This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa File: 3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: EcBB6970XCxJnNCg7oAfeOqfDWkVXzuZQrA8Fa85e5A= Subject key identifier: FF:AF:4F:30:9F:C3:4E:E4:50:CB:4F:B1:8D:B2:14:B3:9D:C2:BB:D8 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 42604FBB50DD1ACC9D206C20D25617D7D45C3110 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 147049 IP address blocks: 192.166.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:60:4f:bb:50:dd:1a:cc:9d:20:6c:20:d2:56:17:d7:d4:5c:31:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=FFAF4F309FC34EE450CB4FB18DB214B39DC2BBD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:49:a1:28:92:a3:03:b5:93:bb:e6:b9:37:39: 28:51:ea:85:b6:b6:68:7e:96:2d:bf:34:cf:13:ed: e4:41:65:59:a2:64:d1:5d:a5:6a:99:9c:69:25:31: e6:b6:e0:57:c9:0d:f4:9f:0f:39:c7:8e:df:f6:e2: 4d:e3:ff:a9:8b:7b:96:32:2d:b4:7a:32:12:f5:b4: 3d:07:3d:cc:d1:72:4b:aa:eb:86:7b:31:f8:33:f0: d2:51:1b:5f:73:f7:f0:db:7f:12:65:ff:74:c3:e4: ec:67:41:fe:87:53:90:65:fd:d7:be:6b:07:38:2d: 03:c4:86:cd:51:12:ce:41:f1:e8:d5:02:30:e3:b2: 8b:d3:d4:6c:83:d3:5d:07:97:63:87:1f:b4:eb:aa: b5:9c:62:e1:49:ed:c0:3a:88:57:3d:76:53:fc:99: bb:66:22:53:d3:3c:cc:90:5d:d2:86:59:b1:c2:0c: 09:c5:39:69:d0:a1:1d:28:c6:db:49:ee:b6:17:5a: f4:d6:16:1a:a4:f8:8d:bd:ea:9f:7d:4a:2c:f1:cd: 97:88:a3:71:4d:9c:4c:b8:0b:42:67:86:c8:cb:b1: 7d:45:d0:43:47:bc:5a:9c:f7:ee:8d:79:b8:b1:05: 16:78:73:b8:6e:b4:db:e1:52:b6:da:ff:ee:b9:43: 5c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AF:4F:30:9F:C3:4E:E4:50:CB:4F:B1:8D:B2:14:B3:9D:C2:BB:D8 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139322e3136362e3234372e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.166.247.0/24 Signature Algorithm: sha256WithRSAEncryption ce:13:0f:41:62:88:2e:b2:a0:ef:4d:31:81:c2:9b:f9:10:09: 8a:9a:64:e7:f2:bd:f2:e2:50:e0:42:64:8d:73:64:23:bf:07: d9:2e:ea:eb:92:d3:d9:11:b3:17:5f:25:6d:45:db:b6:d0:ae: 3a:82:59:7c:71:c7:8a:b4:60:cd:dd:97:0c:c0:85:ef:f1:71: ce:bd:77:33:33:6e:9a:68:fe:d0:71:c8:39:77:f1:ca:47:d7: c8:5d:4d:8b:f1:23:50:0a:01:6f:b3:70:65:db:4b:00:55:0f: 70:04:8c:2c:2c:95:96:1c:92:6b:5e:23:c4:5d:ce:98:94:ec: 63:b3:5c:cb:09:65:02:1b:91:74:c3:29:c6:b7:61:c4:7a:dd: 07:fe:f9:81:a6:87:83:fd:23:1a:f3:64:a6:f3:25:aa:a3:fe: 2e:f1:49:63:5c:01:c0:fc:3f:9b:5e:68:93:42:11:45:69:c9: a8:d5:4c:d0:94:7d:6a:c1:51:36:7c:f1:17:db:29:8c:61:0a: ea:68:75:50:1b:37:50:3f:a1:7d:0e:2c:ee:17:3a:71:a4:b9: fc:9b:15:e4:7a:05:0f:11:60:87:54:46:6e:ca:da:84:6e:65: 94:b0:28:e6:9c:16:53:63:47:68:c9:28:a7:0a:a0:84:53:c0: 58:07:39:0d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgIUQmBPu1DdGsydIGwg0lYX19RcMRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKEZGQUY0RjMwOUZDMzRFRTQ1MENCNEZCMThEQjIxNEIzOURDMkJCRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/SaEokqMDtZO75rk3OShR6oW2 tmh+li2/NM8T7eRBZVmiZNFdpWqZnGklMea24FfJDfSfDznHjt/24k3j/6mLe5Yy LbR6MhL1tD0HPczRckuq64Z7Mfgz8NJRG19z9/DbfxJl/3TD5OxnQf6HU5Bl/de+ awc4LQPEhs1REs5B8ejVAjDjsovT1GyD010Hl2OHH7TrqrWcYuFJ7cA6iFc9dlP8 mbtmIlPTPMyQXdKGWbHCDAnFOWnQoR0oxttJ7rYXWvTWFhqk+I296p99SizxzZeI o3FNnEy4C0JnhsjLsX1F0ENHvFqc9+6NebixBRZ4c7hutNvhUrba/+65Q1xpAgMB AAGjggJGMIICQjAdBgNVHQ4EFgQU/69PMJ/DTuRQy0+xjbIUs53Cu9gwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbMGCCsGAQUFBwELBIGmMIGjMIGgBggrBgEFBQcwC4aBk3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzIyZTMxMzYz NjJlMzIzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNDM3MzAzNDM5LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwKb3MA0GCSqGSIb3DQEBCwUAA4IBAQDOEw9BYogusqDvTTGBwpv5 EAmKmmTn8r3y4lDgQmSNc2QjvwfZLurrktPZEbMXXyVtRdu20K46gll8cceKtGDN 3ZcMwIXv8XHOvXczM26aaP7Qccg5d/HKR9fIXU2L8SNQCgFvs3Bl20sAVQ9wBIws LJWWHJJrXiPEXc6YlOxjs1zLCWUCG5F0wynGt2HEet0H/vmBpoeD/SMa82Sm8yWq o/4u8UljXAHA/D+bXmiTQhFFacmo1UzQlH1qwVE2fPEX2ymMYQrqaHVQGzdQP6F9 DizuFzpxpLn8mxXkegUPEWCHVEZuytqEbmWUsCjmnBZTY0doySinCqCEU8BYBzkN -----END CERTIFICATE-----Generated at Fri Dec 5 11:38:33 2025 by rpki-client