This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139342e302f32342d3332203d3e203531313637.roa File: 34352e3133372e3139342e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: +Vf7iZNHyUQUMSQNjY4x5Y05b/nGPW4S90XJcXXHY+8= Subject key identifier: A4:AA:FC:7B:01:06:BE:BA:04:1A:99:B8:F8:72:98:6C:36:4E:86:36 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6E12BD9E8612AAECE8BD8D4246A95987B1C508BC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139342e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 51167 IP address blocks: 45.137.194.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:12:bd:9e:86:12:aa:ec:e8:bd:8d:42:46:a9:59:87:b1:c5:08:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=A4AAFC7B0106BEBA041A99B8F872986C364E8636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:e3:40:be:73:07:83:e7:a1:39:95:51:f5: 0d:d2:2b:ba:a5:80:ae:1f:2d:62:83:0b:7f:63:80: 75:6f:e3:5a:e9:54:6d:77:ef:63:9e:9a:f0:9a:a7: 5d:13:84:37:bb:33:a5:dc:1c:ae:8f:b9:5b:95:54: 9a:48:d7:3e:07:e1:0d:97:30:a0:18:15:47:a3:7b: 2f:b3:b8:09:7a:df:63:d4:9c:e0:1f:7b:24:93:6e: 6b:23:d0:76:9b:e5:dd:94:50:ca:04:70:3c:68:9f: a4:51:d6:98:f5:6e:24:b1:eb:bb:a0:05:c0:37:b6: da:57:41:2d:c4:2b:3f:3f:66:db:10:ce:eb:af:d1: e1:af:9a:c3:a9:f0:ad:7b:73:f3:d5:74:7d:86:ca: 94:b2:fd:f9:8f:f9:d4:2a:9f:dd:89:a5:ae:86:02: 5b:53:54:1e:38:5c:1d:2a:65:f6:79:35:98:33:52: 36:26:22:4b:ce:08:bd:14:7c:a7:1c:c6:de:32:d7: c0:64:cc:39:b9:87:0a:45:b9:4b:b5:5b:94:76:97: 5f:0b:97:d2:32:0b:61:45:f0:7b:e8:a7:32:72:73: 95:a7:97:ef:d4:3f:09:09:78:2c:40:ec:d8:31:26: df:d4:02:2b:44:32:ca:7e:f1:54:23:da:43:79:e0: 47:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AA:FC:7B:01:06:BE:BA:04:1A:99:B8:F8:72:98:6C:36:4E:86:36 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139342e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.194.0/24 Signature Algorithm: sha256WithRSAEncryption d7:79:88:88:a2:35:fc:a3:fb:55:e6:08:26:77:f0:91:44:0b: 68:ec:07:9a:c8:b7:46:3f:b1:52:f4:8a:ca:fd:b5:f4:e4:98: 45:9b:da:d7:16:15:57:a1:a3:fa:32:0b:47:ac:ea:c0:4e:23: 3a:6a:d0:0c:e3:f3:35:45:26:70:1f:6a:34:60:d9:fd:76:0a: e0:f3:82:9c:a5:52:82:d1:24:92:8b:15:6e:31:77:3e:8d:ac: 60:8f:53:38:88:60:64:d1:f6:b4:c9:26:e8:43:0b:59:a8:eb: e5:42:89:0c:53:78:bf:ee:d0:e9:42:1f:9c:1d:51:1b:e1:80: 5d:1f:fb:63:2f:8c:92:1c:7c:5e:5c:a5:8f:ef:b7:e1:c8:c0: d8:93:2e:a2:b0:98:0a:59:5f:05:9f:68:bd:13:95:f3:93:dd: d7:d8:0a:e0:76:f6:f8:20:99:c2:67:b9:94:12:e2:5e:ed:23: 3a:7a:a8:3b:bc:c9:50:23:70:50:ec:21:b9:1d:2f:8e:7d:65: db:3a:9b:b4:2f:c8:11:fb:46:1d:78:a6:1e:73:f1:ff:cb:c3: 22:a8:58:11:36:d6:17:18:d9:71:cd:38:5c:23:d0:6a:7e:1b: 29:de:0f:6e:14:0f:7d:10:e5:cb:19:c5:94:67:72:89:d7:51: 11:c3:df:1f -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUbhK9noYSquzovY1CRqlZh7HFCLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKEE0QUFGQzdCMDEwNkJFQkEwNDFBOTlCOEY4NzI5ODZDMzY0RTg2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNONAvnMHg+ehOZVR9Q3SK7ql gK4fLWKDC39jgHVv41rpVG1372OemvCap10ThDe7M6XcHK6PuVuVVJpI1z4H4Q2X MKAYFUejey+zuAl632PUnOAfeySTbmsj0Hab5d2UUMoEcDxon6RR1pj1biSx67ug BcA3ttpXQS3EKz8/ZtsQzuuv0eGvmsOp8K17c/PVdH2GypSy/fmP+dQqn92Jpa6G AltTVB44XB0qZfZ5NZgzUjYmIkvOCL0UfKccxt4y18BkzDm5hwpFuUu1W5R2l18L l9IyC2FF8HvopzJyc5Wnl+/UPwkJeCxA7NgxJt/UAitEMsp+8VQj2kN54EfNAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUpKr8ewEGvroEGpm4+HKYbDZOhjYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzcy ZTMxMzkzNDJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAticIwDQYJKoZIhvcNAQELBQADggEBANd5iIiiNfyj+1XmCCZ38JFEC2js B5rIt0Y/sVL0isr9tfTkmEWb2tcWFVeho/oyC0es6sBOIzpq0Azj8zVFJnAfajRg 2f12CuDzgpylUoLRJJKLFW4xdz6NrGCPUziIYGTR9rTJJuhDC1mo6+VCiQxTeL/u 0OlCH5wdURvhgF0f+2MvjJIcfF5cpY/vt+HIwNiTLqKwmApZXwWfaL0TlfOT3dfY CuB29vggmcJnuZQS4l7tIzp6qDu8yVAjcFDsIbkdL459Zds6m7QvyBH7Rh14ph5z 8f/LwyKoWBE21hcY2XHNOFwj0Gp+GyneD24UD30Q5csZxZRnconXURHD3x8= -----END CERTIFICATE-----Generated at Sat Dec 6 16:57:06 2025 by rpki-client