This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa File: 3139332e34362e3234332e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: pl+9YoVUu2hzC75CsjXYXhPlUj3nKDAzEBo6lSRy3Jc= Subject key identifier: 67:9D:A3:F8:07:B6:D3:5C:D4:17:EF:13:C0:8C:10:CF:FC:94:82:EA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4EF71B5D1D19189C896EAE4B37F68DAC48771111 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:11 +0000 ROA not before: Fri 21 Nov 2025 15:44:11 +0000 ROA not after: Fri 20 Nov 2026 15:49:11 +0000 asID: 51167 IP address blocks: 193.46.243.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f7:1b:5d:1d:19:18:9c:89:6e:ae:4b:37:f6:8d:ac:48:77:11:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:11 2025 GMT Not After : Nov 20 15:49:11 2026 GMT Subject: CN=679DA3F807B6D35CD417EF13C08C10CFFC9482EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:44:bc:5d:f4:8a:3c:8d:82:af:ce:8a:61: bc:74:79:27:2e:94:f9:b4:21:18:6d:53:ea:56:da: 30:51:ba:3e:91:69:a5:d6:c0:95:06:96:05:46:51: 86:aa:a0:2d:07:5f:a9:e9:1a:ba:f8:f2:a3:80:36: 85:57:44:37:9f:fb:2f:c6:4d:1e:6d:f1:af:dd:5b: e8:c5:aa:56:a9:d5:df:0e:88:1e:4a:53:20:8a:f1: dd:bc:23:de:8c:2e:cf:ff:a9:b3:42:af:88:13:f8: 3c:90:6c:57:7c:84:f2:5e:9f:fe:c8:60:ec:b2:46: fe:5a:3e:7b:81:05:8c:d0:c8:2c:28:7a:ad:69:35: 6f:8e:41:c2:2b:87:ca:cb:05:32:dc:15:d8:0c:d7: bf:1f:6c:2d:1a:83:e8:62:b8:53:33:39:2c:7a:1f: fd:5f:99:87:4a:c1:9a:c8:5e:6a:c6:bb:56:89:93: 6a:a4:1d:12:0f:b5:7e:b0:ab:2c:06:65:cf:69:7d: 0d:89:c3:b3:ca:0a:42:f7:ea:19:62:60:e2:a0:0d: d0:be:f6:27:8d:37:30:78:7c:bb:bd:4e:5d:55:38: 3f:6e:d8:76:df:f3:13:78:99:09:c5:78:e4:e7:56: 86:0b:40:f5:d2:44:9f:4c:79:3a:cf:ae:42:fc:e8: 6e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9D:A3:F8:07:B6:D3:5C:D4:17:EF:13:C0:8C:10:CF:FC:94:82:EA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3234332e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.243.0/24 Signature Algorithm: sha256WithRSAEncryption af:c3:63:9c:c4:ae:2b:85:92:56:72:f7:f3:38:89:0f:65:6a: 59:a8:2b:49:54:da:13:ab:f7:cb:db:1f:a2:e2:cb:55:0b:fc: e4:6c:a7:04:91:e3:7e:5d:d4:92:b9:15:a2:14:91:c9:15:a3: 2a:06:5c:4e:58:cf:31:3e:71:35:3b:0a:5e:53:2d:df:9b:ac: 59:d5:90:65:6a:ef:3b:25:d4:ef:c7:6b:9d:93:22:14:91:7b: 33:af:44:86:92:ce:9a:05:ca:79:c5:da:17:76:8c:91:eb:b7: 9a:fc:55:5f:cb:3a:07:ae:ef:df:5e:70:73:1b:3b:8a:d0:98: 31:a4:93:f8:65:3f:17:4e:3a:4c:35:0d:15:f3:49:4b:c3:bb: 78:7e:e9:5d:df:53:b1:b8:bb:de:c9:27:a9:46:68:c3:c3:8d: 38:91:43:6c:29:fc:8c:f0:a0:98:86:16:75:db:65:fd:af:d9: 32:56:ee:bb:a3:a0:2f:fd:cc:c5:19:63:c6:89:ad:99:6e:31: 37:aa:16:cd:bf:be:8a:0f:75:99:87:f1:5f:a7:d8:23:2b:0e: c5:47:b8:2e:f2:62:c0:2e:d1:9e:4c:fe:d4:5e:aa:75:35:d7: ef:0c:ed:a9:9b:70:ca:05:88:71:c0:1c:fd:d9:d4:b6:2c:70: 81:ea:34:63 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUTvcbXR0ZGJyJbq5LN/aNrEh3EREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTFaFw0yNjExMjAxNTQ5MTFaMDMxMTAvBgNV BAMTKDY3OURBM0Y4MDdCNkQzNUNENDE3RUYxM0MwOEMxMENGRkM5NDgyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobUS8XfSKPI2Cr86KYbx0eScu lPm0IRhtU+pW2jBRuj6RaaXWwJUGlgVGUYaqoC0HX6npGrr48qOANoVXRDef+y/G TR5t8a/dW+jFqlap1d8OiB5KUyCK8d28I96MLs//qbNCr4gT+DyQbFd8hPJen/7I YOyyRv5aPnuBBYzQyCwoeq1pNW+OQcIrh8rLBTLcFdgM178fbC0ag+hiuFMzOSx6 H/1fmYdKwZrIXmrGu1aJk2qkHRIPtX6wqywGZc9pfQ2Jw7PKCkL36hliYOKgDdC+ 9ieNNzB4fLu9Tl1VOD9u2Hbf8xN4mQnFeOTnVoYLQPXSRJ9MeTrPrkL86G47AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUZ52j+Ae201zUF+8TwIwQz/yUguowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzYy ZTMyMzQzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBADBLvMwDQYJKoZIhvcNAQELBQADggEBAK/DY5zEriuFklZy9/M4iQ9lalmo K0lU2hOr98vbH6Liy1UL/ORspwSR435d1JK5FaIUkckVoyoGXE5YzzE+cTU7Cl5T Ld+brFnVkGVq7zsl1O/Ha52TIhSRezOvRIaSzpoFynnF2hd2jJHrt5r8VV/LOgeu 799ecHMbO4rQmDGkk/hlPxdOOkw1DRXzSUvDu3h+6V3fU7G4u97JJ6lGaMPDjTiR Q2wp/IzwoJiGFnXbZf2v2TJW7rujoC/9zMUZY8aJrZluMTeqFs2/vooPdZmH8V+n 2CMrDsVHuC7yYsAu0Z5M/tReqnU11+8M7ambcMoFiHHAHP3Z1LYscIHqNGM= -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:54 2025 by rpki-client