This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa File: 39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa (raw, json) Hash identifier: AjgG1gM1OxMVlGFutJS1mpX2Qd4qqtcRZt6UVKIG+j4= Subject key identifier: 17:7D:E3:AF:D5:46:2D:97:F4:DC:56:91:73:0E:28:1F:AB:B6:BA:93 Certificate issuer: /CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Certificate serial: 6F3028B88F995AC95DFEE293A61553FF8115AC27 Authority key identifier: 92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa Signing time: Wed 05 Nov 2025 14:58:05 +0000 ROA not before: Wed 05 Nov 2025 14:53:05 +0000 ROA not after: Wed 04 Nov 2026 14:58:05 +0000 asID: 212609 IP address blocks: 95.214.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.mft rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:30:28:b8:8f:99:5a:c9:5d:fe:e2:93:a6:15:53:ff:81:15:ac:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f49de8684f1287f4f6cb185d5cf7de80c90b94 Validity Not Before: Nov 5 14:53:05 2025 GMT Not After : Nov 4 14:58:05 2026 GMT Subject: CN=177DE3AFD5462D97F4DC5691730E281FABB6BA93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:92:30:75:04:c2:74:32:46:74:ab:34:de: 5e:17:82:20:15:ab:8b:cc:32:b6:a1:03:1b:6e:d1: 3d:6f:38:75:3e:d0:7c:c9:e9:94:19:c2:ff:8a:45: cf:9c:ce:e4:da:05:92:79:02:73:5b:13:b7:67:3c: ba:5a:07:e1:bc:6e:43:6d:f8:79:3b:49:34:2f:ad: fa:9b:dc:98:40:ed:48:ae:c8:b2:8a:15:ba:64:fe: 67:1c:81:66:9e:61:90:14:ed:79:91:87:fd:9e:35: 83:5a:82:28:90:32:7b:e3:c6:20:29:b8:33:c5:c3: 67:cf:e6:73:0c:19:7b:c5:a3:f8:d5:54:39:2c:71: 55:2c:75:5c:13:37:5b:a5:b7:6c:17:70:ab:f9:f1: 5d:59:a5:59:ee:98:e2:9a:6a:e0:00:5c:02:74:fe: 28:a2:c4:2f:75:de:eb:1b:f9:82:c4:60:4c:13:91: 31:90:28:48:74:07:03:c5:38:f2:c3:cf:78:ab:c1: 9c:f6:c9:98:81:b3:4d:ad:dc:e4:ca:af:b4:fd:25: 82:04:95:cc:bd:f0:37:26:63:cb:78:88:c2:44:6c: f3:3a:b6:6f:08:20:8a:98:3b:a4:3c:fc:d7:5c:86: 60:e3:a2:24:2f:0c:63:63:be:9b:6e:14:7f:35:cd: 5c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:7D:E3:AF:D5:46:2D:97:F4:DC:56:91:73:0E:28:1F:AB:B6:BA:93 X509v3 Authority Key Identifier: keyid:92:F4:9D:E8:68:4F:12:87:F4:F6:CB:18:5D:5C:F7:DE:80:C9:0B:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/92F49DE8684F1287F4F6CB185D5CF7DE80C90B94.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSd6GhPEof09ssYXVz33oDJC5Q.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/60923389-2bde-43e0-b0d5-fc244a6303d0/0/39352e3231342e3138322e302f32342d3234203d3e20323132363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.182.0/24 Signature Algorithm: sha256WithRSAEncryption 08:b4:63:6c:bc:c1:b7:83:3d:be:22:64:c3:a8:89:0e:ac:6c: 59:89:44:59:bb:dc:9e:4b:6f:4c:80:5f:cf:8f:60:a5:90:b8: b1:48:4e:a2:33:4b:a2:b9:3f:a0:a2:82:f4:aa:1b:fd:97:bc: 44:f7:18:8f:cc:77:d7:c1:d0:ea:bb:1f:f5:70:28:5e:aa:ff: b8:60:67:56:f8:ab:84:6e:ef:b5:d4:02:42:15:99:88:8d:50: 77:b8:3e:5f:94:b5:ac:c1:c7:11:15:cf:d1:9f:97:c3:a5:82: a2:87:dc:22:ec:18:8f:fa:b0:95:38:72:aa:3b:b4:69:27:f3: 18:a3:7c:68:58:c7:bc:e6:ec:b3:94:ad:2e:d0:a9:1c:24:4d: 72:ca:97:22:67:9a:55:2b:97:e7:85:3b:72:16:46:84:bc:2f: c2:cb:87:7a:dd:49:89:bb:27:ca:54:e6:1c:ad:92:be:ca:85: ec:11:56:9d:50:32:7c:e0:b5:0f:4b:10:17:4f:1a:61:95:13: 38:4f:12:18:ac:68:f3:ef:3e:80:d7:2c:31:33:1b:1d:be:92: 16:62:93:f3:d8:8d:30:94:7b:7c:26:b0:c1:7a:a3:73:2d:54: 0e:94:f4:52:3a:ba:74:1a:8b:3f:b4:69:18:76:58:14:2b:34: d8:6c:bd:cd -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUbzAouI+ZWsld/uKTphVT/4EVrCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJmNDlkZTg2ODRmMTI4N2Y0ZjZjYjE4NWQ1Y2Y3ZGU4 MGM5MGI5NDAeFw0yNTExMDUxNDUzMDVaFw0yNjExMDQxNDU4MDVaMDMxMTAvBgNV BAMTKDE3N0RFM0FGRDU0NjJEOTdGNERDNTY5MTczMEUyODFGQUJCNkJBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeuZIwdQTCdDJGdKs03l4XgiAV q4vMMrahAxtu0T1vOHU+0HzJ6ZQZwv+KRc+czuTaBZJ5AnNbE7dnPLpaB+G8bkNt +Hk7STQvrfqb3JhA7UiuyLKKFbpk/mccgWaeYZAU7XmRh/2eNYNagiiQMnvjxiAp uDPFw2fP5nMMGXvFo/jVVDkscVUsdVwTN1ult2wXcKv58V1ZpVnumOKaauAAXAJ0 /iiixC913usb+YLEYEwTkTGQKEh0BwPFOPLDz3irwZz2yZiBs02t3OTKr7T9JYIE lcy98DcmY8t4iMJEbPM6tm8IIIqYO6Q8/NdchmDjoiQvDGNjvptuFH81zVzTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUF33jr9VGLZf03FaRcw4oH6u2upMwHwYDVR0j BBgwFoAUkvSd6GhPEof09ssYXVz33oDJC5QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjA5MjMzODktMmJkZS00M2UwLWIwZDUtZmMyNDRhNjMw M2QwLzAvOTJGNDlERTg2ODRGMTI4N0Y0RjZDQjE4NUQ1Q0Y3REU4MEM5MEI5NC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2t2U2Q2R2hQRW9mMDlzc1lYVnozM29E SkM1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNjA5MjMzODkt MmJkZS00M2UwLWIwZDUtZmMyNDRhNjMwM2QwLzAvMzkzNTJlMzIzMTM0MmUzMTM4 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNjMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABf1rYwDQYJKoZIhvcNAQELBQADggEBAAi0Y2y8wbeDPb4iZMOoiQ6sbFmJRFm7 3J5Lb0yAX8+PYKWQuLFITqIzS6K5P6CigvSqG/2XvET3GI/Md9fB0Oq7H/VwKF6q /7hgZ1b4q4Ru77XUAkIVmYiNUHe4Pl+UtazBxxEVz9Gfl8OlgqKH3CLsGI/6sJU4 cqo7tGkn8xijfGhYx7zm7LOUrS7QqRwkTXLKlyJnmlUrl+eFO3IWRoS8L8LLh3rd SYm7J8pU5hytkr7KhewRVp1QMnzgtQ9LEBdPGmGVEzhPEhisaPPvPoDXLDEzGx2+ khZik/PYjTCUe3wmsMF6o3MtVA6U9FI6unQaiz+0aRh2WBQrNNhsvc0= -----END CERTIFICATE-----Generated at Fri Dec 5 15:59:32 2025 by rpki-client