78:c8:f1:fc:07:22:4c:ac:49:4d:ef:1a:44: bb:bb:fa:e9:1f:43:e4:8d:ff:bc:28:c2:d2:72:68:27:8f:44: 06:68:d6:b2 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUKNHcHg2qK3xNOkczj4IlvqIyhYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTVaFw0yNjExMjcxMTQ5MTVaMDMxMTAvBgNV BAMTKDhEQkE5ODJGN0RENDNGOEUwQTI2NjVENEM1QTdBNzM0NzIwQzFGOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRNHed7Dmo1OTkeZdhyhTVUJ6i tRjZqP8H/36EbWuBtcO/SxmzaPtjK/TMYJdAurJPoNNULDm+bNPrg1/NVL5dyXxO rOKBBUzRN0o4b2vh2HE32Fq1S1te2t2MbJ4GtkdL6jTyjPBp2S9Nl176tEuLLadQ eT3GKSBEu9lI1G6znpAIzLT6hvr5FCfneJIIqb9MBdoiVIIhB3JsW/7eHKTnnqxY OxnvIwRj3XrxK089m5X3eru06Gi/HalheH1yiqDS4r8SxcgxI6YVNt9cS6ELllTD AMdqSMmXnUClMdYig6BI8LGMKRdTCS4RC1iulGZ0alYJ5nbXQkmMUX7DsaMdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUjbqYL33UP44KJmXUxaenNHIMH5MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzIy ZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEgrjANBgkqhkiG9w0BAQsFAAOCAQEATmRyKsZZtREtucaAoMsEWlbp mECO+O9OgcTIs3UiH99F7PFdsHFsRsHcHRRmCGrxzW6oueW7Vnifh207JauZDrlG p+87KCMxKN2TKbCdNZSBH41oC05s+Tu28LPeqndvO1Pv211V56/vqzakjWgISOig gDrkPzFhPw5Wgdv/u6zREWsXyu8IdQy/FG1ScBFA/y9v/lmSy98siWKq6zhEnMMd jmtDXJS5mSBhOEfpp8GRuT7f0N373e8dW4rIuAAk/OZbREQ7vkakaNzlxGzVeHTu 4ZBE1+SGRFtvSCF4yPH8ByJMrElN7xpEu7v66R9D5I3/vCjC0nJoJ49EBmjWsg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:10 2025 by rpki-client