This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36312e302f32342d3234203d3e203632323430.roa File: 39322e3131382e36312e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: 691hLh0BHynID5K1zx0IdvJjjsJ5ESAm4hDm1iMqSw0= Subject key identifier: 5F:AA:B4:B4:C3:91:40:84:A9:52:41:B7:A0:3B:F3:A1:88:45:AE:6A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 52C3349B31DDFF2C19E4485B4AAB0FA9FACA6DDD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36312e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 62240 IP address blocks: 92.118.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c3:34:9b:31:dd:ff:2c:19:e4:48:5b:4a:ab:0f:a9:fa:ca:6d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=5FAAB4B4C3914084A95241B7A03BF3A18845AE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:5e:a2:27:55:9e:7c:af:f4:e9:2e:97:b8: dc:fb:f7:40:7d:a2:37:43:e0:4d:46:92:58:89:d8: 2e:ab:62:48:16:00:1c:a4:9b:9c:93:68:67:53:6c: 61:cb:6a:d9:18:87:aa:73:b2:1f:5b:b9:ba:cb:4f: e3:ac:2e:10:f3:d8:1c:74:16:3c:c9:c0:b1:e7:80: 25:f1:8b:f2:0c:2a:a7:07:25:89:1d:c9:6a:79:bf: f1:32:c3:ff:ef:9d:97:3d:ed:d8:3a:24:2b:31:99: 94:09:56:b6:e1:33:ab:a7:1e:aa:84:82:d6:84:72: 54:08:41:30:09:3e:d2:df:f2:4b:cc:35:f5:dc:f4: a0:3d:44:b9:84:03:5f:b2:a6:d2:ad:44:c7:83:a9: 01:04:ee:b5:78:fa:d5:57:c0:e4:46:1e:c9:8b:8b: 91:91:2c:03:64:50:fa:35:a9:49:1b:0b:d6:88:98: c9:7f:ab:dc:cf:08:7b:2e:0c:80:09:e2:d9:04:be: b0:c2:6f:a0:6f:6f:0b:cc:72:1c:bc:14:a1:4b:3a: 1c:73:c4:a8:12:c4:53:84:45:7d:2f:24:7c:6d:a9: ae:07:d6:9f:e2:ad:a0:86:8b:e8:15:a4:48:a8:ea: 47:14:52:1d:f6:d7:61:7c:a3:a6:3e:2d:c4:d3:5a: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AA:B4:B4:C3:91:40:84:A9:52:41:B7:A0:3B:F3:A1:88:45:AE:6A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36312e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.61.0/24 Signature Algorithm: sha256WithRSAEncryption 91:5e:66:29:3b:5e:9c:21:02:3b:c5:cc:dd:b2:8c:f7:96:14: 60:04:6b:a9:ff:47:a0:59:7f:d7:3a:a5:9e:11:36:79:c4:00: 8d:71:9c:68:49:75:c4:f6:3e:57:70:6f:81:af:08:34:56:d0: 77:94:a1:21:87:d4:cf:b6:53:78:a4:1d:43:43:20:73:d8:f2: ff:c4:3e:99:86:69:cf:fc:e6:cf:a7:4e:71:12:95:02:96:ba: c8:ef:6b:e0:e5:e8:20:52:d3:47:4b:5b:29:ab:52:35:70:03: cb:91:34:58:f3:37:81:66:32:56:3f:dc:82:7e:1f:1a:0a:6d: a5:d4:b1:01:ce:2c:5a:1e:3d:28:6b:7d:ea:d3:ab:86:d8:df: c6:08:41:ac:7c:04:76:d3:63:43:79:45:58:2c:11:9d:51:53: b4:3f:7a:d8:07:66:10:c8:f0:82:69:81:80:b2:6b:ad:9c:df: 59:21:3d:7b:1f:4f:4a:7b:1d:1f:97:af:3e:33:fc:d4:40:fc: a0:1a:50:f6:63:36:ea:fd:b6:b9:06:fc:d3:f8:19:2a:ad:c8: 93:c7:82:3c:2a:2d:2e:f3:02:ed:05:b9:ac:1f:bb:36:b4:f8: 78:4d:63:97:44:26:6c:28:d9:cf:d7:eb:94:20:4a:d8:2c:e2: 97:1c:18:95 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUUsM0mzHd/ywZ5EhbSqsPqfrKbd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKDVGQUFCNEI0QzM5MTQwODRBOTUyNDFCN0EwM0JGM0ExODg0NUFFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzF6iJ1WefK/06S6XuNz790B9 ojdD4E1GkliJ2C6rYkgWABykm5yTaGdTbGHLatkYh6pzsh9bubrLT+OsLhDz2Bx0 FjzJwLHngCXxi/IMKqcHJYkdyWp5v/Eyw//vnZc97dg6JCsxmZQJVrbhM6unHqqE gtaEclQIQTAJPtLf8kvMNfXc9KA9RLmEA1+yptKtRMeDqQEE7rV4+tVXwORGHsmL i5GRLANkUPo1qUkbC9aImMl/q9zPCHsuDIAJ4tkEvrDCb6BvbwvMchy8FKFLOhxz xKgSxFOERX0vJHxtqa4H1p/iraCGi+gVpEio6kcUUh3212F8o6Y+LcTTWoXzAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUX6q0tMORQISpUkG3oDvzoYhFrmowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzIzNDMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAXHY9MA0GCSqGSIb3DQEBCwUAA4IBAQCRXmYpO16cIQI7xczdsoz3lhRgBGup /0egWX/XOqWeETZ5xACNcZxoSXXE9j5XcG+Brwg0VtB3lKEhh9TPtlN4pB1DQyBz 2PL/xD6ZhmnP/ObPp05xEpUClrrI72vg5eggUtNHS1spq1I1cAPLkTRY8zeBZjJW P9yCfh8aCm2l1LEBzixaHj0oa33q06uG2N/GCEGsfAR202NDeUVYLBGdUVO0P3rY B2YQyPCCaYGAsmutnN9ZIT17H09Kex0fl68+M/zUQPygGlD2Yzbq/ba5BvzT+Bkq rciTx4I8Ki0u8wLtBbmsH7s2tPh4TWOXRCZsKNnP1+uUIErYLOKXHBiV -----END CERTIFICATE-----Generated at Sat Dec 6 12:01:33 2025 by rpki-client