This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa File: 3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: u3PFBKCWvnOGbiDwEDA0eB40SHWOUsX1uT9yYYny2ac= Subject key identifier: 97:75:A0:53:7D:44:52:BC:56:68:98:D1:A2:66:44:1E:4F:2D:46:E0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 43F0D9208F2D3033384FB0BF619387664ED3E0B7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:11 +0000 ROA not before: Fri 21 Nov 2025 15:44:11 +0000 ROA not after: Fri 20 Nov 2026 15:49:11 +0000 asID: 136787 IP address blocks: 193.46.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f0:d9:20:8f:2d:30:33:38:4f:b0:bf:61:93:87:66:4e:d3:e0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:11 2025 GMT Not After : Nov 20 15:49:11 2026 GMT Subject: CN=9775A0537D4452BC566898D1A266441E4F2D46E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:94:d0:63:f9:43:02:b6:5a:f4:ff:db:cd:fb: ee:e6:62:76:7d:98:70:33:15:4e:84:50:87:c0:03: 62:5c:9f:80:1e:ac:46:02:6a:7b:7a:9f:09:22:db: a2:40:3a:32:64:d8:6c:07:59:fc:fc:57:cd:4f:32: 18:76:87:2b:0c:3b:62:2f:52:42:0e:0f:fb:5e:ca: 07:76:d2:39:c4:d7:7e:b8:22:6e:44:af:5b:dc:ce: 54:ce:8e:e2:f6:40:93:ee:c8:ba:ae:ce:06:e6:bd: ed:cb:a8:35:57:b4:11:be:21:59:c9:97:4f:5c:d1: ec:65:01:6e:89:56:cd:8d:ed:25:8e:ab:88:b6:5e: c0:b9:48:8c:65:74:24:65:14:df:8e:eb:5c:f7:15: bf:49:2a:4b:f1:c7:da:f0:6d:bf:0a:fe:ef:a3:17: 90:0f:40:c2:d7:56:cd:7b:9a:ee:d6:2f:d3:41:a6: 2f:5e:5c:e5:ea:52:86:38:13:f3:8f:be:c3:c8:16: a4:fa:3b:13:68:ae:50:13:f1:ca:ee:d9:35:3c:9b: 9f:6e:5f:6f:a5:50:e9:43:8c:c3:23:0f:25:80:98: fa:42:30:d7:1f:25:3c:31:f3:89:68:ca:d0:30:9d: 5b:38:3f:34:4c:cf:1a:88:df:d2:f9:02:d1:f3:45: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:75:A0:53:7D:44:52:BC:56:68:98:D1:A2:66:44:1E:4F:2D:46:E0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.242.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:da:03:fe:cf:a3:7d:3b:54:a3:3a:bc:3e:7d:e3:e3:66:ed: 95:82:9e:49:7a:30:a6:bd:73:a5:05:69:a8:3c:05:35:52:ee: 6f:bc:62:bb:9d:a4:be:f8:88:8a:a7:18:06:f8:94:a3:99:03: da:6a:ea:05:b9:af:33:64:15:78:6d:58:e1:ef:a4:07:59:f9: d1:74:af:80:dc:55:a1:4b:88:4e:39:44:85:0e:c1:56:10:a7: 0f:06:76:0d:76:52:2b:33:9f:7b:f6:45:8a:76:15:c6:07:f8: e6:a8:94:1a:ca:9d:90:c3:47:8c:1c:31:f5:8e:3e:b2:41:13: f6:03:d1:51:2e:b2:4d:73:21:c9:fd:46:ef:59:c0:97:93:60: 86:69:4e:cd:93:f3:53:fe:61:fe:16:58:db:f9:c5:0a:f4:57: 86:44:0b:05:dd:6d:61:25:78:af:3c:50:d6:89:e0:e0:f9:cc: 2c:cb:3c:92:e7:55:cf:c8:42:92:18:0b:a9:a4:1d:aa:6c:53: f1:22:15:47:31:90:86:2e:9d:67:1e:5c:5d:de:52:68:9b:d9: b8:f0:06:81:ba:08:23:e5:49:c9:55:02:6a:29:07:6d:a8:43: 2a:fd:ef:f7:e4:98:c4:91:6c:7e:10:09:6e:15:2f:b0:70:17: a2:2c:a5:66 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQ/DZII8tMDM4T7C/YZOHZk7T4LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTFaFw0yNjExMjAxNTQ5MTFaMDMxMTAvBgNV BAMTKDk3NzVBMDUzN0Q0NDUyQkM1NjY4OThEMUEyNjY0NDFFNEYyRDQ2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCslNBj+UMCtlr0/9vN++7mYnZ9 mHAzFU6EUIfAA2Jcn4AerEYCant6nwki26JAOjJk2GwHWfz8V81PMhh2hysMO2Iv UkIOD/teygd20jnE1364Im5Er1vczlTOjuL2QJPuyLquzgbmve3LqDVXtBG+IVnJ l09c0exlAW6JVs2N7SWOq4i2XsC5SIxldCRlFN+O61z3Fb9JKkvxx9rwbb8K/u+j F5APQMLXVs17mu7WL9NBpi9eXOXqUoY4E/OPvsPIFqT6OxNorlAT8cru2TU8m59u X2+lUOlDjMMjDyWAmPpCMNcfJTwx84loytAwnVs4PzRMzxqI39L5AtHzRVd5AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUl3WgU31EUrxWaJjRomZEHk8tRuAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzYy ZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEu8jANBgkqhkiG9w0BAQsFAAOCAQEADdoD/s+jfTtUozq8Pn3j42bt lYKeSXowpr1zpQVpqDwFNVLub7xiu52kvviIiqcYBviUo5kD2mrqBbmvM2QVeG1Y 4e+kB1n50XSvgNxVoUuITjlEhQ7BVhCnDwZ2DXZSKzOfe/ZFinYVxgf45qiUGsqd kMNHjBwx9Y4+skET9gPRUS6yTXMhyf1G71nAl5NghmlOzZPzU/5h/hZY2/nFCvRX hkQLBd1tYSV4rzxQ1ong4PnMLMs8kudVz8hCkhgLqaQdqmxT8SIVRzGQhi6dZx5c Xd5SaJvZuPAGgboII+VJyVUCaikHbahDKv3v9+SYxJFsfhAJbhUvsHAXoiylZg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:05 2025 by rpki-client