This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa File: 34352e3133342e3232362e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: mjDINZ3rRZHarXms83I+UPDGd54ktrbb7pGeCHEuIlQ= Subject key identifier: 47:90:8B:92:04:99:48:8F:85:96:AE:42:BB:E0:BD:8D:8F:46:F5:1D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4CD5CC3314F6B237AC17ECE5F757DEFF16CFF34A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:26 +0000 ROA not before: Fri 28 Nov 2025 11:44:26 +0000 ROA not after: Fri 27 Nov 2026 11:49:26 +0000 asID: 51167 IP address blocks: 45.134.226.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:d5:cc:33:14:f6:b2:37:ac:17:ec:e5:f7:57:de:ff:16:cf:f3:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:26 2025 GMT Not After : Nov 27 11:49:26 2026 GMT Subject: CN=47908B920499488F8596AE42BBE0BD8D8F46F51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:80:b7:47:5f:26:94:10:f1:ff:51:81:fa:ae: 9b:17:f7:49:03:45:27:66:e9:5c:ae:7f:a5:87:ee: ec:db:fe:f9:08:c5:e3:f0:ff:54:0f:7d:57:b5:3b: 62:80:e7:12:af:13:04:62:01:9c:2d:36:d6:4f:66: 35:4f:b0:2b:6c:97:a9:87:36:87:ee:e5:59:19:10: f1:9c:0b:37:8e:fa:56:71:3f:f5:68:0b:c3:08:d6: 2c:eb:e4:31:87:18:d8:96:d6:18:6d:30:a2:8e:ec: a4:a5:02:4f:7b:46:e9:12:3c:77:76:73:23:3e:f9: d8:15:06:dc:28:d8:52:24:e5:54:28:4b:71:07:e5: 59:17:1c:83:6c:39:bd:cb:8d:a1:44:aa:d6:c9:17: 2b:0c:00:a7:5a:63:32:f6:8b:d1:23:71:86:21:09: 97:1e:0e:03:76:cb:bf:5c:2c:27:e2:1a:e9:9a:1c: 01:68:c1:23:42:ac:f4:67:df:fd:e1:2f:17:d2:c7: b8:c9:fb:d9:ca:18:80:2e:8d:cb:e4:a0:10:42:83: 6c:91:3c:85:c7:ff:a6:ce:a5:8c:8c:a7:38:ad:df: 3c:29:96:bc:e3:19:1d:d7:e8:46:1d:b1:ac:49:65: c2:06:db:de:c1:0c:12:f6:a9:c8:17:6e:a6:60:8f: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:8B:92:04:99:48:8F:85:96:AE:42:BB:E0:BD:8D:8F:46:F5:1D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232362e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.226.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:4b:4e:3a:43:5f:27:10:b6:44:7d:b6:e3:b9:77:15:cd:55: fc:17:44:f4:a8:4d:b8:a9:65:54:f5:93:81:74:3a:8e:8e:ed: 01:42:c3:51:3a:2a:8e:19:42:4e:b7:44:13:48:94:f3:7d:e2: 64:0e:12:a7:24:80:f8:24:43:42:97:a1:79:b4:3f:07:db:8b: ac:c8:d9:3f:dc:4d:8a:4c:62:88:ff:e7:dc:02:ef:f5:c9:ac: e6:46:26:3d:d8:b0:59:80:8c:7a:48:1d:68:eb:08:56:ff:ce: 6e:f0:97:22:e2:2c:d7:5a:7f:a4:7b:85:5a:a4:95:a7:81:e7: 2e:65:48:00:ad:56:15:2f:94:96:bc:93:88:4d:fb:58:73:13: 40:30:7d:28:af:12:14:e0:9d:48:c6:c6:10:9c:74:b8:3f:42: ca:e4:70:ac:54:07:0d:99:12:db:46:ad:a8:8f:2b:06:f8:26: 53:4a:fa:23:5f:d0:37:2e:9d:a0:5c:ec:21:45:aa:6f:96:9c: 1b:7e:31:e3:7a:e2:24:b9:ba:77:8e:54:bf:ca:94:fd:57:6d: 8a:03:d0:d0:d0:6a:3c:53:24:4a:7c:28:dc:5e:a6:40:76:65: 81:5a:0c:a6:07:a9:5d:8a:a9:50:e6:42:7d:2d:cb:9d:9b:9e: 50:c6:96:47 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUTNXMMxT2sjesF+zl91fe/xbP80owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjZaFw0yNjExMjcxMTQ5MjZaMDMxMTAvBgNV BAMTKDQ3OTA4QjkyMDQ5OTQ4OEY4NTk2QUU0MkJCRTBCRDhEOEY0NkY1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1gLdHXyaUEPH/UYH6rpsX90kD RSdm6Vyuf6WH7uzb/vkIxePw/1QPfVe1O2KA5xKvEwRiAZwtNtZPZjVPsCtsl6mH Nofu5VkZEPGcCzeO+lZxP/VoC8MI1izr5DGHGNiW1hhtMKKO7KSlAk97RukSPHd2 cyM++dgVBtwo2FIk5VQoS3EH5VkXHINsOb3LjaFEqtbJFysMAKdaYzL2i9EjcYYh CZceDgN2y79cLCfiGumaHAFowSNCrPRn3/3hLxfSx7jJ+9nKGIAujcvkoBBCg2yR PIXH/6bOpYyMpzit3zwplrzjGR3X6EYdsaxJZcIG297BDBL2qcgXbqZgj81jAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUR5CLkgSZSI+Flq5Cu+C9jY9G9R0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzQy ZTMyMzIzNjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAthuIwDQYJKoZIhvcNAQELBQADggEBAJ1LTjpDXycQtkR9tuO5dxXNVfwX RPSoTbipZVT1k4F0Oo6O7QFCw1E6Ko4ZQk63RBNIlPN94mQOEqckgPgkQ0KXoXm0 Pwfbi6zI2T/cTYpMYoj/59wC7/XJrOZGJj3YsFmAjHpIHWjrCFb/zm7wlyLiLNda f6R7hVqklaeB5y5lSACtVhUvlJa8k4hN+1hzE0AwfSivEhTgnUjGxhCcdLg/Qsrk cKxUBw2ZEttGraiPKwb4JlNK+iNf0DcunaBc7CFFqm+WnBt+MeN64iS5uneOVL/K lP1XbYoD0NDQajxTJEp8KNxepkB2ZYFaDKYHqV2KqVDmQn0ty52bnlDGlkc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:50:14 2025 by rpki-client