This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa File: 39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: psZspXW3l3BhsQi/puCsm2MLxfsu7UATGPAqIwEOgQs= Subject key identifier: 96:FA:FF:A0:21:9C:8E:6E:6D:CF:EC:A9:8F:A0:F5:02:9E:09:20:1C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 364B95B346B09D20A2E58D38CBB4699FC7951E06 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 136787 IP address blocks: 92.242.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4b:95:b3:46:b0:9d:20:a2:e5:8d:38:cb:b4:69:9f:c7:95:1e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=96FAFFA0219C8E6E6DCFECA98FA0F5029E09201C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:87:41:09:b2:2e:e7:69:cc:99:37:a0:f3:5a: 1a:5e:56:9b:91:0c:e1:0c:6a:2b:db:c0:1f:91:22: 26:be:0e:17:b8:7c:ba:54:64:d1:be:21:19:e4:18: a6:8b:b2:33:25:bb:23:bb:89:f5:41:ff:f2:c0:5e: 91:3a:86:f1:a5:69:04:5c:4f:b5:9e:ea:ea:45:bc: 7a:60:b1:a7:80:94:2d:b0:c1:d9:de:b6:8e:5b:06: 36:74:fd:e4:3a:71:d2:84:d0:90:7c:2a:2f:4e:da: 23:28:51:81:6c:c6:fe:48:3c:a1:a2:36:72:91:25: 1f:e4:d7:18:d3:89:0c:8a:3f:80:19:dd:ee:34:f6: 32:23:35:33:c6:5b:bf:8f:56:15:0f:72:82:6f:c7: ed:fa:22:c0:90:b3:8e:88:13:aa:fd:b5:e7:e7:1a: e1:1a:e4:c8:66:1c:a8:7d:5c:81:bf:7d:46:53:40: f1:98:96:bf:04:d0:71:f3:18:61:ee:78:88:3b:c6: f1:4c:18:2c:00:8d:62:86:05:92:14:f7:c9:5f:b3: 3f:65:0a:68:5f:ea:72:05:76:7b:30:1a:3f:a7:83: 07:ab:c4:db:fd:c1:99:a1:0e:b3:b2:66:68:34:ef: eb:c6:47:31:dd:00:f4:ef:22:a7:c1:81:84:fb:89: 21:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FA:FF:A0:21:9C:8E:6E:6D:CF:EC:A9:8F:A0:F5:02:9E:09:20:1C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.190.0/24 Signature Algorithm: sha256WithRSAEncryption 82:0e:84:98:24:8d:c2:27:22:62:e8:f1:45:39:00:2c:ba:cb: 0c:f2:b0:30:5a:26:16:f4:4d:95:c8:57:53:21:27:11:58:d7: 72:45:b8:8f:25:79:76:5e:ee:5d:a1:ef:de:dc:48:16:40:96: 14:1f:17:54:6a:9a:44:73:5c:30:b6:65:95:39:23:08:48:3e: 5a:be:24:87:ea:d5:7d:0f:b9:75:5d:b2:f0:1d:cf:2f:33:c1: c2:0e:27:32:de:2a:4a:80:76:77:3c:c4:17:51:83:69:16:dc: c6:e4:a6:4f:2d:2a:98:e6:01:ea:35:bb:70:61:09:0b:07:19: ff:eb:8e:2e:f4:2c:1b:e1:d8:15:6d:7f:71:dd:62:7d:28:88: 9b:9a:d6:94:f9:04:ce:7d:24:f9:c0:ff:1a:be:a0:1a:ae:21: 23:75:ea:ca:44:a5:70:9b:1e:e7:34:41:ea:da:df:65:33:2c: 01:ff:bc:e4:75:2f:e0:af:4c:7d:3e:8e:01:1f:d7:b7:27:a7: ac:27:84:0c:dd:44:b2:24:5a:3b:2a:8f:af:ff:e1:1b:b6:9f: 59:0e:3f:b0:42:9b:b5:2f:03:e6:e0:53:2f:2c:cd:fe:53:9d: 5e:54:e8:3c:f2:ce:71:2e:51:8c:1d:ce:0e:c3:d0:07:f2:92: 37:0e:7c:f9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNkuVs0awnSCi5Y04y7Rpn8eVHgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDk2RkFGRkEwMjE5QzhFNkU2RENGRUNBOThGQTBGNTAyOUUwOTIwMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgh0EJsi7nacyZN6DzWhpeVpuR DOEMaivbwB+RIia+Dhe4fLpUZNG+IRnkGKaLsjMluyO7ifVB//LAXpE6hvGlaQRc T7We6upFvHpgsaeAlC2wwdneto5bBjZ0/eQ6cdKE0JB8Ki9O2iMoUYFsxv5IPKGi NnKRJR/k1xjTiQyKP4AZ3e409jIjNTPGW7+PVhUPcoJvx+36IsCQs46IE6r9tefn GuEa5MhmHKh9XIG/fUZTQPGYlr8E0HHzGGHueIg7xvFMGCwAjWKGBZIU98lfsz9l Cmhf6nIFdnswGj+ngwerxNv9wZmhDrOyZmg07+vGRzHdAPTvIqfBgYT7iSEbAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUlvr/oCGcjm5tz+ypj6D1Ap4JIBwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMjM0MzIy ZTMxMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFzyvjANBgkqhkiG9w0BAQsFAAOCAQEAgg6EmCSNwiciYujxRTkALLrL DPKwMFomFvRNlchXUyEnEVjXckW4jyV5dl7uXaHv3txIFkCWFB8XVGqaRHNcMLZl lTkjCEg+Wr4kh+rVfQ+5dV2y8B3PLzPBwg4nMt4qSoB2dzzEF1GDaRbcxuSmTy0q mOYB6jW7cGEJCwcZ/+uOLvQsG+HYFW1/cd1ifSiIm5rWlPkEzn0k+cD/Gr6gGq4h I3XqykSlcJse5zRB6trfZTMsAf+85HUv4K9MfT6OAR/XtyenrCeEDN1EsiRaOyqP r//hG7afWQ4/sEKbtS8D5uBTLyzN/lOdXlToPPLOcS5RjB3ODsPQB/KSNw58+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:48 2025 by rpki-client