This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e20323035383836.roa File: 39322e3131392e31322e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: bxDXcrsM9FwxFZ0uMnAtczxnGrPZk7mefb+6bttNJ7k= Subject key identifier: D2:2A:44:0E:D5:4A:03:7B:BD:A2:EA:93:7B:C4:D5:3C:78:DF:3C:9B Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 22DE1E6D383F24C27495CB23FD3D4BDEEFAA23A0 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e20323035383836.roa Signing time: Sat 15 Nov 2025 08:43:36 +0000 ROA not before: Sat 15 Nov 2025 08:38:36 +0000 ROA not after: Sat 14 Nov 2026 08:43:36 +0000 asID: 205886 IP address blocks: 92.119.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:de:1e:6d:38:3f:24:c2:74:95:cb:23:fd:3d:4b:de:ef:aa:23:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 15 08:38:36 2025 GMT Not After : Nov 14 08:43:36 2026 GMT Subject: CN=D22A440ED54A037BBDA2EA937BC4D53C78DF3C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3c:3b:f5:f7:97:07:1e:47:7f:b7:18:84:15: c9:f5:30:17:82:98:23:66:cc:78:fb:df:87:c6:e1: 40:b5:88:99:99:6f:f3:e7:17:55:13:d4:e7:9f:65: 2e:73:d2:d7:33:80:48:84:03:6d:af:19:2c:4f:92: 16:45:55:46:a8:87:87:a9:8f:f1:80:0a:41:40:ce: ef:cc:a5:6a:cd:d3:86:3c:00:9f:57:fc:11:9f:7a: e4:ac:71:b7:9a:63:43:be:a1:ae:56:e3:f9:d7:2a: 45:1b:fe:3b:b5:72:d8:35:e2:2f:9b:c3:12:9f:de: f8:67:9b:57:0b:5c:40:b7:bd:48:36:1c:cf:f9:f8: 06:e9:cf:be:03:3e:02:de:13:a5:4f:d5:5d:80:e3: 57:9b:c8:c3:71:bb:aa:68:59:90:06:de:e2:c8:7f: e3:96:4e:34:a9:94:70:28:e1:e7:29:ff:10:dd:97: 41:7b:09:a3:ae:92:46:df:9f:4e:52:19:ec:1b:33: fc:a7:a8:35:af:4c:4f:8e:09:18:08:5b:63:3a:85: 21:ed:4b:15:9c:04:9c:c4:fc:c0:cb:07:3f:d5:2b: 5c:32:66:2c:b2:7f:f0:01:b9:1c:06:91:91:a0:ab: f9:de:ff:c4:31:90:c3:df:bb:0b:c1:aa:34:84:46: c0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2A:44:0E:D5:4A:03:7B:BD:A2:EA:93:7B:C4:D5:3C:78:DF:3C:9B X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31322e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.12.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:33:83:ba:ee:84:69:21:b9:a7:7a:c5:16:22:ab:a7:7b:63: 1a:18:78:8e:c0:60:de:2e:9c:ad:ce:06:89:f1:b5:b9:6e:16: 8a:99:a7:33:79:3a:ed:d1:f7:30:86:8f:c2:2b:43:f0:e6:3d: 94:f9:3f:ab:4d:98:85:d7:8a:b6:d9:37:01:d1:34:88:72:5a: 89:d4:60:de:6e:cb:fa:1f:6a:aa:59:5c:64:30:ef:be:e5:ed: a9:59:2c:55:b1:35:98:ae:a8:35:98:e8:27:af:00:79:c4:ad: 08:2c:b1:6f:c7:73:bb:0d:cc:2b:52:e5:63:65:de:d9:da:b5: af:1c:43:88:01:5b:69:9e:df:69:55:be:63:b9:9a:ef:41:9d: 82:56:36:6d:b2:3a:6e:8b:15:0c:59:87:bf:bd:4b:f7:e3:cd: 74:1f:a5:18:7a:50:8b:30:17:26:0e:33:e0:25:18:4e:bb:1e: 8c:85:0d:31:ac:c0:e5:23:23:9f:ff:1f:29:97:f7:79:b5:f2: 5e:e0:42:94:ee:f0:5c:99:ca:6d:bc:35:be:0b:ff:43:e1:06: 4c:33:27:63:58:65:6d:e1:84:c6:20:7c:60:de:6c:90:f1:fa: 99:8d:15:35:01:8b:eb:73:cf:70:43:4c:49:d1:eb:b2:56:b7: 8b:66:b9:d3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIt4ebTg/JMJ0lcsj/T1L3u+qI6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMTUwODM4MzZaFw0yNjExMTQwODQzMzZaMDMxMTAvBgNV BAMTKEQyMkE0NDBFRDU0QTAzN0JCREEyRUE5MzdCQzRENTNDNzhERjNDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPDv195cHHkd/txiEFcn1MBeC mCNmzHj734fG4UC1iJmZb/PnF1UT1OefZS5z0tczgEiEA22vGSxPkhZFVUaoh4ep j/GACkFAzu/MpWrN04Y8AJ9X/BGfeuSscbeaY0O+oa5W4/nXKkUb/ju1ctg14i+b wxKf3vhnm1cLXEC3vUg2HM/5+Abpz74DPgLeE6VP1V2A41ebyMNxu6poWZAG3uLI f+OWTjSplHAo4ecp/xDdl0F7CaOukkbfn05SGewbM/ynqDWvTE+OCRgIW2M6hSHt SxWcBJzE/MDLBz/VK1wyZiyyf/ABuRwGkZGgq/ne/8QxkMPfuwvBqjSERsDlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0ipEDtVKA3u9ouqTe8TVPHjfPJswHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzkzMjJlMzEzMTM5MmUzMTMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzODM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XHcMMA0GCSqGSIb3DQEBCwUAA4IBAQBaM4O67oRpIbmnesUWIqune2MaGHiOwGDe LpytzgaJ8bW5bhaKmaczeTrt0fcwho/CK0Pw5j2U+T+rTZiF14q22TcB0TSIclqJ 1GDebsv6H2qqWVxkMO++5e2pWSxVsTWYrqg1mOgnrwB5xK0ILLFvx3O7DcwrUuVj Zd7Z2rWvHEOIAVtpnt9pVb5juZrvQZ2CVjZtsjpuixUMWYe/vUv34810H6UYelCL MBcmDjPgJRhOux6MhQ0xrMDlIyOf/x8pl/d5tfJe4EKU7vBcmcptvDW+C/9D4QZM MydjWGVt4YTGIHxg3myQ8fqZjRU1AYvrc89wQ0xJ0euyVreLZrnT -----END CERTIFICATE-----Generated at Fri Dec 5 16:41:13 2025 by rpki-client