This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36372e302f32342d3234203d3e20313336373837.roa File: 39312e3231342e36372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: qfXVIy+bJMQ5Ql2FEi6wFtBzeZuYxvIuEQPkgjPdRH0= Subject key identifier: D6:0E:0B:BB:7D:D6:D4:5F:B3:43:38:31:10:CD:7F:CD:37:92:06:90 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 488C3BAC420AFE6DC10F24BD3C63D5C0828A8411 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 136787 IP address blocks: 91.214.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8c:3b:ac:42:0a:fe:6d:c1:0f:24:bd:3c:63:d5:c0:82:8a:84:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=D60E0BBB7DD6D45FB343383110CD7FCD37920690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4c:ef:d8:ae:2e:93:d6:cc:bb:ed:38:b8:d5: 3a:92:50:6b:c2:9f:69:7d:55:49:15:c9:34:11:44: cd:62:9f:cd:eb:fa:b7:fd:fa:16:16:27:08:56:45: 3a:f3:62:fe:44:07:0c:45:35:59:c8:28:c2:b1:7a: 27:0f:28:b7:da:a9:a1:59:14:20:fe:38:ee:ad:b5: 0c:a3:ef:c4:cb:32:30:18:1c:5d:fe:50:05:97:2f: 96:f0:e8:56:3e:72:bc:98:3a:a1:a1:b7:c5:93:26: e8:a9:ff:90:2f:c9:3e:77:35:33:04:51:c8:62:1e: 7d:c8:d6:4f:f3:e2:66:f4:84:6f:c4:c6:ff:de:bf: ce:64:f7:06:b7:bd:ad:39:de:d5:74:07:80:e3:68: cc:31:e8:1b:63:24:bd:db:6c:85:29:4a:28:7d:39: 97:e9:8e:4f:e9:0d:d9:2a:07:c3:a9:b7:e1:b0:b7: 89:74:a8:2e:2e:6d:02:a7:fd:25:9e:56:79:02:13: 2b:74:db:57:20:dd:ec:f9:84:1e:87:ac:c0:a4:f8: 57:5b:12:2b:c2:d0:fd:e5:54:07:8b:0f:32:a2:13: f9:29:8c:bf:a7:ac:65:95:e9:34:81:9d:59:d5:51: f9:73:65:5c:b0:e4:95:b5:d9:0e:1d:16:ec:67:af: e5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0E:0B:BB:7D:D6:D4:5F:B3:43:38:31:10:CD:7F:CD:37:92:06:90 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3231342e36372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.67.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:1b:0d:4d:68:25:5d:4f:dc:af:18:5f:9c:75:46:51:42:08: b1:7b:ac:d7:ce:13:ef:58:f9:6c:27:b9:7c:8f:b3:f9:37:27: 3e:0d:1f:33:ea:c4:ca:d7:46:81:17:6e:47:ee:1e:e9:20:c3: 4c:41:e6:89:23:b4:9e:37:91:51:cc:5c:20:13:fd:ce:24:92: c9:2a:22:3e:db:ce:a5:18:dc:ab:37:e1:62:5e:cf:94:18:58: 63:42:20:40:54:a7:1a:46:9b:54:57:8e:82:09:94:7c:ea:e8: a8:77:76:09:e6:ac:2e:f3:19:b2:bd:74:4d:45:9a:2e:97:d6: a0:84:ad:c1:d0:fb:c2:5d:81:e0:c1:94:01:1f:66:d6:f3:58: 33:89:c3:f0:d4:14:99:5d:70:74:7f:a0:42:34:a0:e9:0c:d8: e5:b8:da:a7:c6:5c:2b:07:3c:7c:cf:d8:eb:50:a1:37:ef:73: 6c:d9:fc:33:bb:d9:4e:bf:57:0d:e0:d6:57:e9:7d:67:87:69: d9:01:57:26:07:91:fd:a4:53:03:6d:b8:23:3a:8c:b5:8b:1c: fd:4f:00:78:af:35:3a:28:c6:21:06:11:43:2f:0e:dc:84:69: 5f:ea:23:69:c3:0e:83:a9:7c:d9:a0:28:3d:33:38:6a:b8:4b: bc:34:08:ca -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUSIw7rEIK/m3BDyS9PGPVwIKKhBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEQ2MEUwQkJCN0RENkQ0NUZCMzQzMzgzMTEwQ0Q3RkNEMzc5MjA2OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTO/Yri6T1sy77Ti41TqSUGvC n2l9VUkVyTQRRM1in83r+rf9+hYWJwhWRTrzYv5EBwxFNVnIKMKxeicPKLfaqaFZ FCD+OO6ttQyj78TLMjAYHF3+UAWXL5bw6FY+cryYOqGht8WTJuip/5AvyT53NTME UchiHn3I1k/z4mb0hG/Exv/ev85k9wa3va053tV0B4DjaMwx6BtjJL3bbIUpSih9 OZfpjk/pDdkqB8Opt+Gwt4l0qC4ubQKn/SWeVnkCEyt021cg3ez5hB6HrMCk+Fdb EivC0P3lVAeLDzKiE/kpjL+nrGWV6TSBnVnVUflzZVyw5JW12Q4dFuxnr+UtAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU1g4Lu33W1F+zQzgxEM1/zTeSBpAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjMxMzQy ZTM2MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABb1kMwDQYJKoZIhvcNAQELBQADggEBAIsbDU1oJV1P3K8YX5x1RlFCCLF7 rNfOE+9Y+WwnuXyPs/k3Jz4NHzPqxMrXRoEXbkfuHukgw0xB5okjtJ43kVHMXCAT /c4kkskqIj7bzqUY3Ks34WJez5QYWGNCIEBUpxpGm1RXjoIJlHzq6Kh3dgnmrC7z GbK9dE1Fmi6X1qCErcHQ+8JdgeDBlAEfZtbzWDOJw/DUFJldcHR/oEI0oOkM2OW4 2qfGXCsHPHzP2OtQoTfvc2zZ/DO72U6/Vw3g1lfpfWeHadkBVyYHkf2kUwNtuCM6 jLWLHP1PAHivNTooxiEGEUMvDtyEaV/qI2nDDoOpfNmgKD0zOGq4S7w0CMo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:13 2025 by rpki-client