This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32372e302f32342d3234203d3e203235313938.roa File: 39312e3234362e32372e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: gHC7M+t1lIuQnK9rZvwmCUquDXmZVxO9w2zdBUhCF54= Subject key identifier: D2:B8:74:5E:B3:82:4E:6F:F3:1F:D5:D2:20:06:71:32:88:B4:13:37 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 49C947ED0496BD63C63E1A7F4A92E71C68EBE9FB Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32372e302f32342d3234203d3e203235313938.roa Signing time: Mon 17 Nov 2025 04:25:13 +0000 ROA not before: Mon 17 Nov 2025 04:20:13 +0000 ROA not after: Mon 16 Nov 2026 04:25:13 +0000 asID: 25198 IP address blocks: 91.246.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c9:47:ed:04:96:bd:63:c6:3e:1a:7f:4a:92:e7:1c:68:eb:e9:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 17 04:20:13 2025 GMT Not After : Nov 16 04:25:13 2026 GMT Subject: CN=D2B8745EB3824E6FF31FD5D22006713288B41337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5c:60:ea:b2:c7:bd:d2:e4:6d:39:b5:f2:72: ed:68:5f:6c:7a:f9:03:a8:98:77:be:42:c6:67:62: ac:a9:ad:b0:29:5d:ec:1b:87:37:d2:c3:9e:ad:47: ae:11:e2:59:b6:28:7f:36:d7:4e:e0:63:e7:d4:92: 5c:f1:f3:1f:71:cc:62:0d:be:f8:98:af:c3:45:a1: 48:c1:0f:3f:dc:18:76:b8:70:b0:2e:13:79:d7:4e: a1:25:22:9c:91:56:c3:ca:78:16:81:ea:50:0c:65: dc:e9:f4:a9:14:e7:f5:d0:e1:e0:fb:f3:db:32:a4: 69:de:ae:32:6d:e3:f2:b5:e1:b3:e4:db:23:d0:ea: f9:bd:69:bd:58:21:72:d5:ba:72:3c:3d:14:a4:11: 6f:09:72:34:03:d2:f6:07:59:e3:f3:b4:79:d3:cf: 6a:95:12:f6:53:ee:62:5a:08:74:26:e8:5d:e2:22: 7c:ac:b0:82:c8:ed:20:38:db:d6:1a:cb:c4:3f:83: f6:93:08:64:27:43:2e:fd:35:1f:a0:d8:5e:f2:20: ac:f2:36:ea:74:46:fa:a4:ae:e9:5e:6f:91:03:0f: e0:b6:46:13:89:6c:89:0f:57:4c:37:90:ac:19:2b: 8c:0b:86:18:de:67:9f:11:d6:10:26:d1:44:ea:10: ce:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:74:5E:B3:82:4E:6F:F3:1F:D5:D2:20:06:71:32:88:B4:13:37 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/39312e3234362e32372e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.246.27.0/24 Signature Algorithm: sha256WithRSAEncryption b2:f5:b3:8b:99:b6:5e:af:be:68:0f:74:b1:b3:c6:0c:55:dd: 40:09:a1:2c:73:d6:6c:1b:ec:5d:8d:5c:a2:c4:b8:e6:b2:57: d1:a4:a8:3c:b1:c3:df:7b:42:a1:1b:4b:27:49:bf:3a:16:38: cd:e1:c3:de:a6:c9:3b:83:cc:e6:91:4f:88:35:40:05:1d:31: 2b:df:39:82:b2:a4:e3:4c:67:4b:88:90:bb:93:4a:60:44:46: e8:c1:e8:79:e3:8b:dd:22:99:97:fd:e9:4a:52:16:63:a4:e8: 2d:56:41:1b:23:80:97:4a:51:18:04:50:a5:18:c8:a6:59:86: d9:ed:6e:62:62:99:ff:96:da:14:3e:98:f6:fa:26:0b:ed:0e: 3b:f9:50:74:d1:38:84:c3:9b:00:0e:1e:e6:9e:62:2f:7f:10: 9e:2d:e2:61:04:15:18:33:d7:d4:b8:68:f8:20:cb:6d:d2:0d: 2e:8b:4f:1a:3b:68:34:49:ff:ea:37:66:bb:23:91:fd:d8:7f: db:f1:14:04:cd:e4:9a:fe:ce:8f:89:64:cd:5c:3f:ac:83:3f: cb:ec:a2:04:cd:7a:f8:fb:17:99:80:8f:fd:15:6a:b5:46:c2: 24:c4:6d:e8:99:23:67:dc:5b:00:4e:a6:a1:30:b4:69:77:dc: 03:83:27:40 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSclH7QSWvWPGPhp/SpLnHGjr6fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTcwNDIwMTNaFw0yNjExMTYwNDI1MTNaMDMxMTAvBgNV BAMTKEQyQjg3NDVFQjM4MjRFNkZGMzFGRDVEMjIwMDY3MTMyODhCNDEzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMXGDqsse90uRtObXycu1oX2x6 +QOomHe+QsZnYqyprbApXewbhzfSw56tR64R4lm2KH82107gY+fUklzx8x9xzGIN vviYr8NFoUjBDz/cGHa4cLAuE3nXTqElIpyRVsPKeBaB6lAMZdzp9KkU5/XQ4eD7 89sypGnerjJt4/K14bPk2yPQ6vm9ab1YIXLVunI8PRSkEW8JcjQD0vYHWePztHnT z2qVEvZT7mJaCHQm6F3iInyssILI7SA429Yay8Q/g/aTCGQnQy79NR+g2F7yIKzy Nup0Rvqkruleb5EDD+C2RhOJbIkPV0w3kKwZK4wLhhjeZ58R1hAm0UTqEM4XAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU0rh0XrOCTm/zH9XSIAZxMoi0EzcwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzkzMTJlMzIzNDM2MmUzMjM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFv2 GzANBgkqhkiG9w0BAQsFAAOCAQEAsvWzi5m2Xq++aA90sbPGDFXdQAmhLHPWbBvs XY1cosS45rJX0aSoPLHD33tCoRtLJ0m/OhY4zeHD3qbJO4PM5pFPiDVABR0xK985 grKk40xnS4iQu5NKYERG6MHoeeOL3SKZl/3pSlIWY6ToLVZBGyOAl0pRGARQpRjI plmG2e1uYmKZ/5baFD6Y9vomC+0OO/lQdNE4hMObAA4e5p5iL38Qni3iYQQVGDPX 1Lho+CDLbdINLotPGjtoNEn/6jdmuyOR/dh/2/EUBM3kmv7Oj4lkzVw/rIM/y+yi BM16+PsXmYCP/RVqtUbCJMRt6JkjZ9xbAE6moTC0aXfcA4MnQA== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:46 2025 by rpki-client