This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa File: 39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: zSpZlexEv3DbHJd+HwDZwjxjkycs7UZ751ByUcox98M= Subject key identifier: 8A:EA:DF:8D:B8:2E:31:01:E7:0D:00:C3:16:56:F8:0A:6A:94:33:EC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0ED624CBFE7B1CCC47715A314458E59AFDCA86F7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 136787 IP address blocks: 92.242.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d6:24:cb:fe:7b:1c:cc:47:71:5a:31:44:58:e5:9a:fd:ca:86:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=8AEADF8DB82E3101E70D00C31656F80A6A9433EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:44:42:5b:a1:65:8e:af:57:bb:43:f3:d1: f9:3a:11:22:33:85:96:ee:1b:11:82:58:8f:4d:be: b3:13:68:30:cd:fa:a7:26:71:be:65:e7:11:2f:7b: 35:5d:f0:27:ea:cc:3c:97:d3:f6:bd:3c:16:a1:cd: 08:09:e4:c7:b9:ed:9f:61:4c:9e:fe:1e:e9:35:b7: 04:56:bb:5a:3f:fc:09:89:d4:b5:86:a9:a8:2e:b8: 08:86:45:60:50:b5:1c:68:ec:8d:01:49:23:b8:20: e7:34:de:ad:58:ea:b1:33:9a:90:9b:37:25:5a:96: bf:c6:40:cf:f6:f8:46:45:4a:f4:ae:39:bc:69:35: e3:9f:f8:e3:11:c6:d2:ab:a0:4f:d2:4a:42:11:1d: ec:ed:d8:f3:49:44:f2:f4:9e:a9:34:da:82:57:1a: 21:07:bd:bb:41:96:b1:73:11:e3:0e:eb:42:40:25: 6f:5d:f1:55:dd:b6:08:2a:1f:6b:c7:08:b4:88:28: d5:79:6f:c9:2a:7b:09:c9:91:93:6a:20:59:52:fc: fa:46:f3:e6:7e:c9:01:14:5a:ca:03:5f:7b:f3:7f: 49:26:42:94:b9:31:71:c1:41:bd:83:23:8c:5e:aa: 32:a3:cc:9b:16:6d:10:29:88:6d:eb:1e:a3:0a:ee: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:EA:DF:8D:B8:2E:31:01:E7:0D:00:C3:16:56:F8:0A:6A:94:33:EC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3234322e3139312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.242.191.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:02:ce:c0:4c:45:ac:71:b9:72:85:f2:fe:cc:0d:fc:d0:5c: 69:90:2e:7a:9d:7d:b3:29:0f:45:a9:df:56:aa:d9:76:c6:15: 9a:e2:ca:03:6f:e5:0f:49:6d:07:3e:51:b6:3b:b7:b7:3c:2b: f1:c7:56:e9:b1:0a:30:46:f5:45:bb:2e:a0:4c:c7:9c:25:c9: a0:15:d4:8b:dd:d7:9d:f9:00:a9:5b:2f:ed:f6:8a:e2:61:3b: a3:a2:c0:e5:9c:37:df:be:ed:73:28:10:84:67:c1:38:13:ce: f4:6b:23:4a:85:9d:f0:05:52:73:8a:3c:1a:81:8a:83:b3:ce: 13:71:c4:01:ad:6b:d0:aa:51:40:20:0f:91:f7:0d:a9:46:8d: 49:f2:4b:26:11:7a:b3:08:2b:3f:af:fe:7a:61:62:ca:ee:00: cb:ba:c8:35:6e:4a:2d:6d:cd:7c:10:e2:31:72:0a:b3:d3:27: 08:b8:ab:b9:ea:e2:86:99:40:16:c8:2d:99:42:18:c9:91:6d: 50:2f:2d:8e:af:80:80:d4:8c:2e:79:d0:c1:83:79:1f:01:38: 27:ad:0f:af:91:48:01:2e:94:45:ee:46:f5:1a:bb:e4:b2:28: 01:4d:99:77:77:22:1b:4e:23:57:7a:f6:73:b8:1c:98:82:56: 65:f1:ff:0e -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDtYky/57HMxHcVoxRFjlmv3KhvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDhBRUFERjhEQjgyRTMxMDFFNzBEMDBDMzE2NTZGODBBNkE5NDMzRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoCERCW6Fljq9Xu0Pz0fk6ESIz hZbuGxGCWI9NvrMTaDDN+qcmcb5l5xEvezVd8CfqzDyX0/a9PBahzQgJ5Me57Z9h TJ7+Huk1twRWu1o//AmJ1LWGqaguuAiGRWBQtRxo7I0BSSO4IOc03q1Y6rEzmpCb NyValr/GQM/2+EZFSvSuObxpNeOf+OMRxtKroE/SSkIRHezt2PNJRPL0nqk02oJX GiEHvbtBlrFzEeMO60JAJW9d8VXdtggqH2vHCLSIKNV5b8kqewnJkZNqIFlS/PpG 8+Z+yQEUWsoDX3vzf0kmQpS5MXHBQb2DI4xeqjKjzJsWbRApiG3rHqMK7s1xAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUiurfjbguMQHnDQDDFlb4CmqUM+wwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMjM0MzIy ZTMxMzkzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFzyvzANBgkqhkiG9w0BAQsFAAOCAQEAmwLOwExFrHG5coXy/swN/NBc aZAuep19sykPRanfVqrZdsYVmuLKA2/lD0ltBz5Rtju3tzwr8cdW6bEKMEb1Rbsu oEzHnCXJoBXUi93XnfkAqVsv7faK4mE7o6LA5Zw3377tcygQhGfBOBPO9GsjSoWd 8AVSc4o8GoGKg7POE3HEAa1r0KpRQCAPkfcNqUaNSfJLJhF6swgrP6/+emFiyu4A y7rINW5KLW3NfBDiMXIKs9MnCLiruerihplAFsgtmUIYyZFtUC8tjq+AgNSMLnnQ wYN5HwE4J60Pr5FIAS6URe5G9Rq75LIoAU2Zd3ciG04jV3r2c7gcmIJWZfH/Dg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:18 2025 by rpki-client