This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e312e302f32342d3234203d3e20313336373837.roa File: 39312e3133322e312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: d3iXeV2I5esT85ITBPsCxt6k91/iddctbwumZXqIaYU= Subject key identifier: 03:67:D3:34:AC:E3:3C:C5:74:F1:82:E1:BE:34:11:F3:34:2E:AE:BE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7E3ECD03E8CA41115692ECDCD86ABA715D6E005D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 136787 IP address blocks: 91.132.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:3e:cd:03:e8:ca:41:11:56:92:ec:dc:d8:6a:ba:71:5d:6e:00:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=0367D334ACE33CC574F182E1BE3411F3342EAEBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:87:89:83:ab:59:dc:90:7c:a4:e3:b0:68:0b: 9a:10:b5:51:3e:5b:57:cc:4c:b4:27:10:a4:96:c7: 44:13:67:23:2d:48:d6:de:f8:22:3f:37:0d:41:19: 2e:65:c4:99:af:5f:05:05:f7:77:37:11:8e:1b:dd: ee:d8:79:a0:49:d4:7a:7b:71:d6:bf:bd:84:6d:c4: 3f:b4:4f:4f:11:cb:4c:14:29:ec:f4:17:c3:c0:a2: 22:e3:12:43:f7:31:ae:a8:d3:4f:2c:b5:d1:16:cb: b0:ad:b3:c0:75:69:2c:53:3b:b3:f9:57:4b:d1:32: 93:91:d6:9e:3a:63:06:83:1c:c7:94:a9:37:ff:90: 2b:69:7e:41:24:98:8e:78:b0:bb:13:8c:7a:be:d0: 3c:39:57:fd:e9:26:5a:18:d6:cf:e3:07:2b:a2:49: d2:b4:4d:3f:53:10:0f:77:f8:62:79:bd:f6:73:0a: 87:e8:c8:41:eb:a5:52:77:38:30:fe:69:0f:f7:29: 57:6c:1b:cb:fa:68:9b:a5:dc:6b:38:59:66:5d:86: 6e:62:fd:e9:9e:75:3f:ad:25:ba:cd:97:54:d0:b3: fb:d3:3a:5b:c4:e1:58:fa:a8:e3:d6:f0:e8:a3:cb: 0c:98:8d:5c:29:27:46:3d:73:d6:f9:00:7c:f7:7d: b0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:67:D3:34:AC:E3:3C:C5:74:F1:82:E1:BE:34:11:F3:34:2E:AE:BE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.1.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:67:ef:3b:ce:9a:2e:15:19:52:cf:41:ce:6b:3d:de:12:e6: ca:ce:ae:12:45:1c:c3:00:e8:e6:d8:c2:cb:87:c6:aa:5b:08: 11:8a:9c:28:ff:a8:d1:7f:6d:51:9e:95:49:d8:6a:44:e0:54: c5:25:12:ed:7b:8b:eb:a1:0f:da:72:d9:ba:be:14:8c:57:1a: 90:8e:b7:cb:e1:8d:ab:ad:fc:09:79:8b:c8:28:c6:33:26:4d: c7:5b:8b:57:93:23:10:f0:d1:1a:78:0a:db:c2:df:fa:10:3a: 92:cd:a3:80:09:56:e1:d6:a5:42:db:5f:a5:2b:38:92:09:9f: 34:28:fe:cf:c2:de:be:7b:b2:d5:5c:66:31:c1:08:5e:3d:d2: 3d:ac:bc:e0:fb:da:9c:48:fe:3c:93:a4:41:89:37:e2:a3:82: 4d:53:a4:8e:23:ef:ce:26:f7:e5:6c:01:5a:d5:af:41:6c:93: ee:8f:0f:c9:91:f4:a6:11:d5:c7:c1:0f:5c:37:a2:7f:91:24: 4b:79:6b:6d:4e:d8:33:31:5f:a3:e1:4a:67:0f:cd:7c:65:b9: 16:7c:e3:6a:7e:a7:1b:da:cc:5d:c8:45:25:19:21:b9:ed:67: 32:a6:b9:80:6e:6c:42:94:be:cb:a8:33:70:21:9d:42:83:7b: e4:13:e1:15 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUfj7NA+jKQRFWkuzc2Gq6cV1uAF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKDAzNjdEMzM0QUNFMzNDQzU3NEYxODJFMUJFMzQxMUYzMzQyRUFFQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/h4mDq1nckHyk47BoC5oQtVE+ W1fMTLQnEKSWx0QTZyMtSNbe+CI/Nw1BGS5lxJmvXwUF93c3EY4b3e7YeaBJ1Hp7 cda/vYRtxD+0T08Ry0wUKez0F8PAoiLjEkP3Ma6o008stdEWy7Cts8B1aSxTO7P5 V0vRMpOR1p46YwaDHMeUqTf/kCtpfkEkmI54sLsTjHq+0Dw5V/3pJloY1s/jByui SdK0TT9TEA93+GJ5vfZzCofoyEHrpVJ3ODD+aQ/3KVdsG8v6aJul3Gs4WWZdhm5i /emedT+tJbrNl1TQs/vTOlvE4Vj6qOPW8OijywyYjVwpJ0Y9c9b5AHz3fbBPAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUA2fTNKzjPMV08YLhvjQR8zQurr4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTMzMzIy ZTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAW4QBMA0GCSqGSIb3DQEBCwUAA4IBAQB8Z+87zpouFRlSz0HOaz3eEubKzq4S RRzDAOjm2MLLh8aqWwgRipwo/6jRf21RnpVJ2GpE4FTFJRLte4vroQ/actm6vhSM VxqQjrfL4Y2rrfwJeYvIKMYzJk3HW4tXkyMQ8NEaeArbwt/6EDqSzaOACVbh1qVC 21+lKziSCZ80KP7Pwt6+e7LVXGYxwQhePdI9rLzg+9qcSP48k6RBiTfio4JNU6SO I+/OJvflbAFa1a9BbJPujw/JkfSmEdXHwQ9cN6J/kSRLeWttTtgzMV+j4UpnD818 ZbkWfONqfqcb2sxdyEUlGSG57WcyprmAbmxClL7LqDNwIZ1Cg3vkE+EV -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:50 2025 by rpki-client