This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa File: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (raw, json) Hash identifier: eh1Z74wbnDki2jWa8j9mKK2ooveQFWs0ccPHyRr5G7Y= Subject key identifier: B4:E0:BA:57:11:F7:14:60:2C:CF:BB:9F:C2:F7:33:1B:B5:5C:2C:B9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 19D07E0A720E00BEB3C5FE8D3EA8D66FF8955AA9 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa Signing time: Mon 10 Nov 2025 12:55:11 +0000 ROA not before: Mon 10 Nov 2025 12:50:11 +0000 ROA not after: Mon 09 Nov 2026 12:55:11 +0000 asID: 212384 IP address blocks: 91.132.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d0:7e:0a:72:0e:00:be:b3:c5:fe:8d:3e:a8:d6:6f:f8:95:5a:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Nov 10 12:50:11 2025 GMT Not After : Nov 9 12:55:11 2026 GMT Subject: CN=B4E0BA5711F714602CCFBB9FC2F7331BB55C2CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:be:a2:e0:05:f9:f2:cd:7c:0e:5a:0c:8e: e8:bb:71:4a:d4:1e:b3:e8:55:ba:0c:cd:be:e2:3f: 56:f9:3e:fe:9f:0d:68:e8:18:15:64:8a:f7:49:04: a0:4a:ec:66:6a:59:53:de:21:bb:99:74:72:de:aa: 4a:75:fc:91:8f:af:dc:f7:bf:a0:7c:ae:05:88:34: ea:36:b0:03:cd:10:68:95:6d:09:2c:fa:7b:e2:57: cd:43:cd:95:3b:fb:dc:09:f5:80:34:56:b7:d7:01: 79:3a:2e:c9:c7:18:27:94:3a:71:01:fb:5b:8e:9a: 79:af:ed:87:81:e2:47:7f:1f:b2:93:20:74:10:e7: 8f:a9:7e:9d:7f:50:ad:d6:d7:94:33:d0:4c:d7:04: a8:d8:20:4a:cd:53:ef:78:06:e9:2c:31:a6:37:8c: 94:87:6e:92:dd:12:a3:f3:0f:72:b6:90:c2:fd:63: ee:b8:30:4b:49:36:f4:61:77:9e:7e:0e:be:80:e0: 6a:6e:26:17:7b:6e:3a:ce:c3:8e:2b:30:89:e5:6c: fa:1c:16:07:c7:b4:e6:5a:b9:8b:87:7a:8f:68:18: a6:57:1d:80:fd:61:60:64:a4:c0:37:ba:11:22:7b: e3:13:96:0b:da:ae:b4:67:5d:27:58:3a:ef:ea:06: 9d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:BA:57:11:F7:14:60:2C:CF:BB:9F:C2:F7:33:1B:B5:5C:2C:B9 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.227.0/24 Signature Algorithm: sha256WithRSAEncryption bd:2d:fc:5a:0f:bf:55:25:b4:8e:00:a7:6f:41:77:ff:e2:e7: e6:23:5f:5e:53:af:10:58:bb:0e:c5:bf:cd:91:e6:de:17:9c: f8:e8:5d:98:19:5c:1f:55:34:8e:c1:97:ce:bb:62:81:d5:db: e5:af:72:bc:88:ce:6c:7f:7a:7e:81:e3:b0:17:5f:6c:84:99: 00:1b:e3:d0:44:00:e2:7c:0e:a5:d1:57:a5:19:60:a2:ce:06: 54:1e:85:65:55:f5:e0:ec:47:2c:dd:c4:21:3b:f7:f9:20:09: 2b:b7:40:fb:15:5a:84:ab:0e:cf:04:59:a7:a7:18:a9:ab:0a: d2:6d:33:68:c5:f0:a5:cb:a1:08:d4:10:8b:72:05:c5:77:38: 34:ef:ce:e3:3e:93:da:04:31:23:18:39:79:96:e5:93:5d:81: 1a:aa:d5:8e:c6:c6:a0:dd:8c:40:92:d9:e4:ed:e7:6c:48:de: 28:47:b5:61:44:38:fe:c9:6d:56:11:dd:de:a7:c9:45:ec:fc: f0:26:87:b1:58:5b:c9:61:de:25:bf:2e:95:db:59:31:1f:43: 96:da:a0:c7:eb:25:2b:a9:17:80:e3:c8:63:a8:36:20:83:1d: de:90:05:f7:13:b0:88:f4:6b:1a:d3:66:1a:a9:fa:9c:82:db: 95:46:61:96 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGdB+CnIOAL6zxf6NPqjWb/iVWqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTExMTAxMjUwMTFaFw0yNjExMDkxMjU1MTFaMDMxMTAvBgNV BAMTKEI0RTBCQTU3MTFGNzE0NjAyQ0NGQkI5RkMyRjczMzFCQjU1QzJDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz/L6i4AX58s18DloMjui7cUrU HrPoVboMzb7iP1b5Pv6fDWjoGBVkivdJBKBK7GZqWVPeIbuZdHLeqkp1/JGPr9z3 v6B8rgWINOo2sAPNEGiVbQks+nviV81DzZU7+9wJ9YA0VrfXAXk6LsnHGCeUOnEB +1uOmnmv7YeB4kd/H7KTIHQQ54+pfp1/UK3W15Qz0EzXBKjYIErNU+94BuksMaY3 jJSHbpLdEqPzD3K2kML9Y+64MEtJNvRhd55+Dr6A4GpuJhd7bjrOw44rMInlbPoc FgfHtOZauYuHeo9oGKZXHYD9YWBkpMA3uhEie+MTlgvarrRnXSdYOu/qBp0tAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUtOC6VxH3FGAsz7ufwvczG7VcLLkwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYzVkMThlODIt NGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQyMjc5LzAvMzkzMTJlMzEzMzMyMmUzMjMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzM4MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABbhOMwDQYJKoZIhvcNAQELBQADggEBAL0t/FoPv1UltI4Ap29Bd//i5+YjX15T rxBYuw7Fv82R5t4XnPjoXZgZXB9VNI7Bl867YoHV2+WvcryIzmx/en6B47AXX2yE mQAb49BEAOJ8DqXRV6UZYKLOBlQehWVV9eDsRyzdxCE79/kgCSu3QPsVWoSrDs8E WaenGKmrCtJtM2jF8KXLoQjUEItyBcV3ODTvzuM+k9oEMSMYOXmW5ZNdgRqq1Y7G xqDdjECS2eTt52xI3ihHtWFEOP7JbVYR3d6nyUXs/PAmh7FYW8lh3iW/LpXbWTEf Q5baoMfrJSupF4DjyGOoNiCDHd6QBfcTsIj0axrTZhqp+pyC25VGYZY= -----END CERTIFICATE-----Generated at Sat Dec 6 20:55:13 2025 by rpki-client