This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa File: 39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: j1MHfx58jCRj5UNsGNwaYP3MytjrwyDpvoeypPFHncg= Subject key identifier: 90:1F:55:D1:D4:23:CA:79:F6:76:49:5A:E2:D7:ED:E8:CF:3C:9B:4F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 36BC0078715D7ED7FE701D7A52590AB846EDA1EE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 204170 IP address blocks: 91.199.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:bc:00:78:71:5d:7e:d7:fe:70:1d:7a:52:59:0a:b8:46:ed:a1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=901F55D1D423CA79F676495AE2D7EDE8CF3C9B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:36:86:73:59:e2:b6:49:6a:d6:9b:93:80: 18:1d:53:fb:f9:1a:48:ef:42:02:23:48:ec:f5:c2: 37:b5:f9:fa:49:79:30:66:f7:5d:c3:12:f7:86:ec: 96:8d:b5:ba:85:dc:02:d5:bb:4c:3d:ab:98:50:5b: d1:48:5e:76:0f:ec:2d:9b:0c:13:4a:17:d9:d4:aa: b4:de:b9:a9:5a:3b:d5:d6:e6:d0:5b:2b:df:07:34: 04:00:5b:53:ff:88:ac:47:a8:04:c6:33:fb:ce:30: 92:83:34:01:49:20:bf:59:0a:7e:75:6f:15:d8:d9: 21:3c:49:4b:b9:16:85:1b:b6:b2:d0:8f:9c:e5:e8: c1:7d:46:2f:58:28:1e:39:b6:ae:f5:cd:34:29:78: c4:22:52:04:7b:2f:0f:15:45:fb:31:8d:d6:bb:0a: a4:22:1e:28:27:91:12:45:33:64:30:5b:e7:0c:78: 42:7d:37:3e:57:2e:7e:14:99:3c:61:f6:9f:4b:f7: cf:38:f9:dc:57:11:bb:52:08:fe:36:53:7f:7c:a9: 17:ff:89:14:b6:ae:f0:52:60:d9:aa:7e:f9:be:ad: ab:fc:03:b1:7e:8a:6d:72:19:b0:a1:db:62:c6:51: 62:8a:c0:8a:1e:c3:03:a5:81:ed:df:6e:05:a2:44: 81:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1F:55:D1:D4:23:CA:79:F6:76:49:5A:E2:D7:ED:E8:CF:3C:9B:4F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139392e3132322e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.122.0/24 Signature Algorithm: sha256WithRSAEncryption b1:1d:25:48:02:cb:cb:8c:0d:ce:b8:9d:a0:ad:06:1f:91:ce: 5b:95:6d:78:2e:ad:6e:96:ba:24:dc:7d:f1:70:e2:65:cf:5d: db:0a:ab:20:fc:43:0b:44:31:47:c2:8b:a4:3d:0c:5f:f9:fc: 0c:bf:5d:a2:3b:4b:b7:bf:c4:c2:44:d7:f9:33:99:ce:e9:cb: d7:54:31:a9:58:7d:dc:ab:c1:c0:32:a1:ae:95:a7:a1:1b:e8: a3:73:12:48:cf:9a:37:1e:ed:f5:96:23:78:a2:e5:e7:54:e5: fd:59:7a:c1:60:83:10:30:ae:5f:37:42:bd:b7:80:dd:8f:57: 86:7f:1f:9d:21:6a:5f:7a:20:a0:4f:ec:75:5f:38:9a:ad:b0: 2d:fd:cb:5b:2c:66:eb:2b:18:12:f4:5f:b0:7a:f6:43:87:d7: cd:13:d7:29:b7:47:47:cc:ae:23:9c:4b:bc:72:d6:90:5d:b0: 86:ae:a5:f1:0e:9d:e4:27:4e:64:2f:57:b0:3b:4d:f0:36:6f: f6:df:32:1b:15:42:34:a1:98:b8:13:9e:d3:55:c8:a1:f5:8b: 6a:d0:af:8f:e2:37:53:c6:4a:6c:f9:00:c3:c1:45:0f:98:90: ec:58:49:e3:f1:43:86:24:73:ff:af:1b:8c:42:13:85:43:ee: a6:34:c5:ae -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNrwAeHFdftf+cB16UlkKuEbtoe4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKDkwMUY1NUQxRDQyM0NBNzlGNjc2NDk1QUUyRDdFREU4Q0YzQzlCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC79DaGc1nitklq1puTgBgdU/v5 GkjvQgIjSOz1wje1+fpJeTBm913DEveG7JaNtbqF3ALVu0w9q5hQW9FIXnYP7C2b DBNKF9nUqrTeualaO9XW5tBbK98HNAQAW1P/iKxHqATGM/vOMJKDNAFJIL9ZCn51 bxXY2SE8SUu5FoUbtrLQj5zl6MF9Ri9YKB45tq71zTQpeMQiUgR7Lw8VRfsxjda7 CqQiHignkRJFM2QwW+cMeEJ9Nz5XLn4UmTxh9p9L9884+dxXEbtSCP42U398qRf/ iRS2rvBSYNmqfvm+rav8A7F+im1yGbCh22LGUWKKwIoewwOlge3fbgWiRIFdAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUkB9V0dQjynn2dkla4tft6M88m08wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5Mzky ZTMxMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAFvHejANBgkqhkiG9w0BAQsFAAOCAQEAsR0lSALLy4wNzridoK0GH5HO W5VteC6tbpa6JNx98XDiZc9d2wqrIPxDC0QxR8KLpD0MX/n8DL9dojtLt7/EwkTX +TOZzunL11QxqVh93KvBwDKhrpWnoRvoo3MSSM+aNx7t9ZYjeKLl51Tl/Vl6wWCD EDCuXzdCvbeA3Y9Xhn8fnSFqX3ogoE/sdV84mq2wLf3LWyxm6ysYEvRfsHr2Q4fX zRPXKbdHR8yuI5xLvHLWkF2whq6l8Q6d5CdOZC9XsDtN8DZv9t8yGxVCNKGYuBOe 01XIofWLatCvj+I3U8ZKbPkAw8FFD5iQ7FhJ4/FDhiRz/68bjEIThUPupjTFrg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:57:21 2025 by rpki-client