This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
File: 39312e3139362e36392e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: yGPZ9mACyrxqcoEW0/nSmReGgl0stmlBFxzrqdHg9Vw=
Subject key identifier: B3:C3:16:A3:FB:4E:14:64:DC:04:C9:AA:77:0B:93:8E:3F:66:E5:6B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 19F5E4F3F3E6D34DFD86741DECE34DC5D1C3B836
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 21 Nov 2025 15:49:06 +0000
ROA not before: Fri 21 Nov 2025 15:44:06 +0000
ROA not after: Fri 20 Nov 2026 15:49:06 +0000
asID: 136787
IP address blocks: 91.196.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:f5:e4:f3:f3:e6:d3:4d:fd:86:74:1d:ec:e3:4d:c5:d1:c3:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 21 15:44:06 2025 GMT
Not After : Nov 20 15:49:06 2026 GMT
Subject: CN=B3C316A3FB4E1464DC04C9AA770B938E3F66E56B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:8e:a1:2b:53:71:13:34:c3:12:98:0f:a3:
7e:90:11:cd:65:5e:c7:82:a8:91:ed:f8:71:da:98:
6a:3d:cc:14:e0:45:ec:ee:4d:d2:2c:c1:27:61:62:
bb:45:13:f0:76:ff:04:3a:8e:ff:65:f8:f4:05:8a:
7b:c1:6b:24:11:54:0c:69:c4:7e:08:cc:9c:38:96:
e2:9f:ab:b3:d0:00:50:27:96:9c:7c:4a:d9:6a:28:
ee:f0:55:d3:41:98:cc:8b:d7:4e:0e:10:b1:05:f2:
d0:15:0f:61:5e:0d:6c:7c:cb:b5:eb:19:db:9f:b4:
84:8b:94:b1:c6:88:61:74:45:5a:e3:e0:44:c7:fd:
60:b2:ef:03:ca:b3:f9:d5:00:94:fb:d9:5e:6f:32:
14:02:1b:f4:56:63:92:0c:e8:85:4d:47:a3:79:92:
14:81:91:67:66:a7:f3:51:da:ae:24:bf:e7:fc:10:
9d:96:9d:a1:69:a8:69:95:2a:f4:e5:aa:fd:f8:66:
7e:4d:a1:7b:27:8e:a6:a1:03:7f:a5:c3:5d:d7:8e:
d4:0d:54:bc:08:69:9d:91:17:a4:7a:a2:3e:4d:92:
a6:06:56:a9:cd:a5:b0:35:77:40:67:18:75:1a:aa:
6e:66:23:9f:3f:f0:75:6a:8c:6f:07:1c:fc:c2:97:
43:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:16:A3:FB:4E:14:64:DC:04:C9:AA:77:0B:93:8E:3F:66:E5:6B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e36392e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.69.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:ee:75:47:6d:46:4a:0a:f2:17:77:fa:4d:34:18:e4:08:82:
44:a3:f3:b5:21:9d:a9:b7:89:84:d1:b7:65:27:bb:b9:97:12:
19:37:9f:69:97:45:e1:84:5d:6d:25:d6:40:39:9e:d2:1f:c5:
f2:64:b1:f9:dc:2b:ac:82:93:ae:9b:ae:c9:8d:fd:28:cc:f6:
1f:e6:f6:3a:5d:8f:68:30:6c:5b:c9:7c:63:9f:16:42:a4:ba:
43:29:db:10:e2:a2:8f:8c:01:24:57:79:f2:64:8e:33:0f:5a:
77:92:d5:81:a4:49:a0:f4:a3:a0:30:f2:62:bf:de:80:50:4b:
69:18:cc:ad:6a:3d:e5:b3:85:6c:48:07:01:a2:8d:74:5e:73:
47:a8:d3:61:22:b8:a3:54:e8:c7:50:18:4a:59:8b:68:f0:22:
f9:62:21:db:50:ec:1b:e5:93:47:b2:6a:ff:b5:61:cc:16:68:
60:8f:d0:f6:0f:23:f6:3a:69:de:51:76:3b:6e:30:09:a7:53:
fb:93:a7:22:8d:7d:28:15:fb:c3:fe:c0:63:cb:4e:b3:d9:d3:
f9:97:0b:b7:f6:bd:62:93:30:28:54:c1:a1:68:94:3a:c2:10:
44:87:0d:d7:aa:76:7d:2a:25:9f:67:4e:a2:7d:52:9e:ad:a2:
cf:c8:07:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:53 2025 by rpki-client