This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
File: 3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: P/u8VQbLnRsIcWrpqSSEncqPE4c7uATrJMI79WYWmgc=
Subject key identifier: 66:CE:AE:0B:15:72:01:54:A3:F2:0F:3D:1D:40:6D:9E:80:E6:65:90
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 244610EF2EB21E708AB4C687EB6BA235A7E03CCC
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 21 Nov 2025 15:48:58 +0000
ROA not before: Fri 21 Nov 2025 15:43:58 +0000
ROA not after: Fri 20 Nov 2026 15:48:58 +0000
asID: 136787
IP address blocks: 193.46.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:46:10:ef:2e:b2:1e:70:8a:b4:c6:87:eb:6b:a2:35:a7:e0:3c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 21 15:43:58 2025 GMT
Not After : Nov 20 15:48:58 2026 GMT
Subject: CN=66CEAE0B15720154A3F20F3D1D406D9E80E66590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:52:79:6b:c6:b3:a8:f6:6e:4b:e3:f1:93:
27:7e:e1:97:63:c1:18:29:00:19:80:59:e2:53:95:
ec:b2:46:25:5f:e6:fd:b9:b5:c1:2f:ef:bc:c3:60:
ba:96:83:d4:57:6a:f6:9c:6c:80:16:98:40:56:7b:
90:9b:9e:cc:f7:10:0f:f9:66:08:81:f8:96:22:6a:
4b:78:4c:75:6c:83:74:0c:3d:e5:06:ee:55:44:78:
b4:5d:7d:24:1d:73:21:c8:79:fd:5d:d9:64:fe:83:
26:60:c5:43:e8:6f:cf:ba:4f:45:a8:cc:32:c1:9a:
70:4d:2e:0f:99:c7:5e:4e:ca:89:ff:37:10:3a:68:
ca:7a:e6:7e:34:82:fc:22:26:21:be:cd:3e:43:c0:
48:c6:45:d4:7b:53:de:d8:d5:90:a1:17:37:f6:0d:
e6:8d:92:99:68:89:30:da:74:76:7d:c9:3a:be:c8:
bc:27:3d:c7:08:1c:ee:73:62:ba:3d:67:97:ce:95:
f5:c7:8d:53:aa:67:b9:4e:d7:86:97:fc:70:21:f3:
c5:e3:ff:6d:cb:2e:28:a2:83:0b:1a:db:9c:2b:13:
08:8d:89:56:c2:dd:43:fb:14:ef:cb:d1:3c:c2:58:
96:61:52:5d:a2:b6:b8:80:14:fe:04:6a:1d:15:54:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:AE:0B:15:72:01:54:A3:F2:0F:3D:1D:40:6D:9E:80:E6:65:90
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234302e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.240.0/24
Signature Algorithm: sha256WithRSAEncryption
47:29:cc:28:4f:b5:56:d1:f8:1d:78:ee:4d:cc:07:8e:2c:66:
f3:af:4e:40:f5:63:f7:87:c7:67:29:bd:23:41:ec:3d:8a:e1:
9b:d8:eb:06:ef:5a:70:81:c8:ee:1f:dd:84:cc:1c:ba:5c:2d:
2e:b0:f8:25:02:04:f3:61:09:e3:f5:01:c7:93:ee:77:b1:e6:
45:83:03:a1:82:27:84:ac:82:5d:9a:f8:a5:8a:c9:06:f6:0b:
f3:50:4b:72:d4:db:43:a6:30:52:ac:92:a5:6a:26:1c:9a:17:
de:f5:a5:de:76:b9:65:2d:e2:4b:15:04:4c:3f:82:b9:61:8b:
81:8b:cb:dd:df:2d:a5:32:f0:13:c2:d7:f1:e0:57:62:6e:20:
78:2a:06:ba:62:ae:23:76:ef:5a:40:9a:dc:7b:ce:b4:87:37:
89:2c:6b:e4:42:29:8a:e1:39:9e:82:70:f1:0d:bf:8d:17:88:
ec:6f:59:dd:6a:b7:34:27:c2:6d:5e:81:4d:62:ce:f4:2b:bc:
c0:ac:a9:60:88:ef:9f:80:37:08:2c:ad:73:ff:d8:b5:cd:99:
6c:48:d6:24:00:75:d8:06:1d:d9:f7:11:2e:32:8d:e8:a8:c7:
47:bf:7d:19:07:36:0e:24:bf:1e:d1:22:13:8c:01:d1:3e:18:
22:a0:18:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:01:13 2025 by rpki-client