This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39392e302f32342d3234203d3e20313336373837.roa File: 3139332e34322e39392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 2HufynFbdP0hw5D8SyfDMoV2qsbJmpqsXSAz70BJAGc= Subject key identifier: 35:B5:A7:94:B9:27:E1:02:84:34:84:AB:CE:C9:B8:8F:C8:4F:4B:77 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 57B5168FD7F741C20A9374C06471D5D9E4D1572F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:54 +0000 ROA not before: Fri 28 Nov 2025 11:44:54 +0000 ROA not after: Fri 27 Nov 2026 11:49:54 +0000 asID: 136787 IP address blocks: 193.42.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b5:16:8f:d7:f7:41:c2:0a:93:74:c0:64:71:d5:d9:e4:d1:57:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:54 2025 GMT Not After : Nov 27 11:49:54 2026 GMT Subject: CN=35B5A794B927E102843484ABCEC9B88FC84F4B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:44:db:e3:22:13:77:a5:42:d5:a9:48:8a: 86:b0:1d:55:1e:a2:ef:45:91:27:d9:ad:63:c3:1e: 3a:5c:0e:54:98:c7:c5:3e:fb:c8:06:4a:26:61:c7: 65:47:a6:5f:47:58:4f:be:bf:be:29:a7:dc:ad:45: 56:af:fd:ba:91:b3:10:04:56:0d:20:b9:98:e8:a6: f4:c0:63:bf:8d:e6:ae:6b:7e:39:25:39:3b:d8:21: 4a:6f:8e:f2:1e:34:68:c7:98:f4:d6:bb:06:51:cf: cf:a5:04:ca:ef:9f:26:06:62:2c:a8:85:8b:3c:a5: eb:f2:aa:75:a8:65:27:af:24:2b:c3:f6:c1:92:e3: 43:ae:7b:8c:0d:0e:e5:2f:b2:b4:c5:12:ce:1e:c0: cc:68:fc:ee:9f:b0:92:65:7e:70:9a:60:d2:94:64: 69:c8:12:de:f1:97:29:7d:e6:2b:59:cb:63:8e:68: ca:fb:91:ab:77:95:40:74:45:db:98:a8:8e:17:6b: c7:b2:38:eb:2b:8c:13:68:ce:0c:3b:7b:d7:12:3b: 91:fd:b7:92:b3:e5:fc:04:91:3c:01:e3:f5:3a:0f: f1:67:59:47:9c:0a:01:b8:34:79:8d:25:6c:fb:8b: 5a:84:9f:00:dd:03:e4:89:85:61:98:4d:03:ed:ba: f2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B5:A7:94:B9:27:E1:02:84:34:84:AB:CE:C9:B8:8F:C8:4F:4B:77 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34322e39392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.42.99.0/24 Signature Algorithm: sha256WithRSAEncryption be:ff:6a:64:15:f0:16:54:6f:a0:79:17:fe:41:8a:b1:c8:07: 68:8f:cc:c6:dc:3d:e0:ca:35:ef:c0:65:3d:81:34:56:22:e0: 7f:a2:14:ce:32:46:4d:cc:fd:46:ec:f3:e6:3d:3b:fc:57:3e: 22:f2:a2:bc:d0:9c:18:0b:4d:19:ff:43:b4:91:cd:b9:6f:65: 77:fb:1a:c4:37:18:64:76:b9:f0:33:da:e6:5f:f7:27:0b:de: 78:63:46:3c:b7:74:7d:ab:f8:e1:c8:0f:ce:32:87:e1:5b:2b: bd:9f:b7:e3:10:23:b1:ea:10:16:4e:db:dd:cd:00:e1:e0:ad: 3b:0d:6f:f8:c4:58:22:09:9b:01:58:b8:26:5f:9b:71:9d:c6: 89:d2:e1:cb:54:f2:ac:ce:d4:6b:3c:43:25:8d:aa:0c:bd:1b: 98:66:b4:fd:97:1b:9f:4b:42:c4:09:1f:e5:9a:ca:24:b6:20: e7:96:18:e4:2a:a2:b4:9a:c1:07:7a:2a:84:a8:bf:79:9b:8f: 8d:df:99:d3:43:9b:86:41:00:c9:19:0d:2d:13:81:41:b7:d2: d3:78:be:2b:fc:94:b6:c2:3b:fa:96:7d:03:f0:68:15:e0:8c: 92:3b:98:0b:c0:13:8e:1a:53:26:c5:5a:db:9f:46:56:77:33: b3:9c:c2:1e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUV7UWj9f3QcIKk3TAZHHV2eTRVy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTRaFw0yNjExMjcxMTQ5NTRaMDMxMTAvBgNV BAMTKDM1QjVBNzk0QjkyN0UxMDI4NDM0ODRBQkNFQzlCODhGQzg0RjRCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/kTb4yITd6VC1alIioawHVUe ou9FkSfZrWPDHjpcDlSYx8U++8gGSiZhx2VHpl9HWE++v74pp9ytRVav/bqRsxAE Vg0guZjopvTAY7+N5q5rfjklOTvYIUpvjvIeNGjHmPTWuwZRz8+lBMrvnyYGYiyo hYs8pevyqnWoZSevJCvD9sGS40Oue4wNDuUvsrTFEs4ewMxo/O6fsJJlfnCaYNKU ZGnIEt7xlyl95itZy2OOaMr7kat3lUB0RduYqI4Xa8eyOOsrjBNozgw7e9cSO5H9 t5Kz5fwEkTwB4/U6D/FnWUecCgG4NHmNJWz7i1qEnwDdA+SJhWGYTQPtuvL3AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUNbWnlLkn4QKENISrzsm4j8hPS3cwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzIy ZTM5MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBKmMwDQYJKoZIhvcNAQELBQADggEBAL7/amQV8BZUb6B5F/5BirHIB2iP zMbcPeDKNe/AZT2BNFYi4H+iFM4yRk3M/Ubs8+Y9O/xXPiLyorzQnBgLTRn/Q7SR zblvZXf7GsQ3GGR2ufAz2uZf9ycL3nhjRjy3dH2r+OHID84yh+FbK72ft+MQI7Hq EBZO293NAOHgrTsNb/jEWCIJmwFYuCZfm3GdxonS4ctU8qzO1Gs8QyWNqgy9G5hm tP2XG59LQsQJH+WayiS2IOeWGOQqorSawQd6KoSov3mbj43fmdNDm4ZBAMkZDS0T gUG30tN4viv8lLbCO/qWfQPwaBXgjJI7mAvAE44aUybFWtufRlZ3M7Ocwh4= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:55 2025 by rpki-client