This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa File: 39312e3231342e36342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: JtgMLnO0K4Nk+hL3MYoj22n1c2J1LnAkCnUcah6TIC4= Subject key identifier: 35:45:BC:DB:7C:56:B3:9F:29:8C:19:76:B4:2E:84:8C:74:DF:7A:AE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 61C5EFB95433A1E4D6769973B5D71879D5D71EC7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 136787 IP address blocks: 91.214.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:c5:ef:b9:54:33:a1:e4:d6:76:99:73:b5:d7:18:79:d5:d7:1e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=3545BCDB7C56B39F298C1976B42E848C74DF7AAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:d8:e1:b8:46:4a:de:a3:46:13:7d:5c:8d: fe:f6:4d:91:78:63:28:bc:35:e0:16:31:6a:fc:4b: 23:44:1f:8a:c2:86:50:80:e8:8b:09:d6:91:27:6e: 5a:20:77:f2:cb:8d:70:ec:34:9d:0e:c8:8e:b5:c8: d9:20:7e:ba:76:3e:02:57:56:22:38:bb:3f:0b:8f: e4:70:eb:af:79:3b:64:9f:8c:20:6e:fc:5f:f8:c0: 16:2e:8e:b3:30:5d:1a:e5:84:44:90:a8:17:d4:7e: bb:14:9f:e1:62:e8:f6:25:d6:c2:48:62:2d:39:86: cf:8c:72:6b:b0:4d:22:06:6f:04:9f:08:03:a0:48: 3c:92:90:b5:ac:ba:f3:27:df:e1:47:60:6d:3a:4c: 1a:7a:dd:d1:8c:0b:83:05:3d:5e:3a:80:99:d1:f3: 4a:7d:c4:3d:7a:4b:32:a6:28:bb:ef:fd:26:6c:09: 83:2b:3f:97:82:b3:17:c6:67:90:55:12:14:41:af: b9:ae:f9:b9:b5:98:83:5e:27:67:46:12:54:9d:28: ea:68:b9:74:7f:bd:9c:ea:ed:ce:59:8e:93:7e:a2: d3:a8:a0:c2:c5:27:54:74:ee:42:fd:e2:2f:ea:85: 54:e9:dc:b0:ea:4a:45:f4:62:d6:ab:ff:43:47:75: eb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:45:BC:DB:7C:56:B3:9F:29:8C:19:76:B4:2E:84:8C:74:DF:7A:AE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.64.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:99:4b:42:45:61:de:9e:ea:9d:21:9c:78:f7:b4:df:07:40: ab:db:5e:8d:a5:9e:92:7f:e0:46:09:b1:27:b2:4f:6c:87:a2: 72:6a:04:b5:1f:36:f1:e9:fa:1b:7c:aa:ba:08:ed:ac:2f:d5: ad:1b:ea:da:fd:a3:d5:b5:1b:e7:02:dc:04:da:b1:68:f9:11: f7:a3:80:34:e2:a0:80:f3:0b:7c:7a:de:6d:6c:51:bc:d1:08: 42:12:72:02:cd:61:ea:c7:65:12:98:49:3c:78:36:95:ff:4f: d6:af:1a:50:86:cf:3b:65:13:b4:1f:6b:ec:9f:07:e0:16:1b: 1b:ae:6e:94:36:2b:26:5f:9f:ab:ea:95:69:48:32:e9:fb:75: 0b:2b:9d:9d:8e:aa:4b:f5:53:00:0b:98:20:fb:7c:eb:8f:1b: f7:a6:11:d3:d5:48:ce:aa:c8:db:71:c2:75:98:27:cb:f4:16: d3:d5:ae:44:a9:58:1d:78:da:4c:fb:b0:7b:92:1b:90:3b:22: 1b:7c:d1:ef:78:e9:1b:87:8a:79:c2:6b:63:1d:e9:45:90:c1: 15:ce:bf:76:d7:41:12:81:81:41:56:31:5f:8b:a8:b4:22:a8: 7b:03:44:b6:4f:3b:ee:78:59:c8:9b:67:e2:90:be:82:7c:ab: 38:5c:d9:e4 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYcXvuVQzoeTWdplztdcYedXXHscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKDM1NDVCQ0RCN0M1NkIzOUYyOThDMTk3NkI0MkU4NDhDNzRERjdBQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWtjhuEZK3qNGE31cjf72TZF4 Yyi8NeAWMWr8SyNEH4rChlCA6IsJ1pEnblogd/LLjXDsNJ0OyI61yNkgfrp2PgJX ViI4uz8Lj+Rw6695O2SfjCBu/F/4wBYujrMwXRrlhESQqBfUfrsUn+Fi6PYl1sJI Yi05hs+McmuwTSIGbwSfCAOgSDySkLWsuvMn3+FHYG06TBp63dGMC4MFPV46gJnR 80p9xD16SzKmKLvv/SZsCYMrP5eCsxfGZ5BVEhRBr7mu+bm1mINeJ2dGElSdKOpo uXR/vZzq7c5ZjpN+otOooMLFJ1R07kL94i/qhVTp3LDqSkX0Ytar/0NHdes1AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUNUW823xWs58pjBl2tC6EjHTfeq4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy ZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABb1kAwDQYJKoZIhvcNAQELBQADggEBAJ2ZS0JFYd6e6p0hnHj3tN8HQKvb Xo2lnpJ/4EYJsSeyT2yHonJqBLUfNvHp+ht8qroI7awv1a0b6tr9o9W1G+cC3ATa sWj5EfejgDTioIDzC3x63m1sUbzRCEIScgLNYerHZRKYSTx4NpX/T9avGlCGzztl E7Qfa+yfB+AWGxuubpQ2KyZfn6vqlWlIMun7dQsrnZ2Oqkv1UwALmCD7fOuPG/em EdPVSM6qyNtxwnWYJ8v0FtPVrkSpWB142kz7sHuSG5A7Iht80e946RuHinnCa2Md 6UWQwRXOv3bXQRKBgUFWMV+LqLQiqHsDRLZPO+54WcibZ+KQvoJ8qzhc2eQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:14 2025 by rpki-client