This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20323132323338.roa File: 39312e3231342e36342e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: ly9xF/V6RmRwZMIqSWCpsleEd5BdkczbWldU3LQ0M9E= Subject key identifier: D6:1D:E3:22:7C:05:7F:14:82:59:4D:6F:FA:EB:B4:80:A1:7A:99:52 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 11867ED1D65EE870CBBED47E5C17AD4F29255292 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20323132323338.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 212238 IP address blocks: 91.214.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:86:7e:d1:d6:5e:e8:70:cb:be:d4:7e:5c:17:ad:4f:29:25:52:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=D61DE3227C057F1482594D6FFAEBB480A17A9952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:03:d9:2a:83:b8:02:b6:9d:a7:92:07:5f: ef:0a:9e:6f:49:6d:1b:43:e6:7b:d6:73:14:0e:2d: 92:f1:bd:f1:fa:4e:9e:49:41:5c:d5:58:c7:9b:ed: ba:0f:de:4d:92:df:8f:6f:44:08:d5:cd:d7:e5:73: b5:5d:ae:02:da:e5:ad:0b:f7:d4:09:c6:64:da:f5: ad:1e:0d:5a:d3:76:75:8d:99:b7:63:b2:06:00:ce: cc:01:65:cf:53:8b:7e:b4:b6:a7:a8:b2:37:1f:ef: 4b:8f:03:ca:41:2f:e5:00:21:48:39:68:8b:53:ca: a6:b8:4a:25:10:bc:f7:22:c3:d8:04:7d:e9:c3:5f: ba:82:93:b8:c0:2c:62:4c:3e:c0:db:c8:1d:aa:26: 20:4c:ab:9a:90:67:0a:92:db:06:99:e6:b6:0c:97: 3c:65:8b:35:2e:35:79:73:75:6f:08:bf:a6:70:07: ca:8e:65:50:5c:7d:1a:20:2d:38:d8:2b:38:84:e1: d0:20:df:20:12:ab:c5:5e:0a:27:50:11:37:41:cb: c1:77:fa:30:5a:15:8e:5f:33:de:c4:ad:ad:e6:fa: 37:07:1b:65:50:76:1d:83:ed:3b:09:d3:28:5a:99: cf:0d:db:a6:af:e6:4b:1c:c3:b9:7c:cd:92:4d:8c: 5e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1D:E3:22:7C:05:7F:14:82:59:4D:6F:FA:EB:B4:80:A1:7A:99:52 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36342e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.64.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:57:2e:41:ad:8d:66:8b:af:44:95:81:c5:17:47:ea:6c:88: bc:3a:f1:61:f9:48:9a:43:53:6d:f0:97:b2:53:ca:12:19:8d: de:2c:12:4d:d7:40:74:fc:01:5d:fd:34:ee:6a:a7:2d:4a:67: 04:e7:73:41:00:db:4d:ad:6d:5b:ba:44:2a:fa:97:47:d1:60: d0:e7:a2:3c:be:0b:94:a1:16:45:85:74:b5:0c:36:31:bb:a8: 26:de:a9:3d:18:42:7d:02:ed:5c:dd:03:5d:ef:b3:e1:f6:08: 30:b2:8f:54:49:c4:01:34:8c:56:09:b2:b0:84:0e:d2:db:67: 0c:68:2f:40:99:ef:89:1c:3c:6d:c9:b9:c8:a9:42:ef:04:5f: 59:3a:e7:a1:23:1a:d4:50:cf:2c:01:09:cf:6f:a6:57:ff:35: 8b:5d:97:c4:68:ce:f6:01:b1:7c:8e:3b:dd:a0:c7:f5:d6:e8: ad:4f:63:f9:33:f8:ce:52:72:28:3e:62:10:00:2a:eb:f8:e3: a5:aa:97:d2:39:e3:3b:1a:07:d4:e3:47:0f:6d:56:fb:cd:d7: 38:45:7d:88:1d:bd:04:ac:9f:cc:00:d4:cc:ac:86:42:f3:01: fb:34:ac:35:92:0a:0b:50:45:6c:df:aa:7d:67:1c:49:26:38: 7c:8c:bc:ee -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUEYZ+0dZe6HDLvtR+XBetTyklUpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEQ2MURFMzIyN0MwNTdGMTQ4MjU5NEQ2RkZBRUJCNDgwQTE3QTk5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EwPZKoO4Aradp5IHX+8Knm9J bRtD5nvWcxQOLZLxvfH6Tp5JQVzVWMeb7boP3k2S349vRAjVzdflc7VdrgLa5a0L 99QJxmTa9a0eDVrTdnWNmbdjsgYAzswBZc9Ti360tqeosjcf70uPA8pBL+UAIUg5 aItTyqa4SiUQvPciw9gEfenDX7qCk7jALGJMPsDbyB2qJiBMq5qQZwqS2waZ5rYM lzxlizUuNXlzdW8Iv6ZwB8qOZVBcfRogLTjYKziE4dAg3yASq8VeCidQETdBy8F3 +jBaFY5fM97Era3m+jcHG2VQdh2D7TsJ0yhamc8N26av5kscw7l8zZJNjF5/AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU1h3jInwFfxSCWU1v+uu0gKF6mVIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy ZTM2MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABb1kAwDQYJKoZIhvcNAQELBQADggEBACpXLkGtjWaLr0SVgcUXR+psiLw6 8WH5SJpDU23wl7JTyhIZjd4sEk3XQHT8AV39NO5qpy1KZwTnc0EA202tbVu6RCr6 l0fRYNDnojy+C5ShFkWFdLUMNjG7qCbeqT0YQn0C7VzdA13vs+H2CDCyj1RJxAE0 jFYJsrCEDtLbZwxoL0CZ74kcPG3JucipQu8EX1k656EjGtRQzywBCc9vplf/NYtd l8RozvYBsXyOO92gx/XW6K1PY/kz+M5Scig+YhAAKuv446Wql9I54zsaB9TjRw9t VvvN1zhFfYgdvQSsn8wA1MyshkLzAfs0rDWSCgtQRWzfqn1nHEkmOHyMvO4= -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:55 2025 by rpki-client