This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa File: 3139332e34322e39382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: EgC5JW5zb1X3QF11+rH3aFWlnTi2YPg/45278XjROis= Subject key identifier: 0A:FB:4C:E9:72:33:7D:86:A8:C9:91:CD:04:B6:70:08:90:ED:FA:40 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 091796165624C7A5AD88F554BD36AB6B51E22086 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 136787 IP address blocks: 193.42.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:17:96:16:56:24:c7:a5:ad:88:f5:54:bd:36:ab:6b:51:e2:20:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=0AFB4CE972337D86A8C991CD04B6700890EDFA40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:bf:d9:c0:b3:d6:ad:1e:eb:bb:32:0b:29: 26:8f:eb:ad:8e:df:bd:ca:c2:85:39:d4:dd:e2:f7: e6:cb:4c:fa:ad:e1:74:6d:31:e5:c2:15:6c:52:d7: 22:8a:a6:15:e6:cd:c5:94:65:e8:26:30:8f:d7:dc: fe:b2:3e:5a:23:31:f0:5b:ef:8d:ae:35:39:a1:6a: be:48:ab:f1:c0:e3:a6:26:86:fc:79:7d:14:fd:b4: 95:2f:e7:a4:24:59:db:67:19:ce:0d:81:69:d9:80: 1f:d6:d7:f9:ec:99:17:0a:04:29:ab:b0:39:18:40: 7a:d7:f6:ea:c3:86:2d:b7:e9:4a:0d:a1:ca:aa:29: f2:fe:a0:1a:ee:53:ba:8a:9b:c5:bc:18:9b:3e:57: de:9f:04:5b:47:43:54:91:ca:83:8b:a5:f3:c1:e2: ac:7a:e7:ef:61:d9:9e:74:cc:c6:cc:cb:f8:fe:ae: 86:b4:b1:29:5c:d3:3b:34:15:23:19:b5:47:ff:be: fc:3a:32:6d:7c:1e:70:cf:b1:f9:77:26:32:06:88: 6d:a0:f4:27:ab:af:82:6a:ab:ea:bc:0c:77:51:ce: 01:29:61:2c:35:27:54:e5:68:07:2a:dc:a1:91:1e: 10:04:7b:9a:d5:02:2a:97:78:e3:db:6f:d0:6d:cb: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FB:4C:E9:72:33:7D:86:A8:C9:91:CD:04:B6:70:08:90:ED:FA:40 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.98.0/24 Signature Algorithm: sha256WithRSAEncryption 51:bb:b0:1f:77:01:67:b1:58:ef:3c:5b:4d:97:7d:69:7b:42: 16:07:3d:b2:30:e9:48:0e:70:54:43:4e:82:26:af:68:f5:fd: 22:cf:f6:e6:f5:ac:8a:cc:1b:13:92:a3:fa:e5:7b:ce:b0:82: 99:6a:aa:6f:43:13:27:7a:9d:f7:dc:db:ec:57:71:0d:c5:fa: 8b:e7:61:10:0c:2d:1d:8b:7b:c6:dd:1f:6b:25:7a:cd:b4:b9: c5:21:69:bc:18:29:18:5f:34:e3:a1:5e:d1:e3:00:64:15:bb: 7d:e9:20:90:0e:03:e2:d5:69:42:8e:c8:14:b2:5f:5d:7b:41: a7:45:8c:4e:fb:c8:e1:15:16:89:60:64:c3:7d:57:f8:c2:2d: 44:70:a4:e2:35:cb:4a:54:40:f0:65:3f:6b:70:4e:69:b9:09: 8c:9f:0e:8e:0f:72:ee:3c:09:e6:80:84:dc:c4:eb:2f:27:8b: ff:dd:a0:d8:0d:e6:f7:0b:44:3f:32:2a:b0:a4:3e:e7:fc:c4: 5e:2a:7a:3a:b0:d2:97:cd:00:fa:70:04:e0:d5:7c:56:04:ad: b1:4b:0d:1d:f7:e8:0b:d3:9a:4d:a2:90:07:26:4b:49:ef:d2: d1:79:aa:2a:5f:a9:73:22:9a:ca:e4:10:73:b1:ca:2c:3d:da: 80:a5:f2:ad -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUCReWFlYkx6WtiPVUvTara1HiIIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKDBBRkI0Q0U5NzIzMzdEODZBOEM5OTFDRDA0QjY3MDA4OTBFREZBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBvb/ZwLPWrR7ruzILKSaP662O 373KwoU51N3i9+bLTPqt4XRtMeXCFWxS1yKKphXmzcWUZegmMI/X3P6yPlojMfBb 742uNTmhar5Iq/HA46Ymhvx5fRT9tJUv56QkWdtnGc4NgWnZgB/W1/nsmRcKBCmr sDkYQHrX9urDhi236UoNocqqKfL+oBruU7qKm8W8GJs+V96fBFtHQ1SRyoOLpfPB 4qx65+9h2Z50zMbMy/j+roa0sSlc0zs0FSMZtUf/vvw6Mm18HnDPsfl3JjIGiG2g 9Cerr4Jqq+q8DHdRzgEpYSw1J1TlaAcq3KGRHhAEe5rVAiqXeOPbb9Bty7mXAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUCvtM6XIzfYaoyZHNBLZwCJDt+kAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzIy ZTM5MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBKmIwDQYJKoZIhvcNAQELBQADggEBAFG7sB93AWexWO88W02XfWl7QhYH PbIw6UgOcFRDToImr2j1/SLP9ub1rIrMGxOSo/rle86wgplqqm9DEyd6nffc2+xX cQ3F+ovnYRAMLR2Le8bdH2sles20ucUhabwYKRhfNOOhXtHjAGQVu33pIJAOA+LV aUKOyBSyX117QadFjE77yOEVFolgZMN9V/jCLURwpOI1y0pUQPBlP2twTmm5CYyf Do4Pcu48CeaAhNzE6y8ni//doNgN5vcLRD8yKrCkPuf8xF4qejqw0pfNAPpwBODV fFYErbFLDR336AvTmk2ikAcmS0nv0tF5qipfqXMimsrkEHOxyiw92oCl8q0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:21 2025 by rpki-client