This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa File: 39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: yW8DUOpkCmLv7daXsvu5W+V2IxVj4m5vnQsSsSueCjM= Subject key identifier: FF:49:C6:E0:52:FE:9D:39:0E:06:8D:C7:69:79:4A:97:0E:B7:A1:C1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3004BF7DAB3756488DE845887210F067DC17D632 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:48 +0000 ROA not before: Fri 28 Nov 2025 11:44:48 +0000 ROA not after: Fri 27 Nov 2026 11:49:48 +0000 asID: 136787 IP address blocks: 92.242.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:04:bf:7d:ab:37:56:48:8d:e8:45:88:72:10:f0:67:dc:17:d6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:48 2025 GMT Not After : Nov 27 11:49:48 2026 GMT Subject: CN=FF49C6E052FE9D390E068DC769794A970EB7A1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:4a:f9:ae:45:39:ce:88:d0:38:23:02:8c: 70:2a:a7:cd:ae:55:49:2e:48:22:3a:4e:1c:c5:99: c2:bd:05:98:2f:37:7f:ce:9b:ac:7f:f4:f2:62:1d: 43:61:0a:25:ea:8b:66:37:2d:59:30:65:f8:f9:26: 49:9b:88:5f:3d:7f:95:98:62:a6:79:7d:7f:a8:97: 73:1a:42:19:b2:76:8e:b0:5d:dd:8a:9d:36:59:49: 1e:0e:eb:db:b7:31:af:a1:de:33:4f:55:e3:54:32: 60:8d:53:7a:8e:30:68:d0:0f:cc:b2:1b:5a:e4:d1: 2f:38:b1:60:26:91:d0:ee:21:dd:34:b3:c6:36:ab: 20:47:16:47:32:d2:a5:59:d9:20:f3:5f:04:e6:09: 48:b7:9c:b3:2d:0d:73:93:3f:14:9c:98:55:74:e7: ce:99:c7:7d:ea:1b:77:c0:4d:aa:79:94:33:e8:24: 75:1c:de:41:3d:41:6a:b3:7a:2d:7d:0e:bb:2d:69: 87:f8:cb:e8:fc:88:32:a1:e9:27:90:2a:c7:4f:18: 8e:e9:5f:e7:07:7d:cc:aa:5c:d4:24:c7:16:de:c7: 99:65:7b:bd:79:cc:87:97:bd:b9:c0:19:8e:57:9c: 69:02:11:23:0f:28:05:b9:e5:fd:78:9c:5e:19:26: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:C6:E0:52:FE:9D:39:0E:06:8D:C7:69:79:4A:97:0E:B7:A1:C1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3138392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.189.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:c8:e3:fb:9a:e9:6f:16:2d:cb:78:74:68:2b:0f:62:57:60: 68:5b:fb:42:c9:1b:17:5f:2f:1c:fe:1b:ba:a0:65:39:2b:65: 2c:06:5d:ec:f3:f2:9e:44:c4:d9:07:06:9f:68:ba:f9:aa:b7: 33:d4:6b:10:f8:41:64:c5:38:3f:77:15:1f:15:2d:c8:0d:6f: 6f:ca:ac:86:5f:0d:f3:2c:32:c6:05:98:cb:f9:31:a0:7b:e9: 10:a5:cd:50:e7:4f:36:fe:3a:38:5b:09:d5:2d:1b:5a:1d:33: 11:94:9b:0f:e4:56:88:00:28:83:87:38:27:a9:8d:1e:45:6f: 2e:3a:8d:ec:28:cf:64:a2:d1:08:ae:12:d9:e7:b8:ed:e4:dc: d1:1c:8f:62:0f:38:e4:3a:78:8d:6a:93:32:e3:95:e2:f0:69: 03:ec:94:f8:0c:7a:36:04:52:f9:18:b2:3f:c5:92:85:54:5a: 53:ed:43:6c:1b:97:4e:06:05:97:f2:e8:b0:0c:d5:3d:5d:73: b7:8d:e7:7c:06:db:4a:5e:75:84:0d:73:1b:cc:4a:73:b3:ae: a1:9e:4b:22:8a:a1:ce:ec:a1:9e:f4:f6:d1:60:43:b1:20:f4: e3:ec:65:66:3c:f0:0c:70:15:34:8a:0c:27:1b:6c:92:1a:e7: 6b:07:7a:03 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUMAS/fas3VkiN6EWIchDwZ9wX1jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDhaFw0yNjExMjcxMTQ5NDhaMDMxMTAvBgNV BAMTKEZGNDlDNkUwNTJGRTlEMzkwRTA2OERDNzY5Nzk0QTk3MEVCN0ExQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4kr5rkU5zojQOCMCjHAqp82u VUkuSCI6ThzFmcK9BZgvN3/Om6x/9PJiHUNhCiXqi2Y3LVkwZfj5JkmbiF89f5WY YqZ5fX+ol3MaQhmydo6wXd2KnTZZSR4O69u3Ma+h3jNPVeNUMmCNU3qOMGjQD8yy G1rk0S84sWAmkdDuId00s8Y2qyBHFkcy0qVZ2SDzXwTmCUi3nLMtDXOTPxScmFV0 586Zx33qG3fATap5lDPoJHUc3kE9QWqzei19DrstaYf4y+j8iDKh6SeQKsdPGI7p X+cHfcyqXNQkxxbex5lle715zIeXvbnAGY5XnGkCESMPKAW55f14nF4ZJrgfAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU/0nG4FL+nTkOBo3HaXlKlw63ocEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMjM0MzIy ZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFzyvTANBgkqhkiG9w0BAQsFAAOCAQEATsjj+5rpbxYty3h0aCsPYldg aFv7QskbF18vHP4buqBlOStlLAZd7PPynkTE2QcGn2i6+aq3M9RrEPhBZMU4P3cV HxUtyA1vb8qshl8N8ywyxgWYy/kxoHvpEKXNUOdPNv46OFsJ1S0bWh0zEZSbD+RW iAAog4c4J6mNHkVvLjqN7CjPZKLRCK4S2ee47eTc0RyPYg845Dp4jWqTMuOV4vBp A+yU+Ax6NgRS+RiyP8WShVRaU+1DbBuXTgYFl/LosAzVPV1zt43nfAbbSl51hA1z G8xKc7OuoZ5LIoqhzuyhnvT20WBDsSD04+xlZjzwDHAVNIoMJxtskhrnawd6Aw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:24 2025 by rpki-client