This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa File: 39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: mJgstC0xe2akwoUh8hXQPkAEgqfcCJEran2YxrPaQyA= Subject key identifier: 7C:F6:FE:A9:73:02:CC:68:1D:68:55:4C:E5:65:90:C5:60:34:02:10 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6CC2D894DBC8B1EEB82E3B344DDFE8FBD129CA7A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 204170 IP address blocks: 95.214.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c2:d8:94:db:c8:b1:ee:b8:2e:3b:34:4d:df:e8:fb:d1:29:ca:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=7CF6FEA97302CC681D68554CE56590C560340210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:db:a6:1c:cd:d9:fc:df:e6:fd:ca:9b:2f:10: 8b:6f:07:e4:5f:86:4c:37:2c:5d:b6:f3:97:27:d0: e1:5f:61:4b:14:36:06:d9:70:9f:a1:24:27:80:6d: 48:ab:2a:c9:d0:7c:8b:b3:4a:c7:90:e6:68:06:dd: 0b:dc:e3:14:99:1b:68:46:d3:11:f6:06:34:49:96: dc:52:05:75:21:07:d3:89:10:4a:5b:02:de:49:30: ab:7d:fb:48:6a:bc:2b:24:ce:67:bc:8b:07:0c:67: 2f:d0:60:a8:50:a5:b1:cc:8e:75:f4:36:2c:ca:7f: 0e:8e:c8:3b:13:22:b1:c5:37:4f:00:1e:c8:c9:0b: 68:ce:65:45:1f:27:0a:b6:0c:86:0d:31:b7:a7:d6: e9:38:05:e7:00:8d:00:48:51:ce:fa:a1:1e:bf:c9: 28:be:82:59:c7:96:47:e9:1a:c6:e0:77:32:19:0a: de:4b:c7:fc:cb:e4:dd:24:5f:de:64:f2:03:3a:e8: 47:f9:97:28:40:a8:51:db:4d:e7:f3:14:56:47:d2: 96:a5:85:a7:2f:6d:6c:9b:dd:24:55:e3:75:48:86: 24:e9:5f:7a:65:9a:ca:79:93:a4:ae:73:65:27:47: af:02:6f:2f:2d:a1:e2:da:49:72:9e:ff:e8:03:82: 34:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:FE:A9:73:02:CC:68:1D:68:55:4C:E5:65:90:C5:60:34:02:10 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39352e3231342e3231392e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.219.0/24 Signature Algorithm: sha256WithRSAEncryption 65:06:46:2c:de:5f:a2:c3:85:be:65:34:e7:95:f8:7a:ff:cf: 62:31:23:b7:e7:70:08:6a:ba:92:3a:ff:c6:6c:16:bc:b1:34: 35:07:95:c5:78:ea:b8:8e:66:c1:65:69:ce:47:42:37:3b:fa: b0:af:b3:48:2a:e0:17:a2:43:08:74:5d:2f:a4:e7:0b:2e:9d: ed:5b:cd:c0:68:da:ff:4f:8f:1e:56:d6:de:a0:f7:95:7c:e4: c2:d0:a4:11:16:6c:85:0e:31:e3:4b:8c:66:91:ee:30:7e:99: e5:f6:c7:63:8a:a1:d9:e2:08:32:a7:b7:6b:4f:6d:32:94:13: f1:dc:16:c3:c5:60:0e:b4:ca:7c:b8:fb:21:fc:16:29:0b:8d: ac:36:82:17:33:ec:ac:a2:ca:44:c6:c8:a6:0e:d5:7a:d8:bd: f8:dc:f0:ff:cf:bd:ab:f4:fd:14:6e:c7:3c:d9:59:f6:e9:e7: a9:2c:1e:16:00:79:a1:2e:fe:64:43:9d:44:f5:17:ad:f9:08: 23:74:fe:01:e3:10:22:2d:2f:7e:91:5c:60:0a:eb:17:76:f0: 4a:57:62:65:c5:65:a3:ef:c6:a8:39:29:4f:18:1b:91:53:11: cd:10:e2:c5:97:d0:19:83:c7:18:6c:d7:98:2c:f9:e0:e6:a2: b5:e4:67:04 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUbMLYlNvIse64Ljs0Td/o+9EpynowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDdDRjZGRUE5NzMwMkNDNjgxRDY4NTU0Q0U1NjU5MEM1NjAzNDAyMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA26Yczdn83+b9ypsvEItvB+Rf hkw3LF2285cn0OFfYUsUNgbZcJ+hJCeAbUirKsnQfIuzSseQ5mgG3Qvc4xSZG2hG 0xH2BjRJltxSBXUhB9OJEEpbAt5JMKt9+0hqvCskzme8iwcMZy/QYKhQpbHMjnX0 NizKfw6OyDsTIrHFN08AHsjJC2jOZUUfJwq2DIYNMben1uk4BecAjQBIUc76oR6/ ySi+glnHlkfpGsbgdzIZCt5Lx/zL5N0kX95k8gM66Ef5lyhAqFHbTefzFFZH0pal hacvbWyb3SRV43VIhiTpX3plmsp5k6Suc2UnR68Cby8toeLaSXKe/+gDgjTLAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUfPb+qXMCzGgdaFVM5WWQxWA0AhAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTM1MmUzMjMxMzQy ZTMyMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAF/W2zANBgkqhkiG9w0BAQsFAAOCAQEAZQZGLN5fosOFvmU055X4ev/P YjEjt+dwCGq6kjr/xmwWvLE0NQeVxXjquI5mwWVpzkdCNzv6sK+zSCrgF6JDCHRd L6TnCy6d7VvNwGja/0+PHlbW3qD3lXzkwtCkERZshQ4x40uMZpHuMH6Z5fbHY4qh 2eIIMqe3a09tMpQT8dwWw8VgDrTKfLj7IfwWKQuNrDaCFzPsrKLKRMbIpg7Veti9 +Nzw/8+9q/T9FG7HPNlZ9unnqSweFgB5oS7+ZEOdRPUXrfkII3T+AeMQIi0vfpFc YArrF3bwSldiZcVlo+/GqDkpTxgbkVMRzRDixZfQGYPHGGzXmCz54OaiteRnBA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:41 2025 by rpki-client