This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa File: 39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: YhtkmynD8XtNKysKDUKrYlU1enwrBUt7FUTygecscSc= Subject key identifier: 30:AF:D8:03:21:E1:E4:ED:3C:EE:11:30:6F:EB:6F:48:51:1E:66:EB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0D44559E7E2AB529E8F7B5613C88B6A6C0C16BF3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 136787 IP address blocks: 91.242.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:44:55:9e:7e:2a:b5:29:e8:f7:b5:61:3c:88:b6:a6:c0:c1:6b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=30AFD80321E1E4ED3CEE11306FEB6F48511E66EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:19:d7:44:5f:33:e6:b5:a4:0c:35:0c:1a: 47:90:c1:0e:80:2c:71:4c:56:2d:ae:3a:c0:64:64: 39:0d:49:6d:18:c3:26:0b:c4:49:ed:fb:ad:8c:a5: 92:c6:ba:3e:06:3c:ab:a1:2f:b4:d2:07:ed:d6:f5: 5c:2a:f2:4e:75:18:a4:38:f6:eb:35:2a:f3:67:e7: 76:f5:ca:b1:2b:c3:67:ae:82:96:aa:48:27:35:e0: 74:83:89:0d:c5:a5:3b:a8:68:9e:6d:6a:22:3a:5b: b7:95:60:07:ac:40:07:ee:16:12:fe:08:67:48:24: 59:b3:31:dd:d0:28:06:ee:fe:30:24:68:1c:85:ae: 3e:37:b9:47:e1:7c:95:89:c6:db:42:ab:b1:9d:23: 10:ff:3f:17:8e:33:3b:e3:8f:9a:79:d7:88:66:a9: db:93:5f:77:b6:3c:fa:4a:e6:30:3d:12:8f:a1:9c: 33:5e:5b:62:60:d4:8e:4c:06:1e:81:93:ad:91:16: 69:98:03:5a:58:b7:a7:da:55:af:10:1d:48:81:c6: a6:61:1b:43:82:56:5d:c6:8a:ec:59:08:80:67:37: 58:b0:98:00:be:b4:d2:66:7e:1c:3e:53:5c:a7:aa: e6:55:b3:ab:be:b9:26:36:0e:60:8d:26:43:8a:39: b8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AF:D8:03:21:E1:E4:ED:3C:EE:11:30:6F:EB:6F:48:51:1E:66:EB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3234322e3234382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.242.248.0/24 Signature Algorithm: sha256WithRSAEncryption 94:95:a6:3d:44:41:40:65:79:e6:e9:4b:75:62:25:1f:cc:43: 9f:96:14:f4:04:b6:5a:f1:60:e8:c3:cd:ef:ef:ba:8d:94:9a: 9e:25:1f:81:b6:fc:40:8a:5d:b3:c4:c1:df:1d:21:3c:99:98: 3f:62:0c:e8:aa:ab:a8:14:0c:55:48:2a:26:e4:e9:87:f5:3a: 17:36:14:61:5d:31:a9:68:03:b8:ab:cd:89:04:56:5d:66:24: f1:03:23:c0:c8:af:33:f3:3f:8b:a1:7e:37:d6:3b:63:11:38: fe:20:6f:f3:5f:2a:ae:3f:93:59:af:7c:1c:47:e7:d8:e7:6e: 43:1c:5e:3a:e0:fd:66:99:ba:18:af:c2:f9:f2:10:53:a0:f4: 7c:c9:13:58:a0:1a:55:a8:94:6e:f3:6d:fd:0d:cd:8c:86:71: b8:f5:f1:b8:c4:f6:49:dd:df:8a:d3:4b:7b:16:c3:1c:db:b8: 3a:44:6f:71:48:e0:32:95:67:15:c3:b1:a9:6f:7e:91:74:03: 70:52:6c:db:c3:98:46:92:15:47:4d:35:94:6b:a1:4a:fe:fb: 0e:94:45:73:db:41:0e:74:fe:05:00:a7:a7:18:4f:3d:2c:5f: eb:62:7a:a5:d8:9e:91:a9:eb:f9:b9:7f:4c:5f:58:03:87:1d: cd:00:9b:27 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDURVnn4qtSno97VhPIi2psDBa/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKDMwQUZEODAzMjFFMUU0RUQzQ0VFMTEzMDZGRUI2RjQ4NTExRTY2RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb4xnXRF8z5rWkDDUMGkeQwQ6A LHFMVi2uOsBkZDkNSW0YwyYLxEnt+62MpZLGuj4GPKuhL7TSB+3W9Vwq8k51GKQ4 9us1KvNn53b1yrErw2eugpaqSCc14HSDiQ3FpTuoaJ5taiI6W7eVYAesQAfuFhL+ CGdIJFmzMd3QKAbu/jAkaByFrj43uUfhfJWJxttCq7GdIxD/PxeOMzvjj5p514hm qduTX3e2PPpK5jA9Eo+hnDNeW2Jg1I5MBh6Bk62RFmmYA1pYt6faVa8QHUiBxqZh G0OCVl3GiuxZCIBnN1iwmAC+tNJmfhw+U1ynquZVs6u+uSY2DmCNJkOKObjrAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUMK/YAyHh5O087hEwb+tvSFEeZuswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMjM0MzIy ZTMyMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFvy+DANBgkqhkiG9w0BAQsFAAOCAQEAlJWmPURBQGV55ulLdWIlH8xD n5YU9AS2WvFg6MPN7++6jZSaniUfgbb8QIpds8TB3x0hPJmYP2IM6KqrqBQMVUgq JuTph/U6FzYUYV0xqWgDuKvNiQRWXWYk8QMjwMivM/M/i6F+N9Y7YxE4/iBv818q rj+TWa98HEfn2OduQxxeOuD9Zpm6GK/C+fIQU6D0fMkTWKAaVaiUbvNt/Q3NjIZx uPXxuMT2Sd3fitNLexbDHNu4OkRvcUjgMpVnFcOxqW9+kXQDcFJs28OYRpIVR001 lGuhSv77DpRFc9tBDnT+BQCnpxhPPSxf62J6pdiekanr+bl/TF9YA4cdzQCbJw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:46 2025 by rpki-client