This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa File: 3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: w12II9fo3c5piHX+Hvb8eEX7RYQgXMpYXoThJ+cuhr4= Subject key identifier: 02:EA:27:B1:21:D0:B6:B9:1D:4B:09:7B:75:21:DF:98:8F:DB:21:1A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 587A679C9E9800CDB0413839BA6DD77A01BE38A0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 136787 IP address blocks: 193.36.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:7a:67:9c:9e:98:00:cd:b0:41:38:39:ba:6d:d7:7a:01:be:38:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=02EA27B121D0B6B91D4B097B7521DF988FDB211A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:67:63:3d:69:70:ee:67:52:50:bc:91:3e:10: cc:0e:b7:9e:a3:2f:07:07:8e:84:30:a1:d7:89:f2: 95:c0:e5:00:52:8a:42:9f:bf:ed:19:da:79:f9:a5: d6:93:0f:88:f0:e6:f3:cf:b1:52:11:c5:07:67:ff: 71:4b:20:52:03:b1:72:f3:cc:e3:92:35:90:e8:a2: f0:48:e8:01:ea:4c:2a:11:c3:40:68:42:96:6d:50: d4:db:08:32:4d:e3:d2:c5:1f:e6:2a:6c:be:a2:ac: 84:6e:e3:24:b3:b3:59:68:81:09:ee:23:d3:80:0b: e4:2d:97:04:0d:ce:e2:f1:72:28:cc:fc:73:b6:84: 94:0c:0d:7d:72:9c:50:29:24:4c:d1:90:a8:c4:23: 35:54:78:fb:90:7a:cc:df:ab:48:b2:24:3c:15:49: b4:5a:28:21:4a:17:91:8a:6e:d9:9d:47:84:f2:f5: 97:fd:fc:d6:80:69:ec:73:56:69:6d:9c:07:7a:10: 9c:c3:17:a8:6a:c1:c1:3c:93:68:34:16:c5:0d:88: 34:5b:45:ca:b0:8f:8e:59:ab:3a:96:c0:e4:ac:de: fc:a4:ef:99:71:7f:e9:a9:af:40:3f:32:95:e4:be: 2f:18:ae:17:5d:fd:c8:88:9e:d6:81:6f:4d:74:29: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:EA:27:B1:21:D0:B6:B9:1D:4B:09:7B:75:21:DF:98:8F:DB:21:1A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.238.0/24 Signature Algorithm: sha256WithRSAEncryption 70:3a:93:10:ef:5e:bd:20:ee:e7:c3:37:ce:10:da:b0:af:15: 17:25:48:95:32:ef:1e:cf:57:93:38:55:6a:8a:ff:f7:07:aa: b2:33:d8:7c:d4:67:b2:e7:d0:a7:d8:0c:cb:77:b0:5e:c0:df: 48:d6:07:15:64:07:4a:1f:08:b1:16:c6:f7:f2:56:0e:1d:f9: a0:f6:44:19:ba:b3:24:77:e4:3f:f7:63:d9:34:6c:f9:e5:c9: 40:c5:c6:47:9d:cc:23:57:6b:f9:ce:29:92:0a:fd:44:7c:64: 35:75:55:d4:4e:63:48:b8:ef:c6:e6:b3:36:99:7e:b6:3f:d0: b3:2a:77:10:df:b3:d4:32:d0:ef:26:97:62:84:27:45:62:ae: 68:b8:6e:4c:d5:be:e5:31:cf:92:f4:16:37:98:01:4e:c9:b8: 99:bb:ed:ea:d5:97:7c:d8:fd:8b:e1:10:d9:34:ac:20:d8:6d: 4b:d8:e2:8a:10:ab:f0:84:82:8f:16:8a:cf:55:c5:2a:86:18: ee:d0:33:96:f8:3b:02:c3:c5:09:85:65:ae:39:e5:c1:86:4e: ea:d1:63:ec:1d:4b:ea:c3:16:1d:f4:c2:e9:cb:c7:d9:21:46: 5b:77:52:fe:51:7d:46:92:ae:ad:14:51:c1:11:e1:d9:df:37: 4e:8e:56:64 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUWHpnnJ6YAM2wQTg5um3XegG+OKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDAyRUEyN0IxMjFEMEI2QjkxRDRCMDk3Qjc1MjFERjk4OEZEQjIxMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZ2M9aXDuZ1JQvJE+EMwOt56j LwcHjoQwodeJ8pXA5QBSikKfv+0Z2nn5pdaTD4jw5vPPsVIRxQdn/3FLIFIDsXLz zOOSNZDoovBI6AHqTCoRw0BoQpZtUNTbCDJN49LFH+YqbL6irIRu4ySzs1logQnu I9OAC+QtlwQNzuLxcijM/HO2hJQMDX1ynFApJEzRkKjEIzVUePuQeszfq0iyJDwV SbRaKCFKF5GKbtmdR4Ty9Zf9/NaAaexzVmltnAd6EJzDF6hqwcE8k2g0FsUNiDRb Rcqwj45ZqzqWwOSs3vyk75lxf+mpr0A/MpXkvi8Yrhdd/ciIntaBb010KfnVAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUAuonsSHQtrkdSwl7dSHfmI/bIRowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzYy ZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEk7jANBgkqhkiG9w0BAQsFAAOCAQEAcDqTEO9evSDu58M3zhDasK8V FyVIlTLvHs9XkzhVaor/9weqsjPYfNRnsufQp9gMy3ewXsDfSNYHFWQHSh8IsRbG 9/JWDh35oPZEGbqzJHfkP/dj2TRs+eXJQMXGR53MI1dr+c4pkgr9RHxkNXVV1E5j SLjvxuazNpl+tj/Qsyp3EN+z1DLQ7yaXYoQnRWKuaLhuTNW+5THPkvQWN5gBTsm4 mbvt6tWXfNj9i+EQ2TSsINhtS9jiihCr8ISCjxaKz1XFKoYY7tAzlvg7AsPFCYVl rjnlwYZO6tFj7B1L6sMWHfTC6cvH2SFGW3dS/lF9RpKurRRRwRHh2d83To5WZA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:32 2025 by rpki-client