This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135322e302f32342d3234203d3e20313336373837.roa File: 34352e31302e3135322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 1yKZT8SNkvHGciLokW1ABxwSsY5yUS1K33o5IFkXbuE= Subject key identifier: 54:FF:94:70:9C:80:B5:71:06:51:4C:DF:76:D1:72:DD:2E:46:23:1C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7BEF83D4D27F65FCED06AEB1DBE22B1F0D80095C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:55 +0000 ROA not before: Fri 28 Nov 2025 11:44:55 +0000 ROA not after: Fri 27 Nov 2026 11:49:55 +0000 asID: 136787 IP address blocks: 45.10.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ef:83:d4:d2:7f:65:fc:ed:06:ae:b1:db:e2:2b:1f:0d:80:09:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:55 2025 GMT Not After : Nov 27 11:49:55 2026 GMT Subject: CN=54FF94709C80B57106514CDF76D172DD2E46231C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2d:fa:da:51:1f:8f:d0:60:3f:b5:b5:a5:27: 32:fd:c8:27:5a:f1:f9:ac:7e:7c:0e:e4:91:11:63: 86:59:52:ef:6b:e9:6a:73:5a:0c:5c:87:b7:50:9c: a0:9e:99:b0:44:2e:7e:9d:4f:57:d8:e2:d3:b4:0a: 98:59:39:90:25:8c:a7:76:59:cf:20:7a:d7:80:16: 93:be:78:f3:b1:f8:f1:d2:fb:3d:05:18:58:24:91: 88:40:46:cf:1c:ef:2e:07:d5:36:75:3f:dc:52:37: cd:62:8b:02:f8:1e:a0:f4:eb:34:29:72:53:39:34: 81:85:60:ef:d4:9f:c4:95:23:60:15:c8:93:90:c2: 21:59:45:1a:b5:75:7c:61:92:78:39:f6:c4:5a:55: d9:ba:7d:2b:41:6c:cd:d1:df:65:73:09:49:0e:c6: 41:c7:eb:e4:c2:40:88:e3:4b:3c:8b:96:3c:db:1b: 9a:89:2c:19:27:96:9d:1e:9e:53:62:af:d6:da:d2: 23:eb:ac:1c:ca:34:d5:eb:2d:a9:70:78:f7:42:07: 09:15:b0:a5:85:ec:50:b6:f5:37:87:b6:1b:37:8b: f5:50:b7:07:02:fe:d4:6c:77:91:f9:d9:8a:73:70: b7:fa:c9:2a:d0:7e:69:01:da:79:c8:bc:ab:74:58: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:FF:94:70:9C:80:B5:71:06:51:4C:DF:76:D1:72:DD:2E:46:23:1C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.152.0/24 Signature Algorithm: sha256WithRSAEncryption ac:00:88:d4:3f:fb:cc:0d:a3:c4:51:09:13:26:83:6f:4c:9a: aa:0b:72:23:82:f5:5a:8a:c7:41:a9:21:77:b0:b0:41:c1:bd: c8:3b:6e:2e:7d:45:2d:0b:90:6a:e0:72:03:08:e1:2a:85:84: 27:cf:75:e5:5e:c7:eb:5e:8e:ea:3a:70:dd:82:96:9a:86:f7: 47:6b:62:86:f6:e3:3c:44:01:ca:ee:2c:ad:5a:d7:d6:1e:fd: 16:f2:a4:6c:07:39:ce:a3:d9:01:35:d5:ac:7b:21:bc:0d:e6: 47:32:b9:97:e8:92:86:fb:77:30:48:10:97:73:cf:23:e5:3c: 9c:22:be:d7:22:24:e3:ed:58:2b:b9:0b:02:d6:88:b2:db:65: 9a:68:60:72:c7:2c:c0:66:e1:c0:76:03:27:bd:7a:63:56:60: 3c:d2:77:1e:89:20:75:53:eb:de:42:4f:1c:ee:2d:51:ff:97: d7:e2:c0:9f:69:f3:69:9d:e0:75:a9:92:04:5a:d2:00:cc:90: 3a:6c:db:e1:25:d2:e4:3e:82:3f:ad:e4:22:28:17:8d:3a:42: d2:33:3e:e9:0c:7a:9c:90:ce:bc:b0:20:d3:d4:8b:c2:4b:57: a9:29:9a:d1:a2:4e:d3:1c:30:7d:97:78:a2:af:f5:5c:72:93: 49:12:39:42 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUe++D1NJ/ZfztBq6x2+IrHw2ACVwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTVaFw0yNjExMjcxMTQ5NTVaMDMxMTAvBgNV BAMTKDU0RkY5NDcwOUM4MEI1NzEwNjUxNENERjc2RDE3MkREMkU0NjIzMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYLfraUR+P0GA/tbWlJzL9yCda 8fmsfnwO5JERY4ZZUu9r6WpzWgxch7dQnKCembBELn6dT1fY4tO0CphZOZAljKd2 Wc8geteAFpO+ePOx+PHS+z0FGFgkkYhARs8c7y4H1TZ1P9xSN81iiwL4HqD06zQp clM5NIGFYO/Un8SVI2AVyJOQwiFZRRq1dXxhkng59sRaVdm6fStBbM3R32VzCUkO xkHH6+TCQIjjSzyLljzbG5qJLBknlp0enlNir9ba0iPrrBzKNNXrLalwePdCBwkV sKWF7FC29TeHths3i/VQtwcC/tRsd5H52YpzcLf6ySrQfmkB2nnIvKt0WEU1AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUVP+UcJyAtXEGUUzfdtFy3S5GIxwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtCpgwDQYJKoZIhvcNAQELBQADggEBAKwAiNQ/+8wNo8RRCRMmg29MmqoL ciOC9VqKx0GpIXewsEHBvcg7bi59RS0LkGrgcgMI4SqFhCfPdeVex+tejuo6cN2C lpqG90drYob24zxEAcruLK1a19Ye/RbypGwHOc6j2QE11ax7IbwN5kcyuZfokob7 dzBIEJdzzyPlPJwivtciJOPtWCu5CwLWiLLbZZpoYHLHLMBm4cB2Aye9emNWYDzS dx6JIHVT695CTxzuLVH/l9fiwJ9p82md4HWpkgRa0gDMkDps2+El0uQ+gj+t5CIo F406QtIzPukMepyQzrywINPUi8JLV6kpmtGiTtMcMH2XeKKv9Vxyk0kSOUI= -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:22 2025 by rpki-client