This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38332e302f32342d3234203d3e20313336373837.roa
File: 39322e3131392e38332e302f32342d3234203d3e20313336373837.roa (raw, json)
Hash identifier: f0gYBWIKCH/T43aXNBxG8pYOk8eziy9iPJieE7l9quQ=
Subject key identifier: C4:EE:30:07:16:DA:9F:BD:11:D5:7A:71:DD:97:6E:F6:FE:5C:B1:0B
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 35056EEF6AA4C201649CDC9D169E808CBCE5AD3E
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38332e302f32342d3234203d3e20313336373837.roa
Signing time: Fri 28 Nov 2025 11:49:45 +0000
ROA not before: Fri 28 Nov 2025 11:44:45 +0000
ROA not after: Fri 27 Nov 2026 11:49:45 +0000
asID: 136787
IP address blocks: 92.119.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 08:24:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:05:6e:ef:6a:a4:c2:01:64:9c:dc:9d:16:9e:80:8c:bc:e5:ad:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Nov 28 11:44:45 2025 GMT
Not After : Nov 27 11:49:45 2026 GMT
Subject: CN=C4EE300716DA9FBD11D57A71DD976EF6FE5CB10B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:ec:bc:f2:3d:ea:7b:73:f3:be:fe:c5:84:
ea:e3:6b:a6:26:0c:3a:d1:bb:27:88:b6:32:4b:df:
2e:d0:81:e0:a6:b2:fc:37:94:37:fc:18:30:d2:d3:
05:20:da:a0:d8:2f:ed:07:54:f3:0b:60:ad:53:3b:
41:65:a7:cb:79:53:5a:70:00:70:ca:53:39:82:4a:
c2:2d:0c:32:8a:a0:9a:03:5f:60:98:c3:e8:54:30:
86:b9:c2:14:88:73:7e:56:2a:9a:fd:b1:8e:59:52:
3d:96:74:2f:70:a9:7e:48:f6:0f:f1:e6:f1:ae:8a:
f4:df:38:72:12:3c:7e:ca:69:87:d1:2d:f2:59:44:
89:48:9a:e8:59:1d:82:dd:8e:07:dc:52:17:f9:83:
d6:79:f3:97:a7:cd:dd:02:b3:05:ff:40:cb:9d:c8:
31:93:d5:14:6d:71:eb:cc:d9:30:d0:90:4d:b5:1a:
f8:f4:01:18:67:cd:f8:6a:03:05:ac:26:2e:28:84:
20:12:9d:74:a8:3e:28:01:cd:7a:c3:5e:37:e0:b7:
35:72:50:92:3f:51:9f:09:a5:d4:42:29:21:6b:f4:
f6:4a:34:cd:7f:de:40:b6:d7:a6:ed:96:2c:23:4f:
fd:0b:7c:85:94:3c:02:5d:9b:2a:8f:13:28:2b:1f:
86:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:EE:30:07:16:DA:9F:BD:11:D5:7A:71:DD:97:6E:F6:FE:5C:B1:0B
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131392e38332e302f32342d3234203d3e20313336373837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.83.0/24
Signature Algorithm: sha256WithRSAEncryption
01:95:7a:2a:23:e2:21:3d:2d:7a:28:05:03:c0:0a:c5:38:35:
af:d5:1e:1e:97:9f:bb:20:6e:66:76:ce:48:33:d3:9e:e5:43:
8c:57:f4:53:91:3d:c9:ee:64:8f:ab:21:ed:5c:df:2d:ec:8d:
2e:a6:e0:b1:fc:3a:78:e9:0a:19:8f:7d:db:c1:35:77:f0:cd:
0c:ec:06:32:4b:1f:c9:1e:f3:ab:8a:88:d5:21:46:6c:27:49:
d8:99:3a:f2:a1:66:1d:81:0a:e9:6f:87:b5:d0:fb:cd:f8:e0:
23:0f:72:fa:c5:dc:30:bf:03:a1:cc:0a:02:63:3e:3f:c9:a8:
4c:e4:e4:81:43:0d:54:10:46:17:6b:ea:fe:33:c3:d2:43:f7:
cc:82:4e:ee:b8:75:6a:11:f6:78:53:08:45:9c:91:fc:8e:91:
16:b5:d2:64:a3:3c:7c:80:b4:97:78:1d:64:fb:3e:91:d8:85:
bc:f8:85:96:0a:af:fe:09:bf:73:e1:61:4a:df:84:12:0b:37:
c5:80:ac:b5:f3:82:ce:68:c6:51:1f:47:f3:15:4a:07:c4:8b:
f1:98:a0:9d:38:ee:5f:2a:bf:99:b3:4d:a6:ca:cf:7d:19:ae:
c8:75:84:29:8d:8c:bd:84:5a:dc:d2:e0:ac:9a:70:23:fd:17:
a7:dc:e4:48
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUNQVu72qkwgFknNydFp6AjLzlrT4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV
BAMTKEM0RUUzMDA3MTZEQTlGQkQxMUQ1N0E3MUREOTc2RUY2RkU1Q0IxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLey88j3qe3Pzvv7FhOrja6Ym
DDrRuyeItjJL3y7QgeCmsvw3lDf8GDDS0wUg2qDYL+0HVPMLYK1TO0Flp8t5U1pw
AHDKUzmCSsItDDKKoJoDX2CYw+hUMIa5whSIc35WKpr9sY5ZUj2WdC9wqX5I9g/x
5vGuivTfOHISPH7KaYfRLfJZRIlImuhZHYLdjgfcUhf5g9Z585enzd0CswX/QMud
yDGT1RRtcevM2TDQkE21Gvj0ARhnzfhqAwWsJi4ohCASnXSoPigBzXrDXjfgtzVy
UJI/UZ8JpdRCKSFr9PZKNM1/3kC216btliwjT/0LfIWUPAJdmyqPEygrH4ahAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQUxO4wBxban70R1Xpx3Zdu9v5csQswHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzky
ZTM4MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABcd1MwDQYJKoZIhvcNAQELBQADggEBAAGVeioj4iE9LXooBQPACsU4Na/V
Hh6Xn7sgbmZ2zkgz057lQ4xX9FORPcnuZI+rIe1c3y3sjS6m4LH8OnjpChmPfdvB
NXfwzQzsBjJLH8ke86uKiNUhRmwnSdiZOvKhZh2BCulvh7XQ+8344CMPcvrF3DC/
A6HMCgJjPj/JqEzk5IFDDVQQRhdr6v4zw9JD98yCTu64dWoR9nhTCEWckfyOkRa1
0mSjPHyAtJd4HWT7PpHYhbz4hZYKr/4Jv3PhYUrfhBILN8WArLXzgs5oxlEfR/MV
SgfEi/GYoJ047l8qv5mzTabKz30Zrsh1hCmNjL2EWtzS4KyacCP9F6fc5Eg=
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:54:55 2025 by rpki-client