This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36302e302f32342d3234203d3e203632323430.roa File: 39322e3131382e36302e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: KogMaZnFxWHjdua+pgjuUs39uNAcbrMyNAqa9bE34E4= Subject key identifier: 01:75:6B:B0:07:8F:27:7C:87:0D:3E:7F:C3:D5:FA:50:D0:82:CE:80 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3A94A6C7702DDC796CA478960850F174C6E0C3F2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36302e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:40 +0000 ROA not before: Fri 28 Nov 2025 11:44:40 +0000 ROA not after: Fri 27 Nov 2026 11:49:40 +0000 asID: 62240 IP address blocks: 92.118.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 16:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:94:a6:c7:70:2d:dc:79:6c:a4:78:96:08:50:f1:74:c6:e0:c3:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:40 2025 GMT Not After : Nov 27 11:49:40 2026 GMT Subject: CN=01756BB0078F277C870D3E7FC3D5FA50D082CE80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bc:9c:95:96:a1:9a:1c:97:2a:6a:52:43:5e: 67:7a:f2:89:c7:4e:a7:27:7a:04:e3:1d:12:63:2d: 84:ab:2a:83:ff:d5:77:da:68:45:b3:ee:9c:fd:4f: 55:3e:29:a9:06:35:75:96:59:20:ca:88:13:ac:37: 4c:04:b8:82:2c:1f:86:03:a3:f3:ea:c8:75:fb:e5: ab:b4:cb:03:c3:d0:4f:14:96:ed:1a:d5:d0:68:4b: 51:f3:9d:d8:69:16:3c:59:45:d3:24:2e:d1:4a:32: ff:ca:23:d4:9f:14:4d:c2:fe:87:c4:6c:a5:a3:a2: 7c:55:f8:d2:f4:ff:56:c8:97:af:79:a6:9e:36:f5: 1a:9d:df:38:54:e3:41:23:7c:df:c6:24:80:52:8b: 95:be:b8:56:d8:80:5a:35:ba:70:5c:79:bb:d2:2a: a4:19:8f:74:ac:42:10:73:b2:d0:78:1d:5a:bf:07: 70:bc:bf:d6:52:52:59:be:9e:de:07:11:e9:05:3e: d3:9f:c9:06:b3:bf:10:5d:37:ce:c3:2a:32:6a:4b: 4a:2c:36:70:71:04:80:e5:ad:7b:d1:65:e1:bc:19: 92:42:96:62:9e:85:9c:64:b6:58:7a:f3:af:ed:96: ea:96:46:65:dc:77:c5:22:ad:99:18:8b:48:87:28: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:75:6B:B0:07:8F:27:7C:87:0D:3E:7F:C3:D5:FA:50:D0:82:CE:80 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36302e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.60.0/24 Signature Algorithm: sha256WithRSAEncryption 93:4c:bf:38:89:19:5d:7a:8d:f6:c1:db:a1:34:7e:45:b6:b8: de:67:7a:3f:a8:2a:f8:c0:c9:f1:53:81:07:36:8f:d6:13:03: 44:5f:36:09:c6:9c:a7:0d:9e:68:76:92:7b:44:8f:91:b1:c4: b4:e2:4e:28:e7:6d:fe:04:37:ae:ce:4c:e8:38:4e:1e:3a:69: 31:d0:e1:34:30:74:6b:ce:ac:e1:c3:1b:0b:d4:b9:a5:30:e3: 0a:d2:b5:39:c9:37:51:51:6a:b1:c7:bd:06:1c:89:c4:df:1e: 93:6f:29:ae:1f:b5:ea:a7:f5:6d:60:66:b4:0a:ed:fb:bd:24: 1b:ad:19:f5:53:85:68:80:a1:1f:10:b5:b8:a1:3c:34:88:b4: 01:a9:8d:54:5a:80:62:06:63:4f:65:6d:f0:c1:63:cf:87:31: f8:70:28:2d:23:3b:2d:53:8b:d4:37:43:45:a8:0e:25:7d:2b: b6:eb:b9:07:a4:4a:53:52:d6:88:90:04:65:45:84:2e:21:9e: 6f:c0:ca:a2:17:2b:6d:be:8e:be:41:96:4d:f2:e9:21:28:e9: bb:20:4f:aa:67:57:97:6c:93:42:60:18:7a:4c:c1:0b:46:80: dd:af:41:f1:81:62:e7:fc:aa:d1:1d:a2:fe:b4:2a:2a:f2:c5: 57:68:70:47 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUOpSmx3At3HlspHiWCFDxdMbgw/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV BAMTKDAxNzU2QkIwMDc4RjI3N0M4NzBEM0U3RkMzRDVGQTUwRDA4MkNFODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvJyVlqGaHJcqalJDXmd68onH TqcnegTjHRJjLYSrKoP/1XfaaEWz7pz9T1U+KakGNXWWWSDKiBOsN0wEuIIsH4YD o/PqyHX75au0ywPD0E8Ulu0a1dBoS1HzndhpFjxZRdMkLtFKMv/KI9SfFE3C/ofE bKWjonxV+NL0/1bIl695pp429Rqd3zhU40EjfN/GJIBSi5W+uFbYgFo1unBcebvS KqQZj3SsQhBzstB4HVq/B3C8v9ZSUlm+nt4HEekFPtOfyQazvxBdN87DKjJqS0os NnBxBIDlrXvRZeG8GZJClmKehZxktlh686/tluqWRmXcd8UirZkYi0iHKM9lAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUAXVrsAePJ3yHDT5/w9X6UNCCzoAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzIzNDMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAXHY8MA0GCSqGSIb3DQEBCwUAA4IBAQCTTL84iRldeo32wduhNH5FtrjeZ3o/ qCr4wMnxU4EHNo/WEwNEXzYJxpynDZ5odpJ7RI+RscS04k4o523+BDeuzkzoOE4e Omkx0OE0MHRrzqzhwxsL1LmlMOMK0rU5yTdRUWqxx70GHInE3x6TbymuH7Xqp/Vt YGa0Cu37vSQbrRn1U4VogKEfELW4oTw0iLQBqY1UWoBiBmNPZW3wwWPPhzH4cCgt IzstU4vUN0NFqA4lfSu267kHpEpTUtaIkARlRYQuIZ5vwMqiFyttvo6+QZZN8ukh KOm7IE+qZ1eXbJNCYBh6TMELRoDdr0HxgWLn/KrRHaL+tCoq8sVXaHBH -----END CERTIFICATE-----Generated at Tue Dec 23 05:27:08 2025 by rpki-client