This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa File: 39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: v6VWsa0Jl7uNEpPjVX7xtbDtaf18iz1AlX2ozcAT7JQ= Subject key identifier: 9D:65:57:5E:8F:4F:D7:92:C9:B5:41:49:7F:1F:1F:1A:FB:63:15:71 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 40EEEF3C191C63CF3194CB6286647FEDE9F665EE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 136787 IP address blocks: 91.196.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ee:ef:3c:19:1c:63:cf:31:94:cb:62:86:64:7f:ed:e9:f6:65:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=9D65575E8F4FD792C9B541497F1F1F1AFB631571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:00:4f:62:6a:48:7e:38:8b:a5:f8:a4:f4: 71:a1:ba:0d:e8:19:6a:d6:9e:a2:78:02:d9:4d:ae: a4:d6:8e:84:38:d0:74:37:d7:e6:d6:ff:98:a5:74: 8e:57:5b:97:5a:0d:26:88:e6:50:23:e0:28:1b:21: 9d:ee:04:79:55:a7:18:2c:91:e1:24:60:ba:33:4f: 13:93:e7:61:1a:8e:7b:af:37:04:eb:ad:fd:27:bc: 7b:cd:6b:75:a0:8c:1b:81:e4:10:8e:e2:63:58:e2: 4e:ec:09:03:17:a1:09:37:69:9d:7d:a6:f7:a2:c4: 7b:50:9b:d3:19:ad:6d:c2:67:81:11:03:2b:91:bc: bd:4f:a5:01:2c:db:d5:d8:7c:39:ab:f5:8f:d8:91: b6:e3:fd:d7:f3:e4:9d:d4:2d:42:1f:da:76:da:bb: 6c:dd:f1:71:4d:99:4a:e1:ef:d9:8a:10:51:d9:0c: 0c:ba:3d:8a:3c:8e:01:e3:d3:36:f6:7e:74:51:20: 54:13:fd:c4:75:54:3a:78:cd:ca:78:e7:c9:d2:08: 1f:3c:2b:f3:0f:69:e6:de:37:84:0a:16:b0:e8:e1: fb:dd:74:98:13:78:71:ea:d8:c0:b7:04:e1:e4:86: a8:e5:61:7f:c5:8f:37:93:29:35:8d:37:f4:64:cc: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:65:57:5E:8F:4F:D7:92:C9:B5:41:49:7F:1F:1F:1A:FB:63:15:71 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.221.0/24 Signature Algorithm: sha256WithRSAEncryption 88:a8:ee:66:3c:3a:d9:e8:bf:ef:f9:8e:b5:a0:e6:1a:f0:47: 7b:d8:54:bc:75:56:c4:67:77:cf:11:b3:e4:9a:0b:f6:0b:6c: 76:f8:69:88:bc:f5:b6:1b:c8:a3:62:f8:0b:da:7f:91:63:80: 39:61:6b:94:2c:2b:9d:f4:86:5c:24:08:80:fa:fe:1f:99:fa: b9:ef:63:b5:b0:87:a6:d5:b7:89:50:33:80:37:3e:31:b9:d6: 31:9c:df:f7:71:a3:1d:94:12:04:c0:b9:1f:36:85:48:6b:bc: 6f:99:07:d5:1d:f3:a3:d4:63:20:c3:03:97:e1:2d:dc:be:e7: 5b:b9:1f:10:8e:a5:39:dd:85:5b:65:58:98:cf:2f:a9:61:4b: 3e:02:2e:15:10:79:30:aa:da:92:50:12:a0:f3:87:ea:f1:85: 09:ae:5a:e0:23:b6:54:20:a3:fe:f2:29:2c:ec:e4:d0:1b:15: 05:19:30:b3:b2:3a:b3:e8:b4:8a:5d:7a:74:b0:f7:62:08:62: ce:dd:d9:92:f6:7a:52:17:95:c8:4e:b9:dc:18:db:dc:44:fe: 3b:55:80:cd:ca:07:cd:e0:29:55:8c:c0:bd:29:94:5d:4f:e4: 9a:88:99:8b:75:63:3f:c6:4d:49:c9:fc:77:cd:a3:0d:05:ec: e1:13:c4:fb -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQO7vPBkcY88xlMtihmR/7en2Ze4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDlENjU1NzVFOEY0RkQ3OTJDOUI1NDE0OTdGMUYxRjFBRkI2MzE1NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUnwBPYmpIfjiLpfik9HGhug3o GWrWnqJ4AtlNrqTWjoQ40HQ31+bW/5ildI5XW5daDSaI5lAj4CgbIZ3uBHlVpxgs keEkYLozTxOT52EajnuvNwTrrf0nvHvNa3WgjBuB5BCO4mNY4k7sCQMXoQk3aZ19 pveixHtQm9MZrW3CZ4ERAyuRvL1PpQEs29XYfDmr9Y/Ykbbj/dfz5J3ULUIf2nba u2zd8XFNmUrh79mKEFHZDAy6PYo8jgHj0zb2fnRRIFQT/cR1VDp4zcp458nSCB88 K/MPaebeN4QKFrDo4fvddJgTeHHq2MC3BOHkhqjlYX/FjzeTKTWNN/RkzKX7AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUnWVXXo9P15LJtUFJfx8fGvtjFXEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy ZTMyMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFvE3TANBgkqhkiG9w0BAQsFAAOCAQEAiKjuZjw62ei/7/mOtaDmGvBH e9hUvHVWxGd3zxGz5JoL9gtsdvhpiLz1thvIo2L4C9p/kWOAOWFrlCwrnfSGXCQI gPr+H5n6ue9jtbCHptW3iVAzgDc+MbnWMZzf93GjHZQSBMC5HzaFSGu8b5kH1R3z o9RjIMMDl+Et3L7nW7kfEI6lOd2FW2VYmM8vqWFLPgIuFRB5MKraklASoPOH6vGF Ca5a4CO2VCCj/vIpLOzk0BsVBRkws7I6s+i0il16dLD3Yghizt3ZkvZ6UheVyE65 3Bjb3ET+O1WAzcoHzeApVYzAvSmUXU/kmoiZi3VjP8ZNScn8d82jDQXs4RPE+w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:53 2025 by rpki-client