This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39362e302f32342d3234203d3e20313336373837.roa File: 3139332e34322e39362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: +eUu102C5GF6/eQHpjQzKDoVTwpHGz6d8M+PO/qD1Hg= Subject key identifier: 02:D9:E1:CC:B1:6F:D3:CF:39:8E:92:92:00:4E:43:97:AC:CF:8B:88 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 01423A6E46CA0B523A4D16C9311B7174BD8A0327 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:51 +0000 ROA not before: Fri 28 Nov 2025 11:44:51 +0000 ROA not after: Fri 27 Nov 2026 11:49:51 +0000 asID: 136787 IP address blocks: 193.42.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:42:3a:6e:46:ca:0b:52:3a:4d:16:c9:31:1b:71:74:bd:8a:03:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:51 2025 GMT Not After : Nov 27 11:49:51 2026 GMT Subject: CN=02D9E1CCB16FD3CF398E9292004E4397ACCF8B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e1:9b:b9:6c:58:1c:27:15:88:b5:ca:fb:3d: 7b:cb:25:93:f0:3d:c1:39:32:57:c2:86:b7:69:f6: 40:ea:9b:23:11:00:94:fe:43:0d:79:cb:e7:12:0e: 79:68:05:a8:8d:55:db:b9:34:2d:d9:cc:9d:32:cc: 46:13:60:e3:c1:32:86:1e:ec:65:52:87:b1:7e:ea: 70:40:ea:d9:7c:78:fa:1d:6d:4a:ba:b0:69:95:27: 23:8e:77:24:84:2a:d0:d0:c8:7d:f5:b7:29:9c:c0: 57:8d:a6:cc:d0:81:eb:a8:de:27:d4:b8:2c:7c:5f: d2:96:78:a9:89:28:ec:1b:0c:83:ee:bf:81:50:5e: fa:9d:a3:0d:41:c5:42:7f:6d:62:72:c1:15:ed:af: 6a:80:9b:8b:8a:6a:d2:66:5f:61:78:61:6b:59:a2: db:e0:fe:b9:fd:a7:cb:ce:76:f9:50:f7:0c:b3:74: 15:2d:46:b1:a0:f4:e5:64:52:d9:53:1e:2c:8c:6d: 05:83:1d:d3:14:a4:e9:e8:76:59:9b:d3:b1:42:4f: ab:4f:9d:e8:f9:dc:4e:55:9b:34:30:8d:3d:d5:50: f7:3a:1d:69:84:ce:43:c8:35:84:6a:66:93:f2:b1: 23:47:da:14:9c:df:5e:43:e9:dc:ab:9b:a1:91:62: 94:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D9:E1:CC:B1:6F:D3:CF:39:8E:92:92:00:4E:43:97:AC:CF:8B:88 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.96.0/24 Signature Algorithm: sha256WithRSAEncryption 73:ed:94:12:1d:aa:f9:7c:dd:ad:e7:5f:d0:6a:5a:bc:96:c3: 23:cd:f0:84:4e:e1:a2:ec:42:0e:4a:4f:3f:22:1b:51:c9:04: 39:23:51:ea:d1:78:d9:7d:04:1d:1b:3b:7f:62:6a:bb:b2:6f: 3a:cd:9e:ca:78:e5:58:4d:e8:c9:64:cf:6f:46:7c:53:a6:56: 35:d8:46:86:d1:c9:f2:8e:84:18:2c:48:91:f2:b8:6e:16:74: b8:93:c9:9e:c9:70:31:ff:7c:c4:d1:2d:85:7e:0d:d4:90:3f: 89:3f:32:9d:b9:67:b7:e7:5c:fd:b3:20:75:39:61:1b:e1:1a: e3:d2:19:6d:0d:8d:4a:b9:2a:b6:c0:23:6c:e7:ae:18:ed:b0: 0a:d9:31:7a:9c:bb:d4:a0:d1:dc:e2:8a:6b:3e:8d:23:b4:7e: 8e:63:57:6b:07:f5:17:07:da:46:db:f6:26:92:69:b1:ad:3d: 75:f5:65:b6:cb:eb:81:03:59:54:97:1d:e2:70:b9:0a:0d:fa: 33:48:81:bb:33:07:21:c1:33:b3:d3:ea:49:69:dd:ba:86:4c: b4:12:ec:54:6a:98:59:4c:58:f8:73:42:ca:d5:18:bc:70:8e: 06:7a:08:b9:40:c1:a9:fd:80:0d:fd:5c:ab:3b:1b:d7:a5:12: 17:1f:45:dd -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUAUI6bkbKC1I6TRbJMRtxdL2KAycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTFaFw0yNjExMjcxMTQ5NTFaMDMxMTAvBgNV BAMTKDAyRDlFMUNDQjE2RkQzQ0YzOThFOTI5MjAwNEU0Mzk3QUNDRjhCODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv4Zu5bFgcJxWItcr7PXvLJZPw PcE5MlfChrdp9kDqmyMRAJT+Qw15y+cSDnloBaiNVdu5NC3ZzJ0yzEYTYOPBMoYe 7GVSh7F+6nBA6tl8ePodbUq6sGmVJyOOdySEKtDQyH31tymcwFeNpszQgeuo3ifU uCx8X9KWeKmJKOwbDIPuv4FQXvqdow1BxUJ/bWJywRXtr2qAm4uKatJmX2F4YWtZ otvg/rn9p8vOdvlQ9wyzdBUtRrGg9OVkUtlTHiyMbQWDHdMUpOnodlmb07FCT6tP nej53E5VmzQwjT3VUPc6HWmEzkPINYRqZpPysSNH2hSc315D6dyrm6GRYpRBAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUAtnhzLFv0885jpKSAE5Dl6zPi4gwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzIy ZTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBKmAwDQYJKoZIhvcNAQELBQADggEBAHPtlBIdqvl83a3nX9BqWryWwyPN 8IRO4aLsQg5KTz8iG1HJBDkjUerReNl9BB0bO39iaruybzrNnsp45VhN6Mlkz29G fFOmVjXYRobRyfKOhBgsSJHyuG4WdLiTyZ7JcDH/fMTRLYV+DdSQP4k/Mp25Z7fn XP2zIHU5YRvhGuPSGW0NjUq5KrbAI2znrhjtsArZMXqcu9Sg0dziims+jSO0fo5j V2sH9RcH2kbb9iaSabGtPXX1ZbbL64EDWVSXHeJwuQoN+jNIgbszByHBM7PT6klp 3bqGTLQS7FRqmFlMWPhzQsrVGLxwjgZ6CLlAwan9gA39XKs7G9elEhcfRd0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:24 2025 by rpki-client