This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135332e302f32342d3234203d3e20313336373837.roa File: 34352e31302e3135332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: IuNP/lDxLR8uvUSNrnNJ0RrRmuBIYvs8pi+O19B2T0w= Subject key identifier: 46:13:F5:F3:B0:7F:9A:8B:2A:AC:5F:82:BB:E9:B8:58:19:6B:A8:CE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0D9CA84900DA92E513A43C20B83539F6FBE94E77 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:32 +0000 ROA not before: Fri 28 Nov 2025 11:44:32 +0000 ROA not after: Fri 27 Nov 2026 11:49:32 +0000 asID: 136787 IP address blocks: 45.10.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:9c:a8:49:00:da:92:e5:13:a4:3c:20:b8:35:39:f6:fb:e9:4e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:32 2025 GMT Not After : Nov 27 11:49:32 2026 GMT Subject: CN=4613F5F3B07F9A8B2AAC5F82BBE9B858196BA8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:1d:ea:f5:35:f4:cb:58:c1:2f:f4:26:80: f7:62:45:ec:69:30:60:15:3a:dd:63:40:50:47:07: ba:7b:f5:1a:61:98:57:fc:ca:02:19:b3:94:62:b4: 50:b7:9c:4b:ad:a0:69:2b:2a:9d:ac:47:7b:c4:70: 94:ec:da:37:3e:a7:33:15:df:6a:f3:0e:8c:b1:d4: 06:c6:6d:01:5a:c6:8c:f8:c0:5f:27:6f:30:d3:4f: 05:5e:ad:9c:4b:c9:9c:62:8a:54:98:f1:5b:82:0f: 53:7a:52:76:56:2d:16:d9:d1:7d:23:e2:21:e4:1d: e0:a7:a7:51:08:35:67:c7:76:e2:9f:0a:b0:9f:18: b5:74:91:45:58:58:23:86:e9:4e:13:08:76:a2:56: 67:e2:a3:3b:a7:c6:a5:db:c2:3f:71:89:d4:d5:be: 31:c5:92:33:6a:de:a2:64:8f:aa:cf:61:37:0c:8e: fb:6f:ab:5c:50:15:54:2a:f9:db:fa:3b:04:06:d2: 30:b7:0e:1f:49:21:8e:f2:16:86:8c:7c:60:7d:77: 20:f9:41:dd:c6:be:98:59:ce:3c:df:a7:48:84:25: 16:c0:09:d7:e8:a5:e8:c5:7f:d5:7a:e4:e2:af:b5: 09:8d:ec:e3:e4:a3:fa:71:d2:15:9d:00:d0:8c:f5: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:13:F5:F3:B0:7F:9A:8B:2A:AC:5F:82:BB:E9:B8:58:19:6B:A8:CE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.153.0/24 Signature Algorithm: sha256WithRSAEncryption a7:ce:ce:ac:69:fc:64:5d:d9:ac:37:3d:9c:68:8d:19:ce:c0: e3:f3:c9:ec:e4:f4:1e:9d:dc:1f:93:c8:73:17:15:6a:62:da: 15:77:55:13:f9:0a:a9:18:1f:c2:31:7e:b0:2d:de:62:a9:f5: 5a:d7:a0:a0:66:9b:91:12:b0:df:75:6a:50:d2:54:7f:29:d1: 62:9d:2e:36:bd:1f:36:91:b1:5e:67:60:c5:64:ae:08:f5:ae: 97:db:31:56:d9:94:a8:1b:e6:e4:7e:ef:a3:cc:e6:98:46:c9: a7:d1:0c:6b:51:20:53:e9:d8:b5:dd:c8:2b:22:35:d3:0d:18: c3:ee:16:74:c8:fd:74:a1:bd:fc:a3:22:4e:be:2c:ec:e9:d8: 5c:71:06:0b:86:94:74:d8:34:d5:9f:cc:98:36:fe:c4:52:fa: 1d:34:4f:fa:ef:f8:4c:1a:d7:aa:e6:6b:c5:da:95:7e:18:12: 3b:84:1f:dc:e2:46:c4:83:37:cf:00:66:dc:db:7f:b5:fe:36: 12:3e:8e:ce:5c:d7:2e:29:2f:7f:af:f2:e4:6c:ec:88:06:60: 02:7a:a0:c6:47:dd:6e:ba:d2:b0:36:2f:8d:c5:03:79:07:ae: 67:93:2d:59:8b:4d:8f:c4:1d:7f:08:b8:e8:30:4d:69:fa:52: be:f7:b2:35 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUDZyoSQDakuUTpDwguDU59vvpTncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzJaFw0yNjExMjcxMTQ5MzJaMDMxMTAvBgNV BAMTKDQ2MTNGNUYzQjA3RjlBOEIyQUFDNUY4MkJCRTlCODU4MTk2QkE4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hB3q9TX0y1jBL/QmgPdiRexp MGAVOt1jQFBHB7p79RphmFf8ygIZs5RitFC3nEutoGkrKp2sR3vEcJTs2jc+pzMV 32rzDoyx1AbGbQFaxoz4wF8nbzDTTwVerZxLyZxiilSY8VuCD1N6UnZWLRbZ0X0j 4iHkHeCnp1EINWfHduKfCrCfGLV0kUVYWCOG6U4TCHaiVmfiozunxqXbwj9xidTV vjHFkjNq3qJkj6rPYTcMjvtvq1xQFVQq+dv6OwQG0jC3Dh9JIY7yFoaMfGB9dyD5 Qd3GvphZzjzfp0iEJRbACdfopejFf9V65OKvtQmN7OPko/px0hWdANCM9c/RAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQURhP187B/mosqrF+Cu+m4WBlrqM4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtCpkwDQYJKoZIhvcNAQELBQADggEBAKfOzqxp/GRd2aw3PZxojRnOwOPz yezk9B6d3B+TyHMXFWpi2hV3VRP5CqkYH8IxfrAt3mKp9VrXoKBmm5ESsN91alDS VH8p0WKdLja9HzaRsV5nYMVkrgj1rpfbMVbZlKgb5uR+76PM5phGyafRDGtRIFPp 2LXdyCsiNdMNGMPuFnTI/XShvfyjIk6+LOzp2FxxBguGlHTYNNWfzJg2/sRS+h00 T/rv+Ewa16rma8XalX4YEjuEH9ziRsSDN88AZtzbf7X+NhI+js5c1y4pL3+v8uRs 7IgGYAJ6oMZH3W660rA2L43FA3kHrmeTLVmLTY/EHX8IuOgwTWn6Ur73sjU= -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:08 2025 by rpki-client