This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa File: 34352e3133302e3130342e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: /FxGRlgATFy2gOBkxlxhQRFzX/3FMXoQX4d9QAloe3s= Subject key identifier: EB:96:80:7E:2A:E3:C4:E8:D2:47:84:23:D2:61:5F:4E:C0:B1:24:93 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6F75ACECFE6472865280D8FB8D801069CA47BF2A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:26 +0000 ROA not before: Fri 28 Nov 2025 11:44:26 +0000 ROA not after: Fri 27 Nov 2026 11:49:26 +0000 asID: 51167 IP address blocks: 45.130.104.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:75:ac:ec:fe:64:72:86:52:80:d8:fb:8d:80:10:69:ca:47:bf:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:26 2025 GMT Not After : Nov 27 11:49:26 2026 GMT Subject: CN=EB96807E2AE3C4E8D2478423D2615F4EC0B12493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:4c:5d:31:87:01:d1:a6:7b:fc:1f:5e:fe: ca:90:86:5b:bc:44:2f:72:18:36:33:fc:6b:bc:f8: 07:8e:6d:b1:f6:2c:83:4e:9c:80:fa:21:a9:5a:c5: f4:07:2d:db:f3:76:58:bd:11:90:99:89:f3:51:af: 65:c3:b9:57:50:e4:7e:fa:75:a5:a9:8f:f7:b9:fb: 39:19:05:b6:d1:94:28:75:3a:27:5c:f2:3b:46:ca: 87:4c:2d:01:43:85:a5:7c:46:0b:55:bf:7e:6c:ab: 0f:7a:2f:76:85:2f:75:b3:01:b9:f0:78:5b:4b:99: 74:0b:2a:97:b7:44:41:08:e3:98:f7:28:ec:6a:8f: 16:10:7d:2d:b1:e3:88:3b:c1:ef:b2:0f:22:38:d2: 0f:a3:07:39:5c:6d:57:ad:79:9f:43:07:f3:21:47: e6:88:ae:59:d0:62:3e:74:da:4c:3b:12:4f:3f:3d: e8:ec:22:dd:04:2c:d5:69:12:33:2a:f6:b1:f8:ad: dc:77:49:bc:71:b7:0e:ce:e7:af:ef:79:a5:27:07: a4:71:64:96:43:ea:05:27:a6:9a:b3:76:d1:85:ba: 99:c0:d1:96:08:e6:4a:d9:ef:0a:93:cf:a7:7d:49: 0a:25:34:3f:be:3f:f6:9f:22:ef:c0:8a:de:77:84: 5a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:96:80:7E:2A:E3:C4:E8:D2:47:84:23:D2:61:5F:4E:C0:B1:24:93 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130342e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.104.0/24 Signature Algorithm: sha256WithRSAEncryption a8:7c:2f:cb:e9:ec:c4:70:8b:5a:0b:23:f4:c2:8c:c9:40:b9: 67:96:98:19:35:61:a6:4a:1b:b1:4b:34:f7:af:b9:fa:a9:7c: fb:8a:d9:40:5d:70:ec:ce:a7:e5:4e:67:71:a8:29:70:57:28: d1:96:b3:3e:d2:0c:9d:ec:9e:2d:1e:04:49:5c:f5:59:8b:d8: 31:ae:18:64:4f:39:d0:76:0a:1e:a9:71:0a:2c:2f:da:ba:c1: 2b:63:d7:f3:b5:b2:34:70:d4:c2:7d:3f:0c:e3:a6:69:3c:9c: 96:1e:fc:b7:e2:39:23:ea:0f:8e:8d:6c:f2:68:c6:4d:a5:0d: 98:4c:d7:2c:ed:dc:47:37:fe:6d:8c:cf:e8:50:cc:ec:7c:f2: 6f:0f:44:37:e9:a4:96:70:92:ee:7d:93:12:46:84:ed:9e:3c: fd:b7:33:c6:99:46:cd:12:42:90:9c:18:a2:63:44:07:38:ea: 76:6b:8a:11:8b:1f:a5:be:cd:bd:2c:65:38:8e:4b:78:4b:d8: 0c:d9:f3:3f:82:98:3f:dd:9a:45:e5:05:2a:9a:61:f1:56:ae: 7a:be:64:da:80:52:8b:a2:00:97:3f:5b:fd:26:c4:ae:3a:83: ec:c9:c2:a2:67:5f:9a:d8:bd:dc:70:c7:1d:f1:9a:54:b4:1f: c7:37:04:a6 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUb3Ws7P5kcoZSgNj7jYAQacpHvyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjZaFw0yNjExMjcxMTQ5MjZaMDMxMTAvBgNV BAMTKEVCOTY4MDdFMkFFM0M0RThEMjQ3ODQyM0QyNjE1RjRFQzBCMTI0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEX0xdMYcB0aZ7/B9e/sqQhlu8 RC9yGDYz/Gu8+AeObbH2LINOnID6IalaxfQHLdvzdli9EZCZifNRr2XDuVdQ5H76 daWpj/e5+zkZBbbRlCh1Oidc8jtGyodMLQFDhaV8RgtVv35sqw96L3aFL3WzAbnw eFtLmXQLKpe3REEI45j3KOxqjxYQfS2x44g7we+yDyI40g+jBzlcbVeteZ9DB/Mh R+aIrlnQYj502kw7Ek8/PejsIt0ELNVpEjMq9rH4rdx3Sbxxtw7O56/veaUnB6Rx ZJZD6gUnppqzdtGFupnA0ZYI5krZ7wqTz6d9SQolND++P/afIu/Ait53hFobAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU65aAfirjxOjSR4Qj0mFfTsCxJJMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzAy ZTMxMzAzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgmgwDQYJKoZIhvcNAQELBQADggEBAKh8L8vp7MRwi1oLI/TCjMlAuWeW mBk1YaZKG7FLNPevufqpfPuK2UBdcOzOp+VOZ3GoKXBXKNGWsz7SDJ3sni0eBElc 9VmL2DGuGGRPOdB2Ch6pcQosL9q6wStj1/O1sjRw1MJ9Pwzjpmk8nJYe/LfiOSPq D46NbPJoxk2lDZhM1yzt3Ec3/m2Mz+hQzOx88m8PRDfppJZwku59kxJGhO2ePP23 M8aZRs0SQpCcGKJjRAc46nZrihGLH6W+zb0sZTiOS3hL2AzZ8z+CmD/dmkXlBSqa YfFWrnq+ZNqAUouiAJc/W/0mxK46g+zJwqJnX5rYvdxwxx3xmlS0H8c3BKY= -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:54 2025 by rpki-client