This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e203634323637.roa File: 39312e3230392e35382e302f32342d3234203d3e203634323637.roa (raw, json) Hash identifier: niqqI9l9161GkRQmVmDrxB+jdLZ/EVQM2QwxTZqxdr8= Subject key identifier: 27:C0:17:E3:B1:68:21:17:C2:BA:57:21:E4:6D:74:8A:F8:F2:16:8D Certificate issuer: /CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Certificate serial: 518DCCF0E9D20B3DFEA1BBB3B71896FD726D5A28 Authority key identifier: E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e203634323637.roa Signing time: Fri 19 Dec 2025 14:04:08 +0000 ROA not before: Fri 19 Dec 2025 13:59:08 +0000 ROA not after: Fri 18 Dec 2026 14:04:08 +0000 asID: 64267 IP address blocks: 91.209.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.mft rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8d:cc:f0:e9:d2:0b:3d:fe:a1:bb:b3:b7:18:96:fd:72:6d:5a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e205ebf065fc4929f1802662ae62d7f9762600e6 Validity Not Before: Dec 19 13:59:08 2025 GMT Not After : Dec 18 14:04:08 2026 GMT Subject: CN=27C017E3B1682117C2BA5721E46D748AF8F2168D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:72:18:b7:e2:46:e7:b5:44:f8:71:77:2d: 59:df:cd:88:b8:22:f4:7a:c5:b8:d8:33:b4:ba:84: 6e:a3:b5:00:8e:46:a7:6e:9c:36:d7:0e:c3:61:86: 17:61:06:13:38:a5:78:93:fe:47:cf:bc:75:03:33: 5b:6a:91:5d:92:ca:17:82:01:51:d9:9a:0d:7a:e8: 73:e4:44:10:d0:82:c7:1c:13:53:5b:7c:2a:04:d4: ec:a2:0b:e4:71:f6:cc:a0:4c:af:b7:72:3a:b4:74: c8:81:38:2a:0b:5f:5b:a0:16:09:97:ac:ff:84:7e: 30:dc:cc:9c:28:71:59:8e:a8:9d:f6:7c:4c:b8:24: ce:f3:42:09:d1:79:01:63:e0:9f:a2:64:55:6f:88: 99:88:7f:49:a1:e2:20:88:97:5d:97:54:4e:a2:c8: c0:73:b1:5a:71:e1:a9:e5:8f:3c:5d:c2:8a:06:30: ea:32:a7:77:cd:02:fb:a9:ba:e4:6c:d6:91:2e:09: 60:bf:6f:8d:00:47:ed:0e:5f:ca:91:4c:68:aa:c0: a1:7d:04:ab:ba:d5:a1:2b:6a:c4:92:3b:1f:41:67: a3:36:e3:23:6a:ca:cb:0a:47:88:f1:e4:4e:a9:6b: 88:09:2e:fa:0d:32:ac:4a:1e:35:cb:3f:bb:87:f6: b9:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C0:17:E3:B1:68:21:17:C2:BA:57:21:E4:6D:74:8A:F8:F2:16:8D X509v3 Authority Key Identifier: keyid:E2:05:EB:F0:65:FC:49:29:F1:80:26:62:AE:62:D7:F9:76:26:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/E205EBF065FC4929F1802662AE62D7F9762600E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gXr8GX8SSnxgCZirmLX-XYmAOY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf0be3e1-854e-4662-92e8-028950ff57fe/0/39312e3230392e35382e302f32342d3234203d3e203634323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.209.58.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:cb:81:8b:5e:be:6a:02:4e:6c:d3:3e:dd:d3:61:ce:be:b0: 40:85:6d:7b:0c:af:05:68:13:30:b0:67:16:bf:bd:1a:37:0e: f0:57:46:ab:53:a4:6e:d2:58:0b:f3:35:c5:07:b4:37:c0:7c: 40:c7:b7:fe:59:31:05:2c:93:af:74:a8:e8:97:a6:c6:2e:a7: 3c:62:4e:c9:00:3e:7f:ce:ec:82:19:9c:2b:f3:62:96:f9:17: e6:a4:84:36:2a:11:bc:fc:34:8c:91:0b:10:7f:ff:46:c6:44: 86:ed:db:d5:2c:17:cb:0e:c8:42:94:a8:88:47:bb:4b:5a:a5: 64:ff:c9:a0:5b:7f:64:73:32:ac:97:88:97:5c:cd:3c:b0:43: 56:08:9d:ba:de:84:75:d4:13:d0:7c:76:10:4c:01:7b:04:45: c5:b8:89:18:29:2c:11:cf:9b:58:cc:87:fa:62:0c:0f:8d:db: 98:66:62:f3:f3:98:a2:f2:ef:9a:fb:79:0f:8f:ea:6b:f3:08: 29:51:dd:27:56:1d:78:29:4f:d0:fd:c7:36:6e:23:bd:be:13: 6a:1a:72:af:78:c3:8f:2d:40:5d:8a:da:74:52:ee:e0:29:8f: fb:d4:ed:57:3f:90:e5:77:a9:18:42:0c:db:49:fe:d0:b6:89: 93:58:37:55 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUY3M8OnSCz3+obuztxiW/XJtWigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTIwNWViZjA2NWZjNDkyOWYxODAyNjYyYWU2MmQ3Zjk3 NjI2MDBlNjAeFw0yNTEyMTkxMzU5MDhaFw0yNjEyMTgxNDA0MDhaMDMxMTAvBgNV BAMTKDI3QzAxN0UzQjE2ODIxMTdDMkJBNTcyMUU0NkQ3NDhBRjhGMjE2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH4XIYt+JG57VE+HF3LVnfzYi4 IvR6xbjYM7S6hG6jtQCORqdunDbXDsNhhhdhBhM4pXiT/kfPvHUDM1tqkV2SyheC AVHZmg166HPkRBDQgsccE1NbfCoE1OyiC+Rx9sygTK+3cjq0dMiBOCoLX1ugFgmX rP+EfjDczJwocVmOqJ32fEy4JM7zQgnReQFj4J+iZFVviJmIf0mh4iCIl12XVE6i yMBzsVpx4anljzxdwooGMOoyp3fNAvupuuRs1pEuCWC/b40AR+0OX8qRTGiqwKF9 BKu61aErasSSOx9BZ6M24yNqyssKR4jx5E6pa4gJLvoNMqxKHjXLP7uH9rlvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUJ8AX47FoIRfCulch5G10ivjyFo0wHwYDVR0j BBgwFoAU4gXr8GX8SSnxgCZirmLX+XYmAOYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEtODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1 N2ZlLzAvRTIwNUVCRjA2NUZDNDkyOUYxODAyNjYyQUU2MkQ3Rjk3NjI2MDBFNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRnWHI4R1g4U1NueGdDWmlybUxYLVhZ bUFPWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYwYmUzZTEt ODU0ZS00NjYyLTkyZTgtMDI4OTUwZmY1N2ZlLzAvMzkzMTJlMzIzMDM5MmUzNTM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzNDMyMzYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvR OjANBgkqhkiG9w0BAQsFAAOCAQEAXcuBi16+agJObNM+3dNhzr6wQIVtewyvBWgT MLBnFr+9GjcO8FdGq1OkbtJYC/M1xQe0N8B8QMe3/lkxBSyTr3So6Jemxi6nPGJO yQA+f87sghmcK/NilvkX5qSENioRvPw0jJELEH//RsZEhu3b1SwXyw7IQpSoiEe7 S1qlZP/JoFt/ZHMyrJeIl1zNPLBDVgidut6EddQT0Hx2EEwBewRFxbiJGCksEc+b WMyH+mIMD43bmGZi8/OYovLvmvt5D4/qa/MIKVHdJ1YdeClP0P3HNm4jvb4Tahpy r3jDjy1AXYradFLu4CmP+9TtVz+Q5XepGEIM20n+0LaJk1g3VQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:49 2025 by rpki-client