This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20313336373837.roa File: 39312e3231342e36352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: APAIaTZJxvondr+qHqK7B7FbA5OE+woxf82kz2i4W/Q= Subject key identifier: 12:7D:3B:10:43:25:E1:BA:6A:D0:CF:04:8E:D9:F9:7D:E3:95:62:A7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 03BF0D7F360FDB1D886CC333DC20D40F0A972927 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 136787 IP address blocks: 91.214.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:bf:0d:7f:36:0f:db:1d:88:6c:c3:33:dc:20:d4:0f:0a:97:29:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=127D3B104325E1BA6AD0CF048ED9F97DE39562A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:59:6a:02:68:5a:62:fc:bb:37:39:31:e8:1c: 4d:a0:2e:85:d8:d5:71:52:79:26:8f:13:da:c5:48: ae:66:53:42:d1:44:bf:1e:f2:62:9e:2d:2a:9b:1b: b9:16:f3:b3:d3:bb:25:97:82:0e:f2:43:3a:e8:05: 9f:4f:e8:5a:e1:07:a4:76:3d:d2:a0:db:52:28:2a: 44:1d:9f:f8:8d:4a:29:56:31:a1:13:16:64:ae:e5: 8d:83:8d:1e:ed:2c:08:4e:c1:3e:72:54:e2:5e:74: cd:2a:2c:c3:10:ec:a9:b5:4a:bb:be:30:60:74:43: 33:b7:96:95:97:68:dd:84:30:d3:c6:df:9f:a2:bf: 90:28:19:46:8e:a4:f5:0a:dd:f0:a7:21:96:22:b9: b9:d0:65:ef:35:b9:2a:a2:9f:7c:c7:62:77:3b:4e: c9:f8:21:be:61:90:b5:cb:7a:f0:1d:08:db:6f:0f: 23:30:f5:72:6a:a8:3b:dc:4f:a2:96:73:4f:52:94: 53:44:86:eb:89:4b:ba:25:4c:fd:e1:67:d3:3e:6a: 29:c6:3a:0b:d1:1c:05:87:b8:53:06:0b:09:ad:1a: 7b:f2:c9:1c:ba:fc:ea:52:3b:66:7f:62:44:a5:53: 9c:7f:70:16:86:0a:e4:36:7e:c5:66:d4:6d:e9:a1: f7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7D:3B:10:43:25:E1:BA:6A:D0:CF:04:8E:D9:F9:7D:E3:95:62:A7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.65.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:ad:85:bb:dd:85:5b:cb:e7:b7:8d:71:9f:47:d6:30:2b:d9: 7b:16:97:77:7a:97:b5:3f:7b:a0:b3:a3:aa:b6:9a:30:d5:61: 21:a0:21:ec:c4:f3:2b:77:13:52:5e:23:3d:b7:10:8e:bf:31: 62:5b:24:5b:de:38:4d:05:ca:a9:f7:e7:93:64:6a:e2:bd:ff: 8b:41:a7:0a:20:b0:85:89:9e:83:34:8a:4b:10:a8:c8:fe:cb: 11:ab:57:bc:12:9f:6c:58:6d:e0:8b:ed:11:9e:a2:a6:e5:bb: 06:4e:92:44:6f:6c:38:88:ec:85:a9:b1:7d:df:7f:d6:cd:64: 69:9e:e1:79:5a:f4:39:49:0e:0b:92:a3:78:77:de:df:10:c7: b6:0b:4e:8c:aa:06:c3:03:2f:d3:bd:0e:c2:b4:db:32:d4:95: 58:5a:ed:c7:b4:d6:91:0a:53:f8:a0:64:13:9c:16:f0:0b:49: db:59:af:b0:6a:98:8b:57:f0:53:c7:b9:5d:e2:cc:b5:21:4c: 88:f5:68:90:42:10:f4:36:ee:39:94:5e:be:de:cc:df:f1:15: 5c:2b:2f:f3:01:7e:67:11:85:2e:72:ab:78:4a:61:61:7f:91: 0c:c3:fe:19:a2:b2:51:04:62:34:4c:4e:3d:cf:5d:a6:fb:8f: 39:2d:7f:8e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUA78NfzYP2x2IbMMz3CDUDwqXKScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKDEyN0QzQjEwNDMyNUUxQkE2QUQwQ0YwNDhFRDlGOTdERTM5NTYyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6WWoCaFpi/Ls3OTHoHE2gLoXY 1XFSeSaPE9rFSK5mU0LRRL8e8mKeLSqbG7kW87PTuyWXgg7yQzroBZ9P6FrhB6R2 PdKg21IoKkQdn/iNSilWMaETFmSu5Y2DjR7tLAhOwT5yVOJedM0qLMMQ7Km1Sru+ MGB0QzO3lpWXaN2EMNPG35+iv5AoGUaOpPUK3fCnIZYiubnQZe81uSqin3zHYnc7 Tsn4Ib5hkLXLevAdCNtvDyMw9XJqqDvcT6KWc09SlFNEhuuJS7olTP3hZ9M+ainG OgvRHAWHuFMGCwmtGnvyyRy6/OpSO2Z/YkSlU5x/cBaGCuQ2fsVm1G3poff7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUEn07EEMl4bpq0M8Ejtn5feOVYqcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy ZTM2MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABb1kEwDQYJKoZIhvcNAQELBQADggEBAHuthbvdhVvL57eNcZ9H1jAr2XsW l3d6l7U/e6Czo6q2mjDVYSGgIezE8yt3E1JeIz23EI6/MWJbJFveOE0Fyqn355Nk auK9/4tBpwogsIWJnoM0iksQqMj+yxGrV7wSn2xYbeCL7RGeoqbluwZOkkRvbDiI 7IWpsX3ff9bNZGme4Xla9DlJDguSo3h33t8Qx7YLToyqBsMDL9O9DsK02zLUlVha 7ce01pEKU/igZBOcFvALSdtZr7BqmItX8FPHuV3izLUhTIj1aJBCEPQ27jmUXr7e zN/xFVwrL/MBfmcRhS5yq3hKYWF/kQzD/hmislEEYjRMTj3PXab7jzktf44= -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:59 2025 by rpki-client