This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131362e302f32342d3234203d3e20313431303339.roa File: 3139322e3134352e3131362e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: JEdxDAeTJx0lyJUuWz/uSAO2AUZq0jTzQjR+jBBd3kY= Subject key identifier: FD:C2:FE:58:D9:05:8D:5C:95:F8:0E:8F:55:33:A9:C0:4D:D0:C0:E0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 37BF86869627260065C9012C6271477BB6F846CF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131362e302f32342d3234203d3e20313431303339.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 141039 IP address blocks: 192.145.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:36:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:bf:86:86:96:27:26:00:65:c9:01:2c:62:71:47:7b:b6:f8:46:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=FDC2FE58D9058D5C95F80E8F5533A9C04DD0C0E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:21:f2:4d:ba:65:3e:e4:5a:c4:85:89:e7: dd:21:95:f7:59:25:df:bf:0c:d6:b3:5b:bf:1a:13: f5:be:06:06:50:ce:34:44:e2:1a:ba:44:9e:d9:1e: 3c:40:d5:b4:2a:27:d2:df:7d:0f:48:0c:07:fe:91: c9:87:96:ec:88:69:d3:54:20:05:62:b6:a6:68:be: 1f:f6:5b:cf:d1:ff:33:87:0f:40:89:4a:7a:46:bc: 97:d2:c7:13:7f:75:14:7e:53:0b:a5:f0:9b:44:53: 84:7b:38:16:f8:24:1b:c1:66:8b:a9:27:f3:8d:17: 20:1d:e8:a0:85:47:d1:c2:c2:8b:2e:a2:40:38:4e: d3:36:ec:cd:29:a7:91:2e:3d:b8:42:c1:af:6d:dc: 53:58:2d:d6:1c:84:01:90:30:ca:a2:89:d4:63:60: 5a:21:ca:cb:e3:d2:e0:25:9e:50:49:e7:3d:61:5c: 0b:f3:99:2c:3a:a7:81:e4:1e:c2:c3:f4:fc:64:d5: 8e:71:5b:8a:c1:e5:8d:4e:de:8b:fa:8b:51:89:2a: 6b:98:e1:2e:a1:62:de:4a:70:64:98:b1:98:87:aa: 8b:74:e2:d7:f1:90:cf:1e:2d:f6:b1:89:99:04:42: 59:d3:d3:7f:b4:0a:5a:25:f6:c2:ca:22:6e:d4:52: 54:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C2:FE:58:D9:05:8D:5C:95:F8:0E:8F:55:33:A9:C0:4D:D0:C0:E0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3134352e3131362e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.116.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ff:e6:92:ae:7b:9d:b3:ba:ec:a9:6b:cf:61:d6:e8:e4:10: 9f:ed:e6:67:4d:5a:91:e5:8a:aa:2b:e1:84:6e:58:33:80:fd: 8b:09:5b:fe:bb:1e:fb:71:73:69:a8:31:ba:bc:bf:81:b9:a8: ad:34:0e:12:43:ef:45:8d:60:cd:3d:82:5e:22:3d:35:3c:78: 31:d1:c7:ec:f0:80:61:2a:83:97:a9:9c:f4:47:00:92:90:1d: 47:c3:52:ca:f4:52:31:ab:75:7d:e3:3f:85:29:42:a1:ca:22: e6:30:34:6f:f8:59:32:91:64:9c:a8:83:60:e3:3d:87:ad:f1: 5f:89:0b:6c:97:ba:3a:7d:82:66:dd:cc:8c:79:80:8c:fa:91: bd:ad:e8:cc:d7:4d:3a:74:6b:0f:52:b4:85:ab:5c:c6:f6:5d: 9b:2c:1a:de:a5:0c:f5:32:e7:1d:7a:64:4a:36:bf:fd:e8:da: 54:0f:14:9a:70:27:1e:87:19:d8:39:82:30:1b:7e:f4:d7:f0: c8:0b:66:82:09:fd:8f:6f:d2:8a:9f:f5:69:3d:51:be:e3:0d: 4e:d3:bc:88:a5:49:c6:0b:bc:77:03:f0:31:72:db:f6:4d:93: a3:ec:3a:c3:b6:0e:82:79:58:ae:ec:a5:89:46:85:6a:b2:bb: c3:c5:70:56 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUN7+GhpYnJgBlyQEsYnFHe7b4Rs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKEZEQzJGRTU4RDkwNThENUM5NUY4MEU4RjU1MzNBOUMwNEREMEMwRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QyHyTbplPuRaxIWJ590hlfdZ Jd+/DNazW78aE/W+BgZQzjRE4hq6RJ7ZHjxA1bQqJ9LffQ9IDAf+kcmHluyIadNU IAVitqZovh/2W8/R/zOHD0CJSnpGvJfSxxN/dRR+Uwul8JtEU4R7OBb4JBvBZoup J/ONFyAd6KCFR9HCwosuokA4TtM27M0pp5EuPbhCwa9t3FNYLdYchAGQMMqiidRj YFohysvj0uAlnlBJ5z1hXAvzmSw6p4HkHsLD9Pxk1Y5xW4rB5Y1O3ov6i1GJKmuY 4S6hYt5KcGSYsZiHqot04tfxkM8eLfaxiZkEQlnT03+0Clol9sLKIm7UUlQxAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQU/cL+WNkFjVyV+A6PVTOpwE3QwOAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzQz NTJlMzEzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzMzM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwJF0MA0GCSqGSIb3DQEBCwUAA4IBAQA0/+aSrnuds7rsqWvPYdbo 5BCf7eZnTVqR5YqqK+GEblgzgP2LCVv+ux77cXNpqDG6vL+BuaitNA4SQ+9FjWDN PYJeIj01PHgx0cfs8IBhKoOXqZz0RwCSkB1Hw1LK9FIxq3V94z+FKUKhyiLmMDRv +FkykWScqINg4z2HrfFfiQtsl7o6fYJm3cyMeYCM+pG9rejM1006dGsPUrSFq1zG 9l2bLBrepQz1MucdemRKNr/96NpUDxSacCcehxnYOYIwG3701/DIC2aCCf2Pb9KK n/VpPVG+4w1O07yIpUnGC7x3A/Axctv2TZOj7DrDtg6CeViu7KWJRoVqsrvDxXBW -----END CERTIFICATE-----Generated at Mon Dec 8 03:31:17 2025 by rpki-client