This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31352e302f32342d3234203d3e203232343237.roa File: 39322e3131392e31352e302f32342d3234203d3e203232343237.roa (raw, json) Hash identifier: rPkV7cIO3zliSLUYXQG+av9O/5BWlpM9FtAw2Rk8Dvk= Subject key identifier: 43:09:33:61:18:17:C3:1C:7B:32:0D:1B:C3:51:BD:6E:3D:79:C2:54 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 4B5965C4C61443E4EDDE438FCE9EF4F8051D9C20 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31352e302f32342d3234203d3e203232343237.roa Signing time: Fri 14 Nov 2025 11:08:09 +0000 ROA not before: Fri 14 Nov 2025 11:03:09 +0000 ROA not after: Fri 13 Nov 2026 11:08:09 +0000 asID: 22427 IP address blocks: 92.119.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:59:65:c4:c6:14:43:e4:ed:de:43:8f:ce:9e:f4:f8:05:1d:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 14 11:03:09 2025 GMT Not After : Nov 13 11:08:09 2026 GMT Subject: CN=430933611817C31C7B320D1BC351BD6E3D79C254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:cd:fc:f9:1b:6c:95:39:a4:33:9f:6d:8e: 42:9f:bc:36:3a:6c:cd:c4:3d:60:9e:52:49:c9:b4: d8:aa:7d:fb:65:d9:35:48:d4:fa:6c:67:54:d5:2c: a3:44:48:41:5e:48:a0:2b:64:50:dd:61:02:a3:1a: b3:62:29:54:41:93:2f:04:b1:7c:84:03:20:f4:64: 38:04:d0:14:18:41:fb:52:97:fa:3e:a2:38:fc:5b: b0:43:b4:39:5d:c9:62:93:e2:d2:38:bb:4f:54:da: 23:ef:d4:1b:da:06:71:b5:b5:25:57:4a:3d:74:22: 24:c3:e3:69:53:61:46:e8:12:b4:ae:95:e7:e9:e6: 54:3c:26:c3:36:d1:c3:af:f8:6d:f2:66:a0:79:72: 18:db:62:2f:a4:13:79:31:c3:e8:9a:2f:ca:93:23: ac:ea:bd:38:cd:a5:62:ab:0d:fa:53:a5:b4:9f:c1: 6e:f2:22:c7:79:b3:18:32:31:f7:a1:2d:1e:97:d6: 50:40:89:fe:ef:0d:58:80:86:2e:13:ce:f9:41:5b: 10:c9:90:ea:0b:7f:01:54:45:65:18:72:b9:66:32: a2:9c:93:99:c5:62:35:cd:ab:0d:dd:ef:23:0c:05: 72:a8:c3:99:54:14:c6:19:33:fc:c4:ec:09:c7:61: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:33:61:18:17:C3:1C:7B:32:0D:1B:C3:51:BD:6E:3D:79:C2:54 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/39322e3131392e31352e302f32342d3234203d3e203232343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.119.15.0/24 Signature Algorithm: sha256WithRSAEncryption b8:57:95:cf:89:ea:76:28:d1:78:79:e5:35:65:f7:c8:c0:d9: 1a:ab:d5:ac:42:eb:e1:79:64:75:76:59:98:4b:1a:91:47:a7: 00:2a:51:5d:2a:f0:3a:b7:8d:2e:45:6e:73:89:92:5d:b9:f0: ee:94:57:34:95:a3:2b:ea:9b:13:41:f6:f2:4a:d6:7e:42:e8: 15:ab:a3:1d:4a:87:c5:59:42:00:70:f1:63:34:06:fb:db:93: 92:4b:96:f9:8c:6c:9e:63:84:ed:5f:e4:d1:b0:24:25:66:ad: e5:7c:a4:8e:ed:46:1f:6a:c6:7b:d0:9e:f9:87:b4:ee:c7:1f: fc:0b:6a:ee:4b:53:34:3d:40:89:15:d9:8e:ec:79:f2:00:61: 22:5b:39:33:c4:5e:35:42:0e:5b:6b:03:1b:e4:a5:b5:bc:fd: 80:f2:56:e4:17:3f:df:28:de:ab:59:b2:28:5e:59:04:f9:4b: 34:5f:0a:15:31:48:4e:41:28:46:c9:11:91:fa:4d:97:1a:9e: 38:a6:ba:d3:f2:35:75:8d:75:e4:5d:fe:25:53:c0:90:d5:e2: d0:ac:0a:b1:ca:01:a3:ce:f3:ea:25:be:50:8f:55:bf:7f:90: d0:21:94:07:d9:b0:28:f1:0e:d6:ab:32:50:b1:e1:2d:76:8a: 6e:2a:42:5b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUS1llxMYUQ+Tt3kOPzp70+AUdnCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMTQxMTAzMDlaFw0yNjExMTMxMTA4MDlaMDMxMTAvBgNV BAMTKDQzMDkzMzYxMTgxN0MzMUM3QjMyMEQxQkMzNTFCRDZFM0Q3OUMyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjs38+RtslTmkM59tjkKfvDY6 bM3EPWCeUknJtNiqfftl2TVI1PpsZ1TVLKNESEFeSKArZFDdYQKjGrNiKVRBky8E sXyEAyD0ZDgE0BQYQftSl/o+ojj8W7BDtDldyWKT4tI4u09U2iPv1BvaBnG1tSVX Sj10IiTD42lTYUboErSulefp5lQ8JsM20cOv+G3yZqB5chjbYi+kE3kxw+iaL8qT I6zqvTjNpWKrDfpTpbSfwW7yIsd5sxgyMfehLR6X1lBAif7vDViAhi4TzvlBWxDJ kOoLfwFURWUYcrlmMqKck5nFYjXNqw3d7yMMBXKow5lUFMYZM/zE7AnHYQj/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUQwkzYRgXwxx7Mg0bw1G9bj15wlQwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzkzMjJlMzEzMTM5MmUzMTM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMjM0MzIzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFx3 DzANBgkqhkiG9w0BAQsFAAOCAQEAuFeVz4nqdijReHnlNWX3yMDZGqvVrELr4Xlk dXZZmEsakUenACpRXSrwOreNLkVuc4mSXbnw7pRXNJWjK+qbE0H28krWfkLoFauj HUqHxVlCAHDxYzQG+9uTkkuW+YxsnmOE7V/k0bAkJWat5Xykju1GH2rGe9Ce+Ye0 7scf/Atq7ktTND1AiRXZjux58gBhIls5M8ReNUIOW2sDG+Sltbz9gPJW5Bc/3yje q1myKF5ZBPlLNF8KFTFITkEoRskRkfpNlxqeOKa60/I1dY115F3+JVPAkNXi0KwK scoBo87z6iW+UI9Vv3+Q0CGUB9mwKPEO1qsyULHhLXaKbipCWw== -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:34 2025 by rpki-client