This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33322e302f32342d3234203d3e20313336373837.roa File: 34352e3132392e33322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: lsHI4QpBbQxi32t/tVmg4uiMbN8q5kTgmCmsRytR7pQ= Subject key identifier: BB:A0:23:B9:BC:D4:37:C4:73:D2:BC:76:C6:84:3D:53:94:16:57:2C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0F6879008FB0D4517A3FDCC83FD2C896012CA6EC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 136787 IP address blocks: 45.129.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:68:79:00:8f:b0:d4:51:7a:3f:dc:c8:3f:d2:c8:96:01:2c:a6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=BBA023B9BCD437C473D2BC76C6843D539416572C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3d:bd:ec:9a:74:40:30:67:e7:95:09:11:4c: 1c:2e:1c:0a:0d:5e:e0:5a:3e:0d:b7:08:79:45:52: 7a:a3:3b:61:35:da:12:64:d3:c6:a1:61:00:45:71: d2:fc:5f:65:ba:a9:fb:c9:c4:a7:b5:91:a2:a1:d6: 62:b9:d1:b3:d0:aa:d6:87:0d:b4:61:1f:cb:00:b0: dd:b8:69:41:b6:90:c5:19:18:6c:d3:85:ff:7a:a0: 1b:15:59:a9:2f:46:6b:d4:43:aa:d9:db:12:e2:66: 58:77:4a:79:9c:b9:3f:8e:de:55:7f:5a:1b:a4:c0: 48:db:b9:d0:77:cc:fa:3d:9e:78:45:52:0d:7b:64: b0:f5:35:a4:e9:84:db:fa:05:59:eb:72:c3:80:80: 6c:cd:5a:6b:bd:52:b9:a6:ae:32:ca:d7:00:da:37: 2e:b7:c6:56:e8:f9:c3:f7:44:43:ed:24:ba:92:bf: f6:b3:af:e6:19:c6:fa:d4:6e:fe:12:40:e9:e7:27: 13:af:25:3a:86:20:c1:6c:f6:f3:02:8f:4d:18:73: 77:05:5b:cf:5d:10:f6:f1:df:39:b6:a0:ff:c8:54: cd:cd:69:00:a0:42:0a:22:d8:eb:7a:63:6a:69:84: 73:19:72:08:1a:40:86:df:70:98:1b:bb:da:8f:36: 38:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A0:23:B9:BC:D4:37:C4:73:D2:BC:76:C6:84:3D:53:94:16:57:2C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.32.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ef:54:8f:81:14:31:f3:da:17:18:f9:41:46:00:cc:36:a8: e7:9b:21:17:26:c0:8c:b9:66:42:95:4d:e2:4c:8c:ee:0d:82: d8:f8:fa:23:10:04:ef:c1:36:50:b7:87:d0:d3:e1:69:0b:e8: 33:60:60:cf:db:72:72:c1:64:fb:ec:af:37:fc:5f:d4:98:bd: 74:49:dc:eb:0c:72:10:8c:23:0b:c3:7d:cd:50:c8:43:34:15: df:8c:62:fd:1c:76:78:e5:49:1c:f7:6d:6e:25:67:87:7a:f4: 4b:ff:3a:26:d4:36:bf:41:f0:57:31:dc:b3:1c:cf:86:07:23: 7f:a8:92:68:a7:2a:03:05:22:b5:b4:ef:c0:e7:f3:b6:6e:cf: 30:7e:6a:8c:67:0d:da:c0:f0:1a:ab:7a:7d:00:ba:70:1c:bd: 6c:24:90:6b:e9:fa:33:87:40:cd:07:17:3f:f7:eb:6d:32:2c: 6e:38:e5:43:1d:90:1c:af:f9:6c:01:d7:52:be:f2:6c:3e:fa: 3e:9b:36:63:81:26:0a:18:cc:15:68:06:63:a3:7b:e6:3d:93: 0f:f2:8b:70:be:0f:ca:d0:e8:56:e4:95:25:05:bd:41:d0:8b: 1f:87:37:6b:65:e2:2a:fc:f7:6d:7b:24:43:eb:18:a5:db:2c: ce:a2:6b:36 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUD2h5AI+w1FF6P9zIP9LIlgEspuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKEJCQTAyM0I5QkNENDM3QzQ3M0QyQkM3NkM2ODQzRDUzOTQxNjU3MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHPb3smnRAMGfnlQkRTBwuHAoN XuBaPg23CHlFUnqjO2E12hJk08ahYQBFcdL8X2W6qfvJxKe1kaKh1mK50bPQqtaH DbRhH8sAsN24aUG2kMUZGGzThf96oBsVWakvRmvUQ6rZ2xLiZlh3SnmcuT+O3lV/ WhukwEjbudB3zPo9nnhFUg17ZLD1NaTphNv6BVnrcsOAgGzNWmu9UrmmrjLK1wDa Ny63xlbo+cP3REPtJLqSv/azr+YZxvrUbv4SQOnnJxOvJTqGIMFs9vMCj00Yc3cF W89dEPbx3zm2oP/IVM3NaQCgQgoi2Ot6Y2pphHMZcggaQIbfcJgbu9qPNjiHAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUu6AjubzUN8Rz0rx2xoQ9U5QWVywwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky ZTMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgSAwDQYJKoZIhvcNAQELBQADggEBAJrvVI+BFDHz2hcY+UFGAMw2qOeb IRcmwIy5ZkKVTeJMjO4Ngtj4+iMQBO/BNlC3h9DT4WkL6DNgYM/bcnLBZPvsrzf8 X9SYvXRJ3OsMchCMIwvDfc1QyEM0Fd+MYv0cdnjlSRz3bW4lZ4d69Ev/OibUNr9B 8Fcx3LMcz4YHI3+okminKgMFIrW078Dn87ZuzzB+aoxnDdrA8Bqren0AunAcvWwk kGvp+jOHQM0HFz/3620yLG445UMdkByv+WwB11K+8mw++j6bNmOBJgoYzBVoBmOj e+Y9kw/yi3C+D8rQ6FbklSUFvUHQix+HN2tl4ir89217JEPrGKXbLM6iazY= -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:29 2025 by rpki-client