This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa File: 39312e3231342e36362e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: v+Xc/0u5ObRj6Isp2AHebBTJvDgFv1yjddzlnRv14PI= Subject key identifier: 86:A6:26:69:7F:76:FE:B3:4A:51:0B:64:BB:13:C0:28:6F:8A:AF:51 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2976715B1463C67410B00F2170B2FD9DDB55BDB6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:47 +0000 ROA not before: Fri 28 Nov 2025 11:44:47 +0000 ROA not after: Fri 27 Nov 2026 11:49:47 +0000 asID: 136787 IP address blocks: 91.214.66.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:76:71:5b:14:63:c6:74:10:b0:0f:21:70:b2:fd:9d:db:55:bd:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:47 2025 GMT Not After : Nov 27 11:49:47 2026 GMT Subject: CN=86A626697F76FEB34A510B64BB13C0286F8AAF51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:03:b9:80:69:f0:1f:dd:65:83:8c:de:9a:1b: f3:e1:b7:e1:98:ff:0d:01:1a:24:51:02:2a:3e:e0: b1:ea:8f:76:5f:0c:7a:94:9b:20:16:14:cd:9a:6b: 3b:9f:c1:88:1a:67:35:7f:26:9f:a8:3d:5e:fb:00: f7:e2:d4:fa:c6:ae:b6:3a:af:7b:3f:03:3f:65:ed: 60:a0:af:a3:19:06:35:c6:c7:ca:b2:0a:72:87:9b: bc:bc:3e:8b:82:90:ee:e3:07:2f:60:0c:8c:ba:57: cc:d2:50:67:e4:b3:e0:73:8e:07:99:fe:4c:96:34: 10:b3:e8:da:81:43:11:d8:08:e9:a1:3a:76:10:bd: b3:9f:38:56:fd:fb:a9:88:f9:18:ae:d9:4e:71:56: a8:61:1d:d0:de:7e:b2:0e:96:7b:af:4c:89:b1:4c: 25:8a:e1:0b:47:0b:0d:ad:7c:10:61:d3:27:df:0b: 9d:5f:b8:2b:4e:11:40:af:f6:4e:9b:b7:2f:5f:9c: 71:10:a2:50:8c:46:0d:a8:0a:5d:0b:cc:1b:aa:ae: ac:ff:ff:ed:4b:b1:80:30:21:29:4b:c2:b5:62:99: 3b:6d:b8:b0:46:fb:a0:97:b7:af:4e:06:e6:93:6e: b0:b3:67:4a:64:3e:c4:c2:41:8f:19:14:c3:39:e9: cb:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A6:26:69:7F:76:FE:B3:4A:51:0B:64:BB:13:C0:28:6F:8A:AF:51 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36362e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.66.0/24 Signature Algorithm: sha256WithRSAEncryption 68:7a:eb:31:1e:31:98:eb:c8:e0:4e:dd:db:83:9e:b7:89:e4: 2a:67:22:7d:75:9d:08:c6:61:90:42:aa:75:35:f6:e1:6d:7f: dc:6c:35:8e:cd:f5:7c:8f:b0:9a:14:e0:7f:c1:c4:de:7c:f0: 41:b5:15:ee:99:6b:3a:45:49:b1:bd:d3:f8:19:eb:b4:9d:e6: 29:71:2b:25:52:cf:af:bc:9b:d0:97:76:9d:53:b5:3c:6a:4c: d4:82:88:a2:d5:00:b1:2b:0d:c9:5d:9f:6a:cc:ca:39:69:49: a3:86:32:93:f8:cd:f8:43:08:d8:d3:9c:81:af:52:96:7b:c5: ab:0c:29:4b:12:55:87:8c:fb:3e:9e:c5:73:7d:52:2b:0a:2b: c5:b7:f7:56:a9:3f:b4:bf:55:52:31:73:09:14:e7:09:8c:1e: 7f:9e:d6:72:36:31:db:7a:74:98:d0:04:78:f2:e8:45:36:86: 6f:3f:d6:17:bc:a5:1c:a2:5a:7f:c9:65:23:cd:7b:49:ce:f8: b6:70:8c:34:6f:ee:d9:94:23:68:26:dc:b5:dd:99:49:a1:cf: d8:a1:a1:99:32:7b:e8:6e:07:66:03:68:bf:f2:a8:ba:3d:76: c2:76:f0:5d:47:3f:3a:3b:8a:fa:2b:3e:59:f4:95:56:e3:01: 17:36:62:8f -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUKXZxWxRjxnQQsA8hcLL9ndtVvbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDdaFw0yNjExMjcxMTQ5NDdaMDMxMTAvBgNV BAMTKDg2QTYyNjY5N0Y3NkZFQjM0QTUxMEI2NEJCMTNDMDI4NkY4QUFGNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHA7mAafAf3WWDjN6aG/Pht+GY /w0BGiRRAio+4LHqj3ZfDHqUmyAWFM2aazufwYgaZzV/Jp+oPV77APfi1PrGrrY6 r3s/Az9l7WCgr6MZBjXGx8qyCnKHm7y8PouCkO7jBy9gDIy6V8zSUGfks+BzjgeZ /kyWNBCz6NqBQxHYCOmhOnYQvbOfOFb9+6mI+Riu2U5xVqhhHdDefrIOlnuvTImx TCWK4QtHCw2tfBBh0yffC51fuCtOEUCv9k6bty9fnHEQolCMRg2oCl0LzBuqrqz/ /+1LsYAwISlLwrVimTttuLBG+6CXt69OBuaTbrCzZ0pkPsTCQY8ZFMM56cufAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUhqYmaX92/rNKUQtkuxPAKG+Kr1EwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy ZTM2MzYyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABb1kIwDQYJKoZIhvcNAQELBQADggEBAGh66zEeMZjryOBO3duDnreJ5Cpn In11nQjGYZBCqnU19uFtf9xsNY7N9XyPsJoU4H/BxN588EG1Fe6ZazpFSbG90/gZ 67Sd5ilxKyVSz6+8m9CXdp1TtTxqTNSCiKLVALErDcldn2rMyjlpSaOGMpP4zfhD CNjTnIGvUpZ7xasMKUsSVYeM+z6exXN9UisKK8W391apP7S/VVIxcwkU5wmMHn+e 1nI2Mdt6dJjQBHjy6EU2hm8/1he8pRyiWn/JZSPNe0nO+LZwjDRv7tmUI2gm3LXd mUmhz9ihoZkye+huB2YDaL/yqLo9dsJ28F1HPzo7ivorPln0lVbjARc2Yo8= -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:35 2025 by rpki-client