This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa File: 3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: T2GAhb02+XcHTHbD858uswOf3fjTH1qHhRUJxp5Fkd0= Subject key identifier: C1:DB:AD:59:4C:85:58:CE:9C:AA:D0:28:8F:17:57:56:38:64:02:37 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 158F844E02A19581832DCBFFE53E544D155F8A97 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:31 +0000 ROA not before: Fri 28 Nov 2025 11:44:31 +0000 ROA not after: Fri 27 Nov 2026 11:49:31 +0000 asID: 204170 IP address blocks: 193.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8f:84:4e:02:a1:95:81:83:2d:cb:ff:e5:3e:54:4d:15:5f:8a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:31 2025 GMT Not After : Nov 27 11:49:31 2026 GMT Subject: CN=C1DBAD594C8558CE9CAAD0288F17575638640237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6f:fa:5f:6b:42:02:7a:2f:95:b6:11:a1:b8: fd:0b:48:a4:6a:ef:19:57:8e:d9:93:66:3b:ae:dc: 1d:83:f5:29:ce:7e:89:35:52:83:6f:1e:e1:f3:19: 59:67:a0:d4:31:48:41:fe:0c:01:eb:b1:14:4c:17: 9b:74:98:c7:03:64:73:d0:ea:09:b7:61:69:99:50: 2d:a8:3c:8f:42:5e:33:39:59:8a:01:6b:a2:47:8f: 4f:0d:99:d1:53:1d:8c:1d:39:8a:9c:c2:a4:52:9f: ee:90:e1:cc:9e:d0:8e:e1:88:67:b9:be:4d:a6:d3: ed:1d:14:22:49:6d:c9:59:55:c2:4c:70:18:8a:4a: 45:85:16:1c:46:e4:1b:fb:90:19:ea:29:a1:a7:ea: 28:6a:ed:e8:ec:39:1c:2b:13:02:45:ff:09:d1:52: 6b:8a:65:86:5a:e3:b2:cc:d0:ed:3f:e0:db:2f:a6: 4c:ce:3c:8e:c8:91:b5:18:91:a7:11:c3:cc:0b:aa: 2b:0d:2c:c6:63:e3:cf:96:f9:28:51:5d:63:70:eb: b4:7c:19:37:13:94:78:03:ee:38:92:57:ad:7b:05: 14:0b:bb:e4:ea:af:3f:92:8f:ae:d0:58:40:17:77: d3:97:f9:8d:41:53:0b:34:dd:19:b3:92:24:0b:a5: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DB:AD:59:4C:85:58:CE:9C:AA:D0:28:8F:17:57:56:38:64:02:37 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e32322e3135332e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.153.0/24 Signature Algorithm: sha256WithRSAEncryption 85:0d:91:ff:6a:64:50:83:c3:df:e6:3c:45:87:4f:2c:b8:46: 2e:1b:8e:b5:67:1c:fa:33:5d:b5:f0:bf:06:22:a3:55:30:2d: fd:33:eb:86:8b:c9:11:fe:54:5e:6b:fe:d6:b9:2e:95:b2:cd: 7a:7c:cb:ae:44:37:04:6d:b0:f0:c4:e4:63:a6:6b:79:eb:81: df:b9:50:7b:bb:d2:40:b6:a5:df:a1:d5:ff:a3:e8:e6:62:cd: 10:69:e9:b4:8a:3f:c5:51:fc:58:9b:6d:7b:9a:f4:07:24:ec: c1:c2:1f:6d:6b:7e:a2:81:6c:01:e8:c9:8d:a3:2d:6c:76:f9: ef:39:9c:ec:3f:37:86:b4:18:b5:41:39:de:71:2c:9a:b3:b5: 89:b9:7e:a4:c8:e7:90:5b:75:59:ec:02:27:de:59:1b:c9:dc: da:d3:4c:e2:01:b7:a0:50:41:c0:d0:89:ee:9a:e2:ef:ea:92: a1:5f:00:03:23:88:cc:7e:50:84:28:4f:e2:72:39:06:1e:4b: d8:5c:de:09:20:73:e2:d3:c6:e2:87:73:27:de:7f:53:78:5f: 32:00:77:18:f2:c2:39:74:2c:de:f7:83:dc:40:40:a3:c2:50: c2:c3:3e:eb:2c:fd:91:1d:fd:61:ee:82:c2:6e:a4:9a:0d:e1: df:fa:bb:be -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUFY+ETgKhlYGDLcv/5T5UTRVfipcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzFaFw0yNjExMjcxMTQ5MzFaMDMxMTAvBgNV BAMTKEMxREJBRDU5NEM4NTU4Q0U5Q0FBRDAyODhGMTc1NzU2Mzg2NDAyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjb/pfa0ICei+VthGhuP0LSKRq 7xlXjtmTZjuu3B2D9SnOfok1UoNvHuHzGVlnoNQxSEH+DAHrsRRMF5t0mMcDZHPQ 6gm3YWmZUC2oPI9CXjM5WYoBa6JHj08NmdFTHYwdOYqcwqRSn+6Q4cye0I7hiGe5 vk2m0+0dFCJJbclZVcJMcBiKSkWFFhxG5Bv7kBnqKaGn6ihq7ejsORwrEwJF/wnR UmuKZYZa47LM0O0/4NsvpkzOPI7IkbUYkacRw8wLqisNLMZj48+W+ShRXWNw67R8 GTcTlHgD7jiSV617BRQLu+Tqrz+Sj67QWEAXd9OX+Y1BUws03RmzkiQLpcUDAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUwdutWUyFWM6cqtAojxdXVjhkAjcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTMyMzIy ZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMEWmTANBgkqhkiG9w0BAQsFAAOCAQEAhQ2R/2pkUIPD3+Y8RYdPLLhG LhuOtWcc+jNdtfC/BiKjVTAt/TPrhovJEf5UXmv+1rkulbLNenzLrkQ3BG2w8MTk Y6ZreeuB37lQe7vSQLal36HV/6Po5mLNEGnptIo/xVH8WJtte5r0ByTswcIfbWt+ ooFsAejJjaMtbHb57zmc7D83hrQYtUE53nEsmrO1ibl+pMjnkFt1WewCJ95ZG8nc 2tNM4gG3oFBBwNCJ7pri7+qSoV8AAyOIzH5QhChP4nI5Bh5L2FzeCSBz4tPG4odz J95/U3hfMgB3GPLCOXQs3veD3EBAo8JQwsM+6yz9kR39Ye6Cwm6kmg3h3/q7vg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:15 2025 by rpki-client