This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e20323035383836.roa File: 39322e3131392e31332e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: IXZQItm+12tsfx4B1rwfqCFMqKz7DEV1hO3/MW78J00= Subject key identifier: AB:70:4E:82:F9:C5:22:0F:D4:86:01:F0:87:BD:71:C8:EB:A8:55:BB Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 5E0A0547D3A9682E2860EDCDBF7CCC0C6BF02894 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e20323035383836.roa Signing time: Fri 14 Nov 2025 10:22:47 +0000 ROA not before: Fri 14 Nov 2025 10:17:47 +0000 ROA not after: Fri 13 Nov 2026 10:22:47 +0000 asID: 205886 IP address blocks: 92.119.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0a:05:47:d3:a9:68:2e:28:60:ed:cd:bf:7c:cc:0c:6b:f0:28:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 14 10:17:47 2025 GMT Not After : Nov 13 10:22:47 2026 GMT Subject: CN=AB704E82F9C5220FD48601F087BD71C8EBA855BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:89:d2:80:39:da:61:d9:be:98:ba:c2:67: 35:a4:de:ce:8e:50:2f:a0:6a:be:6a:c7:91:eb:1b: 6b:88:5a:21:3f:f3:af:75:53:e0:63:58:c1:07:88: 21:fc:4c:87:af:27:4e:38:92:84:10:24:9c:9b:0a: 87:94:0b:0c:09:dd:9d:42:e5:99:10:a2:1c:f8:3f: 9b:55:05:dd:70:e5:27:9d:3f:6b:e6:dd:9b:e3:fe: aa:fa:93:60:88:c8:a4:37:93:fb:51:69:0d:8a:2a: cb:a0:ce:27:30:43:30:07:f6:f3:c8:8c:3c:0a:18: bd:dc:f2:45:f1:1d:56:12:a4:56:47:b3:a3:70:e5: c9:68:9f:85:73:06:53:9a:c7:72:c8:1f:dd:de:6b: 5e:08:a5:bd:bc:23:8f:0e:73:d9:25:ad:2c:2a:60: b9:fa:41:32:32:dd:b2:52:94:f1:1b:22:1b:66:29: 0b:4a:7c:a6:71:2a:4a:02:e0:a6:dd:9d:45:fd:cd: 1b:fb:6b:7c:7f:f4:2d:dc:4e:0d:7e:d2:83:1f:ff: 26:ea:56:e5:cb:1f:aa:c2:23:93:8c:79:c7:00:4a: 96:94:f6:c3:41:ab:d6:b9:da:97:1d:1c:96:81:a2: 0b:65:3b:2a:69:13:7f:4f:68:a9:49:7a:48:de:9a: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:70:4E:82:F9:C5:22:0F:D4:86:01:F0:87:BD:71:C8:EB:A8:55:BB X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31332e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.13.0/24 Signature Algorithm: sha256WithRSAEncryption 99:dc:c9:02:86:d3:51:ae:59:3b:e0:38:2a:43:b4:44:37:16: f6:b7:d4:f6:75:85:16:37:91:5e:65:4c:4f:ea:d6:6e:92:c3: 2e:05:27:3e:f1:17:af:ea:8c:05:80:e2:e7:29:0f:83:7b:da: 18:69:87:ce:42:05:95:b5:ab:cf:11:dc:fd:4b:07:47:19:b3: 9a:78:df:a9:3a:31:59:1c:38:b8:d2:17:36:47:33:75:b8:fa: a0:2c:0f:60:28:57:d2:6c:3c:01:c3:3b:64:e9:79:7a:15:55: 92:44:97:cf:86:97:73:35:74:bd:27:e7:d0:fd:1b:c1:02:e6: 99:2b:f0:fc:14:50:d7:a9:a3:6f:21:6d:b1:06:42:e8:71:16: 8d:e8:69:4d:97:d2:e5:f3:6c:14:75:a3:9c:b0:80:9c:6e:06: 59:4c:e8:f9:d4:63:26:d2:0f:24:8a:89:a5:42:8a:68:12:7d: ea:c7:5e:d0:7c:02:d3:ea:7a:0f:c0:fa:92:da:26:48:9f:7f: c3:bc:b8:be:b5:6d:c2:02:9c:0d:0c:36:db:35:26:10:1b:93: bb:8e:19:cb:a9:ca:61:1f:41:5b:57:df:7c:de:cf:79:cf:5f: 9d:b3:71:f2:35:7c:14:11:78:fb:0e:59:99:ec:aa:ca:92:a4: 05:20:fa:83 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXgoFR9OpaC4oYO3Nv3zMDGvwKJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMTQxMDE3NDdaFw0yNjExMTMxMDIyNDdaMDMxMTAvBgNV BAMTKEFCNzA0RTgyRjlDNTIyMEZENDg2MDFGMDg3QkQ3MUM4RUJBODU1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2C4nSgDnaYdm+mLrCZzWk3s6O UC+gar5qx5HrG2uIWiE/8691U+BjWMEHiCH8TIevJ044koQQJJybCoeUCwwJ3Z1C 5ZkQohz4P5tVBd1w5SedP2vm3Zvj/qr6k2CIyKQ3k/tRaQ2KKsugzicwQzAH9vPI jDwKGL3c8kXxHVYSpFZHs6Nw5clon4VzBlOax3LIH93ea14Ipb28I48Oc9klrSwq YLn6QTIy3bJSlPEbIhtmKQtKfKZxKkoC4KbdnUX9zRv7a3x/9C3cTg1+0oMf/ybq VuXLH6rCI5OMeccASpaU9sNBq9a52pcdHJaBogtlOyppE39PaKlJekjemljFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUq3BOgvnFIg/UhgHwh71xyOuoVbswHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzkzMjJlMzEzMTM5MmUzMTMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM1MzgzODM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA XHcNMA0GCSqGSIb3DQEBCwUAA4IBAQCZ3MkChtNRrlk74DgqQ7RENxb2t9T2dYUW N5FeZUxP6tZuksMuBSc+8Rev6owFgOLnKQ+De9oYaYfOQgWVtavPEdz9SwdHGbOa eN+pOjFZHDi40hc2RzN1uPqgLA9gKFfSbDwBwztk6Xl6FVWSRJfPhpdzNXS9J+fQ /RvBAuaZK/D8FFDXqaNvIW2xBkLocRaN6GlNl9Ll82wUdaOcsICcbgZZTOj51GMm 0g8kiomlQopoEn3qx17QfALT6noPwPqS2iZIn3/DvLi+tW3CApwNDDbbNSYQG5O7 jhnLqcphH0FbV9983s95z1+ds3HyNXwUEXj7DlmZ7KrKkqQFIPqD -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:36 2025 by rpki-client