This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa File: 39332e3137372e39362e302f32322d3234203d3e20323034313730.roa (raw, json) Hash identifier: v/6WWKhHZJ7aH0QoiTs83abtRf0OgM37Mp+7mDIhlTs= Subject key identifier: 18:74:1E:50:0E:50:82:63:EC:CF:FA:F8:D4:DE:88:8F:7E:0A:7C:08 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 70904D626447ED476F293D5C8C81EAB68D6A796C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa Signing time: Fri 21 Nov 2025 15:48:58 +0000 ROA not before: Fri 21 Nov 2025 15:43:58 +0000 ROA not after: Fri 20 Nov 2026 15:48:58 +0000 asID: 204170 IP address blocks: 93.177.96.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:90:4d:62:64:47:ed:47:6f:29:3d:5c:8c:81:ea:b6:8d:6a:79:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:58 2025 GMT Not After : Nov 20 15:48:58 2026 GMT Subject: CN=18741E500E508263ECCFFAF8D4DE888F7E0A7C08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:40:84:4a:0d:a9:66:07:20:cd:c3:38:55: 98:1a:74:a5:24:18:9a:7d:78:69:af:d5:e9:e2:09: 70:f9:8b:b2:37:f4:d1:0f:ab:8f:b6:af:79:f1:6f: d4:98:97:21:f2:f7:84:5d:f7:30:35:49:e3:bb:bb: 97:e5:dc:56:ae:4f:d5:01:33:ec:ba:45:04:b8:4e: 0d:e9:da:2a:9a:ba:e5:c5:5d:5a:0e:95:2c:17:52: 55:09:59:3a:de:51:5b:3e:f4:b6:de:3b:0d:e6:c7: 33:a6:9c:2d:71:9f:43:f9:a9:5a:06:96:4d:f0:c9: e0:17:da:f2:dc:12:70:21:f7:da:f3:56:13:de:06: 70:61:56:38:d7:e9:e6:40:d3:e6:56:c3:5a:f6:6b: 92:56:c8:35:74:eb:34:2f:17:ab:eb:89:cb:8e:e2: e5:5f:7a:e9:df:61:49:57:88:5e:09:e7:b9:8a:46: 22:5a:f3:16:2b:bf:9f:8f:3a:c4:64:6c:7a:5c:89: a8:46:58:05:7d:09:06:09:0f:65:11:3d:9e:4c:fd: 30:88:8a:35:b0:68:1b:d5:32:bc:88:d3:6d:2f:1e: 8f:3e:87:ef:c0:42:d8:d5:5a:da:92:fa:c9:5c:c9: 73:7a:fa:59:36:70:e7:0c:02:0d:8a:95:57:f9:67: e4:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:74:1E:50:0E:50:82:63:EC:CF:FA:F8:D4:DE:88:8F:7E:0A:7C:08 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39332e3137372e39362e302f32322d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.177.96.0/22 Signature Algorithm: sha256WithRSAEncryption 8c:cb:30:eb:18:5c:65:17:49:dc:db:40:72:d6:00:dc:05:5a: 8d:98:cf:dc:54:14:9e:0f:69:44:aa:87:d3:93:3d:a3:de:3d: 90:f5:34:1e:d7:7f:6e:bb:c8:47:19:3c:81:ae:11:36:eb:76: 93:9b:66:88:db:17:23:c3:58:e9:2e:94:a9:e4:03:66:43:cc: 03:79:3c:b4:e3:c0:70:a7:e0:ae:70:e4:3c:99:63:79:c4:e2: 93:8e:25:18:21:41:c3:61:56:c1:80:e7:2c:bc:12:1c:3b:f7: 91:a4:6d:fb:91:3f:0e:5c:99:a8:74:e2:17:4f:32:c2:94:20: 77:b9:ac:80:93:7d:da:fd:f5:89:6b:58:bf:67:16:70:5d:d3: 40:69:e7:d1:3c:e0:f2:d8:1e:17:5a:d8:c1:77:ce:69:12:14: 7b:e4:66:5a:bc:6b:83:18:00:a4:2e:f6:5e:0b:d9:d9:08:c7: e5:11:27:32:59:38:92:47:b3:a5:31:69:70:93:51:57:21:90: ab:20:dc:07:f6:b8:3a:31:2f:3a:6e:b6:47:d7:b2:d7:61:c3: 40:c9:bc:dc:0e:1e:38:86:e6:b8:4a:6a:b3:9a:86:73:c2:95: 25:d4:69:e4:30:09:2b:4e:39:8c:8b:14:aa:0a:4f:dd:ce:b3: 6d:74:0c:da -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUcJBNYmRH7UdvKT1cjIHqto1qeWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNThaFw0yNjExMjAxNTQ4NThaMDMxMTAvBgNV BAMTKDE4NzQxRTUwMEU1MDgyNjNFQ0NGRkFGOEQ0REU4ODhGN0UwQTdDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxg0CESg2pZgcgzcM4VZgadKUk GJp9eGmv1eniCXD5i7I39NEPq4+2r3nxb9SYlyHy94Rd9zA1SeO7u5fl3FauT9UB M+y6RQS4Tg3p2iqauuXFXVoOlSwXUlUJWTreUVs+9LbeOw3mxzOmnC1xn0P5qVoG lk3wyeAX2vLcEnAh99rzVhPeBnBhVjjX6eZA0+ZWw1r2a5JWyDV06zQvF6vricuO 4uVfeunfYUlXiF4J57mKRiJa8xYrv5+POsRkbHpciahGWAV9CQYJD2URPZ5M/TCI ijWwaBvVMryI020vHo8+h+/AQtjVWtqS+slcyXN6+lk2cOcMAg2KlVf5Z+TzAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUGHQeUA5QgmPsz/r41N6Ij34KfAgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMzMmUzMTM3Mzcy ZTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJdsWAwDQYJKoZIhvcNAQELBQADggEBAIzLMOsYXGUXSdzbQHLWANwFWo2Y z9xUFJ4PaUSqh9OTPaPePZD1NB7Xf267yEcZPIGuETbrdpObZojbFyPDWOkulKnk A2ZDzAN5PLTjwHCn4K5w5DyZY3nE4pOOJRghQcNhVsGA5yy8Ehw795GkbfuRPw5c mah04hdPMsKUIHe5rICTfdr99YlrWL9nFnBd00Bp59E84PLYHhda2MF3zmkSFHvk Zlq8a4MYAKQu9l4L2dkIx+URJzJZOJJHs6UxaXCTUVchkKsg3Af2uDoxLzputkfX stdhw0DJvNwOHjiG5rhKarOahnPClSXUaeQwCStOOYyLFKoKT93Os210DNo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:58:05 2025 by rpki-client