This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20333937393233.roa File: 39332e39352e3131322e302f32342d3234203d3e20333937393233.roa (raw, json) Hash identifier: xW60VF00UJ78V2ZgHJcPViZgzWFpqx2V/5GdcswFg/k= Subject key identifier: 08:8D:D7:7C:B7:A0:59:40:1A:E2:E6:99:E1:E8:AC:7B:CB:A5:95:AA Certificate issuer: /CN=b172548fa3c460e26cb519ee524361bca6c7132e Certificate serial: 44E978541F4AA4AA1ED43A1C8F7DA5BDD30A39FE Authority key identifier: B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20333937393233.roa Signing time: Fri 07 Nov 2025 20:01:50 +0000 ROA not before: Fri 07 Nov 2025 19:56:50 +0000 ROA not after: Fri 06 Nov 2026 20:01:50 +0000 asID: 397923 IP address blocks: 93.95.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.mft rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:56:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e9:78:54:1f:4a:a4:aa:1e:d4:3a:1c:8f:7d:a5:bd:d3:0a:39:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b172548fa3c460e26cb519ee524361bca6c7132e Validity Not Before: Nov 7 19:56:50 2025 GMT Not After : Nov 6 20:01:50 2026 GMT Subject: CN=088DD77CB7A059401AE2E699E1E8AC7BCBA595AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c9:bc:64:4b:35:00:17:dd:3f:f1:3f:e8:7e: 85:74:5c:16:12:33:36:08:87:9a:76:a7:f7:ed:02: 5e:5d:32:bf:87:d4:44:df:af:7c:b8:05:18:f7:b3: 31:ea:e5:64:63:42:2a:e0:84:83:b1:35:f0:bd:6c: 3f:e0:6f:7a:48:02:86:7a:9d:61:7f:30:6c:c1:17: 44:e4:0b:cf:c8:41:6f:75:94:a1:b2:fd:4b:8f:08: 69:7c:a7:0a:f5:c9:c3:0c:bd:64:f9:36:41:c9:33: f6:72:26:7b:d3:7e:74:91:b7:db:79:75:d3:dd:df: 8d:d6:97:95:87:a6:41:b4:95:b1:ea:9f:d2:4c:aa: c6:8c:2e:2e:5b:13:ca:e3:ae:94:a1:e6:50:76:02: 79:9a:a7:a7:aa:f0:41:1b:e1:d6:49:08:19:4a:69: a9:59:ce:81:93:d4:a4:24:ad:fa:5d:37:1b:3b:16: ad:46:21:b6:88:79:10:86:b9:33:83:92:15:84:ec: 4d:b8:be:77:e7:68:eb:9c:5c:90:43:70:ad:58:2d: 46:a6:fa:55:84:5c:da:11:e9:21:23:91:a6:69:25: f3:bd:8e:b5:33:ed:8d:64:f5:fb:f2:95:b4:51:c8: 2a:a1:5a:0d:04:5f:77:c7:d8:c5:dd:24:83:8f:6f: aa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:8D:D7:7C:B7:A0:59:40:1A:E2:E6:99:E1:E8:AC:7B:CB:A5:95:AA X509v3 Authority Key Identifier: keyid:B1:72:54:8F:A3:C4:60:E2:6C:B5:19:EE:52:43:61:BC:A6:C7:13:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/B172548FA3C460E26CB519EE524361BCA6C7132E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXJUj6PEYOJstRnuUkNhvKbHEy4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96573e88-daba-4ac7-a2ed-321c8277d25e/0/39332e39352e3131322e302f32342d3234203d3e20333937393233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.95.112.0/24 Signature Algorithm: sha256WithRSAEncryption 63:37:d7:0e:e8:e0:da:d1:c1:f2:c7:21:83:af:63:f2:da:70: 48:74:43:6d:ea:ac:a0:5a:1b:80:01:f6:14:82:42:09:da:79: 18:15:5d:a6:60:b8:ed:b1:a0:bb:2c:24:58:37:77:ce:9c:05: d3:69:b4:5e:70:2b:b1:d2:72:81:b2:91:85:9f:75:ff:d0:1b: c2:43:ea:22:00:19:f1:12:8c:96:8c:ec:b9:87:34:21:93:76: ca:52:20:44:79:2b:de:15:c8:26:a0:08:03:a9:d0:88:ff:1f: 89:35:cf:bc:34:4e:2f:e8:9f:94:46:cc:c2:d8:41:10:ed:d0: 9d:53:de:6f:b7:1c:c8:1a:9d:a3:ec:51:3c:c5:2c:40:12:d8: db:34:7f:2a:a9:4f:da:dc:7f:6b:7f:8f:ec:05:74:6e:16:71: 70:aa:cd:d8:bf:df:d1:59:fd:9d:b1:88:68:1f:6c:94:39:03: 33:0d:38:ba:78:dc:c8:c6:9d:19:7c:6b:e6:3d:10:20:ad:a7: f5:30:b5:e7:39:7f:0b:56:03:3f:a6:44:04:dc:59:cc:8e:2d: 9c:45:f0:6d:62:57:55:83:5c:8d:88:e9:17:97:10:79:9f:1a: bb:e0:c6:02:a0:1b:b9:c3:eb:b7:a0:df:19:f0:73:98:9b:e6: eb:0f:ae:1b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUROl4VB9KpKoe1Docj32lvdMKOf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjE3MjU0OGZhM2M0NjBlMjZjYjUxOWVlNTI0MzYxYmNh NmM3MTMyZTAeFw0yNTExMDcxOTU2NTBaFw0yNjExMDYyMDAxNTBaMDMxMTAvBgNV BAMTKDA4OERENzdDQjdBMDU5NDAxQUUyRTY5OUUxRThBQzdCQ0JBNTk1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ybxkSzUAF90/8T/ofoV0XBYS MzYIh5p2p/ftAl5dMr+H1ETfr3y4BRj3szHq5WRjQirghIOxNfC9bD/gb3pIAoZ6 nWF/MGzBF0TkC8/IQW91lKGy/UuPCGl8pwr1ycMMvWT5NkHJM/ZyJnvTfnSRt9t5 ddPd343Wl5WHpkG0lbHqn9JMqsaMLi5bE8rjrpSh5lB2Anmap6eq8EEb4dZJCBlK aalZzoGT1KQkrfpdNxs7Fq1GIbaIeRCGuTODkhWE7E24vnfnaOucXJBDcK1YLUam +lWEXNoR6SEjkaZpJfO9jrUz7Y1k9fvylbRRyCqhWg0EX3fH2MXdJIOPb6orAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCI3XfLegWUAa4uaZ4eise8ullaowHwYDVR0j BBgwFoAUsXJUj6PEYOJstRnuUkNhvKbHEy4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTY1NzNlODgtZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdk MjVlLzAvQjE3MjU0OEZBM0M0NjBFMjZDQjUxOUVFNTI0MzYxQkNBNkM3MTMyRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NYSlVqNlBFWU9Kc3RSbnVVa05odkti SEV5NC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTY1NzNlODgt ZGFiYS00YWM3LWEyZWQtMzIxYzgyNzdkMjVlLzAvMzkzMzJlMzkzNTJlMzEzMTMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzkzMjMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XV9wMA0GCSqGSIb3DQEBCwUAA4IBAQBjN9cO6ODa0cHyxyGDr2Py2nBIdENt6qyg WhuAAfYUgkIJ2nkYFV2mYLjtsaC7LCRYN3fOnAXTabRecCux0nKBspGFn3X/0BvC Q+oiABnxEoyWjOy5hzQhk3bKUiBEeSveFcgmoAgDqdCI/x+JNc+8NE4v6J+URszC 2EEQ7dCdU95vtxzIGp2j7FE8xSxAEtjbNH8qqU/a3H9rf4/sBXRuFnFwqs3Yv9/R Wf2dsYhoH2yUOQMzDTi6eNzIxp0ZfGvmPRAgraf1MLXnOX8LVgM/pkQE3FnMji2c RfBtYldVg1yNiOkXlxB5nxq74MYCoBu5w+u3oN8Z8HOYm+brD64b -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:21 2025 by rpki-client