This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233322e302f32342d3234203d3e20313336373837.roa File: 34352e31332e3233322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: yGy5+CqpP6SCVJdiY0urMSXiDjJ0jZS+j9bWlcOPIRE= Subject key identifier: 9D:83:D9:A2:C5:56:07:8F:50:8B:B7:E7:CC:F3:DC:4A:D0:66:23:19 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 680E6C3816E855A1DD34F2BA7F947206C226E1EC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 136787 IP address blocks: 45.13.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:0e:6c:38:16:e8:55:a1:dd:34:f2:ba:7f:94:72:06:c2:26:e1:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=9D83D9A2C556078F508BB7E7CCF3DC4AD0662319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:82:b8:50:dd:b0:1f:b5:8b:90:13:10:4a:b9: 62:a6:91:43:83:06:21:c9:30:11:7f:55:71:52:47: a4:7f:56:6b:1e:57:6f:07:cc:a3:f7:d1:31:45:c1: c0:56:dd:d4:3a:69:b8:cb:06:16:10:d7:15:16:e7: 10:5a:54:ce:65:bc:6c:3f:38:95:22:e5:b9:f8:a3: e9:91:8c:5c:ce:68:76:ad:b6:ce:e3:d6:15:5e:df: 1b:1b:f2:8e:6c:fb:16:78:ab:06:e5:b4:66:b4:d3: 57:c1:7b:cf:d9:1e:e6:31:e4:1a:33:5d:a8:ba:29: ba:c3:17:e0:d6:5d:26:ae:f5:e6:9f:e2:16:4f:44: 0f:c8:f9:90:49:4a:cb:b8:81:60:38:8f:78:4d:6c: 94:ca:e4:d1:f3:a7:bc:24:35:57:3a:1e:6f:af:0f: 51:88:cb:49:7c:2e:8a:bd:6f:2d:2c:d8:7a:f2:ab: 5a:0a:bb:c3:81:53:55:0f:5b:ed:94:42:be:f3:d0: 75:d8:b7:a1:39:43:21:2a:f4:42:a1:a5:63:8c:ff: 49:75:e5:c0:5e:d5:03:ef:e3:b4:49:8f:c8:0a:65: de:b0:d2:4e:ff:1b:fa:ba:77:3f:8b:2c:17:78:fa: 0d:4f:bc:d1:03:4f:59:37:7e:00:86:75:65:dd:b0: 4f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:83:D9:A2:C5:56:07:8F:50:8B:B7:E7:CC:F3:DC:4A:D0:66:23:19 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.232.0/24 Signature Algorithm: sha256WithRSAEncryption a1:85:68:08:92:0a:23:79:d0:46:8a:3c:f8:cc:56:5c:8c:6b: 75:85:98:61:7c:df:86:d1:c8:9c:9a:60:f5:ad:1e:69:cd:bc: d9:f8:b4:61:9c:2a:57:32:0d:21:72:42:e3:00:c0:86:73:6f: 0f:3c:b3:9a:1c:2b:dc:37:ec:c6:f9:62:93:d1:e2:f6:5d:04: 8f:a2:35:df:84:f7:0e:fd:3e:1d:73:29:ab:b4:3b:45:d2:7b: 3b:e4:31:f5:bc:95:fb:f9:58:1a:03:e8:f8:bd:0f:af:1f:40: 98:cd:7c:db:e6:08:bd:08:10:29:4a:30:15:2e:ca:80:21:19: a1:23:e7:28:ea:06:70:e0:38:3b:1d:e0:58:98:aa:61:c9:d8: aa:e7:50:45:ae:b9:0c:53:65:94:96:c0:ae:63:bd:12:d3:60: 04:77:21:5b:22:16:2d:7a:49:c1:3d:66:b7:67:94:25:b5:6a: 96:0a:dc:68:b9:6d:05:99:07:24:f4:15:57:c4:fe:a3:2c:d8: 76:08:2e:d8:99:87:0a:82:63:ed:4c:4b:70:b2:d2:64:60:d8: cb:8c:71:8b:8c:b7:9c:d2:4a:99:f1:bb:fa:b3:aa:4d:7d:d8: 9d:a9:89:23:a5:9e:27:39:81:b3:4e:29:e0:d0:0a:27:e4:25: f1:9c:19:15 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUaA5sOBboVaHdNPK6f5RyBsIm4ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKDlEODNEOUEyQzU1NjA3OEY1MDhCQjdFN0NDRjNEQzRBRDA2NjIzMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrgrhQ3bAftYuQExBKuWKmkUOD BiHJMBF/VXFSR6R/VmseV28HzKP30TFFwcBW3dQ6abjLBhYQ1xUW5xBaVM5lvGw/ OJUi5bn4o+mRjFzOaHatts7j1hVe3xsb8o5s+xZ4qwbltGa001fBe8/ZHuYx5Boz Xai6KbrDF+DWXSau9eaf4hZPRA/I+ZBJSsu4gWA4j3hNbJTK5NHzp7wkNVc6Hm+v D1GIy0l8Loq9by0s2Hryq1oKu8OBU1UPW+2UQr7z0HXYt6E5QyEq9EKhpWOM/0l1 5cBe1QPv47RJj8gKZd6w0k7/G/q6dz+LLBd4+g1PvNEDT1k3fgCGdWXdsE/BAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUnYPZosVWB49Qi7fnzPPcStBmIxkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz MjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtDegwDQYJKoZIhvcNAQELBQADggEBAKGFaAiSCiN50EaKPPjMVlyMa3WF mGF834bRyJyaYPWtHmnNvNn4tGGcKlcyDSFyQuMAwIZzbw88s5ocK9w37Mb5YpPR 4vZdBI+iNd+E9w79Ph1zKau0O0XSezvkMfW8lfv5WBoD6Pi9D68fQJjNfNvmCL0I EClKMBUuyoAhGaEj5yjqBnDgODsd4FiYqmHJ2KrnUEWuuQxTZZSWwK5jvRLTYAR3 IVsiFi16ScE9ZrdnlCW1apYK3Gi5bQWZByT0FVfE/qMs2HYILtiZhwqCY+1MS3Cy 0mRg2MuMcYuMt5zSSpnxu/qzqk192J2piSOlnic5gbNOKeDQCifkJfGcGRU= -----END CERTIFICATE-----Generated at Sat Dec 6 23:37:45 2025 by rpki-client