This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e203537313732.roa File: 39342e3130312e3131352e302f32342d3234203d3e203537313732.roa (raw, json) Hash identifier: yiOXLnnVvzwtS+yvGVn/Mwm1Z8sVm26qYW2wt39zmLI= Subject key identifier: 92:C1:24:02:CB:2B:27:CD:CC:BF:2B:1D:62:35:35:8D:6D:5B:BD:7E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0134DE0F6AA494089D9BE56C50E75BDF40CB45CF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e203537313732.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 57172 IP address blocks: 94.101.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:34:de:0f:6a:a4:94:08:9d:9b:e5:6c:50:e7:5b:df:40:cb:45:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=92C12402CB2B27CDCCBF2B1D6235358D6D5BBD7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:be:3d:90:dc:b4:81:59:04:a5:2f:cd:28: e5:b8:cb:2e:af:f0:55:d4:ca:16:b8:c3:74:86:de: 65:22:87:35:4d:28:f5:ac:3d:7b:7d:df:7c:ac:40: 33:5b:a3:af:6e:45:cf:4e:0b:4f:13:4c:ec:30:18: 37:f8:2f:80:d9:97:67:5a:7d:6d:48:9e:73:92:71: a8:5b:59:57:ee:aa:b4:a3:f0:4a:ba:a5:b6:4c:37: 1d:3c:4c:5f:eb:e8:5f:8b:e6:e7:ad:8e:94:03:aa: ec:86:08:0e:89:2a:e3:85:01:47:5a:21:bc:cb:81: f9:9b:25:7a:f1:92:18:65:b3:1d:db:b3:cb:2b:bf: 30:30:ec:3b:fd:c1:98:38:24:c2:0a:9b:c6:f2:f5: bf:f0:3d:a8:b0:69:e4:87:f6:74:50:10:06:aa:af: 32:42:06:7a:93:09:24:57:60:a7:4e:39:42:e7:e9: ba:b7:e7:a1:f5:a0:88:4a:e9:7c:dd:f1:5d:c3:ff: a0:ff:b5:bd:aa:21:87:d9:57:d9:20:67:55:e9:54: 17:56:5f:89:cf:b0:ee:6b:8a:aa:12:43:85:db:1f: 86:10:42:b2:86:29:52:fe:0f:1d:25:2c:d1:19:c8: 46:d5:6d:3f:61:38:49:92:85:de:e2:c7:cb:14:a6: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C1:24:02:CB:2B:27:CD:CC:BF:2B:1D:62:35:35:8D:6D:5B:BD:7E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39342e3130312e3131352e302f32342d3234203d3e203537313732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.115.0/24 Signature Algorithm: sha256WithRSAEncryption 92:12:2e:96:0c:3d:2f:b6:d6:52:45:fd:64:fe:13:a7:d1:aa: 8a:ad:16:8e:53:90:49:b8:23:80:62:98:0a:35:2e:c4:0a:af: 37:6b:a1:bf:4e:d7:d2:3d:50:70:5b:ec:91:32:96:f4:cb:c3: 46:84:c4:68:c8:e8:00:f5:d1:7b:11:c9:89:81:ee:a7:b8:42: b7:75:c8:0e:05:19:ec:d5:cc:da:ae:af:ee:13:6f:34:fa:90: 1d:1b:c3:2c:dc:a8:17:b2:e7:16:cd:62:16:1b:45:f9:84:06: 3d:b5:9a:9f:44:2b:97:eb:d1:57:60:ed:95:4e:bf:3b:c2:0a: 41:0e:31:f4:07:67:d6:2c:b4:19:29:bf:07:61:d4:9a:cb:41: ba:2e:6e:48:69:fc:30:53:dd:01:87:58:ce:d2:9c:62:a2:86: 92:e0:73:6c:79:73:63:21:aa:d5:6d:44:a4:83:70:4f:1a:a8: ac:0d:aa:1b:3c:70:e2:33:5a:cf:76:62:e8:e5:4c:17:d3:27: a0:a0:fc:4b:6c:44:a5:05:80:19:73:5a:03:82:fd:86:af:c9: e9:22:53:a1:05:2c:13:f3:ca:ef:cd:74:4b:02:a7:8a:2f:b4: 4d:ab:29:b8:4a:bd:0c:01:b5:5c:69:7a:de:fa:80:a5:6d:f0: 7b:f6:5b:26 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUATTeD2qklAidm+VsUOdb30DLRc8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKDkyQzEyNDAyQ0IyQjI3Q0RDQ0JGMkIxRDYyMzUzNThENkQ1QkJEN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXo749kNy0gVkEpS/NKOW4yy6v 8FXUyha4w3SG3mUihzVNKPWsPXt933ysQDNbo69uRc9OC08TTOwwGDf4L4DZl2da fW1InnOScahbWVfuqrSj8Eq6pbZMNx08TF/r6F+L5uetjpQDquyGCA6JKuOFAUda IbzLgfmbJXrxkhhlsx3bs8srvzAw7Dv9wZg4JMIKm8by9b/wPaiwaeSH9nRQEAaq rzJCBnqTCSRXYKdOOULn6bq356H1oIhK6Xzd8V3D/6D/tb2qIYfZV9kgZ1XpVBdW X4nPsO5riqoSQ4XbH4YQQrKGKVL+Dx0lLNEZyEbVbT9hOEmShd7ix8sUpmqTAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUksEkAssrJ83MvysdYjU1jW1bvX4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM0MmUzMTMwMzEy ZTMxMzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzczMTM3MzIucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABeZXMwDQYJKoZIhvcNAQELBQADggEBAJISLpYMPS+21lJF/WT+E6fRqoqt Fo5TkEm4I4BimAo1LsQKrzdrob9O19I9UHBb7JEylvTLw0aExGjI6AD10XsRyYmB 7qe4Qrd1yA4FGezVzNqur+4TbzT6kB0bwyzcqBey5xbNYhYbRfmEBj21mp9EK5fr 0Vdg7ZVOvzvCCkEOMfQHZ9YstBkpvwdh1JrLQboubkhp/DBT3QGHWM7SnGKihpLg c2x5c2MhqtVtRKSDcE8aqKwNqhs8cOIzWs92YujlTBfTJ6Cg/EtsRKUFgBlzWgOC /YavyekiU6EFLBPzyu/NdEsCp4ovtE2rKbhKvQwBtVxpet76gKVt8Hv2WyY= -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:00 2025 by rpki-client