This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233342e302f32342d3234203d3e20313336373837.roa File: 34352e31332e3233342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: /b6R8cXqYi5yZLsperuxlU9wfYes4COEs2KjDG2oPk4= Subject key identifier: DC:F1:4F:C7:B7:66:EC:52:59:7B:67:3F:2B:27:AD:23:00:77:EC:02 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 75822A24E5DAEF81A972C29EF06494ACDA0538DD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:23 +0000 ROA not before: Fri 28 Nov 2025 11:44:23 +0000 ROA not after: Fri 27 Nov 2026 11:49:23 +0000 asID: 136787 IP address blocks: 45.13.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:82:2a:24:e5:da:ef:81:a9:72:c2:9e:f0:64:94:ac:da:05:38:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:23 2025 GMT Not After : Nov 27 11:49:23 2026 GMT Subject: CN=DCF14FC7B766EC52597B673F2B27AD230077EC02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:0e:fa:1f:82:26:8a:19:b6:0c:a5:5d:d7: e0:b9:0e:f9:05:ef:86:8f:f3:e2:5d:2e:7b:51:50: 28:57:fe:fa:de:58:01:25:d6:44:b2:d4:9d:39:89: 62:ae:c7:1c:74:b1:52:ad:77:da:e5:39:97:ee:1d: a3:23:41:7c:c2:09:34:e6:7e:26:6f:5f:f4:bb:78: 93:15:8c:35:43:c7:41:51:b6:81:70:05:8a:3b:72: bd:3d:ab:0b:b1:a6:49:57:46:62:ba:9c:16:05:9e: 62:6a:48:e1:be:f1:df:ce:35:76:3f:f6:e9:74:df: e7:d3:e0:91:73:7f:1c:8d:27:bf:00:86:3b:68:ea: 87:a9:79:e1:38:ae:34:78:b1:30:4b:5a:57:a7:4c: eb:7b:e3:36:10:fe:c2:c3:39:66:e3:43:5c:dd:2f: 7e:75:83:f8:f9:70:dd:44:3d:23:ea:a8:5b:ee:7a: 26:cf:c8:49:d3:75:f8:ee:18:69:cc:0d:cf:ec:0e: 77:30:ca:d9:20:44:dd:17:25:f9:d5:ee:aa:df:06: bc:d2:28:16:94:f3:31:f1:1b:b4:d6:ec:7f:3c:de: 41:b6:17:0c:f5:ed:2f:03:16:ff:08:39:f7:44:dd: 77:d1:f1:9e:09:0c:74:15:49:db:57:3e:b5:38:50: d8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F1:4F:C7:B7:66:EC:52:59:7B:67:3F:2B:27:AD:23:00:77:EC:02 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.234.0/24 Signature Algorithm: sha256WithRSAEncryption 68:4f:da:76:2d:72:7b:9a:b4:1c:5d:95:19:81:04:6e:3d:84: 9d:e3:d8:f1:aa:df:0b:c5:5a:df:5d:8e:78:27:7b:b4:26:6f: ea:94:0f:12:9e:47:9a:b4:12:b0:eb:fc:74:39:2f:2f:6f:a3: 2c:e5:83:f4:1e:97:97:c3:8f:02:52:fa:05:7b:47:9f:83:d0: 54:2f:43:70:c1:f4:28:68:6c:50:4f:50:44:53:5f:e8:64:f4: 9f:ee:f0:68:16:df:9b:f6:5d:ca:11:63:83:ae:15:22:91:1b: 9c:71:88:6c:e2:e4:db:59:8a:b9:d9:a0:66:e6:6a:92:57:96: f9:6d:c6:5d:7c:4c:32:31:7d:f2:b7:d8:ce:b7:57:94:55:01: 3a:a2:db:21:bb:ee:ce:ca:19:75:0d:3b:8d:1e:d9:2b:9f:7a: 98:64:6c:90:36:f2:0f:af:ed:48:df:e5:3a:18:6a:f8:a2:0a: 3e:0b:39:b2:98:ff:ee:e1:62:44:dc:89:7b:8e:4b:fe:de:78: b1:c2:0d:c0:fe:e1:48:2b:b4:0e:00:d8:d5:9d:ab:09:70:c4: 0f:e7:ae:25:a2:42:f6:65:3e:ce:f0:99:0f:87:e9:76:ed:2c: bf:11:86:e0:68:e1:6b:05:ef:e1:dd:f8:d7:13:48:a9:68:71: 69:c9:66:cf -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUdYIqJOXa74GpcsKe8GSUrNoFON0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjNaFw0yNjExMjcxMTQ5MjNaMDMxMTAvBgNV BAMTKERDRjE0RkM3Qjc2NkVDNTI1OTdCNjczRjJCMjdBRDIzMDA3N0VDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddw76H4Imihm2DKVd1+C5DvkF 74aP8+JdLntRUChX/vreWAEl1kSy1J05iWKuxxx0sVKtd9rlOZfuHaMjQXzCCTTm fiZvX/S7eJMVjDVDx0FRtoFwBYo7cr09qwuxpklXRmK6nBYFnmJqSOG+8d/ONXY/ 9ul03+fT4JFzfxyNJ78Ahjto6oepeeE4rjR4sTBLWlenTOt74zYQ/sLDOWbjQ1zd L351g/j5cN1EPSPqqFvueibPyEnTdfjuGGnMDc/sDncwytkgRN0XJfnV7qrfBrzS KBaU8zHxG7TW7H883kG2Fwz17S8DFv8IOfdE3XfR8Z4JDHQVSdtXPrU4UNjNAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU3PFPx7dm7FJZe2c/KyetIwB37AIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz MjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtDeowDQYJKoZIhvcNAQELBQADggEBAGhP2nYtcnuatBxdlRmBBG49hJ3j 2PGq3wvFWt9djngne7Qmb+qUDxKeR5q0ErDr/HQ5Ly9voyzlg/Qel5fDjwJS+gV7 R5+D0FQvQ3DB9ChobFBPUERTX+hk9J/u8GgW35v2XcoRY4OuFSKRG5xxiGzi5NtZ irnZoGbmapJXlvltxl18TDIxffK32M63V5RVATqi2yG77s7KGXUNO40e2Sufephk bJA28g+v7Ujf5ToYaviiCj4LObKY/+7hYkTciXuOS/7eeLHCDcD+4UgrtA4A2NWd qwlwxA/nriWiQvZlPs7wmQ+H6XbtLL8RhuBo4WsF7+Hd+NcTSKlocWnJZs8= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:11 2025 by rpki-client