This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa File: 39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tLZViTv2/+m2rYDw2bAb3S5uebAErIgDNlBlHglmHEg= Subject key identifier: B7:21:2C:AB:92:2D:C6:7D:05:32:C7:27:2F:19:C6:FF:BD:E0:F3:03 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1ED128F40C2809E279DF53EA284FCCCDDA71BA30 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 136787 IP address blocks: 91.196.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d1:28:f4:0c:28:09:e2:79:df:53:ea:28:4f:cc:cd:da:71:ba:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=B7212CAB922DC67D0532C7272F19C6FFBDE0F303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0a:b3:cc:e4:a5:83:17:39:91:f9:78:5d:68: e5:de:09:a6:0e:94:3f:23:88:1e:57:7c:5c:74:ac: 42:05:11:32:5f:41:10:2e:54:5c:e3:99:f7:ff:46: 14:9f:2a:d2:5a:7b:13:f4:13:c6:af:5c:f1:c0:99: 81:6a:8b:ef:f4:c1:bb:68:60:8f:56:3f:26:58:77: 89:56:9b:54:c8:fd:b9:85:b1:84:67:e1:9b:16:04: c4:99:25:c2:15:9b:78:db:58:98:6c:6b:be:ad:b6: ab:d1:ae:11:f6:20:b0:f2:9d:3d:27:e3:55:05:aa: fb:6e:16:df:5d:b9:81:fe:2b:b1:7d:2a:40:76:78: 1a:8f:49:d7:c7:45:cc:39:43:b4:0b:51:cd:e7:d9: 21:7b:3d:d5:ba:99:2f:ce:e1:e7:52:4f:38:1f:50: 1f:80:e5:48:71:79:76:0b:7e:09:f6:c2:07:59:85: 5f:e2:81:59:72:16:7f:aa:2d:1b:bf:6b:8d:30:b5: 1e:62:dd:08:cc:f7:db:a9:8d:99:d9:cc:a7:e4:10: 4f:76:15:58:59:c9:21:b3:4c:83:fd:99:f8:48:ff: 15:85:7f:0a:7f:59:1a:52:88:21:54:2a:de:39:fb: a6:0a:7d:d5:73:1c:31:84:c1:46:56:f4:d6:3c:87: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:2C:AB:92:2D:C6:7D:05:32:C7:27:2F:19:C6:FF:BD:E0:F3:03 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.222.0/24 Signature Algorithm: sha256WithRSAEncryption bc:26:5c:20:7d:8d:01:ef:a3:90:ab:16:0c:b3:42:52:0c:c4: 2d:9f:cf:97:a6:24:bd:9a:22:40:ba:15:29:48:80:b4:47:50: be:5e:7a:45:00:82:36:58:bd:15:13:0e:c6:e7:6a:f5:0c:e6: d9:f0:7a:bd:9d:17:f9:0d:3d:5f:bc:07:c2:cc:40:c5:ac:09: f5:0e:17:9a:9f:e2:ae:04:71:f3:6c:e1:9d:05:2c:b0:08:b7: e2:65:43:62:39:42:14:99:0a:53:2a:a4:01:17:e9:f6:2c:ef: 3a:1e:1c:fd:43:52:7b:64:c7:48:43:be:c5:15:52:b9:c2:e5: 61:f7:bb:89:64:60:14:16:8b:60:a1:36:9d:71:a1:cf:32:5c: 8d:50:67:47:02:de:ab:1a:aa:fa:e7:8d:8c:86:7a:f7:aa:fd: fe:db:73:73:92:f6:2c:00:80:d4:24:b6:a2:24:65:ae:cb:22: 90:99:0e:eb:a6:1e:30:32:d3:26:22:e6:48:78:47:45:68:b4: 02:3d:24:ab:74:d3:07:de:84:d8:7c:a5:ff:46:0f:97:be:39: f7:25:f6:da:11:35:87:f8:65:c7:ce:a9:f5:cc:02:3f:2b:3b: 60:8c:59:48:08:04:9b:14:64:44:ce:32:cd:80:d0:83:41:9a: 15:32:87:22 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUHtEo9AwoCeJ531PqKE/MzdpxujAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKEI3MjEyQ0FCOTIyREM2N0QwNTMyQzcyNzJGMTlDNkZGQkRFMEYzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCrPM5KWDFzmR+XhdaOXeCaYO lD8jiB5XfFx0rEIFETJfQRAuVFzjmff/RhSfKtJaexP0E8avXPHAmYFqi+/0wbto YI9WPyZYd4lWm1TI/bmFsYRn4ZsWBMSZJcIVm3jbWJhsa76ttqvRrhH2ILDynT0n 41UFqvtuFt9duYH+K7F9KkB2eBqPSdfHRcw5Q7QLUc3n2SF7PdW6mS/O4edSTzgf UB+A5UhxeXYLfgn2wgdZhV/igVlyFn+qLRu/a40wtR5i3QjM99upjZnZzKfkEE92 FVhZySGzTIP9mfhI/xWFfwp/WRpSiCFUKt45+6YKfdVzHDGEwUZW9NY8h1wbAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUtyEsq5Itxn0FMscnLxnG/73g8wMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy ZTMyMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFvE3jANBgkqhkiG9w0BAQsFAAOCAQEAvCZcIH2NAe+jkKsWDLNCUgzE LZ/Pl6YkvZoiQLoVKUiAtEdQvl56RQCCNli9FRMOxudq9Qzm2fB6vZ0X+Q09X7wH wsxAxawJ9Q4Xmp/irgRx82zhnQUssAi34mVDYjlCFJkKUyqkARfp9izvOh4c/UNS e2THSEO+xRVSucLlYfe7iWRgFBaLYKE2nXGhzzJcjVBnRwLeqxqq+ueNjIZ696r9 /ttzc5L2LACA1CS2oiRlrssikJkO66YeMDLTJiLmSHhHRWi0Aj0kq3TTB96E2Hyl /0YPl7459yX22hE1h/hlx86p9cwCPys7YIxZSAgEmxRkRM4yzYDQg0GaFTKHIg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:15 2025 by rpki-client