This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135352e302f32342d3234203d3e20313336373837.roa File: 34352e31302e3135352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: KztghskVDDI3Zf6FCH7dI6GN4sdZskDtxGlektQSLrU= Subject key identifier: 47:46:A3:C4:6B:72:06:1C:B4:F6:A9:9A:7E:2D:98:FF:EA:10:DB:7D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6F5D8C1E803FB0CFBE11EB9300B70403A167CAFE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 136787 IP address blocks: 45.10.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5d:8c:1e:80:3f:b0:cf:be:11:eb:93:00:b7:04:03:a1:67:ca:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=4746A3C46B72061CB4F6A99A7E2D98FFEA10DB7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b8:51:89:8b:69:44:ae:fc:7a:65:82:16:c0: 3f:58:e1:71:c1:a5:60:69:e7:27:d3:c0:16:47:52: bf:ad:38:72:a5:c2:26:3a:a6:99:16:3b:9b:ea:d3: 79:53:ca:f1:8c:71:7c:c4:4b:b8:31:60:0e:4f:30: 68:e9:ff:af:69:e0:ec:30:ac:48:32:0a:5c:6d:44: 76:e1:99:fc:2f:26:7c:06:7c:36:18:27:dd:36:9a: 7b:3f:79:4d:4d:8f:fa:1f:0c:14:29:30:8c:d5:c4: 58:28:3f:5e:ce:83:a2:1a:0a:17:d1:5d:73:64:26: ad:2a:c5:62:57:b3:7f:94:b5:06:03:13:8e:ea:87: c2:d3:1a:db:75:ef:e9:f8:c9:1b:9e:ce:13:d0:00: a6:76:86:e7:cf:6a:6c:43:96:be:62:4b:f8:d6:b7: d0:2d:3a:5d:a9:56:39:ff:bc:1c:84:16:ce:7b:a0: aa:8a:a3:bc:5c:c9:77:8b:1a:81:08:ad:2e:1b:69: 50:db:07:f0:e6:48:b7:09:b9:fc:97:eb:89:bb:e3: af:f7:1c:ef:33:5f:c3:d2:09:be:50:8f:7b:ae:f7: 40:da:fe:31:81:9e:38:87:71:8a:f2:95:ae:b7:dc: 13:43:19:75:6b:24:45:cd:32:36:88:4a:f0:db:51: 2e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:46:A3:C4:6B:72:06:1C:B4:F6:A9:9A:7E:2D:98:FF:EA:10:DB:7D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.155.0/24 Signature Algorithm: sha256WithRSAEncryption 18:25:ca:04:ce:50:46:e0:8b:15:b9:31:ba:83:16:0c:8c:c3: 7f:91:08:f7:13:ec:8c:9f:cc:68:f4:35:a4:55:aa:cf:f2:95: 69:0c:0e:7f:4b:08:34:c4:a6:08:fd:3c:9d:36:b7:ca:e7:5d: 96:37:9a:52:12:52:7d:2b:b4:f2:0c:29:e6:69:81:6a:d6:fe: 6c:d5:9f:68:df:21:98:4a:42:6d:5e:a3:f4:b5:3f:04:cf:75: a1:a1:22:0c:7d:4c:27:0a:b9:1c:1c:ee:f6:af:c6:ac:57:75: 67:4e:d4:d0:11:a0:eb:ef:6d:bd:8b:1b:8c:88:96:8d:7b:a9: 29:ae:9e:d6:a4:d1:24:d2:b5:2a:a6:71:cf:fb:3f:9e:5a:a8: c9:5d:12:83:0a:0a:5d:1b:80:d7:7a:09:6d:0f:9e:63:62:76: 60:9a:77:bc:19:ce:56:ce:75:e5:46:65:99:b9:23:bc:9c:eb: 34:d1:b8:a7:10:ff:77:14:80:fa:a0:c4:91:1b:a8:81:84:ea: 26:e6:95:97:46:cc:69:77:06:81:e2:1f:90:24:fb:48:42:c7: 48:01:ac:96:5d:ea:a7:4d:7e:2a:1a:01:95:29:4e:3f:48:cf: 0c:cd:a8:ea:65:47:d6:a7:13:18:e4:b7:7d:a2:4e:4f:5d:4c: 24:c5:6c:09 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUb12MHoA/sM++EeuTALcEA6Fnyv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKDQ3NDZBM0M0NkI3MjA2MUNCNEY2QTk5QTdFMkQ5OEZGRUExMERCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkuFGJi2lErvx6ZYIWwD9Y4XHB pWBp5yfTwBZHUr+tOHKlwiY6ppkWO5vq03lTyvGMcXzES7gxYA5PMGjp/69p4Oww rEgyClxtRHbhmfwvJnwGfDYYJ902mns/eU1Nj/ofDBQpMIzVxFgoP17Og6IaChfR XXNkJq0qxWJXs3+UtQYDE47qh8LTGtt17+n4yRuezhPQAKZ2hufPamxDlr5iS/jW t9AtOl2pVjn/vByEFs57oKqKo7xcyXeLGoEIrS4baVDbB/DmSLcJufyX64m746/3 HO8zX8PSCb5Qj3uu90Da/jGBnjiHcYryla633BNDGXVrJEXNMjaISvDbUS6NAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUR0ajxGtyBhy09qmafi2Y/+oQ230wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtCpswDQYJKoZIhvcNAQELBQADggEBABglygTOUEbgixW5MbqDFgyMw3+R CPcT7IyfzGj0NaRVqs/ylWkMDn9LCDTEpgj9PJ02t8rnXZY3mlISUn0rtPIMKeZp gWrW/mzVn2jfIZhKQm1eo/S1PwTPdaGhIgx9TCcKuRwc7vavxqxXdWdO1NARoOvv bb2LG4yIlo17qSmuntak0STStSqmcc/7P55aqMldEoMKCl0bgNd6CW0PnmNidmCa d7wZzlbOdeVGZZm5I7yc6zTRuKcQ/3cUgPqgxJEbqIGE6ibmlZdGzGl3BoHiH5Ak +0hCx0gBrJZd6qdNfioaAZUpTj9IzwzNqOplR9anExjkt32iTk9dTCTFbAk= -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:01 2025 by rpki-client