This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa File: 39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: TPY2WltMaODAz2hoCp0/Cmeq5bfjMeI/NcXQBJ7c32Y= Subject key identifier: E1:7A:7D:AD:50:A4:78:E3:96:20:BA:27:E7:10:05:EA:F5:50:AA:FE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 62B504AACA0BF8BF0EECCAAA2CC25D813705BA39 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 136787 IP address blocks: 95.214.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b5:04:aa:ca:0b:f8:bf:0e:ec:ca:aa:2c:c2:5d:81:37:05:ba:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=E17A7DAD50A478E39620BA27E71005EAF550AAFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:31:8d:98:36:37:73:cd:4a:6f:02:e2:5b:fb: 08:1a:05:8c:85:6d:b6:94:e0:be:68:bf:c6:68:bd: df:56:84:84:97:0d:2b:2a:86:e6:18:17:b9:70:d2: fe:3b:2f:27:5d:d6:29:5d:23:5d:3f:23:5d:fd:cf: 65:6a:02:7d:1d:5c:12:b0:7f:f7:71:fe:47:f7:c0: eb:de:f4:f7:9d:62:79:86:4e:c2:46:42:05:3c:ec: 47:67:25:03:97:98:08:1e:72:6f:6d:6a:1d:c5:50: 13:8c:62:ff:62:3b:9a:3b:e6:6b:e7:dc:2f:16:13: 38:1b:5e:d7:bd:93:10:9a:a4:45:0f:43:39:e6:10: b6:6c:b5:72:0d:80:b7:ae:fc:2f:5c:39:29:86:12: 3e:0d:62:42:83:c2:1e:90:2c:b5:c1:41:0b:bf:a2: 1f:8a:1d:ff:ab:ba:54:2e:af:6f:d1:f4:46:da:fd: 24:d5:c8:a1:0c:ce:b3:1a:37:62:a1:b6:60:f4:f1: b5:3e:5e:58:f3:77:b7:4a:26:0b:7b:23:03:c8:82: 91:98:99:47:a0:b4:4e:f8:8c:7f:26:d5:07:16:83: 4c:fa:17:c7:c4:d1:d1:06:a8:6d:7e:84:e6:9c:08: d1:b2:f9:da:fc:6a:ad:60:e6:27:bf:50:0c:e4:b0: 7e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7A:7D:AD:50:A4:78:E3:96:20:BA:27:E7:10:05:EA:F5:50:AA:FE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.217.0/24 Signature Algorithm: sha256WithRSAEncryption 55:d0:d2:46:ec:b2:f1:51:22:74:e3:a0:6d:e0:de:d3:9f:b2: 29:d7:e2:00:58:16:5a:74:fd:e5:ae:cf:fc:ab:65:c8:9c:cf: 8c:26:f0:f9:31:c3:04:d4:b7:d1:03:31:57:c5:8b:43:a5:4d: 74:92:a4:9d:28:41:fe:57:91:db:fb:d9:0b:7b:45:75:98:02: 64:1c:e8:31:80:ed:50:d8:f1:42:4b:68:f1:1f:fd:54:97:9d: 8e:25:c7:86:b7:98:db:f7:c3:ba:7c:c1:b7:89:66:ea:bd:ee: 8b:b4:a2:54:eb:53:d3:bc:8a:d2:50:ce:f1:80:51:2d:30:0a: 7e:a9:b5:45:4d:24:31:40:56:ef:66:15:7f:57:2b:ef:64:5a: e4:eb:fc:d9:bd:bc:18:ce:51:9c:a4:dc:94:dc:9b:a3:83:73: 27:b3:42:af:6d:42:62:a2:98:9b:7c:c2:61:0a:76:ca:c2:6a: 04:24:8e:e5:75:36:fe:ee:e9:ea:9a:ea:34:8d:1f:17:2f:d3: 5e:e0:99:39:3d:fe:4e:70:17:06:59:4b:b3:65:b8:c4:12:a1: aa:30:c9:88:43:19:39:4d:eb:fd:3d:c2:7e:ad:25:3d:06:c9: 14:40:94:b5:46:e6:06:7a:7d:28:1f:32:e0:14:f2:70:00:fc: 3c:b5:33:ab -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUYrUEqsoL+L8O7MqqLMJdgTcFujkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKEUxN0E3REFENTBBNDc4RTM5NjIwQkEyN0U3MTAwNUVBRjU1MEFBRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXMY2YNjdzzUpvAuJb+wgaBYyF bbaU4L5ov8Zovd9WhISXDSsqhuYYF7lw0v47Lydd1ildI10/I139z2VqAn0dXBKw f/dx/kf3wOve9PedYnmGTsJGQgU87EdnJQOXmAgecm9tah3FUBOMYv9iO5o75mvn 3C8WEzgbXte9kxCapEUPQznmELZstXINgLeu/C9cOSmGEj4NYkKDwh6QLLXBQQu/ oh+KHf+rulQur2/R9Eba/STVyKEMzrMaN2KhtmD08bU+Xljzd7dKJgt7IwPIgpGY mUegtE74jH8m1QcWg0z6F8fE0dEGqG1+hOacCNGy+dr8aq1g5ie/UAzksH7hAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU4Xp9rVCkeOOWILon5xAF6vVQqv4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM1MmUzMjMxMzQy ZTMyMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF/W2TANBgkqhkiG9w0BAQsFAAOCAQEAVdDSRuyy8VEidOOgbeDe05+y KdfiAFgWWnT95a7P/KtlyJzPjCbw+THDBNS30QMxV8WLQ6VNdJKknShB/leR2/vZ C3tFdZgCZBzoMYDtUNjxQkto8R/9VJedjiXHhreY2/fDunzBt4lm6r3ui7SiVOtT 07yK0lDO8YBRLTAKfqm1RU0kMUBW72YVf1cr72Ra5Ov82b28GM5RnKTclNybo4Nz J7NCr21CYqKYm3zCYQp2ysJqBCSO5XU2/u7p6prqNI0fFy/TXuCZOT3+TnAXBllL s2W4xBKhqjDJiEMZOU3r/T3Cfq0lPQbJFECUtUbmBnp9KB8y4BTycAD8PLUzqw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:17 2025 by rpki-client