This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa File: 34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: G4xuEeFmUnyJk05OYxnbLtXMKaeFgJpzJJy2eDeesMs= Subject key identifier: DE:06:47:13:9E:9F:D7:73:25:A9:42:59:B5:07:53:CC:F2:A1:8B:7D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 599B9B3AF94B5495E33CE832E9D04F27CF03AA85 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:27 +0000 ROA not before: Fri 28 Nov 2025 11:44:27 +0000 ROA not after: Fri 27 Nov 2026 11:49:27 +0000 asID: 136787 IP address blocks: 45.132.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:9b:9b:3a:f9:4b:54:95:e3:3c:e8:32:e9:d0:4f:27:cf:03:aa:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:27 2025 GMT Not After : Nov 27 11:49:27 2026 GMT Subject: CN=DE0647139E9FD77325A94259B50753CCF2A18B7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4d:45:9e:57:7b:a5:cf:1e:b4:a7:da:bb:dc: b9:1e:06:50:52:24:75:0e:8f:89:92:82:50:2a:fd: 06:62:77:66:7e:aa:93:65:1c:64:e4:56:4f:1c:3b: c6:21:7e:54:83:41:8d:0f:e0:5d:93:70:98:57:38: 13:07:22:85:e6:6c:db:01:10:68:31:0e:c7:20:2b: 91:53:7d:a2:3b:fa:3f:06:31:d8:61:78:0f:05:a3: be:6b:93:9a:b4:21:f6:54:4e:1b:87:c1:3e:1b:82: ca:c9:e6:65:d9:da:61:4d:57:12:e9:55:20:8d:9a: 70:09:c9:32:f7:f0:7c:0f:ae:8a:f0:89:f1:ff:3a: 4b:53:b5:0b:00:42:a5:28:2c:af:69:0a:d1:d9:85: 08:1e:ba:a3:a1:0b:c3:36:51:06:e1:c3:c1:4d:3a: 35:78:56:a1:93:bf:0e:48:c4:21:32:53:6d:c8:53: eb:f5:28:90:b0:17:64:6c:b4:67:7d:91:28:72:83: 0c:b1:af:e5:3b:03:77:e9:18:e3:9a:a5:ed:09:e4: 77:0b:65:ae:18:fa:41:10:86:5d:61:ea:ce:8e:89: 7b:28:61:1c:f4:cf:4f:3c:4e:c3:df:28:4b:36:c5: fd:8e:13:bc:d3:81:cb:12:89:a0:78:43:57:fa:83: 32:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:06:47:13:9E:9F:D7:73:25:A9:42:59:B5:07:53:CC:F2:A1:8B:7D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.156.0/24 Signature Algorithm: sha256WithRSAEncryption 17:f6:a1:8d:38:15:72:42:a4:b0:a9:a3:25:ec:6e:41:95:3a: d4:e4:2e:c0:ae:13:fe:3a:54:8b:28:e3:35:35:a0:31:98:d0: 7e:59:40:89:03:41:e4:f5:9c:5d:4c:3f:09:57:03:1b:c3:2f: 0e:91:96:c9:37:f6:a6:95:dd:14:52:dc:cc:da:76:d0:22:f4: b1:f7:00:27:21:55:51:50:91:51:fd:2e:1b:12:3e:77:23:c6: 3d:5e:79:19:7a:bd:c8:5f:39:5f:28:cd:58:39:8a:87:e2:66: ac:6a:a0:49:85:e7:db:01:43:24:ba:b6:78:e7:26:de:04:c8: 03:a2:f6:00:2c:da:79:43:41:83:60:63:0c:43:25:f0:e8:3a: a7:08:d0:ab:82:b1:09:1e:24:85:de:c3:fb:93:15:6a:00:da: 4c:01:f0:8a:9f:55:ae:b2:a8:88:38:89:3f:cb:10:cf:db:f5: be:4d:2d:53:f8:68:30:7a:dd:b4:fa:9d:9b:6c:05:cf:02:7b: bb:a1:33:09:8c:78:28:13:9e:c0:ae:a0:55:24:6b:02:30:b0: 94:dc:17:6c:16:10:b3:38:3c:63:de:f9:16:bd:9c:2b:5c:0a: 28:bf:f7:44:80:e5:6e:88:6f:9a:db:cd:09:f2:bb:84:44:c8: d2:28:2a:ba -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUWZubOvlLVJXjPOgy6dBPJ88DqoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjdaFw0yNjExMjcxMTQ5MjdaMDMxMTAvBgNV BAMTKERFMDY0NzEzOUU5RkQ3NzMyNUE5NDI1OUI1MDc1M0NDRjJBMThCN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTUWeV3ulzx60p9q73LkeBlBS JHUOj4mSglAq/QZid2Z+qpNlHGTkVk8cO8YhflSDQY0P4F2TcJhXOBMHIoXmbNsB EGgxDscgK5FTfaI7+j8GMdhheA8Fo75rk5q0IfZUThuHwT4bgsrJ5mXZ2mFNVxLp VSCNmnAJyTL38HwProrwifH/OktTtQsAQqUoLK9pCtHZhQgeuqOhC8M2UQbhw8FN OjV4VqGTvw5IxCEyU23IU+v1KJCwF2RstGd9kShygwyxr+U7A3fpGOOape0J5HcL Za4Y+kEQhl1h6s6OiXsoYRz0z088TsPfKEs2xf2OE7zTgcsSiaB4Q1f6gzLrAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU3gZHE56f13MlqUJZtQdTzPKhi30wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzIy ZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2EnDANBgkqhkiG9w0BAQsFAAOCAQEAF/ahjTgVckKksKmjJexuQZU6 1OQuwK4T/jpUiyjjNTWgMZjQfllAiQNB5PWcXUw/CVcDG8MvDpGWyTf2ppXdFFLc zNp20CL0sfcAJyFVUVCRUf0uGxI+dyPGPV55GXq9yF85XyjNWDmKh+JmrGqgSYXn 2wFDJLq2eOcm3gTIA6L2ACzaeUNBg2BjDEMl8Og6pwjQq4KxCR4khd7D+5MVagDa TAHwip9VrrKoiDiJP8sQz9v1vk0tU/hoMHrdtPqdm2wFzwJ7u6EzCYx4KBOewK6g VSRrAjCwlNwXbBYQszg8Y975Fr2cK1wKKL/3RIDlbohvmtvNCfK7hETI0igqug== -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:22 2025 by rpki-client