This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e302e302f32342d3234203d3e20313336373837.roa File: 39312e3133322e302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ZRmYMmN8bwh+0V3//Hnm5/saLUIsQZdVlPSYSQ+VvIU= Subject key identifier: 77:F3:6F:7E:26:AF:EC:7B:9F:D7:14:45:21:99:CF:B2:F0:49:8F:62 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 737D6EF15AA1515373013F42A864939AFB624F89 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 136787 IP address blocks: 91.132.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:7d:6e:f1:5a:a1:51:53:73:01:3f:42:a8:64:93:9a:fb:62:4f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=77F36F7E26AFEC7B9FD714452199CFB2F0498F62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:de:be:2f:db:7c:75:cd:49:2c:14:6f:4c:fb: 2a:80:dd:5a:04:48:81:b1:55:80:46:54:81:b3:30: 80:f6:9e:7a:1a:0e:73:b3:ab:ba:32:c1:a3:d2:dd: 68:55:77:bd:e4:ca:ca:90:42:e4:b0:ec:36:84:47: 97:54:a8:09:45:ca:5d:55:f1:39:2d:bf:ad:04:c7: 23:7f:95:27:c7:f4:15:76:a5:e5:2f:0e:d6:5e:d1: da:79:0b:32:02:d7:b8:10:dc:e5:fc:3d:b9:4a:76: 9e:3a:82:63:4f:7c:79:98:7d:f8:e7:42:f4:5a:ab: 32:fc:0e:ec:3b:ea:83:18:c7:67:11:9c:4c:7c:3d: 75:29:da:e3:3d:c7:19:b1:fd:74:c1:0e:1b:44:99: 28:0f:1e:8f:f7:01:31:48:54:97:5f:46:c7:ab:67: a3:ee:ed:4e:72:3c:8a:65:f0:25:67:21:48:85:37: 62:3a:21:c1:93:2b:f6:5e:6d:5b:59:5f:c0:58:8e: a1:40:ad:d9:88:bc:f8:19:ab:50:24:cc:9f:a1:97: 16:b6:2d:c5:1c:ff:14:b2:19:d1:ec:06:ab:b2:a7: bb:56:15:d6:e9:23:4e:de:fa:2b:2a:4f:d0:f6:79: 7b:d1:cf:ae:43:b4:60:e9:3a:ad:da:f7:6e:bc:9a: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F3:6F:7E:26:AF:EC:7B:9F:D7:14:45:21:99:CF:B2:F0:49:8F:62 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.0.0/24 Signature Algorithm: sha256WithRSAEncryption 72:a0:b6:30:bf:ce:62:3f:f7:93:6e:ed:e4:ec:3a:0b:45:14: e2:16:2c:6f:0f:22:50:54:85:a7:4d:92:5d:9e:40:8e:f3:df: 52:62:cc:22:6f:d0:4e:15:ff:62:51:cb:25:8e:4c:2b:d7:81: d6:55:d6:96:a1:87:52:1f:aa:e2:18:57:89:ea:52:67:6c:8b: 3c:50:84:38:b9:93:46:2b:2a:a3:59:76:b0:f4:f6:24:bf:d0: 9e:83:ca:70:ba:73:ee:2c:56:a0:28:4d:a5:fe:d1:07:09:f7: 26:9e:ef:54:58:e6:60:4c:38:c5:01:59:5d:56:fe:23:56:f3: 08:6d:4e:19:a9:31:76:e9:82:52:ee:22:7b:7a:cd:78:e2:b2: 01:74:6d:45:49:14:8a:23:42:c9:62:af:af:49:7b:c6:6e:5f: 5c:5a:58:47:81:bf:a3:b1:97:0c:de:d3:de:3f:3e:a1:89:7d: 36:29:45:74:c5:15:53:86:01:2a:1a:8f:ad:2d:4d:30:90:9b: e7:18:77:d8:e7:ea:8d:e7:b4:f0:57:9e:e5:0f:d1:1a:e1:12: b8:f8:d4:b6:fc:23:76:ef:b5:94:21:55:fb:64:8e:7a:ab:6e: dc:29:e2:36:1b:34:df:e9:d6:07:35:80:15:89:07:28:25:cc: 15:d7:a4:db -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUc31u8VqhUVNzAT9CqGSTmvtiT4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKDc3RjM2RjdFMjZBRkVDN0I5RkQ3MTQ0NTIxOTlDRkIyRjA0OThGNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB3r4v23x1zUksFG9M+yqA3VoE SIGxVYBGVIGzMID2nnoaDnOzq7oywaPS3WhVd73kysqQQuSw7DaER5dUqAlFyl1V 8Tktv60ExyN/lSfH9BV2peUvDtZe0dp5CzIC17gQ3OX8PblKdp46gmNPfHmYffjn QvRaqzL8Duw76oMYx2cRnEx8PXUp2uM9xxmx/XTBDhtEmSgPHo/3ATFIVJdfRser Z6Pu7U5yPIpl8CVnIUiFN2I6IcGTK/ZebVtZX8BYjqFArdmIvPgZq1AkzJ+hlxa2 LcUc/xSyGdHsBquyp7tWFdbpI07e+isqT9D2eXvRz65DtGDpOq3a9268moC7AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUd/Nvfiav7Huf1xRFIZnPsvBJj2IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTMzMzIy ZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAW4QAMA0GCSqGSIb3DQEBCwUAA4IBAQByoLYwv85iP/eTbu3k7DoLRRTiFixv DyJQVIWnTZJdnkCO899SYswib9BOFf9iUcsljkwr14HWVdaWoYdSH6riGFeJ6lJn bIs8UIQ4uZNGKyqjWXaw9PYkv9Ceg8pwunPuLFagKE2l/tEHCfcmnu9UWOZgTDjF AVldVv4jVvMIbU4ZqTF26YJS7iJ7es144rIBdG1FSRSKI0LJYq+vSXvGbl9cWlhH gb+jsZcM3tPePz6hiX02KUV0xRVThgEqGo+tLU0wkJvnGHfY5+qN57TwV57lD9Ea 4RK4+NS2/CN277WUIVX7ZI56q27cKeI2GzTf6dYHNYAViQcoJcwV16Tb -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:44 2025 by rpki-client