This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e332e302f32342d3234203d3e20313336373837.roa File: 39312e3133322e332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: UJscW2zTUQBuqTjQOomk+HzV0GeSdc1gzjfc98Jzksk= Subject key identifier: 84:1C:37:16:DE:5A:06:72:57:1E:02:61:A6:91:A3:87:72:93:90:61 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7D3ACD3058A79B667A3FDCF553EB4243080C1227 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 136787 IP address blocks: 91.132.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:3a:cd:30:58:a7:9b:66:7a:3f:dc:f5:53:eb:42:43:08:0c:12:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=841C3716DE5A0672571E0261A691A38772939061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b9:10:db:ab:25:6e:e1:8c:94:8c:05:bf:dc: 2b:f7:dd:e2:8c:bf:23:f4:05:53:b9:2a:24:69:08: db:2a:be:86:f0:43:04:26:f5:74:ba:4c:ba:be:e7: 50:ce:8a:62:8d:fb:c6:2d:02:4f:4e:ef:a0:59:e3: 5c:44:e1:9c:6f:bf:79:f1:c5:12:fa:8e:2a:6a:5a: 26:66:1c:dc:ea:82:25:90:86:ac:1d:d8:5f:87:38: 2a:12:79:af:30:52:2d:a9:b8:b7:e6:79:a5:36:2c: 28:6e:08:b4:65:83:10:b0:68:31:73:97:1b:4f:dc: 39:d0:2e:31:55:57:68:89:74:6a:11:f5:e6:c0:45: e3:b6:92:01:ef:db:89:55:68:9f:c4:9c:7c:5b:02: e5:b9:a9:db:34:f5:aa:21:ad:53:dc:6e:e3:9a:fe: ec:53:e9:35:ef:9d:00:25:0d:a1:30:bb:e0:e8:f3: 0b:20:35:4c:74:da:46:10:fb:e1:86:f3:3f:7a:f2: b2:31:1b:05:22:5d:d4:b7:4b:29:45:d8:9a:82:12: e7:ff:f2:2d:f5:ed:6d:3c:2f:40:18:56:e0:5c:49: c5:62:d1:b3:d8:05:0c:3a:9e:91:94:b2:8a:e3:60: 28:e7:a6:73:aa:69:ca:58:84:97:f1:a0:e5:ae:0d: 83:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:37:16:DE:5A:06:72:57:1E:02:61:A6:91:A3:87:72:93:90:61 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3133322e332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.132.3.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f9:cc:13:50:40:1a:7b:b2:07:6e:85:d1:c3:f0:bd:ae:6a: 46:27:0f:a9:1c:b7:28:c7:4e:36:fa:65:73:93:6e:44:63:05: 28:c1:04:b2:f3:84:d0:a5:f3:22:c6:75:41:cb:91:9a:2b:3a: a9:83:85:86:b2:0f:da:ef:e6:d2:01:d2:ec:76:c5:b5:19:51: 90:33:d3:31:18:95:23:62:93:54:77:44:85:7a:6e:9e:79:8b: 2a:c6:4d:f4:34:c8:b7:73:79:7e:9c:41:c4:77:46:44:bd:ee: 5b:4b:38:5c:60:c0:31:61:58:f9:a3:0a:e7:bb:60:b1:0c:fe: 6f:96:fd:15:ba:18:28:12:5f:25:0e:4a:ee:d8:e6:4b:d1:1b: 9c:c0:7d:63:5e:85:65:03:ae:b3:ff:c6:b1:04:f2:aa:5a:aa: 31:e8:29:70:83:6a:30:c0:28:72:41:43:4e:2e:b8:42:48:10: 14:6d:5f:0c:b6:58:b7:a6:41:ed:f8:f6:6c:d1:db:cd:a1:9e: 54:f3:88:02:d6:5c:10:24:d8:e5:63:a2:9a:0a:1e:6b:96:e8: 71:0d:de:33:b5:36:ad:60:7f:77:39:93:84:3a:2e:dc:53:8f: 75:ab:d2:c9:cb:1c:90:9e:77:71:1e:b8:8a:b1:14:85:62:0c: d6:b7:5f:78 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUfTrNMFinm2Z6P9z1U+tCQwgMEicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDg0MUMzNzE2REU1QTA2NzI1NzFFMDI2MUE2OTFBMzg3NzI5MzkwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEuRDbqyVu4YyUjAW/3Cv33eKM vyP0BVO5KiRpCNsqvobwQwQm9XS6TLq+51DOimKN+8YtAk9O76BZ41xE4Zxvv3nx xRL6jipqWiZmHNzqgiWQhqwd2F+HOCoSea8wUi2puLfmeaU2LChuCLRlgxCwaDFz lxtP3DnQLjFVV2iJdGoR9ebAReO2kgHv24lVaJ/EnHxbAuW5qds09aohrVPcbuOa /uxT6TXvnQAlDaEwu+Do8wsgNUx02kYQ++GG8z968rIxGwUiXdS3SylF2JqCEuf/ 8i317W08L0AYVuBcScVi0bPYBQw6npGUsorjYCjnpnOqacpYhJfxoOWuDYPBAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUhBw3Ft5aBnJXHgJhppGjh3KTkGEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTMzMzIy ZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAW4QDMA0GCSqGSIb3DQEBCwUAA4IBAQAl+cwTUEAae7IHboXRw/C9rmpGJw+p HLcox042+mVzk25EYwUowQSy84TQpfMixnVBy5GaKzqpg4WGsg/a7+bSAdLsdsW1 GVGQM9MxGJUjYpNUd0SFem6eeYsqxk30NMi3c3l+nEHEd0ZEve5bSzhcYMAxYVj5 owrnu2CxDP5vlv0VuhgoEl8lDkru2OZL0RucwH1jXoVlA66z/8axBPKqWqox6Clw g2owwChyQUNOLrhCSBAUbV8Mtli3pkHt+PZs0dvNoZ5U84gC1lwQJNjlY6KaCh5r luhxDd4ztTatYH93OZOEOi7cU491q9LJyxyQnndxHriKsRSFYgzWt194 -----END CERTIFICATE-----Generated at Sat Dec 6 22:34:12 2025 by rpki-client