This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35332e302f32342d3234203d3e20313336373837.roa File: 39322e3131382e35332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: narfJIV5KXU2L9JaxC2vi7PDSdzXF3/6TxOe6piEktg= Subject key identifier: BA:F7:CE:CD:2D:67:9A:83:42:F7:3E:0D:C3:B6:FC:80:B9:45:E3:BB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 13FB6F87D6C12DF2AD95C73FC4B0ECAD4D43E14F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 136787 IP address blocks: 92.118.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:fb:6f:87:d6:c1:2d:f2:ad:95:c7:3f:c4:b0:ec:ad:4d:43:e1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=BAF7CECD2D679A8342F73E0DC3B6FC80B945E3BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:8f:ee:86:bc:70:ec:4b:5e:ef:76:fe:56:7f: 9d:c7:50:fa:15:13:44:77:91:3c:68:6a:c1:12:66: a2:0b:75:28:86:62:ae:f6:8b:f2:03:05:fa:93:47: eb:5e:6b:b5:d7:df:45:27:b6:27:68:1a:4d:e4:f6: 1d:f2:c3:6d:cf:53:54:cd:a1:83:5a:3c:82:b9:a6: 72:9c:b3:9a:27:50:85:c8:b0:a2:44:0a:01:62:bf: 34:f8:94:9b:df:e8:61:5c:8c:c6:65:f1:39:95:df: 98:5a:0d:3b:15:b8:ba:2b:80:92:4c:a6:7e:b4:a8: 73:14:33:9e:75:35:93:4a:ad:a4:5d:c9:48:f8:83: a5:d0:24:76:6d:04:99:42:d2:31:08:f3:c6:4f:fe: ec:c0:d3:c7:b0:74:22:54:9f:93:96:2b:51:e5:39: ab:63:e3:76:3f:e1:9b:29:70:52:c8:d3:c2:04:5f: 90:e8:6b:3e:e7:95:8f:51:74:f4:89:03:3d:a9:7f: ce:ea:00:7d:e6:7f:41:a4:33:96:eb:18:b0:98:35: 41:78:bb:fc:e8:dd:d1:7e:dc:0b:e1:2b:f0:4e:81: a9:7b:0c:1b:0e:eb:7a:32:88:2b:f9:9b:8b:d7:8f: 4d:b8:3a:3b:dd:85:36:0c:e8:e2:65:5b:a8:e7:a1: c7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F7:CE:CD:2D:67:9A:83:42:F7:3E:0D:C3:B6:FC:80:B9:45:E3:BB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.53.0/24 Signature Algorithm: sha256WithRSAEncryption ab:2a:36:db:0e:8b:78:dc:03:2a:c7:e5:42:27:be:43:49:ce: 0e:95:2f:12:d1:55:a5:0a:6f:2f:71:3f:07:c2:ef:4d:7b:a7: 83:93:62:d2:3e:e3:c8:10:70:71:d7:0f:b9:f5:17:b9:ae:7f: 95:be:49:52:b9:5b:5e:7c:4c:9b:bd:68:67:93:0a:1f:9a:30: 0d:51:2e:26:2b:0e:ed:7d:fb:56:50:f4:c0:5e:d9:7f:a4:c4: f9:86:03:20:7f:9e:29:dc:55:9f:93:a2:bf:fb:ac:d8:b7:c9: 8b:68:1e:65:00:1a:99:b5:6c:4e:ca:d5:0e:43:26:c2:88:a8: 61:d8:16:b7:08:44:13:f7:ae:04:cf:1c:a1:d3:eb:25:35:4b: c0:45:f6:fe:4e:cb:6c:72:ee:ff:24:94:62:0c:3e:aa:9a:9d: f8:f5:ab:f5:1c:cb:ca:3a:c8:4c:eb:2a:60:5c:04:7a:14:b1: 7d:0a:8c:87:3e:93:49:06:17:78:9d:50:74:a1:4f:9d:93:59: 75:f5:82:85:23:64:6e:9a:61:32:c2:36:7e:1c:a4:d1:dd:68: 81:76:6a:ea:ec:e8:7a:46:7f:db:f9:eb:15:e5:91:32:01:99: 0f:4c:ee:ab:fa:d2:bd:3c:0e:9c:46:1d:91:22:a1:45:a5:f2: d6:2c:ea:97 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUE/tvh9bBLfKtlcc/xLDsrU1D4U8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKEJBRjdDRUNEMkQ2NzlBODM0MkY3M0UwREMzQjZGQzgwQjk0NUUzQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqj+6GvHDsS17vdv5Wf53HUPoV E0R3kTxoasESZqILdSiGYq72i/IDBfqTR+tea7XX30UntidoGk3k9h3yw23PU1TN oYNaPIK5pnKcs5onUIXIsKJECgFivzT4lJvf6GFcjMZl8TmV35haDTsVuLorgJJM pn60qHMUM551NZNKraRdyUj4g6XQJHZtBJlC0jEI88ZP/uzA08ewdCJUn5OWK1Hl Oatj43Y/4ZspcFLI08IEX5Doaz7nlY9RdPSJAz2pf87qAH3mf0GkM5brGLCYNUF4 u/zo3dF+3AvhK/BOgal7DBsO63oyiCv5m4vXj024OjvdhTYM6OJlW6jnoce5AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUuvfOzS1nmoNC9z4Nw7b8gLlF47swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABcdjUwDQYJKoZIhvcNAQELBQADggEBAKsqNtsOi3jcAyrH5UInvkNJzg6V LxLRVaUKby9xPwfC7017p4OTYtI+48gQcHHXD7n1F7muf5W+SVK5W158TJu9aGeT Ch+aMA1RLiYrDu19+1ZQ9MBe2X+kxPmGAyB/nincVZ+Tor/7rNi3yYtoHmUAGpm1 bE7K1Q5DJsKIqGHYFrcIRBP3rgTPHKHT6yU1S8BF9v5Oy2xy7v8klGIMPqqanfj1 q/Ucy8o6yEzrKmBcBHoUsX0KjIc+k0kGF3idUHShT52TWXX1goUjZG6aYTLCNn4c pNHdaIF2aurs6HpGf9v56xXlkTIBmQ9M7qv60r08DpxGHZEioUWl8tYs6pc= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:05 2025 by rpki-client