This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203533373535.roa File: 39322e3131382e36322e302f32342d3234203d3e203533373535.roa (raw, json) Hash identifier: 90fFUvrMaZOzrliIplKLBkf5Kvb21+PoWz7RPnsrPEY= Subject key identifier: 2D:96:84:45:9E:CB:80:99:E0:A6:E1:1C:6E:FC:AC:A1:4B:7E:B1:DB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 372E50C82E10B247F5D99848CF5C0CC140A2E8E9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203533373535.roa Signing time: Mon 24 Nov 2025 07:44:25 +0000 ROA not before: Mon 24 Nov 2025 07:39:25 +0000 ROA not after: Mon 23 Nov 2026 07:44:25 +0000 asID: 53755 IP address blocks: 92.118.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:2e:50:c8:2e:10:b2:47:f5:d9:98:48:cf:5c:0c:c1:40:a2:e8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 24 07:39:25 2025 GMT Not After : Nov 23 07:44:25 2026 GMT Subject: CN=2D9684459ECB8099E0A6E11C6EFCACA14B7EB1DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:d6:1b:d2:a6:cf:29:2b:19:29:e1:97:6c:cd: 2a:fb:f2:d0:f3:cf:f0:f6:7d:fb:1d:a1:43:6d:b9: 6d:64:a0:1b:34:81:ff:96:47:68:dd:27:1f:5a:2f: 7e:9c:a3:6d:30:1a:37:50:0e:76:e5:9c:76:a6:50: 03:52:59:ed:4a:24:8f:ce:d1:1a:20:3e:6a:d8:d7: cb:c7:75:82:af:55:60:77:48:ac:00:1a:f6:68:ea: 66:f1:9b:6d:00:fe:2b:eb:11:98:7c:98:65:c3:c6: 62:9a:f3:ef:92:15:a7:49:0d:64:23:6c:de:fd:79: 86:e3:82:23:1e:c0:2c:6d:65:fd:93:bd:21:a4:01: 18:da:db:63:98:cf:69:15:52:02:22:73:46:b0:8e: df:e3:2c:d2:d7:dc:26:00:11:4d:17:a3:bf:c3:67: d7:20:54:39:0d:51:94:81:94:01:3f:26:7f:43:b7: 1d:76:58:1d:d1:6b:a8:c0:a9:81:89:ef:e1:bb:b0: 68:80:17:89:44:b8:47:be:38:64:00:17:d5:ff:f6: 31:b1:62:b5:3b:2e:19:dd:18:20:c3:24:3c:38:ed: 75:71:78:4b:0e:7f:a9:5b:aa:5a:6c:36:47:3e:c7: 2a:6e:79:a9:f4:da:81:b4:8d:e4:d9:cc:b7:8a:85: 37:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:96:84:45:9E:CB:80:99:E0:A6:E1:1C:6E:FC:AC:A1:4B:7E:B1:DB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/39322e3131382e36322e302f32342d3234203d3e203533373535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.62.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:2e:51:24:9b:5d:c5:d2:89:7e:e4:39:82:41:86:9a:b2:51: 24:08:be:a2:12:6f:35:87:6f:30:ac:be:9b:19:f8:95:8c:b5: f6:26:c3:4d:43:bc:a5:be:7e:73:cd:28:3a:a4:3a:4e:a5:dd: 7c:3b:eb:ce:2d:82:e7:86:83:6c:09:91:72:91:ba:f7:3f:40: 1d:3c:9d:ea:f7:72:bc:23:16:d8:58:db:19:43:b9:d3:3c:81: 50:d9:d8:4f:c9:8e:03:3c:30:8d:54:db:bb:08:8b:8c:d1:3c: 1b:00:20:49:e0:58:4c:5f:a4:60:c9:5d:4a:be:bc:29:4a:03: 69:5e:4b:c0:24:37:05:7b:f1:40:27:26:14:56:04:8b:9b:73: 67:5b:c6:b1:92:7a:dc:41:5d:96:b8:38:3b:07:1c:a9:12:15: 54:23:95:7e:f3:ec:8f:7a:b6:02:1e:ae:75:9c:0b:57:51:36: ca:3b:1f:da:c3:08:22:eb:44:00:72:49:6c:fb:19:aa:56:b3: b3:a9:a4:d0:e5:4a:d0:34:ad:dc:d9:89:af:e0:79:10:1c:8a: 94:55:ae:da:18:70:07:21:9a:89:60:81:32:9f:c4:cf:79:ba: 54:df:6b:eb:1d:8a:fa:14:ac:20:13:f0:0a:70:57:ad:ed:bc: 28:ff:d5:75 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUNy5QyC4Qskf12ZhIz1wMwUCi6OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjQwNzM5MjVaFw0yNjExMjMwNzQ0MjVaMDMxMTAvBgNV BAMTKDJEOTY4NDQ1OUVDQjgwOTlFMEE2RTExQzZFRkNBQ0ExNEI3RUIxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD31hvSps8pKxkp4ZdszSr78tDz z/D2ffsdoUNtuW1koBs0gf+WR2jdJx9aL36co20wGjdQDnblnHamUANSWe1KJI/O 0RogPmrY18vHdYKvVWB3SKwAGvZo6mbxm20A/ivrEZh8mGXDxmKa8++SFadJDWQj bN79eYbjgiMewCxtZf2TvSGkARja22OYz2kVUgIic0awjt/jLNLX3CYAEU0Xo7/D Z9cgVDkNUZSBlAE/Jn9Dtx12WB3Ra6jAqYGJ7+G7sGiAF4lEuEe+OGQAF9X/9jGx YrU7LhndGCDDJDw47XVxeEsOf6lbqlpsNkc+xypuean02oG0jeTZzLeKhTcvAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQULZaERZ7LgJngpuEcbvysoUt+sdswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zOTMyMmUzMTMxMzgy ZTM2MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzczNTM1LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQAXHY+MA0GCSqGSIb3DQEBCwUAA4IBAQArLlEkm13F0ol+5DmCQYaaslEkCL6i Em81h28wrL6bGfiVjLX2JsNNQ7ylvn5zzSg6pDpOpd18O+vOLYLnhoNsCZFykbr3 P0AdPJ3q93K8IxbYWNsZQ7nTPIFQ2dhPyY4DPDCNVNu7CIuM0TwbACBJ4FhMX6Rg yV1KvrwpSgNpXkvAJDcFe/FAJyYUVgSLm3NnW8axknrcQV2WuDg7BxypEhVUI5V+ 8+yPerYCHq51nAtXUTbKOx/awwgi60QAckls+xmqVrOzqaTQ5UrQNK3c2Ymv4HkQ HIqUVa7aGHAHIZqJYIEyn8TPebpU32vrHYr6FKwgE/AKcFet7bwo/9V1 -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:15 2025 by rpki-client