This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e322e302f32342d3234203d3e20313336373837.roa File: 39312e3133322e322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: zDtRVjkS7nxbCAmr90WlpJcnTKXYFzf3/ULoB3aTjNI= Subject key identifier: 40:22:D5:CA:6D:E3:73:17:FB:CC:2F:16:D7:00:38:FD:E8:EC:7F:3F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 073ADD10CF99E6C045416C8B4675188FC3294207 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:54 +0000 ROA not before: Fri 28 Nov 2025 11:44:54 +0000 ROA not after: Fri 27 Nov 2026 11:49:54 +0000 asID: 136787 IP address blocks: 91.132.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:3a:dd:10:cf:99:e6:c0:45:41:6c:8b:46:75:18:8f:c3:29:42:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:54 2025 GMT Not After : Nov 27 11:49:54 2026 GMT Subject: CN=4022D5CA6DE37317FBCC2F16D70038FDE8EC7F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fe:b8:84:b5:dc:93:be:93:dd:86:af:1e:51: ec:20:b7:95:3c:7f:d4:3f:ea:fa:c6:65:cc:03:6a: e5:6f:b7:d6:6c:87:b0:9a:d9:b8:6b:04:43:84:9c: da:03:9b:ad:fe:fe:f0:ce:f5:c0:d0:a2:84:4e:99: ed:01:cc:69:87:d9:5d:ac:fd:4d:f6:eb:3b:d6:7c: 58:e9:1c:03:66:42:56:4c:ae:00:3c:8b:86:f2:89: 60:17:e3:9a:bb:c7:e8:a5:3b:bc:b4:e4:f1:3e:16: 20:62:63:13:57:65:d6:6d:cc:e6:f5:86:c9:dd:26: 6e:e8:6e:ff:eb:06:8d:7c:a4:9c:18:cd:96:dc:ec: 85:f2:6c:11:17:40:0d:41:da:f3:e6:60:2a:c0:a7: 36:75:bd:00:bf:53:84:3f:c2:40:e1:be:aa:4a:71: a9:99:62:b2:14:01:f7:66:56:30:26:47:ae:f1:aa: 5d:a7:da:9a:12:aa:7b:be:0e:a9:72:a9:f5:ef:00: d8:07:01:23:49:a9:87:81:ee:45:a8:88:75:33:b9: d1:62:17:34:77:23:0e:0c:f6:00:f9:c7:26:68:c6: d4:7c:03:4a:7d:93:3f:3f:30:a3:64:2d:8f:ae:14: d6:bb:71:d8:7f:53:6c:f0:40:07:b9:a7:54:f0:f3: 0f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:22:D5:CA:6D:E3:73:17:FB:CC:2F:16:D7:00:38:FD:E8:EC:7F:3F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.2.0/24 Signature Algorithm: sha256WithRSAEncryption e4:7c:b9:06:42:1c:ae:07:8b:38:8d:f1:0d:23:d8:bb:5f:6a: 21:86:71:51:12:4c:46:07:05:cd:6b:e5:f4:a2:23:3f:c4:e3: 93:62:f5:65:48:0b:a5:0b:be:fa:fb:83:51:b9:34:36:16:3d: b8:54:9e:43:b2:b1:8a:5d:9a:24:f9:63:92:1e:ab:82:2d:57: 2b:64:40:ef:83:62:1f:4e:66:cc:22:78:89:37:4f:7a:14:64: a0:0c:b1:1f:80:ff:c5:ba:63:3d:d9:ef:3b:31:ed:55:c2:30: d9:f4:3a:3c:56:15:bc:68:0d:95:54:89:2a:f0:80:21:d0:32: 37:82:b5:14:fc:04:e8:e4:79:43:56:97:da:ce:bd:fb:65:07: 72:44:66:d2:05:3e:c7:c1:20:a1:85:59:da:02:a0:1a:01:e7: 77:98:f5:67:17:9e:da:71:1e:19:cc:ea:bf:f8:dc:0f:23:12: a1:fd:d4:77:9d:0c:9c:aa:bd:93:7c:d3:26:92:16:d6:5a:0d: 86:6a:ce:34:2a:ed:1e:3d:38:fc:b5:f1:9f:5c:12:41:fe:2c: bf:c2:e2:e2:ef:e0:f2:f5:fe:07:69:fa:bc:11:b8:32:d8:50: 65:5f:dd:b6:f5:f9:d5:15:f5:5b:06:d2:39:de:ca:4b:54:63: 84:92:1c:91 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUBzrdEM+Z5sBFQWyLRnUYj8MpQgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTRaFw0yNjExMjcxMTQ5NTRaMDMxMTAvBgNV BAMTKDQwMjJENUNBNkRFMzczMTdGQkNDMkYxNkQ3MDAzOEZERThFQzdGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/riEtdyTvpPdhq8eUewgt5U8 f9Q/6vrGZcwDauVvt9Zsh7Ca2bhrBEOEnNoDm63+/vDO9cDQooROme0BzGmH2V2s /U326zvWfFjpHANmQlZMrgA8i4byiWAX45q7x+ilO7y05PE+FiBiYxNXZdZtzOb1 hsndJm7obv/rBo18pJwYzZbc7IXybBEXQA1B2vPmYCrApzZ1vQC/U4Q/wkDhvqpK camZYrIUAfdmVjAmR67xql2n2poSqnu+DqlyqfXvANgHASNJqYeB7kWoiHUzudFi FzR3Iw4M9gD5xyZoxtR8A0p9kz8/MKNkLY+uFNa7cdh/U2zwQAe5p1Tw8w8JAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUQCLVym3jcxf7zC8W1wA4/ejsfz8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTMzMzIy ZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAW4QCMA0GCSqGSIb3DQEBCwUAA4IBAQDkfLkGQhyuB4s4jfENI9i7X2ohhnFR EkxGBwXNa+X0oiM/xOOTYvVlSAulC776+4NRuTQ2Fj24VJ5DsrGKXZok+WOSHquC LVcrZEDvg2IfTmbMIniJN096FGSgDLEfgP/FumM92e87Me1VwjDZ9Do8VhW8aA2V VIkq8IAh0DI3grUU/ATo5HlDVpfazr37ZQdyRGbSBT7HwSChhVnaAqAaAed3mPVn F57acR4ZzOq/+NwPIxKh/dR3nQycqr2TfNMmkhbWWg2Gas40Ku0ePTj8tfGfXBJB /iy/wuLi7+Dy9f4Hafq8Ebgy2FBlX9229fnVFfVbBtI53spLVGOEkhyR -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:06 2025 by rpki-client