This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa File: 39312e3231342e36352e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: C2muL7EG+pz/x+8Ry0yQF0IXEY/l29kBOIXE/qgqk2U= Subject key identifier: 68:2F:EC:C8:FC:9E:8E:E5:C5:00:F7:8C:FE:7F:6E:34:FC:CC:47:43 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 594B2A5D4B099E795FA1F6422C10A8AC06B2BCA4 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 212238 IP address blocks: 91.214.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4b:2a:5d:4b:09:9e:79:5f:a1:f6:42:2c:10:a8:ac:06:b2:bc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=682FECC8FC9E8EE5C500F78CFE7F6E34FCCC4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:55:36:e6:f1:38:f5:44:a4:89:f7:70:96:4b: b1:d1:29:a9:db:ec:ba:87:76:3e:c6:05:d8:23:f2: 22:7c:8e:26:e0:62:87:91:67:05:ca:b6:19:df:17: c0:24:2a:76:7d:52:71:11:60:97:20:ff:da:23:ce: 22:49:24:8d:b2:e3:68:94:22:c0:95:15:c9:ee:ce: bd:c1:ce:b3:e8:ce:52:01:83:d6:4b:92:95:03:ea: 98:60:8b:ed:e1:46:06:f6:5f:72:5c:86:33:60:c0: d6:c6:f4:c0:2e:2c:8c:e7:c7:71:8d:80:c3:27:60: e3:53:e9:56:a2:da:4e:9e:18:ae:dc:f3:d6:09:64: 79:34:e1:1d:fb:89:a8:bb:44:88:95:a5:b4:7c:f4: fb:37:ae:62:1f:1d:db:33:2c:aa:ac:02:93:9a:3c: ec:99:ca:38:30:84:d1:e7:12:59:02:2b:d8:ea:b1: 9d:af:ec:cb:29:f1:bc:45:a5:31:4d:4c:93:54:3d: 63:a4:7c:6f:5a:e4:0c:6d:3f:c4:76:2d:19:f2:34: a4:f2:c4:2c:43:f3:48:6d:25:2e:07:a2:81:9f:29: b4:23:99:e7:77:ef:ff:58:ac:1e:91:18:6a:02:f3: 99:16:60:29:32:9b:47:8e:72:d1:81:ad:72:dc:b7: 82:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:EC:C8:FC:9E:8E:E5:C5:00:F7:8C:FE:7F:6E:34:FC:CC:47:43 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36352e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.65.0/24 Signature Algorithm: sha256WithRSAEncryption a9:8c:c9:86:4c:d8:ea:16:30:50:6a:6f:f9:52:5b:92:23:96: ee:8a:2e:0e:7d:69:0e:97:28:54:97:fa:6c:f0:1a:92:67:f7: 61:b4:68:f8:f3:b5:2b:af:bb:7e:e6:89:d4:dd:7e:13:b6:cd: 7f:a5:d4:55:09:46:e1:fe:6a:00:d0:11:f8:05:9a:ab:cb:02: ae:9d:b7:96:ee:f6:fe:db:40:aa:20:b6:11:75:54:92:95:4f: 17:43:28:f4:8a:0f:af:01:61:ca:1d:9f:b4:8f:4c:bd:49:fd: db:ba:9f:fc:b0:2b:b8:4b:0d:a3:75:9e:cc:bd:8b:b1:d1:6f: e8:09:ef:a4:80:33:3c:bf:e7:e1:ac:9a:7d:28:5f:8d:16:be: 6e:65:37:ef:1c:b5:74:be:c2:43:6b:20:1a:90:22:f3:4e:0e: df:df:0a:4a:be:cc:23:47:28:64:43:e2:55:7f:7d:ba:73:ee: a4:4e:67:bc:8a:93:94:ac:16:6d:32:de:bb:3f:af:94:46:82: 51:f4:ec:24:32:d1:b3:75:76:e9:c7:c0:39:df:0a:ab:e3:aa: f3:19:93:95:a2:5c:e9:0a:a0:d9:56:86:b9:2c:8f:ef:5f:a8: f6:f1:41:27:ba:0b:66:88:ba:b8:b4:9e:45:54:71:9c:fd:95: 6a:83:7f:3c -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUWUsqXUsJnnlfofZCLBCorAayvKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKDY4MkZFQ0M4RkM5RThFRTVDNTAwRjc4Q0ZFN0Y2RTM0RkNDQzQ3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWVTbm8Tj1RKSJ93CWS7HRKanb 7LqHdj7GBdgj8iJ8jibgYoeRZwXKthnfF8AkKnZ9UnERYJcg/9ojziJJJI2y42iU IsCVFcnuzr3BzrPozlIBg9ZLkpUD6phgi+3hRgb2X3JchjNgwNbG9MAuLIznx3GN gMMnYONT6Vai2k6eGK7c89YJZHk04R37iai7RIiVpbR89Ps3rmIfHdszLKqsApOa POyZyjgwhNHnElkCK9jqsZ2v7Msp8bxFpTFNTJNUPWOkfG9a5AxtP8R2LRnyNKTy xCxD80htJS4HooGfKbQjmed37/9YrB6RGGoC85kWYCkym0eOctGBrXLct4INAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUaC/syPyejuXFAPeM/n9uNPzMR0MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy ZTM2MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABb1kEwDQYJKoZIhvcNAQELBQADggEBAKmMyYZM2OoWMFBqb/lSW5Ijlu6K Lg59aQ6XKFSX+mzwGpJn92G0aPjztSuvu37midTdfhO2zX+l1FUJRuH+agDQEfgF mqvLAq6dt5bu9v7bQKogthF1VJKVTxdDKPSKD68BYcodn7SPTL1J/du6n/ywK7hL DaN1nsy9i7HRb+gJ76SAMzy/5+Gsmn0oX40Wvm5lN+8ctXS+wkNrIBqQIvNODt/f Ckq+zCNHKGRD4lV/fbpz7qROZ7yKk5SsFm0y3rs/r5RGglH07CQy0bN1dunHwDnf CqvjqvMZk5WiXOkKoNlWhrksj+9fqPbxQSe6C2aIuri0nkVUcZz9lWqDfzw= -----END CERTIFICATE-----Generated at Sat Dec 6 14:24:07 2025 by rpki-client