This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e20333933393432.roa
File: 39322e3131382e36322e302f32342d3234203d3e20333933393432.roa (raw, json)
Hash identifier: dXvh3L/DRypfCqYVIT3anDCOEUmINrq3UebIuALZZL0=
Subject key identifier: F4:98:DA:B0:24:0D:6C:70:02:F5:85:79:46:97:66:98:88:34:E0:B6
Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Certificate serial: 36494E1364FF966EF76F0BA09EECAA4515128A4A
Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e20333933393432.roa
Signing time: Mon 05 Jan 2026 15:16:40 +0000
ROA not before: Mon 05 Jan 2026 15:11:40 +0000
ROA not after: Mon 04 Jan 2027 15:16:40 +0000
asID: 393942
IP address blocks: 92.118.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft
rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 01:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:49:4e:13:64:ff:96:6e:f7:6f:0b:a0:9e:ec:aa:45:15:12:8a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959
Validity
Not Before: Jan 5 15:11:40 2026 GMT
Not After : Jan 4 15:16:40 2027 GMT
Subject: CN=F498DAB0240D6C7002F58579469766988834E0B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:45:8f:82:b2:e2:5a:ae:05:73:c9:09:2b:
9e:39:09:09:a9:98:ef:ac:0b:e7:4c:19:c6:0d:5c:
23:89:7d:a7:f4:8e:3f:33:cf:54:3b:40:14:7f:5a:
4d:05:1e:02:0c:39:b4:a4:2f:d8:e8:5b:58:95:3a:
c9:0e:70:56:67:7e:46:3a:68:8d:88:fc:12:ec:61:
46:11:c6:4a:39:83:38:21:cd:24:61:fd:4e:01:69:
b6:b5:64:2a:f6:96:46:30:12:df:03:7b:0a:78:a7:
6c:dd:af:28:0d:f5:05:79:6e:b8:8b:88:9a:49:ac:
ac:33:37:2b:26:81:92:a6:fc:df:70:fa:dc:af:29:
9c:92:3e:4a:08:ca:68:3f:83:12:34:83:a4:35:64:
49:2c:5d:8d:76:40:4f:29:e8:08:c8:46:d6:27:85:
be:71:38:68:c7:91:86:76:72:c9:f8:81:92:67:e9:
67:93:a9:a9:b2:73:29:fb:dc:ad:0c:31:21:1a:97:
60:16:d8:0b:0a:d3:04:de:47:1d:5e:9c:d3:d6:e7:
6a:9a:a9:fd:0a:d1:d3:f0:b5:2c:ef:50:f4:a8:2d:
f7:79:9f:d9:38:7d:e1:e7:91:98:68:f3:0b:c8:0c:
ab:c9:d8:89:1d:0c:21:d6:d2:7b:48:d4:29:ab:ed:
e7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:98:DA:B0:24:0D:6C:70:02:F5:85:79:46:97:66:98:88:34:E0:B6
X509v3 Authority Key Identifier:
keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e20333933393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.62.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b8:1b:c0:0f:e6:1b:48:ee:6d:3a:3f:5b:0d:e4:7f:66:04:
f2:8f:6e:7e:96:21:89:0b:f2:e6:88:0b:81:59:fb:e4:3d:5d:
8c:c7:72:d0:18:03:bf:03:15:0b:41:8b:d7:19:d6:a1:79:d1:
8a:f2:33:21:a8:8a:79:21:3e:50:83:f9:88:cc:0e:ba:c4:ff:
91:c9:7f:58:07:6e:4a:c9:20:75:fa:5c:03:53:a9:0a:0a:cd:
23:f6:ed:17:42:ae:dd:16:dd:10:de:cd:2c:d6:01:d9:fa:7c:
c2:a3:4b:a2:c4:c6:a5:39:68:8f:8c:cd:3c:89:f3:78:df:b4:
a3:6f:22:b2:57:1c:c8:4d:26:12:b4:45:05:88:68:6c:5e:f2:
1b:97:7f:f6:93:3f:b8:fa:73:fc:c8:3f:02:7a:4b:2f:c4:a2:
26:11:b5:ba:98:e6:97:87:b7:ec:60:fb:a8:ac:dd:b1:07:f6:
8e:dc:11:89:b9:1d:73:ea:e4:0e:ea:26:a5:d9:58:0e:39:57:
a8:60:12:86:5e:0a:0f:a5:9f:ab:3c:23:44:1b:fb:ac:dd:9e:
f1:47:ff:4e:28:9d:36:4f:93:b4:5f:5b:72:75:60:b8:81:08:
f0:ff:69:74:36:7c:c1:43:e3:7c:01:c7:7b:b9:b6:5f:9b:91:
f4:da:66:47
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgIUNklOE2T/lm73bwugnuyqRRUSikowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi
YmUzYTk1OTAeFw0yNjAxMDUxNTExNDBaFw0yNzAxMDQxNTE2NDBaMDMxMTAvBgNV
BAMTKEY0OThEQUIwMjQwRDZDNzAwMkY1ODU3OTQ2OTc2Njk4ODgzNEUwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC93UWPgrLiWq4Fc8kJK545CQmp
mO+sC+dMGcYNXCOJfaf0jj8zz1Q7QBR/Wk0FHgIMObSkL9joW1iVOskOcFZnfkY6
aI2I/BLsYUYRxko5gzghzSRh/U4Baba1ZCr2lkYwEt8Dewp4p2zdrygN9QV5briL
iJpJrKwzNysmgZKm/N9w+tyvKZySPkoIymg/gxI0g6Q1ZEksXY12QE8p6AjIRtYn
hb5xOGjHkYZ2csn4gZJn6WeTqamycyn73K0MMSEal2AW2AsK0wTeRx1enNPW52qa
qf0K0dPwtSzvUPSoLfd5n9k4feHnkZho8wvIDKvJ2IkdDCHW0ntI1Cmr7ecZAgMB
AAGjggJCMIICPjAdBgNVHQ4EFgQU9JjasCQNbHAC9YV5RpdmmIg04LYwHwYDVR0j
BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV
HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi
OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1
OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku
cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5
bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz
eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4
YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy
ZTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzMzOTM0MzIucm9hMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABcdj4wDQYJKoZIhvcNAQELBQADggEBAGe4G8AP5htI7m06P1sN5H9mBPKP
bn6WIYkL8uaIC4FZ++Q9XYzHctAYA78DFQtBi9cZ1qF50YryMyGoinkhPlCD+YjM
DrrE/5HJf1gHbkrJIHX6XANTqQoKzSP27RdCrt0W3RDezSzWAdn6fMKjS6LExqU5
aI+MzTyJ83jftKNvIrJXHMhNJhK0RQWIaGxe8huXf/aTP7j6c/zIPwJ6Sy/EoiYR
tbqY5peHt+xg+6is3bEH9o7cEYm5HXPq5A7qJqXZWA45V6hgEoZeCg+ln6s8I0Qb
+6zdnvFH/04onTZPk7RfW3J1YLiBCPD/aXQ2fMFD43wBx3u5tl+bkfTaZkc=
-----END CERTIFICATE-----
Generated at Mon Jan 19 16:53:32 2026 by rpki-client