This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38312e302f32342d3234203d3e20313336373837.roa File: 39322e3131392e38312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 87vgXRJmArTKMl3tXKD9++Hdjwfjj3qjxW2N9bzp+Kw= Subject key identifier: F3:FF:B7:E2:3F:B1:8B:FD:E8:DA:1F:A7:D2:2E:55:29:98:34:EA:3E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 54FDF8EFC889E91A863ECDFED200634FFD1A6ED8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:27 +0000 ROA not before: Fri 28 Nov 2025 11:44:27 +0000 ROA not after: Fri 27 Nov 2026 11:49:27 +0000 asID: 136787 IP address blocks: 92.119.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:fd:f8:ef:c8:89:e9:1a:86:3e:cd:fe:d2:00:63:4f:fd:1a:6e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:27 2025 GMT Not After : Nov 27 11:49:27 2026 GMT Subject: CN=F3FFB7E23FB18BFDE8DA1FA7D22E55299834EA3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7c:87:ff:4c:06:d1:3b:a1:fc:76:0d:b8:94: 83:11:6a:77:ed:20:d9:be:6d:07:77:f2:66:97:cc: 8b:d2:2a:33:d8:0e:79:15:75:21:63:a7:a9:35:d7: 4d:fa:0d:b4:56:b8:39:da:32:5e:f0:ae:ad:0c:06: 23:df:92:c7:55:16:3a:bf:35:40:c4:b7:61:e6:2b: 68:86:18:d5:e5:e9:cb:bd:a0:c7:af:e5:36:17:57: 6f:e4:ca:6d:24:8f:1f:db:34:4a:50:c5:3d:97:30: 6c:96:8f:d3:7b:91:42:43:f1:a0:fc:f7:75:7c:e2: 8a:3a:99:b3:ca:9c:36:ff:63:9a:b9:b9:2f:ed:b0: a9:c2:dd:f9:9a:1b:36:5a:0b:3d:b8:90:54:f0:d1: 8a:86:b0:a8:e9:95:5c:93:4d:47:9c:9a:13:5c:42: 51:7e:42:87:fa:05:03:fe:10:33:3e:d4:5b:65:63: 95:04:aa:f3:6f:bd:c1:7c:0c:f2:73:9e:43:05:c3: 99:39:02:b1:ac:8f:a5:52:23:cd:02:56:0a:e8:a2: 52:07:06:34:92:f8:33:64:31:e9:e2:5d:bd:6e:38: e8:1f:fc:4a:02:19:a6:b7:7c:f4:4d:42:46:f9:70: c8:38:85:56:0a:dc:c6:75:55:b2:c4:2e:ef:d4:c1: 12:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:FF:B7:E2:3F:B1:8B:FD:E8:DA:1F:A7:D2:2E:55:29:98:34:EA:3E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.81.0/24 Signature Algorithm: sha256WithRSAEncryption a8:8c:5c:07:02:da:94:7c:1c:88:3b:e8:92:24:bf:95:00:e8: 7c:6d:ae:c5:54:4e:c5:a6:8e:24:3c:8e:b8:7a:e3:3d:60:3b: 96:01:d3:9b:26:5b:19:6a:4e:37:e1:8d:ec:e5:f7:a4:77:1a: 07:47:b9:b5:cf:38:f6:68:e9:40:fe:9f:4d:d1:69:d7:97:9d: 69:04:6d:49:18:3d:4c:43:0a:a9:9e:db:ac:62:9f:b2:db:e5: 29:b0:25:96:34:f7:e2:24:1a:20:53:93:c0:dc:35:c1:5c:df: 99:5c:ba:b8:1d:b8:35:64:a6:d4:22:87:0b:f3:3a:a6:ce:c6: a4:02:e6:a2:39:41:39:27:d0:ac:1b:32:94:04:1f:46:a8:01: 0e:4a:4a:a3:4b:9c:ff:6b:53:8f:32:14:a6:a2:b6:a0:c2:f4: 73:b3:93:d6:66:46:d2:e3:bd:e7:90:e6:e6:b6:26:a6:bb:ef: 27:09:04:21:a4:ea:3c:20:62:e0:76:fa:fa:c1:6d:7b:b7:e9: 18:9f:be:db:26:aa:b2:5c:09:6a:16:d7:91:ad:e0:48:b6:56: c2:e7:53:d0:4d:54:01:76:1c:b5:a6:de:73:71:e8:cb:dd:8a: da:67:73:8e:00:3f:d0:3a:aa:19:ff:60:a0:f5:09:66:a3:f0: 83:09:d5:ac -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUVP3478iJ6RqGPs3+0gBjT/0abtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjdaFw0yNjExMjcxMTQ5MjdaMDMxMTAvBgNV BAMTKEYzRkZCN0UyM0ZCMThCRkRFOERBMUZBN0QyMkU1NTI5OTgzNEVBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6fIf/TAbRO6H8dg24lIMRanft INm+bQd38maXzIvSKjPYDnkVdSFjp6k11036DbRWuDnaMl7wrq0MBiPfksdVFjq/ NUDEt2HmK2iGGNXl6cu9oMev5TYXV2/kym0kjx/bNEpQxT2XMGyWj9N7kUJD8aD8 93V84oo6mbPKnDb/Y5q5uS/tsKnC3fmaGzZaCz24kFTw0YqGsKjplVyTTUecmhNc QlF+Qof6BQP+EDM+1FtlY5UEqvNvvcF8DPJznkMFw5k5ArGsj6VSI80CVgroolIH BjSS+DNkMeniXb1uOOgf/EoCGaa3fPRNQkb5cMg4hVYK3MZ1VbLELu/UwRItAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU8/+34j+xi/3o2h+n0i5VKZg06j4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzky ZTM4MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABcd1EwDQYJKoZIhvcNAQELBQADggEBAKiMXAcC2pR8HIg76JIkv5UA6Hxt rsVUTsWmjiQ8jrh64z1gO5YB05smWxlqTjfhjezl96R3GgdHubXPOPZo6UD+n03R adeXnWkEbUkYPUxDCqme26xin7Lb5SmwJZY09+IkGiBTk8DcNcFc35lcurgduDVk ptQihwvzOqbOxqQC5qI5QTkn0KwbMpQEH0aoAQ5KSqNLnP9rU48yFKaitqDC9HOz k9ZmRtLjveeQ5ua2Jqa77ycJBCGk6jwgYuB2+vrBbXu36RifvtsmqrJcCWoW15Gt 4Ei2VsLnU9BNVAF2HLWm3nNx6Mvditpnc44AP9A6qhn/YKD1CWaj8IMJ1aw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:14 2025 by rpki-client