This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203235313938.roa File: 39352e3231342e3137332e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: ZBwA38W5ihOuNN99BklpNu84rXSZQZCwBh8vdc50O64= Subject key identifier: D5:52:01:F7:37:4C:D4:7E:EC:14:38:72:EE:AA:38:AB:44:0D:75:EA Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 485F5FDBFE1C178F8453E25982332A306CD0EEA1 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203235313938.roa Signing time: Sat 22 Nov 2025 07:51:11 +0000 ROA not before: Sat 22 Nov 2025 07:46:11 +0000 ROA not after: Sat 21 Nov 2026 07:51:11 +0000 asID: 25198 IP address blocks: 95.214.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 19:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5f:5f:db:fe:1c:17:8f:84:53:e2:59:82:33:2a:30:6c:d0:ee:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Nov 22 07:46:11 2025 GMT Not After : Nov 21 07:51:11 2026 GMT Subject: CN=D55201F7374CD47EEC143872EEAA38AB440D75EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9c:0d:b7:72:35:20:f1:0e:92:c2:32:c3:72: 14:9c:38:1c:94:92:d0:dd:a0:6d:d6:57:53:dd:a3: e0:73:cf:20:6f:51:75:76:25:7f:35:33:c2:71:4d: 55:a3:95:7d:f1:de:48:ff:af:d7:f1:51:c2:01:7f: 40:9b:7a:2d:d9:fa:e3:dc:51:54:1b:0a:c5:2d:d5: 26:b0:e2:e6:7f:77:cf:dd:8f:fe:b2:2c:20:67:ca: 56:4e:e0:68:07:4d:cd:a9:9f:bd:94:13:e5:d1:51: 72:af:5a:ad:d7:2e:97:ff:5a:c9:85:d2:8c:03:03: 2a:10:cc:54:ed:ca:57:46:2b:60:9f:3f:1b:7c:ba: 6f:7e:aa:d4:ef:95:0a:26:4d:9a:15:2c:73:26:a2: 77:92:be:42:30:ef:10:0f:fb:67:ae:3f:25:b6:a1: 38:8a:61:ad:70:70:85:d6:87:a8:98:54:fd:34:b2: b1:bb:68:6a:04:b8:81:ae:b9:d0:7b:17:61:1e:bf: b3:20:5e:01:14:a8:cc:dd:e2:90:a6:96:7b:c1:87: 3c:cb:64:41:04:09:a3:e2:51:6d:0c:ac:70:4c:7d: bc:0a:85:ce:a8:24:63:66:59:82:b9:ee:07:22:7e: 85:18:99:5d:cb:fa:6b:ef:db:94:f7:ca:e3:40:a7: 23:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:52:01:F7:37:4C:D4:7E:EC:14:38:72:EE:AA:38:AB:44:0D:75:EA X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3137332e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.173.0/24 Signature Algorithm: sha256WithRSAEncryption 56:20:c1:34:78:a1:46:67:8c:06:91:78:68:0d:15:7c:28:26: be:ec:c6:0d:fd:a2:1f:40:4b:64:a4:03:16:0e:b7:74:a5:73: 04:47:f2:65:1f:4b:cb:92:ab:8a:53:1d:b5:c8:49:f0:31:62: db:87:43:e7:65:fb:c4:1a:b3:94:06:eb:af:b0:40:8a:f7:8e: 40:95:c4:75:4e:47:f5:b6:4a:b8:05:f4:5e:b6:5b:40:8d:92: 31:c8:cf:35:c9:67:63:d6:c5:1e:a1:80:67:58:e7:c3:3d:c0: ef:75:7a:69:6f:23:56:72:76:7f:44:db:3d:32:bf:fd:2c:89: 93:a8:c3:55:28:fb:bb:1d:59:15:d2:63:e3:20:56:f5:bc:ea: 33:b3:17:89:7d:06:a9:21:95:a8:68:25:2b:06:f4:cf:dd:5f: de:cc:4c:46:0e:00:85:20:95:3b:ea:3b:67:90:76:8a:42:07: c1:f7:d4:83:32:47:22:aa:05:64:11:12:1d:8a:e6:cb:7a:39: 60:f4:3c:bd:c9:dd:80:f4:ba:99:79:a9:5e:05:94:9d:11:0d: 3d:ef:46:1c:6e:55:49:9a:25:ad:fc:5c:4b:bd:87:86:c7:e6: 50:81:65:e1:9e:a9:74:45:f9:d2:e3:4f:d0:92:1e:55:a1:da: be:d0:e6:a3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSF9f2/4cF4+EU+JZgjMqMGzQ7qEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNTExMjIwNzQ2MTFaFw0yNjExMjEwNzUxMTFaMDMxMTAvBgNV BAMTKEQ1NTIwMUY3Mzc0Q0Q0N0VFQzE0Mzg3MkVFQUEzOEFCNDQwRDc1RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQConA23cjUg8Q6SwjLDchScOByU ktDdoG3WV1Pdo+BzzyBvUXV2JX81M8JxTVWjlX3x3kj/r9fxUcIBf0Cbei3Z+uPc UVQbCsUt1Saw4uZ/d8/dj/6yLCBnylZO4GgHTc2pn72UE+XRUXKvWq3XLpf/WsmF 0owDAyoQzFTtyldGK2CfPxt8um9+qtTvlQomTZoVLHMmoneSvkIw7xAP+2euPyW2 oTiKYa1wcIXWh6iYVP00srG7aGoEuIGuudB7F2Eev7MgXgEUqMzd4pCmlnvBhzzL ZEEECaPiUW0MrHBMfbwKhc6oJGNmWYK57gcifoUYmV3L+mvv25T3yuNApyP/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU1VIB9zdM1H7sFDhy7qo4q0QNdeowHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM3 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA X9atMA0GCSqGSIb3DQEBCwUAA4IBAQBWIME0eKFGZ4wGkXhoDRV8KCa+7MYN/aIf QEtkpAMWDrd0pXMER/JlH0vLkquKUx21yEnwMWLbh0PnZfvEGrOUBuuvsECK945A lcR1Tkf1tkq4BfRetltAjZIxyM81yWdj1sUeoYBnWOfDPcDvdXppbyNWcnZ/RNs9 Mr/9LImTqMNVKPu7HVkV0mPjIFb1vOozsxeJfQapIZWoaCUrBvTP3V/ezExGDgCF IJU76jtnkHaKQgfB99SDMkciqgVkERIdiubLejlg9Dy9yd2A9LqZealeBZSdEQ09 70YcblVJmiWt/FxLvYeGx+ZQgWXhnql0RfnS40/Qkh5Vodq+0Oaj -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:53 2025 by rpki-client