This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa File: 39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: SvZzVIfEQt7BI05W5pWYWbRQC8E4MoCyRpJ+zFqMMv8= Subject key identifier: 5B:27:10:DC:9B:C5:6F:B8:81:FD:5A:D5:69:8E:B7:CC:40:21:0B:71 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7692CB16DE4C3C48B4DC5B64359DF67B53815B69 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 136787 IP address blocks: 95.214.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:92:cb:16:de:4c:3c:48:b4:dc:5b:64:35:9d:f6:7b:53:81:5b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=5B2710DC9BC56FB881FD5AD5698EB7CC40210B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:c4:5c:a6:49:ad:0a:81:86:31:f1:34:72: 9a:ed:37:f2:c0:18:db:be:bb:4e:ff:f0:fd:33:5e: 35:b6:a2:1c:a7:dd:35:64:f1:99:9f:ff:0c:28:ce: e9:01:bb:a7:db:d4:8e:76:68:f8:c5:38:7c:28:a2: 83:cf:a3:fc:ef:5b:18:d4:9b:3f:3d:56:b5:29:8c: 98:cc:70:f4:50:09:1e:a8:6a:ce:00:3d:61:2c:53: 7d:ff:9f:7f:44:53:b5:e6:52:3b:07:2b:10:c8:af: 02:6d:23:6a:dd:c3:af:ea:08:25:8a:de:65:54:8e: ab:2b:78:c5:51:09:23:d3:0b:46:fb:72:ba:19:e1: cb:2d:94:9b:98:a5:fc:64:3e:19:ca:52:33:5c:2e: 6e:8a:4f:f0:34:a8:fb:7d:75:7d:e1:1a:5e:c8:67: be:56:93:d0:e8:2c:cb:c7:01:69:d8:60:ac:08:d9: 69:a5:13:ec:3a:15:b9:96:94:1f:e9:f4:ce:02:b1: 6c:d8:62:2f:67:9f:6f:42:47:4a:54:03:ce:a2:6f: 6e:b7:69:81:f7:8e:2e:6c:5f:e6:0e:7c:16:ff:3d: 57:71:30:5f:a9:54:4c:29:d2:0b:77:b3:16:64:a9: 16:0b:6f:c8:09:4d:c6:b5:24:2c:3b:ac:c9:dc:00: 09:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:27:10:DC:9B:C5:6F:B8:81:FD:5A:D5:69:8E:B7:CC:40:21:0B:71 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.218.0/24 Signature Algorithm: sha256WithRSAEncryption 38:b8:81:0a:ae:44:58:42:b9:36:5b:aa:59:e8:39:24:5e:cc: ca:c7:65:36:a3:89:b9:d3:22:92:df:30:67:3f:d2:fc:ef:a5: 8b:1e:8b:0c:06:06:03:e3:c6:76:f6:ec:ae:48:dc:55:6a:d6: 2a:92:83:9d:8d:47:36:42:b8:a7:4d:bb:d7:ed:01:0b:83:ba: 39:c2:e1:7b:fa:3d:01:60:e4:78:92:aa:7c:15:74:e8:be:cd: b4:50:3a:db:dd:9b:fe:95:2e:69:2f:28:cb:f3:2a:df:10:5e: dc:33:52:b5:46:09:6b:44:6b:c8:31:24:2d:48:ec:79:9c:af: f0:16:c2:b4:35:08:6d:ac:42:9e:ad:25:70:d4:8c:d7:cb:2a: 36:db:8c:61:c2:db:6b:ce:05:12:46:76:61:68:26:10:25:24: f7:e0:bf:42:1e:d5:80:46:e6:37:71:e6:30:0b:db:4e:07:e6: e6:e7:48:4b:a1:cf:32:65:b4:ff:d3:a8:43:a0:b5:71:e3:63: a0:b4:77:82:c1:7b:1f:0e:4d:2b:a3:fa:02:90:dd:7d:bd:47: da:f1:59:21:90:65:d2:10:c7:42:75:25:14:c9:77:f5:24:2d: 30:af:7c:78:5b:7f:f7:9a:f2:59:f7:8e:99:25:da:6b:c4:c4: 5b:e3:00:ac -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUdpLLFt5MPEi03FtkNZ32e1OBW2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKDVCMjcxMERDOUJDNTZGQjg4MUZENUFENTY5OEVCN0NDNDAyMTBCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqsRcpkmtCoGGMfE0cprtN/LA GNu+u07/8P0zXjW2ohyn3TVk8Zmf/wwozukBu6fb1I52aPjFOHwoooPPo/zvWxjU mz89VrUpjJjMcPRQCR6oas4APWEsU33/n39EU7XmUjsHKxDIrwJtI2rdw6/qCCWK 3mVUjqsreMVRCSPTC0b7croZ4cstlJuYpfxkPhnKUjNcLm6KT/A0qPt9dX3hGl7I Z75Wk9DoLMvHAWnYYKwI2WmlE+w6FbmWlB/p9M4CsWzYYi9nn29CR0pUA86ib263 aYH3ji5sX+YOfBb/PVdxMF+pVEwp0gt3sxZkqRYLb8gJTca1JCw7rMncAAkdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUWycQ3JvFb7iB/VrVaY63zEAhC3EwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM1MmUzMjMxMzQy ZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF/W2jANBgkqhkiG9w0BAQsFAAOCAQEAOLiBCq5EWEK5NluqWeg5JF7M ysdlNqOJudMikt8wZz/S/O+lix6LDAYGA+PGdvbsrkjcVWrWKpKDnY1HNkK4p027 1+0BC4O6OcLhe/o9AWDkeJKqfBV06L7NtFA6292b/pUuaS8oy/Mq3xBe3DNStUYJ a0RryDEkLUjseZyv8BbCtDUIbaxCnq0lcNSM18sqNtuMYcLba84FEkZ2YWgmECUk 9+C/Qh7VgEbmN3HmMAvbTgfm5udIS6HPMmW0/9OoQ6C1ceNjoLR3gsF7Hw5NK6P6 ApDdfb1H2vFZIZBl0hDHQnUlFMl39SQtMK98eFt/95ryWfeOmSXaa8TEW+MArA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:29 2025 by rpki-client