This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32372e302f32342d3234203d3e20323035383836.roa File: 39312e3234362e32372e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: mX462CgFns7W4X+4kzEy9rbR0Uh9rNqKOg71fpqrw7E= Subject key identifier: B2:D5:28:78:5D:5F:E1:AC:DA:59:25:CF:82:5C:C0:4E:94:BB:42:78 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 2088530729877FD0949E846C76F31C8CBDB0DD0C Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32372e302f32342d3234203d3e20323035383836.roa Signing time: Thu 13 Nov 2025 07:12:55 +0000 ROA not before: Thu 13 Nov 2025 07:07:55 +0000 ROA not after: Thu 12 Nov 2026 07:12:55 +0000 asID: 205886 IP address blocks: 91.246.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:88:53:07:29:87:7f:d0:94:9e:84:6c:76:f3:1c:8c:bd:b0:dd:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 07:07:55 2025 GMT Not After : Nov 12 07:12:55 2026 GMT Subject: CN=B2D528785D5FE1ACDA5925CF825CC04E94BB4278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:a0:ea:2a:ea:2e:18:43:f9:0a:e2:4a:5f: 45:25:c2:3a:37:09:11:f1:67:e6:35:41:44:c3:6a: f0:7e:e4:43:50:1d:2f:11:48:80:40:07:d9:46:75: 6f:a3:5f:32:71:73:ac:fa:4f:9a:dd:a8:7f:1c:fe: 9c:61:33:b8:cb:24:65:8f:cb:1b:5d:0d:fa:32:b7: 9c:ae:66:93:b5:b9:38:b4:c7:f5:d5:06:54:5d:6d: 4a:ef:c4:02:64:e3:8c:ad:f8:ee:4f:87:f1:1b:fd: 8c:43:4a:77:cb:96:2a:16:1f:34:d9:b4:f0:b9:8a: 0f:3e:30:0b:c4:d5:e5:67:df:f1:7f:47:07:d8:e8: 1c:05:a0:28:f3:30:f4:d7:79:52:22:7e:94:1b:aa: e7:f8:e6:89:1d:dc:0c:b7:eb:66:18:cb:cd:ab:6c: a4:27:a1:26:9e:2e:09:f7:3b:35:d9:f6:48:fc:dc: 28:48:d8:94:fd:0f:51:18:c8:0e:c8:da:f5:f2:94: 91:94:a8:ce:d3:54:91:34:dd:4d:4c:aa:ba:44:62: 83:ce:5f:00:4e:f0:77:1b:a9:be:08:d4:9a:c8:d3: 9c:9a:5a:37:8a:67:28:ea:4a:a1:bd:83:a7:c1:a8: cd:bc:a2:31:ca:14:c2:c1:2f:28:71:d3:ec:30:37: 46:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:28:78:5D:5F:E1:AC:DA:59:25:CF:82:5C:C0:4E:94:BB:42:78 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32372e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.27.0/24 Signature Algorithm: sha256WithRSAEncryption 72:08:3c:f8:21:2f:5e:1e:dd:0b:2b:a6:27:6e:c1:89:bb:f8: 0e:c0:f0:3a:a6:2b:3c:a7:24:8c:f3:4f:a6:3e:23:ca:4d:db: 44:85:99:4b:d5:79:c7:91:40:ca:20:ff:88:0d:ea:7a:4b:22: c7:e1:17:61:85:8f:aa:21:af:b2:59:76:26:2e:80:9b:17:55: 27:37:42:27:1a:8f:e6:d2:1c:21:6c:80:34:4f:05:c8:b3:be: 31:16:b3:e8:20:48:d9:bd:42:48:af:e4:fe:1d:ff:95:13:74: 28:24:fa:61:95:f7:7b:b7:ad:3c:97:86:e7:5d:d7:93:34:95: a7:05:ce:a9:c6:5d:97:fa:d4:67:13:e7:1d:21:f3:f2:88:53: f7:c7:0a:f1:8f:b7:d6:43:0d:71:2f:a8:03:ee:c2:89:72:45: f5:c9:95:3a:1a:a9:a4:f0:8c:30:37:49:50:9f:e3:d1:7e:db: 65:fb:c3:0c:e7:2b:51:d9:19:c1:85:60:61:cf:c0:da:51:ba: 9f:f4:06:aa:b1:a8:6f:05:98:34:94:0e:32:bf:17:4c:fc:d2: a6:d9:66:7e:23:73:64:50:62:fa:05:67:06:a5:34:e0:94:7b: 74:25:a7:05:32:f8:52:49:5e:38:d6:ef:44:1c:31:21:a0:51: 24:e9:64:c2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIIhTBymHf9CUnoRsdvMcjL2w3QwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwNzA3NTVaFw0yNjExMTIwNzEyNTVaMDMxMTAvBgNV BAMTKEIyRDUyODc4NUQ1RkUxQUNEQTU5MjVDRjgyNUNDMDRFOTRCQjQyNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuL6DqKuouGEP5CuJKX0Ulwjo3 CRHxZ+Y1QUTDavB+5ENQHS8RSIBAB9lGdW+jXzJxc6z6T5rdqH8c/pxhM7jLJGWP yxtdDfoyt5yuZpO1uTi0x/XVBlRdbUrvxAJk44yt+O5Ph/Eb/YxDSnfLlioWHzTZ tPC5ig8+MAvE1eVn3/F/RwfY6BwFoCjzMPTXeVIifpQbquf45okd3Ay362YYy82r bKQnoSaeLgn3OzXZ9kj83ChI2JT9D1EYyA7I2vXylJGUqM7TVJE03U1MqrpEYoPO XwBO8Hcbqb4I1JrI05yaWjeKZyjqSqG9g6fBqM28ojHKFMLBLyhx0+wwN0Y5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUstUoeF1f4azaWSXPglzATpS7QngwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzkzMTJlMzIzNDM2MmUzMjM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzODM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA W/YbMA0GCSqGSIb3DQEBCwUAA4IBAQByCDz4IS9eHt0LK6YnbsGJu/gOwPA6pis8 pySM80+mPiPKTdtEhZlL1XnHkUDKIP+IDep6SyLH4RdhhY+qIa+yWXYmLoCbF1Un N0InGo/m0hwhbIA0TwXIs74xFrPoIEjZvUJIr+T+Hf+VE3QoJPphlfd7t608l4bn XdeTNJWnBc6pxl2X+tRnE+cdIfPyiFP3xwrxj7fWQw1xL6gD7sKJckX1yZU6Gqmk 8IwwN0lQn+PRfttl+8MM5ytR2RnBhWBhz8DaUbqf9AaqsahvBZg0lA4yvxdM/NKm 2WZ+I3NkUGL6BWcGpTTglHt0JacFMvhSSV441u9EHDEhoFEk6WTC -----END CERTIFICATE-----Generated at Fri Nov 28 06:13:42 2025 by rpki-client