This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138382e302f32342d3234203d3e20313336373837.roa File: 39322e3234322e3138382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: NVs/YY+rKuS+ExCMuidFY4oB9wKPZs6IKr78R0ZS5mc= Subject key identifier: 70:F8:59:F8:DF:CB:53:23:A5:FC:86:C0:38:FE:D1:A6:64:50:DA:E4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 12F32EE53EDF72C350120F78E656D2E5D64D45D1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:24 +0000 ROA not before: Fri 28 Nov 2025 11:44:24 +0000 ROA not after: Fri 27 Nov 2026 11:49:24 +0000 asID: 136787 IP address blocks: 92.242.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f3:2e:e5:3e:df:72:c3:50:12:0f:78:e6:56:d2:e5:d6:4d:45:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:24 2025 GMT Not After : Nov 27 11:49:24 2026 GMT Subject: CN=70F859F8DFCB5323A5FC86C038FED1A66450DAE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9d:79:f8:ed:54:e9:e1:fc:22:df:f3:07:72: 50:9a:2c:12:a7:d5:59:2d:72:7b:43:e8:31:7c:de: e7:ea:3d:eb:bb:bf:de:dc:f5:fa:7b:6c:70:49:8b: 91:ee:d3:34:a9:9b:44:2c:58:48:9d:0f:d2:75:96: 58:f7:a2:f6:53:bf:97:cc:ca:b9:b8:20:ed:53:3a: 09:c3:0f:30:2f:f5:0a:bb:b7:4a:52:c2:c4:bc:65: 72:32:bd:6e:9f:31:fe:9f:03:17:f4:8b:7a:3d:22: 68:4b:b1:17:a7:0a:b4:52:51:46:32:85:0a:f8:62: 3d:65:19:53:bb:f5:ec:aa:8e:86:7c:ee:66:68:4b: ba:a7:37:8c:75:a8:c6:32:75:de:19:30:ba:41:2c: b0:cf:23:be:67:31:da:6a:6c:df:2a:d2:f8:ae:2d: d7:39:13:81:be:26:bc:21:32:30:b5:42:b1:f9:c7: 12:ff:93:5a:67:5c:8d:a6:24:05:a0:31:b2:58:bf: 1a:fd:99:e8:ef:0a:33:99:8c:29:4d:38:21:b8:9f: 66:20:77:bd:67:a7:ab:26:e8:41:d2:58:a0:4b:2d: bf:f5:51:a1:80:00:15:2a:30:45:68:51:06:1a:fa: 9b:89:69:41:72:27:93:fe:b3:ad:35:cd:f9:5a:c8: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F8:59:F8:DF:CB:53:23:A5:FC:86:C0:38:FE:D1:A6:64:50:DA:E4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.188.0/24 Signature Algorithm: sha256WithRSAEncryption a0:0e:f0:8d:07:07:3c:1b:61:03:90:49:e5:8e:96:ee:dc:77: cf:a7:10:99:8c:e7:ce:d8:4b:79:65:d9:22:36:21:46:be:55: d1:d7:fc:16:6d:29:8f:55:56:c7:db:3d:09:f9:38:91:36:76: 9a:66:98:90:45:99:8b:3e:53:68:78:be:3c:e9:19:d9:18:be: b5:7e:7c:81:9e:20:8f:26:75:11:e9:40:75:ad:92:9e:79:8e: e1:b9:92:46:72:e6:b8:04:d0:c3:f3:a9:aa:5c:d1:d4:7e:ff: c6:80:f7:d3:c6:7c:d1:4b:e7:75:9f:24:39:84:6e:dd:5b:eb: cc:ae:ec:9c:11:39:16:39:cc:71:25:bd:98:a0:43:cd:41:72: 7a:83:40:d0:ec:9b:37:9a:5b:4b:9c:7f:92:f3:ef:28:a9:7b: 2d:e3:9e:a7:ff:38:63:86:ad:2c:ac:8b:97:7b:cd:d5:ad:e9: 00:42:b8:17:53:a1:ba:0f:ec:97:74:f3:45:6e:9e:01:cb:9b: e8:03:f3:a4:45:02:ad:d9:b6:7b:9d:63:f9:91:cb:eb:cf:94: 9c:3b:6e:fb:38:ad:02:6c:46:11:ad:ad:c9:4d:ac:0e:19:c7: 35:9e:ff:dc:c5:f8:41:32:b9:cc:ed:01:b8:36:56:42:ac:e7: b4:9a:0e:ec -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUEvMu5T7fcsNQEg945lbS5dZNRdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjRaFw0yNjExMjcxMTQ5MjRaMDMxMTAvBgNV BAMTKDcwRjg1OUY4REZDQjUzMjNBNUZDODZDMDM4RkVEMUE2NjQ1MERBRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnXn47VTp4fwi3/MHclCaLBKn 1VktcntD6DF83ufqPeu7v97c9fp7bHBJi5Hu0zSpm0QsWEidD9J1llj3ovZTv5fM yrm4IO1TOgnDDzAv9Qq7t0pSwsS8ZXIyvW6fMf6fAxf0i3o9ImhLsRenCrRSUUYy hQr4Yj1lGVO79eyqjoZ87mZoS7qnN4x1qMYydd4ZMLpBLLDPI75nMdpqbN8q0viu Ldc5E4G+JrwhMjC1QrH5xxL/k1pnXI2mJAWgMbJYvxr9mejvCjOZjClNOCG4n2Yg d71np6sm6EHSWKBLLb/1UaGAABUqMEVoUQYa+puJaUFyJ5P+s601zflayJWDAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUcPhZ+N/LUyOl/IbAOP7RpmRQ2uQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMjM0MzIy ZTMxMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFzyvDANBgkqhkiG9w0BAQsFAAOCAQEAoA7wjQcHPBthA5BJ5Y6W7tx3 z6cQmYznzthLeWXZIjYhRr5V0df8Fm0pj1VWx9s9Cfk4kTZ2mmaYkEWZiz5TaHi+ POkZ2Ri+tX58gZ4gjyZ1EelAda2SnnmO4bmSRnLmuATQw/OpqlzR1H7/xoD308Z8 0UvndZ8kOYRu3VvrzK7snBE5FjnMcSW9mKBDzUFyeoNA0OybN5pbS5x/kvPvKKl7 LeOep/84Y4atLKyLl3vN1a3pAEK4F1Ohug/sl3TzRW6eAcub6APzpEUCrdm2e51j +ZHL68+UnDtu+zitAmxGEa2tyU2sDhnHNZ7/3MX4QTK5zO0BuDZWQqzntJoO7A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:16 2025 by rpki-client