This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232332e302f32342d3234203d3e20313336373837.roa File: 39312e3139362e3232332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tQOlnSAhdJ30kCoXvvjdVruqhV2ykVVtspODdRNaJBI= Subject key identifier: B2:81:FA:50:22:1F:1E:F4:2D:A9:2B:72:3D:3A:E8:65:D4:48:AE:28 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4C3FA391ED1170C8B49DAAEF6E3D1C44632A13A8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 136787 IP address blocks: 91.196.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:3f:a3:91:ed:11:70:c8:b4:9d:aa:ef:6e:3d:1c:44:63:2a:13:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=B281FA50221F1EF42DA92B723D3AE865D448AE28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f2:31:31:76:27:f4:0a:c5:cd:ec:52:8f:8f: d0:0f:13:63:c6:95:db:2b:92:0c:22:95:ed:b4:cd: 73:ed:92:10:66:54:7b:33:40:18:43:10:51:89:e8: 99:98:bf:b4:12:32:3f:00:49:e8:d5:c5:0e:60:6c: be:83:10:64:c8:e5:b7:59:00:08:a6:95:f0:0c:60: c3:93:d8:c8:92:1c:d4:e7:69:d3:66:97:71:69:d7: b0:be:53:6f:74:65:83:f3:d1:49:b0:bc:63:9d:49: a3:fc:75:d9:3c:cf:0f:c4:1b:0a:13:32:d5:6c:c9: 15:94:34:6c:91:51:46:44:df:71:43:fa:f0:2b:70: 1b:37:fd:ec:4e:3e:cb:d6:90:6f:62:85:ae:01:45: ec:2d:a7:a2:13:34:97:f2:9c:76:b2:36:d5:64:36: 50:98:82:5a:ed:5b:49:1e:08:1d:9f:22:00:e5:a5: f2:9d:23:17:93:f2:39:4a:64:1c:af:bc:8e:6a:15: af:8d:ab:58:8c:dc:be:5d:8e:2a:cb:23:8f:9f:4a: 92:cf:61:48:a0:60:af:bb:dc:4d:ef:e0:b6:82:7f: 52:36:53:a2:0a:67:a5:3d:85:07:34:5d:55:e1:f6: 3a:3b:cb:a6:ac:2c:8c:05:4e:30:bc:38:a2:0b:98: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:81:FA:50:22:1F:1E:F4:2D:A9:2B:72:3D:3A:E8:65:D4:48:AE:28 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.223.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c3:b7:c7:07:a8:5f:88:a6:01:37:74:bc:3d:16:72:54:8d: 0b:fc:ab:82:81:63:3c:07:60:ef:b1:21:82:8b:d4:d5:29:1b: a1:06:e9:3e:1b:0c:09:f0:40:74:d8:7f:a9:42:cd:ed:0a:91: 13:18:61:18:53:0b:a8:8a:9c:c3:f8:7f:1e:73:e8:48:a1:54: 84:a1:68:88:c6:49:ce:61:e8:c1:20:d5:33:a8:14:8a:24:5f: 86:f9:08:00:b6:51:d4:ac:ef:73:0e:31:eb:06:60:8b:8a:c2: 8b:12:22:53:f6:02:50:d8:87:50:ca:37:b4:9c:2f:7b:a5:53: 35:42:9c:f3:a6:5a:60:83:70:09:a3:36:fa:91:c0:50:25:50: 92:47:5f:13:b0:18:12:65:9e:ed:8a:49:6f:82:03:41:6d:2e: 79:30:81:b5:7e:61:0b:a4:ef:24:6a:f1:21:39:4f:85:9d:eb: 5b:95:3d:06:d4:28:e0:e6:49:aa:7e:20:8a:07:56:09:50:e8: 37:6d:6d:de:34:1f:5d:2c:d4:9a:f9:a5:4b:63:b6:a7:51:dd: ef:3d:f1:e8:6e:6b:8f:87:1b:65:6d:8b:bc:6e:fa:bf:c7:5d: 89:ee:a9:44:9b:da:d2:39:c5:c7:1d:88:61:44:e6:12:9d:50: 6b:d4:ee:80 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUTD+jke0RcMi0narvbj0cRGMqE6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKEIyODFGQTUwMjIxRjFFRjQyREE5MkI3MjNEM0FFODY1RDQ0OEFFMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8jExdif0CsXN7FKPj9APE2PG ldsrkgwile20zXPtkhBmVHszQBhDEFGJ6JmYv7QSMj8ASejVxQ5gbL6DEGTI5bdZ AAimlfAMYMOT2MiSHNTnadNml3Fp17C+U290ZYPz0UmwvGOdSaP8ddk8zw/EGwoT MtVsyRWUNGyRUUZE33FD+vArcBs3/exOPsvWkG9iha4BRewtp6ITNJfynHayNtVk NlCYglrtW0keCB2fIgDlpfKdIxeT8jlKZByvvI5qFa+Nq1iM3L5djirLI4+fSpLP YUigYK+73E3v4LaCf1I2U6IKZ6U9hQc0XVXh9jo7y6asLIwFTjC8OKILmExFAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUsoH6UCIfHvQtqStyPTroZdRIrigwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy ZTMyMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFvE3zANBgkqhkiG9w0BAQsFAAOCAQEAOcO3xweoX4imATd0vD0WclSN C/yrgoFjPAdg77EhgovU1SkboQbpPhsMCfBAdNh/qULN7QqRExhhGFMLqIqcw/h/ HnPoSKFUhKFoiMZJzmHowSDVM6gUiiRfhvkIALZR1Kzvcw4x6wZgi4rCixIiU/YC UNiHUMo3tJwve6VTNUKc86ZaYINwCaM2+pHAUCVQkkdfE7AYEmWe7YpJb4IDQW0u eTCBtX5hC6TvJGrxITlPhZ3rW5U9BtQo4OZJqn4gigdWCVDoN21t3jQfXSzUmvml S2O2p1Hd7z3x6G5rj4cbZW2LvG76v8ddie6pRJva0jnFxx2IYUTmEp1Qa9TugA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:51 2025 by rpki-client