This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32342d3234203d3e20313337323335.roa
File: 39322e3131392e31342e302f32342d3234203d3e20313337323335.roa (raw, json)
Hash identifier: 7ZA1H3sf5l6YMXWyWJqU43/NMpf7BIvTrnJI/j78k+w=
Subject key identifier: 5B:33:71:8C:7D:A5:B4:B6:3E:14:B7:77:7F:41:D7:28:1F:94:05:DB
Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Certificate serial: 050242526DF6873659DBD824A2CA163CBC87B62B
Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32342d3234203d3e20313337323335.roa
Signing time: Fri 14 Nov 2025 11:07:04 +0000
ROA not before: Fri 14 Nov 2025 11:02:04 +0000
ROA not after: Fri 13 Nov 2026 11:07:04 +0000
asID: 137235
IP address blocks: 92.119.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 21:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:02:42:52:6d:f6:87:36:59:db:d8:24:a2:ca:16:3c:bc:87:b6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91
Validity
Not Before: Nov 14 11:02:04 2025 GMT
Not After : Nov 13 11:07:04 2026 GMT
Subject: CN=5B33718C7DA5B4B63E14B7777F41D7281F9405DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:33:34:5a:b3:a6:44:21:22:1f:5d:43:e5:
7c:1e:0d:41:f8:e2:89:ed:43:45:75:f6:65:13:6d:
7a:23:72:b4:0d:59:26:6a:64:53:16:aa:80:5c:c8:
2b:e1:02:81:0d:0f:ed:60:37:5f:81:6d:3f:d8:7b:
64:90:5c:05:3b:f2:47:ff:16:ba:46:5b:00:d4:d1:
88:9c:22:b9:c0:3e:73:09:af:4c:19:7c:be:b2:5e:
61:60:18:9e:1a:c0:bd:a2:3e:3a:0a:b8:01:a4:2e:
d0:1f:dc:60:ec:9e:e5:9f:5d:6a:a8:63:a5:dc:06:
37:55:3b:15:f2:08:74:69:c0:82:56:8a:d3:30:16:
d8:91:c6:e0:06:b2:5d:b9:fe:7c:61:f5:e1:4c:e2:
d4:11:60:55:77:0b:72:a5:4b:57:0e:d7:9b:f1:d8:
ed:70:07:40:98:b6:ee:60:b9:d2:fc:ee:53:42:5f:
5f:ce:89:6d:58:83:91:01:28:6c:d4:dd:c5:53:3c:
3a:cb:7b:c6:c1:ce:47:72:2d:c4:4a:b9:75:79:89:
05:06:67:67:c3:aa:8a:3a:74:9c:c8:c2:fa:80:7c:
5f:40:81:5a:85:4e:ce:bd:ae:61:ec:ed:7c:f2:93:
5b:d8:5f:dd:f4:94:07:ed:29:53:4f:bd:cc:df:65:
65:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:71:8C:7D:A5:B4:B6:3E:14:B7:77:7F:41:D7:28:1F:94:05:DB
X509v3 Authority Key Identifier:
keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31342e302f32342d3234203d3e20313337323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.119.14.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b4:c8:92:a0:e5:26:60:ec:c0:aa:7c:58:b1:5d:46:2f:f7:
17:fc:bf:32:86:8d:ee:c9:10:b3:70:38:8e:f9:5f:bc:81:8c:
91:24:21:92:5d:ba:8f:0b:a9:30:15:f3:89:ca:d8:d5:f7:2a:
e0:24:99:40:61:70:dd:0c:18:07:98:8d:e0:e7:68:bb:c5:95:
d0:35:7d:d9:34:cc:42:79:10:90:99:20:71:5d:87:2d:ef:eb:
07:5a:32:d4:f1:07:63:d1:da:1c:ef:83:d6:f0:f3:0a:24:d5:
bc:65:2f:d4:75:9d:c7:27:73:74:76:f8:d8:ed:1d:75:a6:ee:
89:e6:8f:e5:aa:78:e3:89:85:1d:15:af:b6:ce:3d:85:91:c1:
3d:6a:01:93:b0:d7:63:61:60:2a:4e:1d:30:28:ef:4c:e4:18:
ba:09:17:67:5b:55:4b:e8:17:03:dd:3a:f3:af:58:ee:14:73:
cb:19:1f:61:21:50:07:06:b7:b4:17:b3:a5:fd:0c:e6:c8:44:
35:83:d2:4d:00:53:b4:38:f5:22:fb:57:59:07:c4:cc:36:e5:
2e:40:19:52:db:85:3b:03:ad:b4:bb:7b:4e:62:bd:72:2b:6e:
c5:b4:be:a8:13:d7:bb:74:1b:10:e3:46:44:4e:6a:46:f3:0c:
a1:db:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 07:31:35 2025 by rpki-client