This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139322e302f32342d3332203d3e203531313637.roa File: 34352e3133372e3139322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: t5t5y8NIIogBVEiCPwnl7fS8EHcc0L9kPE7mFOf3WBY= Subject key identifier: F6:77:DD:4D:78:B5:25:A5:67:E4:EA:AA:75:E0:6B:D1:2F:43:52:DC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 036AEEC2A1A52799A09C9D703FC251E0C288E85A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139322e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:46 +0000 ROA not before: Fri 28 Nov 2025 11:44:46 +0000 ROA not after: Fri 27 Nov 2026 11:49:46 +0000 asID: 51167 IP address blocks: 45.137.192.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:6a:ee:c2:a1:a5:27:99:a0:9c:9d:70:3f:c2:51:e0:c2:88:e8:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:46 2025 GMT Not After : Nov 27 11:49:46 2026 GMT Subject: CN=F677DD4D78B525A567E4EAAA75E06BD12F4352DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:39:da:7a:be:72:96:1c:c4:97:3d:73:85:5d: 58:e7:f0:2e:e6:ca:ad:0c:f6:ee:ca:99:dc:d7:41: c8:9a:23:17:a8:35:39:58:f3:08:e7:cc:9a:9b:e6: e4:02:5e:08:db:b8:b3:c1:c1:c8:01:51:02:a1:a8: 0b:46:f7:9f:13:62:24:af:5f:a8:f1:cb:16:8d:f4: 4f:e2:f1:14:1e:df:1b:c0:08:40:af:43:9a:f4:8d: 8e:9d:3a:ec:53:65:c2:d4:8b:de:53:b2:d9:48:7d: 13:8f:3e:4c:bf:be:52:4d:8b:ea:a8:f7:1d:a7:84: 49:8b:8e:cf:b2:3b:5a:4b:60:24:09:a1:b8:20:cb: e5:07:f7:df:f6:2b:bc:5f:fd:40:b7:16:d6:e0:e1: 6b:19:89:69:9e:8e:43:f5:ca:88:26:e8:b8:5c:b4: 63:c2:eb:aa:07:d1:f9:7b:63:ab:04:97:ba:5e:71: 52:5d:ed:0a:1c:e5:bf:f4:ca:2a:b8:2e:7e:53:a0: 94:74:ad:3b:a3:1e:21:58:25:e0:f8:6e:4d:75:ea: 29:82:b7:f6:1d:1b:64:5a:1d:fc:45:f0:f9:74:57: d0:fd:7a:ec:9b:d8:40:d0:f8:1c:86:0a:1e:31:ae: e4:31:28:92:9e:2d:9e:3a:87:b0:17:47:a6:b6:96: a9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:77:DD:4D:78:B5:25:A5:67:E4:EA:AA:75:E0:6B:D1:2F:43:52:DC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.192.0/24 Signature Algorithm: sha256WithRSAEncryption ca:f4:c4:1a:94:cb:86:6f:3f:42:df:ba:a4:91:38:33:fb:b0: 94:24:2c:59:0f:bb:6f:4c:87:bc:4a:d1:fc:4e:d0:17:31:11: 86:1e:43:2b:84:74:93:70:34:a9:31:5d:d1:3f:13:a8:2f:55: 74:09:0d:18:0e:f4:f0:40:72:58:1f:fb:f5:d0:8e:29:f0:46: bf:62:86:26:f7:54:5e:71:7d:16:bd:6f:5d:ce:ba:6c:9f:d4: 52:ab:6b:ee:ec:ed:6d:50:20:39:70:38:0d:e8:c6:05:4c:fe: 69:ee:81:1a:2f:b4:7e:f8:90:bb:82:95:97:f8:f8:c8:c9:04: ac:76:54:a7:03:0c:32:23:c7:6b:84:b4:b2:55:17:1a:6c:c1: fb:ce:7e:56:f5:8a:93:40:64:7e:8b:92:ec:dd:7f:4e:a5:dd: b5:0c:1a:fb:f1:6a:d6:82:bf:45:8f:df:4a:6f:fb:62:16:d2: cb:b9:f3:83:a7:6c:ec:b1:e9:31:74:6c:f5:45:bf:ea:a6:0b: 58:38:38:d5:d1:6e:20:a8:f2:6a:b4:0c:1f:d6:dd:ef:8a:c3: 59:a4:2e:e0:a1:d8:fd:87:11:23:06:55:55:67:92:9b:1d:32: 32:81:47:66:ca:5c:bd:c8:d8:87:74:a5:a0:40:50:49:59:b1: 6e:1e:84:ea -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUA2ruwqGlJ5mgnJ1wP8JR4MKI6FowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDZaFw0yNjExMjcxMTQ5NDZaMDMxMTAvBgNV BAMTKEY2NzdERDRENzhCNTI1QTU2N0U0RUFBQTc1RTA2QkQxMkY0MzUyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrOdp6vnKWHMSXPXOFXVjn8C7m yq0M9u7KmdzXQciaIxeoNTlY8wjnzJqb5uQCXgjbuLPBwcgBUQKhqAtG958TYiSv X6jxyxaN9E/i8RQe3xvACECvQ5r0jY6dOuxTZcLUi95TstlIfROPPky/vlJNi+qo 9x2nhEmLjs+yO1pLYCQJobggy+UH99/2K7xf/UC3Ftbg4WsZiWmejkP1yogm6Lhc tGPC66oH0fl7Y6sEl7pecVJd7Qoc5b/0yiq4Ln5ToJR0rTujHiFYJeD4bk116imC t/YdG2RaHfxF8Pl0V9D9euyb2EDQ+ByGCh4xruQxKJKeLZ46h7AXR6a2lqk5AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU9nfdTXi1JaVn5OqqdeBr0S9DUtwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzcy ZTMxMzkzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAticAwDQYJKoZIhvcNAQELBQADggEBAMr0xBqUy4ZvP0LfuqSRODP7sJQk LFkPu29Mh7xK0fxO0BcxEYYeQyuEdJNwNKkxXdE/E6gvVXQJDRgO9PBAclgf+/XQ jinwRr9ihib3VF5xfRa9b13Oumyf1FKra+7s7W1QIDlwOA3oxgVM/mnugRovtH74 kLuClZf4+MjJBKx2VKcDDDIjx2uEtLJVFxpswfvOflb1ipNAZH6Lkuzdf06l3bUM GvvxataCv0WP30pv+2IW0su584OnbOyx6TF0bPVFv+qmC1g4ONXRbiCo8mq0DB/W 3e+Kw1mkLuCh2P2HESMGVVVnkpsdMjKBR2bKXL3I2Id0paBAUElZsW4ehOo= -----END CERTIFICATE-----Generated at Sat Dec 6 17:51:25 2025 by rpki-client