This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa File: 34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: jrmuNKgyNetO5afVW86BoKVxW9peGOKdjcuIf4Z5LsU= Subject key identifier: 25:93:50:13:E5:B0:78:D4:7F:F3:D2:30:36:B9:92:BE:71:58:2E:D6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3552142227BBF32DACF6A0013506D12736D94079 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 136787 IP address blocks: 45.140.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:52:14:22:27:bb:f3:2d:ac:f6:a0:01:35:06:d1:27:36:d9:40:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=25935013E5B078D47FF3D23036B992BE71582ED6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:59:1a:16:b8:78:db:25:42:94:92:53:3e:c6: b4:08:0f:71:e0:53:ba:a3:ea:c0:aa:8d:6e:66:1d: e3:4d:f5:65:2f:17:75:44:e5:79:8b:ab:44:8d:f9: 34:9c:b8:4f:7b:7e:c8:ac:26:0f:b5:d8:ef:08:e7: a5:eb:e9:7f:39:e2:98:60:09:07:81:69:bd:73:7e: 66:ff:42:35:3a:41:b3:79:8a:ea:26:46:f5:c4:f8: 82:96:c4:24:96:ae:9f:aa:e8:db:f0:9d:db:c9:4d: 63:1a:11:02:9d:ef:3e:7c:54:a6:f4:fe:e2:bd:0a: 51:bb:23:06:a4:86:85:32:8f:3b:28:0e:d6:00:0e: 95:ed:f3:24:58:90:37:64:5b:ed:44:c1:36:16:f6: 02:ec:c0:85:14:94:71:fc:47:6e:51:71:09:fd:24: a2:32:1e:01:3c:ff:1e:2d:92:5e:37:7d:60:7f:db: 6a:4c:20:60:28:a4:1b:79:86:d9:ef:71:54:e0:4f: a9:77:3f:86:74:4d:4f:44:f2:39:d5:97:85:cc:03: 9f:9b:83:cd:b2:63:e9:00:7b:b9:30:42:1d:ea:57: 43:bf:a5:38:d9:ab:0b:5a:bf:45:88:27:44:62:45: 37:d4:5c:7a:bc:db:36:fe:e6:80:6d:d4:55:5b:49: 0b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:93:50:13:E5:B0:78:D4:7F:F3:D2:30:36:B9:92:BE:71:58:2E:D6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.184.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:01:71:28:c0:5d:ab:09:b7:d2:e7:0c:94:ce:bd:0b:04:f3: d1:a5:4c:aa:61:57:4e:8f:d3:68:4c:58:48:8e:0f:2c:7e:91: 7b:5d:39:fa:77:01:98:ff:97:a1:b4:0d:8e:67:a4:fb:23:d4: c7:83:7a:2e:05:a8:8a:4d:c7:5e:be:9b:1a:e7:0c:60:90:c3: 31:b4:c4:d4:28:6c:44:b6:0b:6d:d5:5e:35:91:f4:30:8d:bc: 22:4f:00:18:64:84:90:55:1b:f8:f4:58:18:52:36:3f:45:68: 79:c7:ca:0d:fc:cc:d8:32:28:82:9d:7e:f5:9b:53:30:f8:f7: a1:f6:bd:88:20:4c:44:18:3e:11:56:e7:ce:14:f8:99:ed:13: cc:9a:b0:c1:b3:c8:cb:6c:92:f8:15:50:f3:05:10:72:a5:3d: c1:c6:a1:14:eb:be:77:0b:15:44:a5:15:70:44:c7:87:b4:1e: 06:40:51:6a:fb:9c:7c:af:a0:0e:3a:aa:9a:86:57:a0:36:3a: 0d:c6:75:d9:6a:a9:70:75:01:f4:44:f0:be:03:ce:c6:3a:13: 9b:20:d9:69:96:2f:68:07:c2:8a:3e:8c:a7:b2:b0:44:18:eb: 7a:96:cb:64:e5:21:d3:d4:85:7e:fa:1a:3d:1b:7d:23:aa:83: da:8a:13:6d -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNVIUIie78y2s9qABNQbRJzbZQHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKDI1OTM1MDEzRTVCMDc4RDQ3RkYzRDIzMDM2Qjk5MkJFNzE1ODJFRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZWRoWuHjbJUKUklM+xrQID3Hg U7qj6sCqjW5mHeNN9WUvF3VE5XmLq0SN+TScuE97fsisJg+12O8I56Xr6X854phg CQeBab1zfmb/QjU6QbN5iuomRvXE+IKWxCSWrp+q6NvwndvJTWMaEQKd7z58VKb0 /uK9ClG7IwakhoUyjzsoDtYADpXt8yRYkDdkW+1EwTYW9gLswIUUlHH8R25RcQn9 JKIyHgE8/x4tkl43fWB/22pMIGAopBt5htnvcVTgT6l3P4Z0TU9E8jnVl4XMA5+b g82yY+kAe7kwQh3qV0O/pTjZqwtav0WIJ0RiRTfUXHq82zb+5oBt1FVbSQsvAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUJZNQE+WweNR/89IwNrmSvnFYLtYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzAy ZTMxMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2MuDANBgkqhkiG9w0BAQsFAAOCAQEAnAFxKMBdqwm30ucMlM69CwTz 0aVMqmFXTo/TaExYSI4PLH6Re105+ncBmP+XobQNjmek+yPUx4N6LgWoik3HXr6b GucMYJDDMbTE1ChsRLYLbdVeNZH0MI28Ik8AGGSEkFUb+PRYGFI2P0VoecfKDfzM 2DIogp1+9ZtTMPj3ofa9iCBMRBg+EVbnzhT4me0TzJqwwbPIy2yS+BVQ8wUQcqU9 wcahFOu+dwsVRKUVcETHh7QeBkBRavucfK+gDjqqmoZXoDY6DcZ12WqpcHUB9ETw vgPOxjoTmyDZaZYvaAfCij6Mp7KwRBjrepbLZOUh09SFfvoaPRt9I6qD2ooTbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:49 2025 by rpki-client