This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa File: 3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: D//LSv+JTm/XPgBt9ovWiTdp3xyVY0rsm1zlV8mMi7s= Subject key identifier: E1:F8:3B:35:E6:B7:D3:30:C9:15:42:C9:88:3A:BB:61:D9:A3:F6:29 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3E5BF817CB61A95B22D6B9E04AE9324CC0A9AEBE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 136787 IP address blocks: 193.36.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5b:f8:17:cb:61:a9:5b:22:d6:b9:e0:4a:e9:32:4c:c0:a9:ae:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=E1F83B35E6B7D330C91542C9883ABB61D9A3F629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:5b:e1:f4:5e:ee:61:c8:e5:de:53:48:8d: 88:aa:35:df:17:e8:b1:66:26:d2:7e:11:46:5b:f0: 5b:07:ed:5f:75:42:81:ae:25:85:0e:5b:10:ca:78: 29:a1:72:2d:3e:4a:46:50:82:44:03:bb:1a:05:8a: 33:90:ab:00:bd:0b:88:07:c9:8c:1c:16:cf:fc:25: bb:de:5a:be:b4:77:83:e1:d3:f5:01:93:40:9b:91: ca:b9:17:3e:f8:ef:50:61:5c:77:b7:b6:ab:8c:4c: f2:c7:48:78:9e:b2:19:8a:3b:53:af:95:f6:9b:c2: df:0a:ff:84:1f:87:b2:64:61:b4:52:d8:b0:79:59: 36:9a:b5:ca:00:73:a4:e9:7d:b1:c2:a2:c6:69:10: fe:d3:1d:a9:f6:68:d9:3c:92:31:e2:d5:99:b7:eb: 18:4d:9f:88:5b:e5:70:79:43:13:cf:6a:47:23:31: a7:01:10:ad:06:28:8a:2f:5c:19:b3:02:8e:fd:7a: f1:c8:71:d1:42:51:cc:ac:ea:af:8a:a9:84:9f:b8: 15:44:63:7e:e8:8b:21:12:75:f3:75:cf:a8:ab:0d: 37:55:8a:02:8d:d7:d2:c5:7b:c9:ea:5c:cc:99:10: 1d:db:21:14:d8:14:30:40:b5:43:a4:6a:88:e5:55: dc:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F8:3B:35:E6:B7:D3:30:C9:15:42:C9:88:3A:BB:61:D9:A3:F6:29 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e33362e3233392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.36.239.0/24 Signature Algorithm: sha256WithRSAEncryption 43:49:12:0e:71:42:fe:a4:49:a5:28:9e:31:e0:d3:10:56:0d: 80:36:53:5e:e0:e7:23:7b:2a:84:cd:60:5f:6a:58:b7:cc:36: 9a:08:b5:2e:44:e9:7f:b1:f5:01:89:ca:5c:0c:e2:e9:e2:b6: 13:1c:ab:0a:9e:d0:b4:ea:f3:15:da:a6:91:bd:1b:fa:21:7f: 9d:ab:65:0b:cc:d6:52:4a:c2:cd:6f:b9:ac:b6:a5:39:41:23: 2e:c0:a6:fd:21:7a:a5:4d:1a:ec:d7:1f:a3:ad:ac:f8:49:98: ea:3e:10:4b:c7:dd:08:c3:97:9a:d9:bb:43:2a:e3:e3:b0:76: e5:44:b4:be:12:52:d6:fa:0d:55:66:fe:dc:85:ed:72:16:4a: 20:e9:e3:42:59:f7:2b:0c:1c:f4:eb:dd:44:9d:24:94:b3:c0: 32:20:5a:fe:c9:15:a7:86:64:79:4c:1a:16:21:e1:af:3e:4a: b3:ab:28:4f:8d:66:bd:18:03:40:5d:12:58:58:1d:0e:38:ef: 25:8f:76:3d:e9:82:d5:e6:a9:ef:b6:e6:76:bd:cf:90:57:53: 8e:35:07:38:b3:24:55:c7:ef:a9:a4:75:bb:e3:e0:b7:ae:7f: 3b:7b:36:90:db:59:3b:df:16:d1:a5:ae:64:d0:d1:4a:76:7c: ab:62:23:71 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUPlv4F8thqVsi1rngSukyTMCprr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKEUxRjgzQjM1RTZCN0QzMzBDOTE1NDJDOTg4M0FCQjYxRDlBM0Y2MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbFvh9F7uYcjl3lNIjYiqNd8X 6LFmJtJ+EUZb8FsH7V91QoGuJYUOWxDKeCmhci0+SkZQgkQDuxoFijOQqwC9C4gH yYwcFs/8JbveWr60d4Ph0/UBk0Cbkcq5Fz7471BhXHe3tquMTPLHSHieshmKO1Ov lfabwt8K/4Qfh7JkYbRS2LB5WTaatcoAc6TpfbHCosZpEP7THan2aNk8kjHi1Zm3 6xhNn4hb5XB5QxPPakcjMacBEK0GKIovXBmzAo79evHIcdFCUcys6q+KqYSfuBVE Y37oiyESdfN1z6irDTdVigKN19LFe8nqXMyZEB3bIRTYFDBAtUOkaojlVdyHAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU4fg7Nea30zDJFULJiDq7Ydmj9ikwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMzMzYy ZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEk7zANBgkqhkiG9w0BAQsFAAOCAQEAQ0kSDnFC/qRJpSieMeDTEFYN gDZTXuDnI3sqhM1gX2pYt8w2mgi1LkTpf7H1AYnKXAzi6eK2ExyrCp7QtOrzFdqm kb0b+iF/natlC8zWUkrCzW+5rLalOUEjLsCm/SF6pU0a7Ncfo62s+EmY6j4QS8fd CMOXmtm7Qyrj47B25US0vhJS1voNVWb+3IXtchZKIOnjQln3Kwwc9OvdRJ0klLPA MiBa/skVp4ZkeUwaFiHhrz5Ks6soT41mvRgDQF0SWFgdDjjvJY92PemC1eap77bm dr3PkFdTjjUHOLMkVcfvqaR1u+Pgt65/O3s2kNtZO98W0aWuZNDRSnZ8q2IjcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:06 2025 by rpki-client