This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa File: 39312e3139362e3232302e302f32342d3332203d3e203632323430.roa (raw, json) Hash identifier: pGZOdqta39iIn3fbvL971xz9PnZUdec6QvSBWKTsa9s= Subject key identifier: 73:87:CD:27:E0:32:DB:E7:96:29:7A:D7:61:63:18:3E:2D:A3:83:C8 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0FD4C60C54D49DCAA1BE1523259B5409644AE427 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 62240 IP address blocks: 91.196.220.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:c6:0c:54:d4:9d:ca:a1:be:15:23:25:9b:54:09:64:4a:e4:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=7387CD27E032DBE796297AD76163183E2DA383C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:2e:6a:73:c3:d3:65:94:a3:ae:31:e0:69: b2:0f:56:17:f6:2b:2c:53:01:fa:31:a9:eb:c9:46: 6d:19:eb:1d:16:a1:c3:f6:30:6d:d6:59:34:63:ce: 55:58:6b:f5:4d:0e:51:81:f1:fa:ba:43:54:2b:af: cd:bc:dd:68:d6:9a:4d:3a:7d:a8:f5:35:5f:5c:a3: d7:4e:55:37:77:d3:00:87:3e:ca:64:ad:b6:9b:48: 3f:a2:c1:77:83:8a:52:40:30:5d:5d:23:98:22:7f: e5:6c:0d:a7:7a:c3:d0:40:09:91:bd:3f:1c:3d:c1: 52:61:85:5f:8c:84:d8:a8:ec:54:64:8d:88:1d:4c: 6a:c5:23:df:0d:24:67:1a:bb:c3:4f:18:f0:1d:d8: d6:cd:4a:3b:f4:38:88:25:d2:a6:a4:68:a1:7a:93: 3f:c6:99:f5:d4:8c:1d:7e:c6:e2:07:c7:10:d7:f5: 57:94:78:ee:99:38:ab:4a:9d:00:2e:04:10:2b:5b: 33:04:da:8d:6b:6b:0a:9d:f3:d5:82:20:d2:a7:d5: 41:eb:6f:0f:2f:f3:ee:89:4e:29:b6:99:5a:2d:6e: 1a:03:d4:12:da:7c:c6:80:06:58:b4:71:b0:8c:d8: d7:7d:77:6d:21:da:c0:48:40:8e:bb:fd:15:d9:2b: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:87:CD:27:E0:32:DB:E7:96:29:7A:D7:61:63:18:3E:2D:A3:83:C8 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39312e3139362e3232302e302f32342d3332203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.196.220.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:dc:7c:29:5a:fa:91:b0:36:5a:1e:d8:d9:77:9e:79:37:a3: 9e:c1:e0:8b:00:d6:94:48:28:5d:27:2d:e6:65:9a:4c:0b:cf: 07:06:df:5e:ba:6d:44:81:0c:fa:ec:84:b2:f2:8f:98:30:cb: 1d:4a:96:d6:e6:e8:eb:89:16:81:e1:20:d1:46:de:9d:1c:09: fa:55:73:b4:5c:c3:71:50:4a:02:e3:c0:a3:ab:cc:1e:b0:c5: 7a:10:73:58:54:29:ea:10:92:bd:50:11:3d:e4:8f:bf:ed:f5: d5:61:4a:d8:b9:a9:e9:9c:9d:0a:de:4a:36:86:b0:b9:2d:b9: 12:11:a5:17:5d:a3:a0:30:16:16:0f:02:b9:42:bc:d1:fc:a8: aa:e0:ce:61:9b:bf:1c:2a:d8:3e:c6:75:39:43:dd:63:64:57: 05:f3:cc:b5:f1:52:14:1d:79:51:66:f8:3b:c0:26:56:15:83: 02:c1:b4:79:cd:df:4e:8d:d3:07:58:ba:b3:01:d0:59:34:34: 60:62:ac:54:81:05:c0:54:db:b4:12:c0:b0:52:6c:4d:62:09: d1:09:7b:fe:79:3f:57:4f:e5:ae:95:76:36:2e:2d:35:97:73: 7f:19:07:87:c5:ec:51:36:08:18:9e:18:5e:bd:40:51:1c:1a: 01:0c:fd:32 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUD9TGDFTUncqhvhUjJZtUCWRK5CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKDczODdDRDI3RTAzMkRCRTc5NjI5N0FENzYxNjMxODNFMkRBMzgzQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyOC5qc8PTZZSjrjHgabIPVhf2 KyxTAfoxqevJRm0Z6x0WocP2MG3WWTRjzlVYa/VNDlGB8fq6Q1Qrr8283WjWmk06 faj1NV9co9dOVTd30wCHPspkrbabSD+iwXeDilJAMF1dI5gif+VsDad6w9BACZG9 Pxw9wVJhhV+MhNio7FRkjYgdTGrFI98NJGcau8NPGPAd2NbNSjv0OIgl0qakaKF6 kz/GmfXUjB1+xuIHxxDX9VeUeO6ZOKtKnQAuBBArWzME2o1rawqd89WCINKn1UHr bw8v8+6JTim2mVotbhoD1BLafMaABli0cbCM2Nd9d20h2sBIQI67/RXZKy13AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUc4fNJ+Ay2+eWKXrXYWMYPi2jg8gwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMxMmUzMTM5MzYy ZTMyMzIzMDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABbxNwwDQYJKoZIhvcNAQELBQADggEBAF7cfCla+pGwNloe2Nl3nnk3o57B 4IsA1pRIKF0nLeZlmkwLzwcG3166bUSBDPrshLLyj5gwyx1Kltbm6OuJFoHhINFG 3p0cCfpVc7Rcw3FQSgLjwKOrzB6wxXoQc1hUKeoQkr1QET3kj7/t9dVhSti5qemc nQreSjaGsLktuRIRpRddo6AwFhYPArlCvNH8qKrgzmGbvxwq2D7GdTlD3WNkVwXz zLXxUhQdeVFm+DvAJlYVgwLBtHnN306N0wdYurMB0Fk0NGBirFSBBcBU27QSwLBS bE1iCdEJe/55P1dP5a6VdjYuLTWXc38ZB4fF7FE2CBieGF69QFEcGgEM/TI= -----END CERTIFICATE-----Generated at Sat Dec 20 00:24:11 2025 by rpki-client