This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa File: 3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa (raw, json) Hash identifier: YySL/QZGEvCE198sQnBIhpZBsii1Otfso/vU2wfE3eE= Subject key identifier: 6D:F9:0E:AE:FF:7A:FE:DE:84:37:95:72:0D:15:D6:E3:48:C9:1C:24 Certificate issuer: /CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Certificate serial: 78D1BCA89E365AF50E58539ECC8FD1692CAAB1FE Authority key identifier: F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa Signing time: Sat 13 Sep 2025 18:55:07 +0000 ROA not before: Sat 13 Sep 2025 18:50:07 +0000 ROA not after: Sat 12 Sep 2026 18:55:07 +0000 asID: 211415 IP address blocks: 193.93.154.0/24 maxlen: 24 Validation: Failed, RFC 3779 resource not subset of parent's resources Certificate: Data: Version: 3 (0x2) Serial Number: 78:d1:bc:a8:9e:36:5a:f5:0e:58:53:9e:cc:8f:d1:69:2c:aa:b1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f29fbab4db867f6bd9a7eff6aa55d98c162e1aad Validity Not Before: Sep 13 18:50:07 2025 GMT Not After : Sep 12 18:55:07 2026 GMT Subject: CN=6DF90EAEFF7AFEDE843795720D15D6E348C91C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:aa:63:ba:5c:b3:d4:f4:ba:29:dd:9f:bd:7d: 20:66:d6:c1:a2:f8:67:45:9d:57:0a:8c:94:fb:20: 98:6e:2d:1d:fc:92:85:d1:fc:bf:12:11:23:2e:32: ab:72:41:f5:a3:63:05:62:4d:94:5a:d5:45:15:3d: fa:f8:c2:01:8d:54:3d:f2:e3:e5:9b:48:5f:14:80: d4:92:41:e7:f4:ca:dc:f0:3a:3d:e0:61:e6:64:a3: 78:de:f1:8c:a3:80:06:39:f5:33:46:e6:fe:f4:9c: c5:21:4e:fa:ab:e6:6c:4c:58:c0:3f:70:dd:b9:2e: 46:25:54:f5:58:d8:4a:50:12:f7:cb:0a:5f:1d:9e: ea:2a:9d:58:a3:15:c4:7b:1d:32:9e:4e:58:85:f7: 61:f3:5e:55:1d:69:9b:4f:82:05:ca:d6:9a:ba:76: e0:47:b7:82:9c:6f:94:19:da:3b:49:a6:6e:b6:7f: fe:95:c4:e9:81:ad:40:38:68:14:e2:2a:3d:ff:32: b9:71:56:01:5d:3e:e9:54:72:ba:0d:61:72:ed:46: 07:53:37:39:00:6b:01:91:dd:83:51:cb:c1:50:eb: a0:6a:47:f9:3f:4a:ee:9e:c8:0a:3c:e6:65:0a:3c: 72:c5:11:8d:8f:f0:be:bd:73:dd:10:56:69:12:68: 7c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:0E:AE:FF:7A:FE:DE:84:37:95:72:0D:15:D6:E3:48:C9:1C:24 X509v3 Authority Key Identifier: keyid:F2:9F:BA:B4:DB:86:7F:6B:D9:A7:EF:F6:AA:55:D9:8C:16:2E:1A:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/F29FBAB4DB867F6BD9A7EFF6AA55D98C162E1AAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p-6tNuGf2vZp-_2qlXZjBYuGq0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf52d814-3d2f-4df4-8140-dfb530f74912/0/3139332e39332e3135342e302f32342d3234203d3e20323131343135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.154.0/24 Signature Algorithm: sha256WithRSAEncryption c9:f4:89:56:4e:6f:a3:0c:ca:55:3c:a4:85:0a:5e:ed:50:fa: f1:30:b6:6a:35:c1:52:dc:c5:f7:29:75:7b:47:a9:42:de:b9: dd:e2:e8:bf:17:5e:3d:61:56:35:04:5b:95:c2:77:87:c6:67: 45:6d:f4:19:d9:43:b3:84:91:27:ce:53:29:8b:a9:fb:42:4f: e8:6a:73:ee:97:d2:49:dc:f5:ea:01:be:f7:f9:07:8d:97:51: 5d:73:f0:21:58:ee:31:cd:1a:ac:72:14:76:ca:63:d1:22:1b: b0:53:44:8d:fd:0d:ed:d7:29:6b:d2:43:7a:46:36:a2:5f:6c: 0a:3f:6f:dc:75:ed:ac:1c:5a:2c:a3:d2:65:22:b5:2f:ba:68: 56:71:56:c7:1f:eb:cf:a4:6a:4b:36:39:54:41:5b:de:81:88: 96:74:99:37:b0:b2:f2:88:7f:df:90:c6:79:e0:5a:64:7f:b9: 02:c3:d2:b0:8e:4f:ac:58:94:82:39:c8:a2:49:72:ef:c5:80: 8d:96:d9:c9:8f:ec:ff:85:42:d8:a8:e2:d5:2a:d8:93:0e:6d: 6d:3e:84:b5:0a:26:99:e1:01:cb:79:ac:28:b0:32:c9:a8:57: 5e:6c:bf:14:a5:21:8b:54:52:2e:f6:1e:6d:3e:62:28:a1:3a: 0b:bf:b5:fd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUeNG8qJ42WvUOWFOezI/RaSyqsf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjI5ZmJhYjRkYjg2N2Y2YmQ5YTdlZmY2YWE1NWQ5OGMx NjJlMWFhZDAeFw0yNTA5MTMxODUwMDdaFw0yNjA5MTIxODU1MDdaMDMxMTAvBgNV BAMTKDZERjkwRUFFRkY3QUZFREU4NDM3OTU3MjBEMTVENkUzNDhDOTFDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqmO6XLPU9Lop3Z+9fSBm1sGi +GdFnVcKjJT7IJhuLR38koXR/L8SESMuMqtyQfWjYwViTZRa1UUVPfr4wgGNVD3y 4+WbSF8UgNSSQef0ytzwOj3gYeZko3je8YyjgAY59TNG5v70nMUhTvqr5mxMWMA/ cN25LkYlVPVY2EpQEvfLCl8dnuoqnVijFcR7HTKeTliF92HzXlUdaZtPggXK1pq6 duBHt4Kcb5QZ2jtJpm62f/6VxOmBrUA4aBTiKj3/MrlxVgFdPulUcroNYXLtRgdT NzkAawGR3YNRy8FQ66BqR/k/Su6eyAo85mUKPHLFEY2P8L69c90QVmkSaHzTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUbfkOrv96/t6EN5VyDRXW40jJHCQwHwYDVR0j BBgwFoAU8p+6tNuGf2vZp+/2qlXZjBYuGq0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQtM2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0 OTEyLzAvRjI5RkJBQjREQjg2N0Y2QkQ5QTdFRkY2QUE1NUQ5OEMxNjJFMUFBRC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhwLTZ0TnVHZjJ2WnAtXzJxbFhaakJZ dUdxMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmY1MmQ4MTQt M2QyZi00ZGY0LTgxNDAtZGZiNTMwZjc0OTEyLzAvMzEzOTMzMmUzOTMzMmUzMTM1 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzNDMxMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBXZowDQYJKoZIhvcNAQELBQADggEBAMn0iVZOb6MMylU8pIUKXu1Q+vEwtmo1 wVLcxfcpdXtHqULeud3i6L8XXj1hVjUEW5XCd4fGZ0Vt9BnZQ7OEkSfOUymLqftC T+hqc+6X0knc9eoBvvf5B42XUV1z8CFY7jHNGqxyFHbKY9EiG7BTRI39De3XKWvS Q3pGNqJfbAo/b9x17awcWiyj0mUitS+6aFZxVscf68+kaks2OVRBW96BiJZ0mTew svKIf9+QxnngWmR/uQLD0rCOT6xYlII5yKJJcu/FgI2W2cmP7P+FQtio4tUq2JMO bW0+hLUKJpnhAct5rCiwMsmoV15svxSlIYtUUi72Hm0+YiihOgu/tf0= -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:37 2025 by rpki-client