This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa File: 3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: Yj/pU1UrhMWmyIJIXDaUOxDqsjAvtDhr8wlDqNoVWP0= Subject key identifier: EC:5C:95:36:D5:DF:50:79:B2:E1:1B:04:93:6B:C6:13:B7:06:FD:6C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2A49510C7F70F301CE6FB1280DEB6D11140A5311 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:38 +0000 ROA not before: Fri 28 Nov 2025 11:44:38 +0000 ROA not after: Fri 27 Nov 2026 11:49:38 +0000 asID: 201341 IP address blocks: 193.32.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:49:51:0c:7f:70:f3:01:ce:6f:b1:28:0d:eb:6d:11:14:0a:53:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:38 2025 GMT Not After : Nov 27 11:49:38 2026 GMT Subject: CN=EC5C9536D5DF5079B2E11B04936BC613B706FD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3e:aa:b7:0b:03:de:5e:a3:be:ae:e1:88:21: 4b:40:ea:05:df:e5:eb:78:25:41:76:8a:79:77:de: b6:d4:fd:a0:ec:8b:d8:14:8e:4a:32:e3:ea:56:44: d0:a9:9a:dc:f8:d4:42:49:f9:97:91:a6:bb:89:1a: e8:3c:c9:d4:dd:0d:44:6d:79:64:1c:7d:a4:ec:d4: 20:3d:20:db:ae:3b:e9:a1:3d:b1:8a:2f:a9:10:ab: b9:5a:9f:21:cd:9b:e1:62:85:f5:13:9c:db:4e:c5: 4d:af:e5:44:74:af:21:82:1c:b5:23:93:e3:35:ac: e3:3f:5c:67:7a:f8:45:c6:29:de:ed:a0:fd:44:cc: 4c:bc:56:81:06:4d:63:f1:b0:b4:2e:19:4d:45:99: 60:59:3b:d6:5c:0f:ec:1f:d5:0d:69:2a:a3:b5:62: 87:82:8d:2b:14:ca:31:9d:04:44:fa:03:ce:8e:94: c8:f8:a3:2e:a9:41:84:f2:bc:f1:5d:0f:3a:5a:54: 2a:4a:8f:be:38:4c:5b:52:bf:3a:2d:ab:28:24:7e: 2d:c4:6b:ba:f5:b0:01:e3:cc:91:09:75:f1:9d:98: bc:62:26:47:00:35:47:20:05:08:16:5b:e7:d2:45: 0b:2d:11:e3:b8:be:4c:7f:f5:48:57:0e:7b:d3:bf: 59:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5C:95:36:D5:DF:50:79:B2:E1:1B:04:93:6B:C6:13:B7:06:FD:6C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33322e3137352e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.32.175.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:81:19:37:e7:bf:a5:51:4a:84:1a:12:f7:93:57:fb:83:78: 4e:c2:6c:76:cc:63:16:4f:ce:a3:0b:2b:f9:68:e5:4c:d3:db: ce:d7:0f:b0:42:ae:b8:7c:b1:db:22:61:52:07:e2:a9:60:b8: 6e:88:62:de:2b:d2:46:e0:d1:c4:0e:f7:0f:02:52:b5:78:d5: 47:2f:9f:37:c1:ce:6a:a6:51:a7:47:3c:5e:6e:48:b1:7a:4f: 1c:31:17:f5:e8:09:24:cd:f2:96:a4:3d:6b:a9:b6:99:e3:cb: 66:34:12:03:70:08:b4:6a:66:60:1b:f5:07:82:fd:87:9d:5c: 04:f3:1b:f0:ae:16:d5:c4:19:4b:77:fb:0e:dd:d4:cf:8e:f3: 2f:f4:dc:81:29:d9:22:fe:6c:67:a5:36:8f:97:ed:67:70:50: 1b:bc:52:46:a5:5d:31:04:9d:7d:bc:fa:2c:15:c6:83:0b:af: c1:fe:58:d4:ae:72:07:db:3f:07:b2:ab:4e:7d:2e:2c:55:14: 51:04:41:5a:5a:64:9d:f8:5e:07:d6:73:5d:e6:a0:7e:4c:6e: 56:75:6e:5f:8a:88:61:5c:2a:86:da:81:f0:1a:f9:ac:5a:91: 97:39:81:38:bd:13:d6:1c:d8:01:cb:7c:e9:1a:82:ef:2c:be: 65:00:40:e9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUKklRDH9w8wHOb7EoDettERQKUxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzhaFw0yNjExMjcxMTQ5MzhaMDMxMTAvBgNV BAMTKEVDNUM5NTM2RDVERjUwNzlCMkUxMUIwNDkzNkJDNjEzQjcwNkZENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUPqq3CwPeXqO+ruGIIUtA6gXf 5et4JUF2inl33rbU/aDsi9gUjkoy4+pWRNCpmtz41EJJ+ZeRpruJGug8ydTdDURt eWQcfaTs1CA9INuuO+mhPbGKL6kQq7lanyHNm+FihfUTnNtOxU2v5UR0ryGCHLUj k+M1rOM/XGd6+EXGKd7toP1EzEy8VoEGTWPxsLQuGU1FmWBZO9ZcD+wf1Q1pKqO1 YoeCjSsUyjGdBET6A86OlMj4oy6pQYTyvPFdDzpaVCpKj744TFtSvzotqygkfi3E a7r1sAHjzJEJdfGdmLxiJkcANUcgBQgWW+fSRQstEeO4vkx/9UhXDnvTv1lZAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU7FyVNtXfUHmy4RsEk2vGE7cG/WwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzIy ZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEgrzANBgkqhkiG9w0BAQsFAAOCAQEAnIEZN+e/pVFKhBoS95NX+4N4 TsJsdsxjFk/Oowsr+WjlTNPbztcPsEKuuHyx2yJhUgfiqWC4bohi3ivSRuDRxA73 DwJStXjVRy+fN8HOaqZRp0c8Xm5IsXpPHDEX9egJJM3ylqQ9a6m2mePLZjQSA3AI tGpmYBv1B4L9h51cBPMb8K4W1cQZS3f7Dt3Uz47zL/TcgSnZIv5sZ6U2j5ftZ3BQ G7xSRqVdMQSdfbz6LBXGgwuvwf5Y1K5yB9s/B7KrTn0uLFUUUQRBWlpknfheB9Zz XeagfkxuVnVuX4qIYVwqhtqB8Br5rFqRlzmBOL0T1hzYAct86RqC7yy+ZQBA6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:07 2025 by rpki-client