This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa File: 39322e3131392e38302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 9u+cPuWpOYlRl9af417zBGJniup8sNsEkCjcYIMrW88= Subject key identifier: 4B:8D:5D:C0:8E:23:6C:76:0C:F8:69:B2:81:F6:38:06:E5:4E:43:73 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 177C713147E827038A6515BC531FA0C04B6E5C50 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:53 +0000 ROA not before: Fri 28 Nov 2025 11:44:53 +0000 ROA not after: Fri 27 Nov 2026 11:49:53 +0000 asID: 136787 IP address blocks: 92.119.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7c:71:31:47:e8:27:03:8a:65:15:bc:53:1f:a0:c0:4b:6e:5c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:53 2025 GMT Not After : Nov 27 11:49:53 2026 GMT Subject: CN=4B8D5DC08E236C760CF869B281F63806E54E4373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:1d:ff:b5:b3:49:16:bc:cc:f7:17:cd:e0: 5f:54:bb:3f:e9:c2:7c:9a:55:c9:5b:17:2a:f4:17: af:22:ad:e7:e8:38:4b:ec:bb:f7:50:c8:c2:9a:b5: 79:24:d6:1b:3a:c7:0b:10:36:f2:ff:72:72:44:9b: f4:29:0b:91:82:16:66:73:d2:e7:12:66:23:1c:b5: e3:13:a7:94:e3:67:03:cb:ea:5f:b2:98:6d:01:ff: 3a:b4:e9:9d:79:44:e5:bf:5a:f5:05:ea:a9:b3:02: df:d5:58:26:af:e8:c1:a4:c5:9c:ca:86:a8:bd:a6: 6e:a2:f0:d8:13:25:a8:a6:49:75:d6:d9:3d:11:93: 00:11:88:8b:e9:ec:f7:e2:85:1c:39:e4:a4:87:1e: dc:aa:8d:fd:b0:a3:e7:e5:76:38:fb:ec:e7:1f:91: 46:da:43:5c:5f:2b:7a:dc:47:27:4f:42:6d:5e:88: 57:f7:30:35:41:46:b3:21:d4:60:c4:61:82:b4:f3: 52:3e:e2:f5:29:cb:a1:4b:c7:d5:d5:99:f0:5c:d6: 7c:87:72:ac:18:1d:f4:13:31:29:df:e8:c3:df:34: 73:eb:4d:4d:86:b5:33:fc:1e:7a:85:1e:d9:8d:89: c6:f7:65:1c:18:b0:d4:3d:04:83:64:2c:23:b9:7e: 28:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:5D:C0:8E:23:6C:76:0C:F8:69:B2:81:F6:38:06:E5:4E:43:73 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.80.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:b5:03:11:b9:3f:ff:1c:33:c1:58:27:67:fc:a9:14:18:40: d4:e0:31:77:57:0c:6f:0f:d3:8d:98:dd:e1:1e:3f:0f:f0:64: 6b:f9:e8:2e:77:eb:66:33:5f:69:5e:ef:fd:c2:2c:a1:e6:d0: 45:a0:12:0b:69:6d:b2:b0:01:e4:aa:d1:fe:aa:c5:7f:96:a6: eb:64:33:9d:8d:63:51:fb:e6:4f:e1:a7:f2:87:12:65:64:50: bc:fc:78:6d:59:80:d3:c2:d7:b0:83:8c:45:15:33:a8:43:f2: 80:50:80:cb:ec:4c:37:cf:0d:df:fc:db:be:d0:63:b4:a2:ca: 96:c3:62:26:c9:af:ec:e9:58:07:dc:e9:c2:e3:54:50:37:0f: 5e:95:ee:db:e7:f2:97:fa:f0:5b:72:9f:4a:72:b1:b6:1f:2d: 8e:aa:f9:50:2c:3d:10:3c:ad:f2:74:8c:15:13:39:04:d7:09: 0e:f2:30:e6:ad:1d:c7:77:fb:d6:c4:8c:26:0b:59:bc:1e:0e: e4:95:c7:0d:02:60:2c:ab:00:b6:98:d4:cb:4c:24:7a:74:a3: ec:1c:5b:3c:4f:00:43:0a:00:f1:f7:14:05:70:b1:c9:9c:c0: dc:56:c7:78:a8:b8:55:ed:2a:65:2b:41:56:d8:65:eb:63:2f: 40:a8:f5:49 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUF3xxMUfoJwOKZRW8Ux+gwEtuXFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTNaFw0yNjExMjcxMTQ5NTNaMDMxMTAvBgNV BAMTKDRCOEQ1REMwOEUyMzZDNzYwQ0Y4NjlCMjgxRjYzODA2RTU0RTQzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDExR3/tbNJFrzM9xfN4F9Uuz/p wnyaVclbFyr0F68irefoOEvsu/dQyMKatXkk1hs6xwsQNvL/cnJEm/QpC5GCFmZz 0ucSZiMcteMTp5TjZwPL6l+ymG0B/zq06Z15ROW/WvUF6qmzAt/VWCav6MGkxZzK hqi9pm6i8NgTJaimSXXW2T0RkwARiIvp7PfihRw55KSHHtyqjf2wo+fldjj77Ocf kUbaQ1xfK3rcRydPQm1eiFf3MDVBRrMh1GDEYYK081I+4vUpy6FLx9XVmfBc1nyH cqwYHfQTMSnf6MPfNHPrTU2GtTP8HnqFHtmNicb3ZRwYsNQ9BINkLCO5fii7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUS41dwI4jbHYM+GmygfY4BuVOQ3MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzky ZTM4MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABcd1AwDQYJKoZIhvcNAQELBQADggEBAE61AxG5P/8cM8FYJ2f8qRQYQNTg MXdXDG8P042Y3eEePw/wZGv56C5362YzX2le7/3CLKHm0EWgEgtpbbKwAeSq0f6q xX+WputkM52NY1H75k/hp/KHEmVkULz8eG1ZgNPC17CDjEUVM6hD8oBQgMvsTDfP Dd/8277QY7SiypbDYibJr+zpWAfc6cLjVFA3D16V7tvn8pf68Ftyn0pysbYfLY6q +VAsPRA8rfJ0jBUTOQTXCQ7yMOatHcd3+9bEjCYLWbweDuSVxw0CYCyrALaY1MtM JHp0o+wcWzxPAEMKAPH3FAVwscmcwNxWx3iouFXtKmUrQVbYZetjL0Co9Uk= -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:40 2025 by rpki-client