This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33352e302f32342d3234203d3e20313336373837.roa File: 34352e3132392e33352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: qKBOuuhZwL9+fm4/6bfkiShF6WBGQZAgWZ2QEK5CG78= Subject key identifier: 37:8D:04:D6:3D:5A:78:22:0A:4A:39:B9:46:83:B1:D2:80:24:8C:6C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 44DFB6B48B41C1909E340D4A5F4F2423043A6AD6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:40 +0000 ROA not before: Fri 28 Nov 2025 11:44:40 +0000 ROA not after: Fri 27 Nov 2026 11:49:40 +0000 asID: 136787 IP address blocks: 45.129.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:df:b6:b4:8b:41:c1:90:9e:34:0d:4a:5f:4f:24:23:04:3a:6a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:40 2025 GMT Not After : Nov 27 11:49:40 2026 GMT Subject: CN=378D04D63D5A78220A4A39B94683B1D280248C6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:96:39:f6:5a:53:bd:e4:b4:84:8f:01:7f:d3: c5:09:77:ea:b6:2d:44:ef:6f:3e:cb:b5:32:dd:5b: d1:56:ae:07:48:1d:55:f8:c3:a5:ee:59:9f:fd:d8: bd:86:de:9a:41:78:f0:3f:02:a3:17:18:9f:71:46: 43:01:fb:d0:01:68:3a:1d:58:91:4e:53:c2:91:37: bb:45:7f:64:c5:13:9b:41:4c:43:b6:e3:59:7d:52: 2c:99:e1:fd:ce:c6:c3:b1:16:80:29:b3:a4:36:20: d7:c7:80:08:0f:6d:e4:f8:3f:1c:94:d9:8c:2a:36: 64:d9:c1:4a:4d:54:25:0b:45:30:aa:87:c7:eb:11: 29:c0:8b:37:bd:8b:76:9c:ad:02:b3:0d:95:93:0b: 0b:64:51:3b:4d:1d:97:6d:16:4b:12:29:45:70:83: 70:62:18:80:40:00:29:2b:26:58:8f:c5:f2:7d:c8: 04:52:7f:72:86:20:7d:3c:be:2f:d5:63:f5:04:79: 16:99:d6:40:8e:2a:2a:eb:15:c4:76:1a:1d:c0:f4: 36:ee:fb:d8:f0:81:68:89:05:44:7e:20:05:b1:e4: 5a:ec:8a:06:93:5d:19:ac:a7:c6:4b:fa:0e:9e:c7: 97:e7:91:6b:82:34:5a:c5:b4:c0:e1:a9:d8:47:8e: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:8D:04:D6:3D:5A:78:22:0A:4A:39:B9:46:83:B1:D2:80:24:8C:6C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.35.0/24 Signature Algorithm: sha256WithRSAEncryption 59:94:a8:58:93:be:ff:3c:9a:d3:22:25:b3:6b:b2:36:1f:2c: 90:40:67:3f:dc:bb:91:e7:d5:ea:1f:8b:75:cb:89:41:a0:a2: 83:86:d2:78:36:a8:ea:93:89:87:1f:4c:40:07:15:77:98:38: 8d:82:c9:f9:58:c1:d9:4c:50:27:38:e6:a5:6a:f7:54:5a:5d: 33:56:10:a7:df:70:f1:55:cb:77:e4:2f:87:b0:7d:87:c0:50: 04:ff:22:7a:7e:64:e4:6a:a3:a3:a6:b9:a7:88:93:c3:2e:26: 30:8d:77:2d:8d:fc:c3:88:02:22:b6:a1:14:16:cd:ee:be:bb: 30:ea:91:3b:80:d4:7d:d3:ef:72:02:05:4a:b8:39:51:15:7d: 36:01:ae:8c:b6:b8:a8:2c:12:b0:b7:06:d7:89:77:b2:af:3f: 16:bf:71:fb:e1:5a:95:20:c4:05:10:b7:a8:e4:f2:69:9b:ae: ce:c5:fa:fd:b3:69:fd:03:b3:3b:7c:70:c7:62:35:70:9c:ca: 1b:66:6f:a8:2b:e9:17:ae:6c:27:94:6c:4c:5c:d6:2f:7c:48: 73:d6:45:50:24:f4:bd:dc:2b:56:f7:fe:a1:6e:08:4d:8e:18: e0:28:5e:5c:94:29:c1:e5:71:b0:45:58:a7:d7:2d:a6:ef:7f: c8:61:aa:52 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIURN+2tItBwZCeNA1KX08kIwQ6atYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV BAMTKDM3OEQwNEQ2M0Q1QTc4MjIwQTRBMzlCOTQ2ODNCMUQyODAyNDhDNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJljn2WlO95LSEjwF/08UJd+q2 LUTvbz7LtTLdW9FWrgdIHVX4w6XuWZ/92L2G3ppBePA/AqMXGJ9xRkMB+9ABaDod WJFOU8KRN7tFf2TFE5tBTEO241l9UiyZ4f3OxsOxFoAps6Q2INfHgAgPbeT4PxyU 2YwqNmTZwUpNVCULRTCqh8frESnAize9i3acrQKzDZWTCwtkUTtNHZdtFksSKUVw g3BiGIBAACkrJliPxfJ9yARSf3KGIH08vi/VY/UEeRaZ1kCOKirrFcR2Gh3A9Dbu +9jwgWiJBUR+IAWx5FrsigaTXRmsp8ZL+g6ex5fnkWuCNFrFtMDhqdhHjvs7AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUN40E1j1aeCIKSjm5RoOx0oAkjGwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky ZTMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgSMwDQYJKoZIhvcNAQELBQADggEBAFmUqFiTvv88mtMiJbNrsjYfLJBA Zz/cu5Hn1eofi3XLiUGgooOG0ng2qOqTiYcfTEAHFXeYOI2CyflYwdlMUCc45qVq 91RaXTNWEKffcPFVy3fkL4ewfYfAUAT/Inp+ZORqo6OmuaeIk8MuJjCNdy2N/MOI AiK2oRQWze6+uzDqkTuA1H3T73ICBUq4OVEVfTYBroy2uKgsErC3BteJd7KvPxa/ cfvhWpUgxAUQt6jk8mmbrs7F+v2zaf0Dszt8cMdiNXCcyhtmb6gr6ReubCeUbExc 1i98SHPWRVAk9L3cK1b3/qFuCE2OGOAoXlyUKcHlcbBFWKfXLabvf8hhqlI= -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:32 2025 by rpki-client