This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135342e302f32342d3332203d3e203531313637.roa File: 34352e31302e3135342e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: f4Hf4076sMDFmVSfbRy3kg3ltOLVMvsSunxWDAni6+s= Subject key identifier: 62:9D:9D:77:69:0A:4B:30:1D:25:73:F6:F4:FD:26:CD:DB:52:2B:45 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5D3573A725AF0B994F75B696A45590E4872AD23A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135342e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 51167 IP address blocks: 45.10.154.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:35:73:a7:25:af:0b:99:4f:75:b6:96:a4:55:90:e4:87:2a:d2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=629D9D77690A4B301D2573F6F4FD26CDDB522B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:d9:26:b5:7a:9b:ae:f7:ec:e1:95:a8:73: d3:f5:ed:94:c7:b9:3f:49:f2:8e:76:d5:9e:dd:1a: 53:02:66:be:fb:78:57:56:44:9f:40:d9:ea:f6:b6: 68:aa:5c:61:89:08:34:05:51:91:c8:1d:89:d2:a7: b0:0d:07:85:0c:1f:9e:90:82:ca:7d:f9:19:c4:cb: 4c:e9:de:1f:ea:5f:95:15:d1:78:94:3f:ba:b9:b7: 3f:74:f6:9e:35:18:28:ac:50:8b:26:17:d7:8c:d3: 03:c5:d5:71:0f:d7:a9:01:81:f9:9b:6d:cf:4d:52: 48:61:20:6d:19:3a:e9:e6:86:6e:67:7f:a8:48:58: 0d:3b:b2:54:49:af:1c:0f:c4:d0:f2:cf:b3:25:a6: 5e:b3:60:af:24:7e:c6:97:00:b9:f8:b3:88:fc:67: 07:fd:46:a5:b0:79:c1:5a:34:4f:9d:1f:83:3d:9f: fa:40:bc:c0:cb:0d:fd:e2:8a:17:9e:08:3f:82:3f: c2:8b:73:9a:3f:35:1a:ae:1a:30:98:54:9b:da:a4: d5:ee:0b:fb:7c:a4:50:4a:46:47:cc:c1:66:ac:a4: 37:b4:a6:97:cf:f4:c6:bc:09:ac:ca:67:24:7a:fa: 69:70:80:28:f1:e2:bf:2c:06:6b:76:58:18:42:b2: d6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:9D:9D:77:69:0A:4B:30:1D:25:73:F6:F4:FD:26:CD:DB:52:2B:45 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135342e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.154.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:f6:2e:13:bf:cd:cf:92:61:1a:49:b6:e5:88:2a:e7:e2:15: 52:e8:a3:90:20:c3:c2:b8:cb:ce:d6:21:34:5e:8f:3c:12:9f: 6a:ea:12:3c:19:c2:41:3f:0d:92:5f:0b:14:e5:fa:43:c4:53: 69:62:b2:5b:8b:0c:48:1b:eb:f7:da:58:b8:a3:04:be:bb:7b: 8b:7e:28:a0:f9:f5:a9:54:29:db:82:31:62:d4:3b:73:22:f8: 7a:4b:81:7e:14:4c:d3:98:83:68:10:fb:cc:54:89:f3:87:08: 84:5f:aa:2b:46:72:7a:8e:46:a9:fe:19:96:d1:9c:e2:07:49: 85:b6:94:50:93:37:67:dd:db:eb:b9:cc:0c:7c:8f:29:61:0a: fb:98:26:40:2c:a6:f0:80:d5:3f:04:b6:93:1e:83:a1:40:99: b9:de:2c:01:8c:2e:ab:36:99:63:84:48:38:75:98:a0:8e:81: 1f:de:e1:77:72:b7:c4:7e:84:a7:8a:68:0b:e8:e6:85:af:8b: 15:6a:f9:91:98:b6:6e:4f:ea:f2:3e:08:a0:30:d0:68:f1:f0: b0:27:26:31:e6:77:e3:74:11:2f:2b:40:16:a1:48:97:78:f6: e7:11:74:73:1b:89:ad:93:5f:b0:5b:f9:36:a4:be:19:86:d1: fd:d8:1d:f5 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUXTVzpyWvC5lPdbaWpFWQ5Icq0jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDYyOUQ5RDc3NjkwQTRCMzAxRDI1NzNGNkY0RkQyNkNEREI1MjJCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vdkmtXqbrvfs4ZWoc9P17ZTH uT9J8o521Z7dGlMCZr77eFdWRJ9A2er2tmiqXGGJCDQFUZHIHYnSp7ANB4UMH56Q gsp9+RnEy0zp3h/qX5UV0XiUP7q5tz909p41GCisUIsmF9eM0wPF1XEP16kBgfmb bc9NUkhhIG0ZOunmhm5nf6hIWA07slRJrxwPxNDyz7Mlpl6zYK8kfsaXALn4s4j8 Zwf9RqWwecFaNE+dH4M9n/pAvMDLDf3iiheeCD+CP8KLc5o/NRquGjCYVJvapNXu C/t8pFBKRkfMwWaspDe0ppfP9Ma8CazKZyR6+mlwgCjx4r8sBmt2WBhCstZ5AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUYp2dd2kKSzAdJXP29P0mzdtSK0UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzQyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALQqaMA0GCSqGSIb3DQEBCwUAA4IBAQAd9i4Tv83PkmEaSbbliCrn4hVS6KOQ IMPCuMvO1iE0Xo88Ep9q6hI8GcJBPw2SXwsU5fpDxFNpYrJbiwxIG+v32li4owS+ u3uLfiig+fWpVCnbgjFi1DtzIvh6S4F+FEzTmINoEPvMVInzhwiEX6orRnJ6jkap /hmW0ZziB0mFtpRQkzdn3dvrucwMfI8pYQr7mCZALKbwgNU/BLaTHoOhQJm53iwB jC6rNpljhEg4dZigjoEf3uF3crfEfoSnimgL6OaFr4sVavmRmLZuT+ryPgigMNBo 8fCwJyYx5nfjdBEvK0AWoUiXePbnEXRzG4mtk1+wW/k2pL4ZhtH92B31 -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:23 2025 by rpki-client