This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa File: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (raw, json) Hash identifier: 4nM6t6s+oklrwoQsrohzelZ9jLVJM3XAMUC6E2raQWI= Subject key identifier: 09:90:B5:4D:39:A0:BA:B2:06:AF:89:69:7B:5D:33:05:8C:10:64:14 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 0A8ECA54D3846D972A6E5CD5A8EF67CF197F10F3 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa Signing time: Mon 10 Nov 2025 12:55:11 +0000 ROA not before: Mon 10 Nov 2025 12:50:11 +0000 ROA not after: Mon 09 Nov 2026 12:55:11 +0000 asID: 212335 IP address blocks: 91.132.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:8e:ca:54:d3:84:6d:97:2a:6e:5c:d5:a8:ef:67:cf:19:7f:10:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Nov 10 12:50:11 2025 GMT Not After : Nov 9 12:55:11 2026 GMT Subject: CN=0990B54D39A0BAB206AF89697B5D33058C106414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:14:50:5a:15:2a:f0:88:6a:51:13:4f:0e:a5: 01:48:09:b7:01:44:35:ae:a5:41:19:e4:2e:b6:52: e5:f2:e8:bd:99:57:20:5a:8b:43:2a:7d:16:af:26: 5c:f1:d4:9c:a1:c0:1f:93:6a:e0:98:fd:be:a0:76: 17:b5:9c:55:87:4e:42:82:e1:d9:d2:df:04:d5:0e: 9b:cb:6f:b8:d1:cb:d8:46:1e:a2:25:ac:7c:43:c0: 5b:46:a4:63:09:45:b9:49:bc:69:ab:ab:e3:78:5b: bb:a9:df:4b:21:6c:f6:5e:a0:57:f4:6b:ab:2d:ee: a1:ac:21:a2:9c:b6:2f:eb:a8:e8:2d:b0:5d:f1:d0: 46:0c:02:8b:f9:68:f5:50:3d:7f:d4:91:2d:c1:a8: c1:7d:6d:2c:ff:f1:7c:9e:01:8c:3c:85:57:99:ab: 7e:7d:34:1a:05:52:76:84:31:3a:9b:68:cf:36:ca: 86:bc:58:c4:3e:32:32:a0:8a:34:c1:24:55:45:45: 2e:a0:9b:3a:4a:4a:26:bd:08:c9:4a:0f:df:bc:f3: 5b:27:f3:56:af:ca:64:e8:fe:e6:b7:77:3d:9d:5f: 2c:47:56:fa:f7:d1:40:8b:76:2c:5f:45:8e:70:bc: e5:cd:f9:94:5a:4d:ea:1d:4b:35:20:fb:3e:29:8b: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:90:B5:4D:39:A0:BA:B2:06:AF:89:69:7B:5D:33:05:8C:10:64:14 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.227.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:89:d3:08:ba:e9:ce:7b:e8:4b:c4:29:50:49:7f:66:53:c6: f6:99:b8:fc:7d:68:73:7f:b8:4d:6a:f3:6b:35:ba:43:c7:ea: 44:90:8e:30:f6:7e:b4:af:f6:eb:b2:0e:bd:fd:8e:08:45:37: 89:88:db:7d:30:d3:b2:34:01:2f:6b:c6:05:cc:fa:3f:af:97: 3c:a8:61:d5:0b:49:8f:55:d0:e6:9d:a7:42:d7:2f:81:3b:07: ad:c2:c4:99:89:dc:ad:d8:ee:3b:c4:82:84:94:e7:57:d1:ef: ed:07:23:33:e2:34:5f:ed:7d:09:d2:a9:62:4f:39:f1:ab:54: 8a:cc:ae:ee:a4:8a:f5:c4:7d:1d:0e:22:19:2f:2f:7b:e3:ef: 88:d4:20:0f:3b:70:f8:47:1b:95:3b:dd:06:4b:30:bb:06:22: 38:40:56:95:9c:41:3c:cb:8f:da:d4:69:0b:4c:69:b6:9c:81: b5:cc:b7:fe:c1:e0:9f:ec:f3:e1:66:02:6e:62:a4:38:09:bb: 16:cc:21:a7:d3:0c:ef:18:77:c0:5d:d6:99:cc:ce:db:64:ae: f8:a0:a4:2f:d6:93:a9:db:14:76:5c:40:98:c3:30:6b:55:08: 49:dd:d0:d9:6b:4d:45:f3:ff:ae:1a:ae:60:88:d3:63:aa:f2: 12:3d:a9:0d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUCo7KVNOEbZcqblzVqO9nzxl/EPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTExMTAxMjUwMTFaFw0yNjExMDkxMjU1MTFaMDMxMTAvBgNV BAMTKDA5OTBCNTREMzlBMEJBQjIwNkFGODk2OTdCNUQzMzA1OEMxMDY0MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOFFBaFSrwiGpRE08OpQFICbcB RDWupUEZ5C62UuXy6L2ZVyBai0MqfRavJlzx1JyhwB+TauCY/b6gdhe1nFWHTkKC 4dnS3wTVDpvLb7jRy9hGHqIlrHxDwFtGpGMJRblJvGmrq+N4W7up30shbPZeoFf0 a6st7qGsIaKcti/rqOgtsF3x0EYMAov5aPVQPX/UkS3BqMF9bSz/8XyeAYw8hVeZ q359NBoFUnaEMTqbaM82yoa8WMQ+MjKgijTBJFVFRS6gmzpKSia9CMlKD9+881sn 81avymTo/ua3dz2dXyxHVvr30UCLdixfRY5wvOXN+ZRaTeodSzUg+z4pi4mVAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUCZC1TTmgurIGr4lpe10zBYwQZBQwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzkzMTJlMzEzMzMyMmUzMjMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzMzMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABbhOMwDQYJKoZIhvcNAQELBQADggEBAHuJ0wi66c576EvEKVBJf2ZTxvaZuPx9 aHN/uE1q82s1ukPH6kSQjjD2frSv9uuyDr39jghFN4mI230w07I0AS9rxgXM+j+v lzyoYdULSY9V0Oadp0LXL4E7B63CxJmJ3K3Y7jvEgoSU51fR7+0HIzPiNF/tfQnS qWJPOfGrVIrMru6kivXEfR0OIhkvL3vj74jUIA87cPhHG5U73QZLMLsGIjhAVpWc QTzLj9rUaQtMabacgbXMt/7B4J/s8+FmAm5ipDgJuxbMIafTDO8Yd8Bd1pnMzttk rvigpC/Wk6nbFHZcQJjDMGtVCEnd0NlrTUXz/64armCI02Oq8hI9qQ0= -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:50 2025 by rpki-client