This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3233203d3e203136313235.roa File: 34352e31302e3135382e302f32332d3233203d3e203136313235.roa (raw, json) Hash identifier: 6Q3KXuOaZTljTLvRy+z7I0BIARSEmtgRw7KHt0euJCo= Subject key identifier: 6A:C8:87:38:EA:B2:E3:1F:B0:99:08:94:DC:56:89:AC:3F:6E:E1:17 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 276264FD2E6A0FFFA3AFEB3CAC4C99A113582B92 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3233203d3e203136313235.roa Signing time: Fri 28 Nov 2025 11:49:40 +0000 ROA not before: Fri 28 Nov 2025 11:44:40 +0000 ROA not after: Fri 27 Nov 2026 11:49:40 +0000 asID: 16125 IP address blocks: 45.10.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:62:64:fd:2e:6a:0f:ff:a3:af:eb:3c:ac:4c:99:a1:13:58:2b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:40 2025 GMT Not After : Nov 27 11:49:40 2026 GMT Subject: CN=6AC88738EAB2E31FB0990894DC5689AC3F6EE117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:42:77:6d:76:c7:0b:1c:cb:67:3a:65:ba: 09:d4:83:d3:26:fe:64:0b:0a:fb:f6:ee:dc:7b:84: 0d:4e:e1:24:ea:4c:83:ba:eb:c3:a5:6e:ce:75:21: d6:8f:b7:2d:4a:4e:7f:58:d9:88:c6:2a:e2:ad:3a: f6:bb:56:29:41:b3:01:a9:3b:9a:6d:40:81:54:95: 42:ff:a0:ac:5d:e1:75:1f:60:f3:62:02:9d:f8:5d: 6e:6a:4b:d4:99:03:08:a9:02:ee:44:b6:4e:7e:9d: 53:4e:f0:1f:7c:c5:dc:f2:15:e1:62:fb:df:13:27: d5:fc:46:b9:b2:ba:eb:43:b8:66:51:da:8e:19:a6: de:e4:13:e4:87:31:4d:17:ba:a9:e4:ca:84:81:b9: ca:7a:78:fe:93:47:14:81:97:5d:c9:e2:22:37:b9: ac:cb:77:1a:e7:e3:7c:a9:95:0e:58:6a:b0:2e:6d: 36:30:6f:9f:2b:44:92:d1:df:a5:ff:74:d8:47:89: 42:2b:8a:ce:a1:97:4e:9e:08:11:0a:a6:ee:00:bd: 5c:15:8a:89:75:db:d1:d7:5b:14:a8:6a:ea:b4:d0: d6:2a:42:62:ca:1e:1e:41:d0:26:fa:5f:73:83:14: 0e:7e:f4:ad:65:5d:7c:6e:5a:62:df:55:61:ad:7c: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C8:87:38:EA:B2:E3:1F:B0:99:08:94:DC:56:89:AC:3F:6E:E1:17 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3233203d3e203136313235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.158.0/23 Signature Algorithm: sha256WithRSAEncryption ab:6d:87:b2:92:88:38:d7:33:4c:ac:db:94:3e:62:a4:8b:08: e8:aa:e7:1b:c2:00:20:30:5d:6c:61:e5:17:34:cf:b9:6a:ad: 3a:af:1d:24:03:f3:f5:e5:76:9c:85:d7:95:18:7b:de:8b:2e: 5f:59:53:f7:b0:de:d0:66:47:95:c4:96:16:9d:b3:55:1a:e1: ba:dc:1c:18:6a:01:e6:c9:64:9a:c1:9b:ea:25:aa:be:c1:43: 74:c6:85:24:87:8a:5a:ee:6a:6f:e6:1d:b5:8f:ef:d3:e1:d7: fe:7e:44:37:e0:a4:ce:3c:4a:55:85:ac:11:de:eb:21:a1:40: 2e:cc:50:d9:e7:6c:6e:cd:2a:d3:9f:d8:0f:63:6f:1d:80:e3: c1:f1:50:05:3d:8e:80:a8:cc:65:b9:dc:27:49:02:fe:df:c4: 6e:d0:8b:89:98:4e:1b:b7:df:ef:9f:44:93:b8:58:f0:af:34: 1f:76:15:13:b5:b6:cd:be:f6:fc:78:be:85:b4:56:96:1a:9a: bb:fd:2a:b2:8a:30:82:6f:af:90:6c:83:f2:b8:d8:c6:b1:e5: 93:b1:6a:9d:d5:cc:1a:2f:cf:83:83:65:f8:ed:6f:2e:c8:f2: 2a:50:d4:1a:e6:1f:e5:bc:07:74:62:fd:80:40:a5:cd:6b:0f: 1b:e5:20:56 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUJ2Jk/S5qD/+jr+s8rEyZoRNYK5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV BAMTKDZBQzg4NzM4RUFCMkUzMUZCMDk5MDg5NERDNTY4OUFDM0Y2RUUxMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTUJ3bXbHCxzLZzplugnUg9Mm /mQLCvv27tx7hA1O4STqTIO668Olbs51IdaPty1KTn9Y2YjGKuKtOva7VilBswGp O5ptQIFUlUL/oKxd4XUfYPNiAp34XW5qS9SZAwipAu5Etk5+nVNO8B98xdzyFeFi +98TJ9X8RrmyuutDuGZR2o4Zpt7kE+SHMU0XuqnkyoSBucp6eP6TRxSBl13J4iI3 uazLdxrn43yplQ5YarAubTYwb58rRJLR36X/dNhHiUIris6hl06eCBEKpu4AvVwV iol129HXWxSoauq00NYqQmLKHh5B0Cb6X3ODFA5+9K1lXXxuWmLfVWGtfBY5AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUasiHOOqy4x+wmQiU3FaJrD9u4RcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMTM2MzEzMjM1LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLQqeMA0GCSqGSIb3DQEBCwUAA4IBAQCrbYeykog41zNMrNuUPmKkiwjoqucb wgAgMF1sYeUXNM+5aq06rx0kA/P15XachdeVGHveiy5fWVP3sN7QZkeVxJYWnbNV GuG63BwYagHmyWSawZvqJaq+wUN0xoUkh4pa7mpv5h21j+/T4df+fkQ34KTOPEpV hawR3ushoUAuzFDZ52xuzSrTn9gPY28dgOPB8VAFPY6AqMxludwnSQL+38Ru0IuJ mE4bt9/vn0STuFjwrzQfdhUTtbbNvvb8eL6FtFaWGpq7/SqyijCCb6+QbIPyuNjG seWTsWqd1cwaL8+Dg2X47W8uyPIqUNQa5h/lvAd0Yv2AQKXNaw8b5SBW -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:53 2025 by rpki-client