This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa File: 34352e3133302e3130372e302f32342d3332203d3e203536383736.roa (raw, json) Hash identifier: TJp/49r7wXHrAKiwdJLcJCWPX9OVGAJZJrnUika0mxo= Subject key identifier: 67:30:93:AA:D9:A4:3B:DE:44:D8:B0:3D:0A:90:2F:CE:CA:71:D8:F3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1AA6C5C10849E31436FC28D8CBEBA89A92D9F14C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa Signing time: Fri 28 Nov 2025 11:49:15 +0000 ROA not before: Fri 28 Nov 2025 11:44:15 +0000 ROA not after: Fri 27 Nov 2026 11:49:15 +0000 asID: 56876 IP address blocks: 45.130.107.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:a6:c5:c1:08:49:e3:14:36:fc:28:d8:cb:eb:a8:9a:92:d9:f1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:15 2025 GMT Not After : Nov 27 11:49:15 2026 GMT Subject: CN=673093AAD9A43BDE44D8B03D0A902FCECA71D8F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:5b:12:62:c4:cb:58:75:38:1a:c7:59:b9: fe:37:52:2f:5d:d0:f6:3d:ac:10:e2:29:b5:86:75: d7:7b:6c:0b:41:4f:df:41:52:17:ae:da:f3:b1:3b: 4d:bd:0e:55:16:1c:9d:8e:3c:cf:19:c4:5a:d9:a5: 14:08:b1:ac:02:15:df:a1:fd:43:cb:85:79:34:1a: 98:f1:76:f6:61:ea:72:0b:48:da:66:df:e6:d6:e8: c7:ca:84:be:2b:2c:46:3a:80:1b:7b:26:cb:25:1d: 36:91:83:b7:0e:16:6f:91:39:31:b5:b1:c7:fc:bd: b3:f1:f9:64:e6:bb:56:68:b5:85:aa:71:28:e1:64: 2d:28:7e:32:b0:4f:bf:cb:8b:17:10:d4:57:4b:54: 86:19:27:99:69:11:2c:15:d5:5e:f3:0c:3b:4e:b1: ac:bc:7a:45:6e:a2:5c:8e:49:5c:fa:a3:a9:d0:4d: 60:00:7f:63:a1:74:78:b1:3b:99:e6:ac:40:7c:ed: 43:d6:93:43:36:d9:51:d6:c1:52:fb:4c:89:6a:d9: 30:18:57:a4:31:be:40:f6:9d:ba:19:49:43:ed:6e: 36:d4:8c:1c:c8:86:35:00:83:95:87:bb:cd:09:28: 44:27:26:74:58:ba:6a:20:27:8e:af:95:92:b9:70: f1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:30:93:AA:D9:A4:3B:DE:44:D8:B0:3D:0A:90:2F:CE:CA:71:D8:F3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130372e302f32342d3332203d3e203536383736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.107.0/24 Signature Algorithm: sha256WithRSAEncryption 00:cb:24:0b:b0:0d:cd:32:24:4f:35:f5:eb:1f:a2:f5:88:17: 1e:fe:3a:80:65:86:ff:f9:67:db:a4:00:1f:4b:82:ad:46:1c: e5:22:cc:54:75:79:0c:23:2a:bf:83:a8:47:0c:ca:49:bc:81: 0b:01:f0:cf:39:d1:c8:18:87:f5:c6:ed:1b:a9:af:ba:d7:fa: 6c:f3:a1:0a:7f:76:8b:18:4a:b4:93:95:dd:1e:40:fb:76:4a: 5d:3a:75:85:7c:1b:1a:b8:a0:5c:0a:01:52:96:08:54:d2:00: 7c:76:87:02:b2:f5:91:24:71:dc:4c:0d:36:0b:98:ad:17:7f: 99:0c:51:e4:90:07:57:5f:d1:db:c4:a5:9b:b8:2a:6c:8a:b6: c9:23:fc:2e:6e:7c:14:dd:20:e7:e2:30:f6:e3:3a:45:2a:fc: ea:68:23:bb:68:14:c6:2f:63:7f:6d:43:4c:ea:ac:75:7c:93: 85:e9:4c:0a:ee:71:48:4f:b0:7f:7a:21:09:62:46:9f:ed:f8: 9d:bc:4a:2a:f5:2f:80:1a:81:33:00:8f:cb:0e:d3:e8:a2:b9: ab:29:a1:a1:16:81:72:57:15:d3:9c:e8:cd:21:83:26:d9:de: ff:20:e9:55:ff:19:68:41:1f:c3:8e:c3:33:e6:de:61:ca:0f: ea:1b:43:5e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUGqbFwQhJ4xQ2/CjYy+uompLZ8UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTVaFw0yNjExMjcxMTQ5MTVaMDMxMTAvBgNV BAMTKDY3MzA5M0FBRDlBNDNCREU0NEQ4QjAzRDBBOTAyRkNFQ0E3MUQ4RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpxFsSYsTLWHU4GsdZuf43Ui9d 0PY9rBDiKbWGddd7bAtBT99BUheu2vOxO029DlUWHJ2OPM8ZxFrZpRQIsawCFd+h /UPLhXk0GpjxdvZh6nILSNpm3+bW6MfKhL4rLEY6gBt7JsslHTaRg7cOFm+ROTG1 scf8vbPx+WTmu1ZotYWqcSjhZC0ofjKwT7/LixcQ1FdLVIYZJ5lpESwV1V7zDDtO say8ekVuolyOSVz6o6nQTWAAf2OhdHixO5nmrEB87UPWk0M22VHWwVL7TIlq2TAY V6QxvkD2nboZSUPtbjbUjBzIhjUAg5WHu80JKEQnJnRYumogJ46vlZK5cPGPAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUZzCTqtmkO95E2LA9CpAvzspx2PMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzAy ZTMxMzAzNzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzYzODM3MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgmswDQYJKoZIhvcNAQELBQADggEBAADLJAuwDc0yJE819esfovWIFx7+ OoBlhv/5Z9ukAB9Lgq1GHOUizFR1eQwjKr+DqEcMykm8gQsB8M850cgYh/XG7Rup r7rX+mzzoQp/dosYSrSTld0eQPt2Sl06dYV8Gxq4oFwKAVKWCFTSAHx2hwKy9ZEk cdxMDTYLmK0Xf5kMUeSQB1df0dvEpZu4KmyKtskj/C5ufBTdIOfiMPbjOkUq/Opo I7toFMYvY39tQ0zqrHV8k4XpTArucUhPsH96IQliRp/t+J28Sir1L4AagTMAj8sO 0+iiuaspoaEWgXJXFdOc6M0hgybZ3v8g6VX/GWhBH8OOwzPm3mHKD+obQ14= -----END CERTIFICATE-----Generated at Sun Dec 7 00:31:43 2025 by rpki-client