This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35322e302f32342d3234203d3e20313336373837.roa File: 39322e3131382e35322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: NML3SWLiuyTdVlOKScUwQMwCx6BD9BTp/LNpilNGkrc= Subject key identifier: D8:A6:5E:DF:EB:E6:78:AC:FC:DF:E7:9E:73:60:DB:D3:58:2E:88:7F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1D6FBB8DEDBF1EE5444F589BE4ECFF68EA82AA36 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:13 +0000 ROA not before: Fri 21 Nov 2025 15:44:13 +0000 ROA not after: Fri 20 Nov 2026 15:49:13 +0000 asID: 136787 IP address blocks: 92.118.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:6f:bb:8d:ed:bf:1e:e5:44:4f:58:9b:e4:ec:ff:68:ea:82:aa:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:13 2025 GMT Not After : Nov 20 15:49:13 2026 GMT Subject: CN=D8A65EDFEBE678ACFCDFE79E7360DBD3582E887F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:e5:e6:ec:ee:2e:b3:36:3f:e8:02:c3:f7: 72:74:6c:18:95:06:17:3f:19:d7:b3:00:99:bb:85: 5c:39:0f:24:c6:b6:dd:19:db:b2:59:0c:bc:e0:65: e5:bc:72:7e:2b:90:77:e8:9e:ba:89:18:6c:25:21: 5b:04:b9:41:21:8b:19:34:d8:a7:a5:f4:71:bc:75: 8f:96:ea:46:99:db:e3:49:44:47:51:f4:86:f7:ac: ef:0e:8f:9f:27:5e:d6:65:ab:cb:2d:11:24:3f:1c: b5:b9:ca:6d:6e:cc:f7:c2:51:cd:6d:a0:b8:ff:9a: d0:78:b0:d5:9a:50:1d:16:e1:dd:f5:97:1c:47:83: 04:99:4f:6f:19:d3:c1:c8:54:6c:60:23:43:fb:ad: 85:93:96:6e:93:34:bb:6e:41:e2:46:fe:5b:16:07: 39:c0:6b:2d:c4:73:88:d5:70:90:5a:c9:d9:1a:66: a0:45:3f:60:e0:2e:a5:9c:45:ba:1f:67:e2:f2:d7: 6f:36:6e:9f:08:58:de:a9:3a:34:ed:02:f9:cb:eb: 17:a4:ef:02:74:33:d3:b1:48:76:fb:ba:c2:19:c2: ae:ef:7f:50:ee:9c:f5:f0:81:11:56:1d:af:0d:e6: 5a:8a:06:d6:b5:b9:9c:4c:4e:1b:e0:a1:1e:4e:6e: 4e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A6:5E:DF:EB:E6:78:AC:FC:DF:E7:9E:73:60:DB:D3:58:2E:88:7F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.52.0/24 Signature Algorithm: sha256WithRSAEncryption 15:53:16:d8:81:c7:60:77:9a:38:9c:2b:9e:07:30:96:d2:ca: 1a:ed:7d:0e:3a:ff:9a:e5:9e:0b:2b:a4:45:a7:97:7b:e3:dd: a0:4a:88:7f:51:5d:21:a1:7c:40:5f:16:9b:32:62:e4:4a:a8: c1:e1:c5:73:db:9c:91:7b:b6:66:3c:d6:8a:19:77:b0:49:60: 94:d3:7f:5e:12:65:4a:9e:b1:dd:58:68:cf:85:ff:60:b3:44: 65:6f:25:cf:10:fb:68:59:dc:e6:6d:41:26:cb:07:be:e5:6f: c1:92:5f:4a:0a:b1:d8:2a:75:58:f7:c3:e6:9c:9a:97:57:1f: 5c:6c:bf:cd:c2:b5:5c:93:7f:5c:cc:29:e3:ed:e2:0f:74:5f: 06:db:77:93:fb:0b:88:51:46:88:79:4d:fb:1a:10:ab:b9:87: 71:ad:ab:ba:f6:48:14:8a:91:85:07:6e:94:be:34:8d:60:ea: 75:ef:61:26:6e:5c:c2:c5:bc:1c:b6:10:f4:34:d8:97:7b:e6: 34:d0:db:1e:8a:97:16:03:d0:cd:be:08:46:bb:c1:3b:19:7a: e0:fc:c5:5f:6c:14:74:05:bf:e6:1d:6d:26:18:4a:f1:43:92: 06:28:b8:d1:4b:87:8b:97:6f:d7:4d:16:7c:60:3c:93:85:49: d2:54:93:d1 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUHW+7je2/HuVET1ib5Oz/aOqCqjYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTNaFw0yNjExMjAxNTQ5MTNaMDMxMTAvBgNV BAMTKEQ4QTY1RURGRUJFNjc4QUNGQ0RGRTc5RTczNjBEQkQzNTgyRTg4N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8huXm7O4uszY/6ALD93J0bBiV Bhc/GdezAJm7hVw5DyTGtt0Z27JZDLzgZeW8cn4rkHfonrqJGGwlIVsEuUEhixk0 2Kel9HG8dY+W6kaZ2+NJREdR9Ib3rO8Oj58nXtZlq8stESQ/HLW5ym1uzPfCUc1t oLj/mtB4sNWaUB0W4d31lxxHgwSZT28Z08HIVGxgI0P7rYWTlm6TNLtuQeJG/lsW BznAay3Ec4jVcJBaydkaZqBFP2DgLqWcRbofZ+Ly1282bp8IWN6pOjTtAvnL6xek 7wJ0M9OxSHb7usIZwq7vf1DunPXwgRFWHa8N5lqKBta1uZxMThvgoR5Obk5nAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU2KZe3+vmeKz83+eec2Db01guiH8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABcdjQwDQYJKoZIhvcNAQELBQADggEBABVTFtiBx2B3mjicK54HMJbSyhrt fQ46/5rlngsrpEWnl3vj3aBKiH9RXSGhfEBfFpsyYuRKqMHhxXPbnJF7tmY81ooZ d7BJYJTTf14SZUqesd1YaM+F/2CzRGVvJc8Q+2hZ3OZtQSbLB77lb8GSX0oKsdgq dVj3w+acmpdXH1xsv83CtVyTf1zMKePt4g90Xwbbd5P7C4hRRoh5TfsaEKu5h3Gt q7r2SBSKkYUHbpS+NI1g6nXvYSZuXMLFvBy2EPQ02Jd75jTQ2x6KlxYD0M2+CEa7 wTsZeuD8xV9sFHQFv+YdbSYYSvFDkgYouNFLh4uXb9dNFnxgPJOFSdJUk9E= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:22 2025 by rpki-client