This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa File: 39322e3131382e35352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: RfKnRNc5IPiaJpagWnqM1xb6kJd6xOSFnz0dub6r+7o= Subject key identifier: C9:E7:44:F7:E8:8C:1E:07:54:E8:7D:CB:37:EE:11:37:3C:7D:2D:B4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 061210CFEFADFABD0DBAEB34119018C5E2E545D0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 136787 IP address blocks: 92.118.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:12:10:cf:ef:ad:fa:bd:0d:ba:eb:34:11:90:18:c5:e2:e5:45:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=C9E744F7E88C1E0754E87DCB37EE11373C7D2DB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:ba:3d:c9:0c:7b:fd:79:32:53:54:ee:c1: d5:5a:35:4d:e9:1f:73:21:f4:df:f1:a5:12:17:02: 4f:3a:8e:ca:2b:47:bb:e7:45:76:1b:b3:a3:ae:10: af:70:73:71:e2:c3:e7:34:3b:83:e0:65:e3:1f:b8: 56:2b:1e:99:f1:b2:35:79:75:c2:73:57:cc:af:d8: 35:0e:54:66:bf:39:0b:28:fe:db:00:1d:e7:e9:ae: 4e:46:b3:a8:4d:f7:3b:a8:84:b4:8e:be:c1:c3:27: 2a:25:d8:cc:15:f3:e8:b7:62:8b:de:a8:c2:48:52: 16:a7:08:95:15:19:54:b5:7e:c7:52:7d:0a:2e:10: 63:a4:89:90:e0:ea:ef:d0:c5:87:d9:c9:d2:28:dd: 78:56:d9:50:48:0a:91:68:ad:7a:8c:da:02:4d:e1: 04:5b:67:81:92:05:21:ec:07:f1:47:1c:ca:6e:31: 00:2d:2c:5d:ee:d7:64:f4:d3:6c:4c:ee:0d:64:69: ad:96:9d:ed:3b:a3:f5:14:f4:bb:56:38:3b:94:e2: 6f:f3:dd:27:4b:43:73:ff:1b:ed:be:57:a5:dd:5a: a3:ed:1c:df:98:21:b5:12:5f:93:d9:71:0b:5b:83: e5:7f:32:05:8b:73:44:b8:5d:33:a3:06:de:f6:c6: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E7:44:F7:E8:8C:1E:07:54:E8:7D:CB:37:EE:11:37:3C:7D:2D:B4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e35352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.55.0/24 Signature Algorithm: sha256WithRSAEncryption a7:ab:75:62:6a:53:75:bc:d7:5b:ea:4b:f8:c2:9c:59:57:7a: da:60:8a:3e:3a:09:ed:fa:9e:2a:c8:de:33:db:1c:60:c9:e0: 9e:79:c4:f6:e8:8a:61:1a:a5:a7:2b:67:92:d7:fa:e3:e4:02: e5:8a:60:c0:6e:c9:80:66:9c:37:6c:cd:e6:18:7e:a1:8e:bd: 4a:52:f1:01:ab:9d:06:e3:97:50:a7:e6:81:e0:09:73:5b:de: b8:e4:0d:69:40:fd:0c:ce:54:f1:e5:60:67:df:a2:1e:d2:6c: 28:9d:2f:0b:2a:9d:5b:67:07:0d:dd:56:da:64:07:fe:61:ae: ae:84:5b:71:00:fe:a6:c0:ab:8e:df:b4:e6:32:b1:ca:75:4b: 48:ec:de:2c:d9:05:32:a9:5e:03:ed:8c:51:ec:3c:da:bb:06: f0:08:37:02:9a:0a:3d:4e:40:4f:35:cc:01:bd:8b:e2:7a:60: 10:ae:e2:37:2f:95:1b:a4:02:74:32:b1:3d:93:e8:8e:f9:2b: 7f:3b:47:e9:07:f8:64:7d:37:d9:63:fc:31:b2:21:f6:91:1f: 12:02:23:b6:af:81:c9:3e:9f:bc:22:d1:85:d6:77:9b:8f:22: 61:a4:4f:9f:4e:56:0d:ae:7f:82:05:91:40:f9:9c:cb:f8:14: 82:ab:b8:53 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUBhIQz++t+r0Nuus0EZAYxeLlRdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKEM5RTc0NEY3RTg4QzFFMDc1NEU4N0RDQjM3RUUxMTM3M0M3RDJEQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RLo9yQx7/XkyU1TuwdVaNU3p H3Mh9N/xpRIXAk86jsorR7vnRXYbs6OuEK9wc3Hiw+c0O4PgZeMfuFYrHpnxsjV5 dcJzV8yv2DUOVGa/OQso/tsAHefprk5Gs6hN9zuohLSOvsHDJyol2MwV8+i3Yove qMJIUhanCJUVGVS1fsdSfQouEGOkiZDg6u/QxYfZydIo3XhW2VBICpForXqM2gJN 4QRbZ4GSBSHsB/FHHMpuMQAtLF3u12T002xM7g1kaa2Wne07o/UU9LtWODuU4m/z 3SdLQ3P/G+2+V6XdWqPtHN+YIbUSX5PZcQtbg+V/MgWLc0S4XTOjBt72xjcDAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUyedE9+iMHgdU6H3LN+4RNzx9LbQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABcdjcwDQYJKoZIhvcNAQELBQADggEBAKerdWJqU3W811vqS/jCnFlXetpg ij46Ce36nirI3jPbHGDJ4J55xPboimEapacrZ5LX+uPkAuWKYMBuyYBmnDdszeYY fqGOvUpS8QGrnQbjl1Cn5oHgCXNb3rjkDWlA/QzOVPHlYGffoh7SbCidLwsqnVtn Bw3dVtpkB/5hrq6EW3EA/qbAq47ftOYyscp1S0js3izZBTKpXgPtjFHsPNq7BvAI NwKaCj1OQE81zAG9i+J6YBCu4jcvlRukAnQysT2T6I75K387R+kH+GR9N9lj/DGy IfaRHxICI7avgck+n7wi0YXWd5uPImGkT59OVg2uf4IFkUD5nMv4FIKruFM= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:53 2025 by rpki-client