This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa File: 3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: YN9B8DmP7Jco4kl/S2Bm5f1Vq5+P13FK0SKsexyCIfc= Subject key identifier: C2:C9:4D:BB:38:3D:2F:9A:54:BD:31:F3:8C:99:02:9A:F4:AC:20:BD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5697AE5C0413CD4CC30C4A0D9F262FE4886C3622 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa Signing time: Fri 28 Nov 2025 11:49:48 +0000 ROA not before: Fri 28 Nov 2025 11:44:48 +0000 ROA not after: Fri 27 Nov 2026 11:49:48 +0000 asID: 147049 IP address blocks: 192.166.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:97:ae:5c:04:13:cd:4c:c3:0c:4a:0d:9f:26:2f:e4:88:6c:36:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:48 2025 GMT Not After : Nov 27 11:49:48 2026 GMT Subject: CN=C2C94DBB383D2F9A54BD31F38C99029AF4AC20BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:e4:81:bc:0f:72:1c:0e:d0:bb:c7:d3:d3: 21:25:72:ca:78:53:91:3c:f4:f5:64:22:d2:02:66: 01:06:c2:1a:21:ad:35:03:cd:28:f4:10:f6:e5:66: 55:6f:e2:a4:4b:b1:71:05:41:07:40:0d:24:45:09: f9:ec:52:e1:6a:37:0d:7d:f6:48:6e:01:0b:91:2b: cd:a1:84:73:dd:15:51:e1:d6:a0:6b:9f:e1:8d:14: db:eb:62:5c:53:31:81:db:14:b9:6e:5e:3f:95:1d: 34:8a:63:59:bc:ad:e5:31:f5:33:48:0f:af:e3:66: d4:58:1d:14:20:e6:24:bc:ab:9e:0c:2f:55:f8:29: 82:c1:e0:df:54:e8:69:fc:ad:47:59:d9:53:8b:95: 74:c3:f3:7e:64:94:b7:f0:60:da:2b:1b:01:70:53: f7:cb:6f:fb:03:1c:0b:f1:f3:5a:70:7a:cb:7c:fb: 45:90:36:4e:97:18:ab:85:cb:aa:3d:fc:7c:f0:d0: 99:38:aa:68:54:46:f6:79:ef:3b:f5:39:70:e4:7c: a1:38:3b:63:e8:9d:23:8d:5a:d3:50:ec:74:e1:ca: 9a:7f:0a:1e:cd:5d:b6:2f:94:ec:60:30:2a:77:93: f3:de:b2:c1:cb:d6:76:1a:b1:c5:31:b0:e6:3a:ce: bc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C9:4D:BB:38:3D:2F:9A:54:BD:31:F3:8C:99:02:9A:F4:AC:20:BD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234362e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.246.0/24 Signature Algorithm: sha256WithRSAEncryption aa:81:40:ff:b8:74:7d:c1:c3:3e:e2:72:6c:7e:2a:9a:4a:ef: fc:f5:50:62:3d:6b:da:b9:9d:9f:0d:c5:3d:27:1f:a1:26:a9: 80:d1:3e:78:74:f5:ff:3a:12:eb:ac:08:c4:78:6d:f2:11:43: 58:5f:97:13:01:ab:24:b6:c2:1e:1b:ae:6c:2a:a5:73:17:cb: 8b:d3:16:a3:af:0a:24:91:bb:33:5b:fa:7b:e0:8e:5a:63:aa: 27:a0:05:44:1f:e4:41:b7:25:6f:8a:6a:1c:22:0d:8d:d4:d9: 08:ed:8e:83:f0:b3:eb:11:8d:3e:34:31:8e:8b:4e:a9:f1:6c: 84:8c:01:82:d7:ff:6e:83:e5:7f:7c:b9:d1:da:61:19:8a:51: 50:90:c1:c4:10:cf:eb:06:3d:cf:ce:8c:94:68:df:09:a0:24: 4b:f9:c1:a1:a9:05:f2:f3:45:55:25:64:88:3f:69:c2:c1:90: 00:cd:60:9c:ff:3c:7a:21:c9:cd:9b:e6:20:db:c6:62:e4:80: 34:3c:fd:96:e6:b5:b1:21:81:d1:17:cf:7a:e1:f7:07:a3:67: ee:89:7e:0c:17:f4:66:5b:c0:5c:fc:f3:c9:22:11:ba:61:84: ff:79:ca:3c:b9:5a:da:fa:1f:cc:47:a8:82:33:56:60:b1:1a: d3:74:5a:d8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUVpeuXAQTzUzDDEoNnyYv5IhsNiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDhaFw0yNjExMjcxMTQ5NDhaMDMxMTAvBgNV BAMTKEMyQzk0REJCMzgzRDJGOUE1NEJEMzFGMzhDOTkwMjlBRjRBQzIwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLOSBvA9yHA7Qu8fT0yElcsp4 U5E89PVkItICZgEGwhohrTUDzSj0EPblZlVv4qRLsXEFQQdADSRFCfnsUuFqNw19 9khuAQuRK82hhHPdFVHh1qBrn+GNFNvrYlxTMYHbFLluXj+VHTSKY1m8reUx9TNI D6/jZtRYHRQg5iS8q54ML1X4KYLB4N9U6Gn8rUdZ2VOLlXTD835klLfwYNorGwFw U/fLb/sDHAvx81pwest8+0WQNk6XGKuFy6o9/Hzw0Jk4qmhURvZ57zv1OXDkfKE4 O2PonSONWtNQ7HThypp/Ch7NXbYvlOxgMCp3k/PessHL1nYascUxsOY6zrwhAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQUwslNuzg9L5pUvTHzjJkCmvSsIL0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzYz NjJlMzIzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwKb2MA0GCSqGSIb3DQEBCwUAA4IBAQCqgUD/uHR9wcM+4nJsfiqa Su/89VBiPWvauZ2fDcU9Jx+hJqmA0T54dPX/OhLrrAjEeG3yEUNYX5cTAasktsIe G65sKqVzF8uL0xajrwokkbszW/p74I5aY6onoAVEH+RBtyVvimocIg2N1NkI7Y6D 8LPrEY0+NDGOi06p8WyEjAGC1/9ug+V/fLnR2mEZilFQkMHEEM/rBj3PzoyUaN8J oCRL+cGhqQXy80VVJWSIP2nCwZAAzWCc/zx6IcnNm+Yg28Zi5IA0PP2W5rWxIYHR F8964fcHo2fuiX4MF/RmW8Bc/PPJIhG6YYT/eco8uVra+h/MR6iCM1ZgsRrTdFrY -----END CERTIFICATE-----Generated at Fri Dec 5 11:38:32 2025 by rpki-client