This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa File: 3139332e34362e3139362e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: FCxer5nIoswrrFIMRQ538lca30m3E0GDknIyCtyFodw= Subject key identifier: C1:34:05:B1:B5:C2:2E:65:29:B2:24:29:BC:A0:57:84:61:89:E6:A8 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3FCC2BB98B6BD721255B505C0E818DF544E698E6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:51 +0000 ROA not before: Fri 28 Nov 2025 11:44:51 +0000 ROA not after: Fri 27 Nov 2026 11:49:51 +0000 asID: 47583 IP address blocks: 193.46.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:cc:2b:b9:8b:6b:d7:21:25:5b:50:5c:0e:81:8d:f5:44:e6:98:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:51 2025 GMT Not After : Nov 27 11:49:51 2026 GMT Subject: CN=C13405B1B5C22E6529B22429BCA057846189E6A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:95:ea:37:13:1e:2c:59:88:2c:97:6e:d5: 0f:96:e5:73:29:6d:72:d8:1a:ee:e1:1d:22:5b:ec: eb:2f:c8:88:77:58:1f:49:2c:56:98:5d:4d:2b:3d: 8f:07:80:e6:d1:9c:27:a6:4a:8d:bc:94:fb:4e:8e: 7c:c4:7d:1a:d3:2a:be:03:30:c4:0e:22:66:7e:c5: b6:4c:66:ba:cf:45:4e:19:66:d8:f5:b2:5c:0b:30: f3:41:8f:ca:55:72:19:72:c0:1d:53:c3:a0:94:ee: 8a:80:be:d8:64:27:bf:56:32:b0:ba:5f:24:a9:b1: 2f:b6:9d:9b:51:32:bc:7c:22:3c:a4:61:af:97:f0: e3:a0:32:36:e9:b5:7e:8e:37:3c:2c:57:05:ed:4b: 65:57:79:8e:34:c0:11:02:9b:9b:ab:af:d7:47:a5: fb:85:28:b2:15:5a:39:2e:93:98:19:e8:25:cd:6f: c5:d6:ea:1e:3b:be:08:9c:e3:b3:5d:31:a7:a5:30: 8b:c9:7e:3d:99:34:dd:41:94:a8:31:d6:11:3f:e0: 38:d9:04:c9:18:0b:a8:46:5d:20:c5:3d:49:68:e1: c0:16:44:f6:ba:d6:e5:de:5b:b8:e9:56:1e:56:aa: e2:15:a4:c7:95:1c:8a:d6:d7:1e:78:7a:3b:8e:79: e7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:34:05:B1:B5:C2:2E:65:29:B2:24:29:BC:A0:57:84:61:89:E6:A8 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/3139332e34362e3139362e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.46.196.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:2c:63:94:ac:f4:81:82:1e:26:46:83:4c:fc:2f:e2:24:3d: 95:25:00:2b:60:38:19:f8:5d:6d:ab:37:cc:39:12:48:40:cd: 43:87:35:ab:d7:cb:2a:58:6f:1e:b1:c8:c8:b9:00:5d:5b:f4: 58:b6:0a:28:6e:fe:2c:a4:f2:e2:e8:23:eb:61:d6:32:0a:fd: 15:27:34:6c:ca:f8:37:1b:1f:2d:f4:81:a0:3a:2e:d2:a1:4a: cc:43:08:26:fa:9a:60:c8:7c:85:bb:7a:9f:86:ca:20:bf:2c: 9f:2b:d8:c1:02:da:46:20:89:c0:b8:7f:f5:da:dd:77:8d:1e: 20:49:5d:2f:21:f0:78:1b:49:6b:da:be:39:2a:06:a1:f9:cf: fb:9b:dd:0c:83:21:a3:4d:7e:90:4c:c4:1a:f5:ee:53:a8:e4: 5c:67:d4:7c:f8:1c:7a:71:a9:fd:11:70:bb:8b:36:fb:5f:d9: 15:20:07:fb:c9:f8:a5:b7:e1:c7:4a:68:0d:6d:3a:48:4c:3d: 09:0d:fe:5b:bc:ce:27:e4:0f:0c:5d:2d:d3:04:8e:97:52:4f: 3e:ff:0b:ad:5e:ce:a9:3c:30:2f:43:1c:56:27:cc:80:7d:c2: 5f:b6:df:f0:62:0a:63:ca:fa:05:c7:f7:f2:b8:7a:8e:3a:ed: 74:22:22:8b -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUP8wruYtr1yElW1BcDoGN9UTmmOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTFaFw0yNjExMjcxMTQ5NTFaMDMxMTAvBgNV BAMTKEMxMzQwNUIxQjVDMjJFNjUyOUIyMjQyOUJDQTA1Nzg0NjE4OUU2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHZXqNxMeLFmILJdu1Q+W5XMp bXLYGu7hHSJb7OsvyIh3WB9JLFaYXU0rPY8HgObRnCemSo28lPtOjnzEfRrTKr4D MMQOImZ+xbZMZrrPRU4ZZtj1slwLMPNBj8pVchlywB1Tw6CU7oqAvthkJ79WMrC6 XySpsS+2nZtRMrx8IjykYa+X8OOgMjbptX6ONzwsVwXtS2VXeY40wBECm5urr9dH pfuFKLIVWjkuk5gZ6CXNb8XW6h47vgic47NdMaelMIvJfj2ZNN1BlKgx1hE/4DjZ BMkYC6hGXSDFPUlo4cAWRPa61uXeW7jpVh5WquIVpMeVHIrW1x54ejuOeecjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUwTQFsbXCLmUpsiQpvKBXhGGJ5qgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMTM5MzMyZTM0MzYy ZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBALBLsQwDQYJKoZIhvcNAQELBQADggEBABosY5Ss9IGCHiZGg0z8L+IkPZUl ACtgOBn4XW2rN8w5EkhAzUOHNavXyypYbx6xyMi5AF1b9Fi2Cihu/iyk8uLoI+th 1jIK/RUnNGzK+DcbHy30gaA6LtKhSsxDCCb6mmDIfIW7ep+GyiC/LJ8r2MEC2kYg icC4f/Xa3XeNHiBJXS8h8HgbSWvavjkqBqH5z/ub3QyDIaNNfpBMxBr17lOo5Fxn 1Hz4HHpxqf0RcLuLNvtf2RUgB/vJ+KW34cdKaA1tOkhMPQkN/lu8zifkDwxdLdME jpdSTz7/C61ezqk8MC9DHFYnzIB9wl+23/BiCmPK+gXH9/K4eo467XQiIos= -----END CERTIFICATE-----Generated at Fri Dec 5 18:56:22 2025 by rpki-client