This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa File: 39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: xP1z7xqU5v9VRTuk3OQT+F0x19KFmxh8ledLSosQHSA= Subject key identifier: 23:99:CE:28:B7:13:38:FB:5A:0E:1B:9C:E0:11:0A:51:90:7A:BB:C9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6B90F86A6B2BB2E41DCC3CE0A93F25C1DE3DE560 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:10 +0000 ROA not before: Fri 21 Nov 2025 15:44:10 +0000 ROA not after: Fri 20 Nov 2026 15:49:10 +0000 asID: 136787 IP address blocks: 95.214.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:90:f8:6a:6b:2b:b2:e4:1d:cc:3c:e0:a9:3f:25:c1:de:3d:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:10 2025 GMT Not After : Nov 20 15:49:10 2026 GMT Subject: CN=2399CE28B71338FB5A0E1B9CE0110A51907ABBC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ca:18:78:b0:e7:f2:97:f6:a3:6a:d9:3f:a9: 1e:c1:4e:a4:df:4a:f3:b5:e0:35:1b:66:04:f3:34: ed:e9:60:19:0e:51:15:09:01:11:1b:23:92:a3:08: b9:13:fb:8e:93:f7:5b:e3:a5:3a:d9:c8:05:99:62: d4:a7:3e:08:44:bc:02:e4:49:f6:a1:0c:e2:b4:32: 1a:62:ff:6e:c2:20:d8:0e:d3:11:f0:8d:18:2d:1d: 8a:59:c2:c8:64:02:94:79:5d:15:4d:57:6c:fd:42: 60:17:ad:8b:dd:6a:35:87:38:93:3b:74:31:65:96: 66:20:67:81:e5:ec:3b:bc:78:89:83:97:f3:f8:bc: 45:cb:fe:ea:4d:6b:01:9e:7e:a2:a6:e8:1f:a9:1e: 3e:f5:b1:cd:7a:21:b2:f6:c0:38:d9:50:20:7c:01: 39:f4:a6:ba:db:37:11:75:d9:c9:11:39:73:cc:d8: 91:d0:fc:6a:37:44:6c:5e:c8:6b:69:30:c3:1c:6d: 74:19:cc:a3:d1:a8:24:70:fd:e0:28:58:98:c2:fa: 16:99:63:a3:fd:5b:20:49:60:d2:b6:df:2e:42:ef: 1c:5a:47:6e:e8:1e:41:37:70:8d:1e:0e:97:18:06: 4e:84:d3:e3:32:58:c5:93:d8:dd:97:9e:26:2b:3a: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:99:CE:28:B7:13:38:FB:5A:0E:1B:9C:E0:11:0A:51:90:7A:BB:C9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.216.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:7b:fd:86:fa:27:96:aa:c9:ab:fc:85:c8:10:2f:90:4b:2b: 32:7d:e7:30:64:7e:92:88:5a:4d:7f:71:87:79:8b:f5:65:a6: 10:d0:df:2b:a4:75:d2:0d:ca:17:5c:5f:0c:d5:85:92:82:9f: 05:02:31:9e:65:f2:b5:47:40:72:4c:5a:33:f2:e8:63:78:dc: 30:a8:9a:99:39:9f:c7:69:43:b9:34:22:74:e5:ec:c5:a1:ec: b4:ff:b1:5a:99:5a:df:5f:4e:e9:6d:de:e3:24:d7:c0:f4:aa: cf:2e:2f:6d:0a:be:e8:03:41:ee:f3:4a:c6:e7:28:cd:cf:23: f3:70:fe:7b:35:c2:77:07:d9:58:99:c7:f5:ad:8c:e4:46:1e: 64:18:64:77:da:21:92:68:e1:ca:14:89:fb:61:76:26:d0:ba: b8:cf:a5:57:de:13:1c:79:10:f9:b4:94:41:76:38:17:87:3e: ac:d3:20:20:41:ff:0d:81:84:48:15:46:a3:44:96:8e:24:4d: cc:00:f1:82:7d:27:64:43:21:5b:5a:84:b0:d3:e7:94:4d:f9: c3:65:67:e3:e0:b7:3f:a3:06:95:0c:c4:1c:02:48:01:67:cc: 51:e1:f3:1e:e7:83:a5:2b:aa:92:13:e2:fe:62:2f:41:59:34: b9:34:80:c7 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUa5D4amsrsuQdzDzgqT8lwd495WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTBaFw0yNjExMjAxNTQ5MTBaMDMxMTAvBgNV BAMTKDIzOTlDRTI4QjcxMzM4RkI1QTBFMUI5Q0UwMTEwQTUxOTA3QUJCQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyhh4sOfyl/ajatk/qR7BTqTf SvO14DUbZgTzNO3pYBkOURUJAREbI5KjCLkT+46T91vjpTrZyAWZYtSnPghEvALk SfahDOK0Mhpi/27CINgO0xHwjRgtHYpZwshkApR5XRVNV2z9QmAXrYvdajWHOJM7 dDFllmYgZ4Hl7Du8eImDl/P4vEXL/upNawGefqKm6B+pHj71sc16IbL2wDjZUCB8 ATn0prrbNxF12ckROXPM2JHQ/Go3RGxeyGtpMMMcbXQZzKPRqCRw/eAoWJjC+haZ Y6P9WyBJYNK23y5C7xxaR27oHkE3cI0eDpcYBk6E0+MyWMWT2N2XniYrOjUTAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUI5nOKLcTOPtaDhuc4BEKUZB6u8kwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM1MmUzMjMxMzQy ZTMyMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF/W2DANBgkqhkiG9w0BAQsFAAOCAQEAHHv9hvonlqrJq/yFyBAvkEsr Mn3nMGR+kohaTX9xh3mL9WWmENDfK6R10g3KF1xfDNWFkoKfBQIxnmXytUdAckxa M/LoY3jcMKiamTmfx2lDuTQidOXsxaHstP+xWpla319O6W3e4yTXwPSqzy4vbQq+ 6ANB7vNKxucozc8j83D+ezXCdwfZWJnH9a2M5EYeZBhkd9ohkmjhyhSJ+2F2JtC6 uM+lV94THHkQ+bSUQXY4F4c+rNMgIEH/DYGESBVGo0SWjiRNzADxgn0nZEMhW1qE sNPnlE35w2Vn4+C3P6MGlQzEHAJIAWfMUeHzHueDpSuqkhPi/mIvQVk0uTSAxw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:44:33 2025 by rpki-client