This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa File: 39322e3131382e35342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 1186jQuvbPRMmxqL2bKEO6zvCB0h3VRdIO5aKPqlB+Y= Subject key identifier: 99:5B:1D:6E:6C:E2:EF:C3:E4:8C:54:69:14:90:C7:26:2B:DC:3C:29 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3D91C558E32C9245FB271D59926E9359CDFFAAC0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 136787 IP address blocks: 92.118.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:91:c5:58:e3:2c:92:45:fb:27:1d:59:92:6e:93:59:cd:ff:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=995B1D6E6CE2EFC3E48C54691490C7262BDC3C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a0:5c:3a:9f:59:a1:5f:b7:15:c9:cf:22:db: 10:da:2c:36:c7:e3:d6:d3:89:04:1b:ac:65:49:3d: c4:16:08:32:6c:32:b9:a3:e3:34:cc:b6:51:4f:4f: c2:08:22:7c:2b:bb:10:f0:c8:53:9c:9b:41:e0:a0: 47:9a:b2:53:d4:ff:f6:1a:56:92:53:15:a3:c1:e2: e9:0e:6b:0f:8d:9e:3c:96:6e:c1:0c:97:59:93:ec: f3:0f:35:d2:86:de:19:22:7b:d1:93:85:f0:71:52: 53:9a:6f:33:42:f6:b0:bc:b1:a2:4a:f9:6b:69:fe: 16:69:27:35:02:ec:d7:10:84:e3:42:a2:79:65:f9: 05:cd:14:fd:0f:39:53:40:a8:3b:ba:0c:77:d8:6b: ad:95:f4:fe:ef:1e:7b:51:64:c4:cd:47:c8:90:9d: db:b9:a1:6d:bb:7e:f1:d3:6f:4f:50:5c:39:ee:85: 60:5a:fa:7d:d1:42:1b:9b:8b:65:1a:60:05:df:5b: b7:ce:e0:d6:f7:81:5d:94:9c:5d:ad:53:e9:a2:03: 3d:5d:74:f8:7a:56:3d:14:a3:1d:12:49:fc:6e:c7: 24:cc:33:10:62:0a:f6:aa:cf:87:60:ff:b4:b2:c7: f5:41:b8:2f:e1:86:07:a7:7c:ac:1b:59:29:1f:06: f3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5B:1D:6E:6C:E2:EF:C3:E4:8C:54:69:14:90:C7:26:2B:DC:3C:29 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.54.0/24 Signature Algorithm: sha256WithRSAEncryption 19:bb:95:3b:4d:9e:2a:47:bf:95:56:d9:a8:0b:7e:29:d4:d1: d8:d0:67:cf:b7:95:a1:88:1b:db:ee:c4:c0:b2:2c:8b:f7:d8: 02:3e:34:c6:7e:e2:57:3e:fa:a4:0f:58:42:ff:4e:f9:07:dc: 6b:42:84:e8:42:b7:22:a9:03:fe:59:3d:00:dd:04:8c:6b:2b: 7d:98:d7:f5:6f:b5:15:99:3c:9a:36:b7:bb:8d:f2:83:f4:fa: 0e:65:7e:88:2b:8d:94:8f:e0:c9:e3:b1:e7:af:e1:6d:75:d5: 12:cf:36:65:57:b3:4f:29:d9:4d:c1:80:76:b8:c8:ff:da:83: e8:a9:95:63:70:8e:2a:15:76:ce:ac:11:9f:b0:46:d7:37:47: 32:e3:27:8a:1c:bb:31:04:77:02:89:fa:ec:a2:97:bf:f7:7f: 52:00:75:ea:d7:42:b4:8c:d0:01:c2:ef:0a:eb:61:ef:fc:7d: e3:6d:61:43:ce:2f:e4:20:44:3c:e7:3c:0c:56:47:81:d1:24: 1d:c6:fc:7f:66:5b:b1:80:e0:55:a2:91:74:05:42:6f:0c:40: cb:7d:23:58:80:04:69:82:62:04:42:d2:bb:23:f6:f2:f7:f9: 3b:a7:f9:0a:34:89:d6:07:c3:5e:da:11:53:3c:98:6f:88:1e: af:ee:97:71 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUPZHFWOMskkX7Jx1Zkm6TWc3/qsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKDk5NUIxRDZFNkNFMkVGQzNFNDhDNTQ2OTE0OTBDNzI2MkJEQzNDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzoFw6n1mhX7cVyc8i2xDaLDbH 49bTiQQbrGVJPcQWCDJsMrmj4zTMtlFPT8IIInwruxDwyFOcm0HgoEeaslPU//Ya VpJTFaPB4ukOaw+NnjyWbsEMl1mT7PMPNdKG3hkie9GThfBxUlOabzNC9rC8saJK +Wtp/hZpJzUC7NcQhONConll+QXNFP0POVNAqDu6DHfYa62V9P7vHntRZMTNR8iQ ndu5oW27fvHTb09QXDnuhWBa+n3RQhubi2UaYAXfW7fO4Nb3gV2UnF2tU+miAz1d dPh6Vj0Uox0SSfxuxyTMMxBiCvaqz4dg/7Syx/VBuC/hhgenfKwbWSkfBvPJAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUmVsdbmzi78PkjFRpFJDHJivcPCkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABcdjYwDQYJKoZIhvcNAQELBQADggEBABm7lTtNnipHv5VW2agLfinU0djQ Z8+3laGIG9vuxMCyLIv32AI+NMZ+4lc++qQPWEL/TvkH3GtChOhCtyKpA/5ZPQDd BIxrK32Y1/VvtRWZPJo2t7uN8oP0+g5lfogrjZSP4Mnjseev4W111RLPNmVXs08p 2U3BgHa4yP/ag+iplWNwjioVds6sEZ+wRtc3RzLjJ4ocuzEEdwKJ+uyil7/3f1IA derXQrSM0AHC7wrrYe/8feNtYUPOL+QgRDznPAxWR4HRJB3G/H9mW7GA4FWikXQF Qm8MQMt9I1iABGmCYgRC0rsj9vL3+Tun+Qo0idYHw17aEVM8mG+IHq/ul3E= -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:29 2025 by rpki-client