This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa File: 34352e3134302e3138352e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: EA4DvEYAtMdYDR4/a7fk+dlt2OHhYnTv0O4b/xf/BWI= Subject key identifier: 9E:48:F0:D3:66:CE:3C:79:03:31:40:17:2B:79:18:9E:C2:D6:F1:E2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1FA88BEFD13807421E4F85350CBBF8E1C469BB73 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:31 +0000 ROA not before: Fri 28 Nov 2025 11:44:31 +0000 ROA not after: Fri 27 Nov 2026 11:49:31 +0000 asID: 51167 IP address blocks: 45.140.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a8:8b:ef:d1:38:07:42:1e:4f:85:35:0c:bb:f8:e1:c4:69:bb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:31 2025 GMT Not After : Nov 27 11:49:31 2026 GMT Subject: CN=9E48F0D366CE3C79033140172B79189EC2D6F1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:b3:eb:55:35:81:67:5c:39:23:f7:03:a9: 4c:ee:16:dc:86:30:0c:77:83:bb:fd:99:54:d2:eb: 01:03:16:ca:09:d2:28:54:8d:e5:51:4a:33:94:d7: 85:e2:ca:c8:04:bf:25:3e:ff:34:e4:9c:96:7f:57: df:26:5c:1a:f8:7e:99:df:4f:2d:6b:cb:0e:88:04: 20:86:92:10:d1:a5:d8:e1:eb:ec:2b:42:2b:e6:fa: 2a:45:85:4e:5f:2d:19:4a:4b:01:dd:12:d5:20:00: 40:6a:d7:e2:3a:6f:dd:34:f3:d4:85:06:6a:3b:c5: 8a:58:b7:b9:43:9e:d5:51:e3:b9:36:5e:f4:05:9c: f2:f4:21:f0:3b:c4:a7:8b:cf:77:15:33:63:70:e0: 00:9e:ee:27:ff:76:d5:c4:3a:2c:f6:25:e2:0c:cc: 7f:3f:dd:a9:a3:9e:55:dc:e2:18:a9:e5:d9:ab:07: 0e:15:56:68:2a:bf:af:62:36:cd:8d:4b:a7:fa:12: ba:ec:00:9b:42:74:3e:1d:65:d8:92:9d:d6:14:4b: 65:43:7b:36:98:b4:7c:ea:4b:68:ac:08:25:69:f4: 52:3e:a1:f4:ea:38:2c:84:3d:eb:e2:83:32:44:71: a2:61:38:11:82:04:a8:f4:85:86:5f:fa:aa:61:3f: c7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:48:F0:D3:66:CE:3C:79:03:31:40:17:2B:79:18:9E:C2:D6:F1:E2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134302e3138352e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.185.0/24 Signature Algorithm: sha256WithRSAEncryption 62:de:86:e8:45:97:17:d0:db:fe:f0:8d:0c:d2:fa:1b:ec:bb: c0:5d:49:59:76:56:f5:33:28:b4:ec:0d:52:4e:ff:88:de:d3: b5:c7:7e:fe:25:dc:bc:0a:36:f5:18:4a:94:59:57:fc:bd:73: 68:53:8c:70:80:a0:71:4e:3c:cd:de:8d:e6:05:72:ac:29:fa: a0:a4:89:8b:1b:bf:b0:fb:bf:d9:f6:21:d9:ed:1e:38:dc:de: bd:6d:ad:e2:76:5e:bf:8d:cf:f9:8c:28:ff:d0:66:ae:a4:04: d2:19:ee:2d:b7:7e:3b:0b:f3:27:1e:81:3b:c8:0d:f2:47:86: da:8b:52:ad:33:03:ab:f5:96:2b:61:be:bd:4e:9f:de:af:de: 76:4e:76:f8:17:36:f3:36:bf:31:55:0c:59:6e:3e:5f:6f:21: be:45:b3:22:a9:18:04:bd:53:79:36:8f:a4:fc:18:72:73:3a: ac:12:35:69:f7:c0:33:66:b0:8d:6a:95:9e:65:9a:1c:cb:60: 31:27:6d:51:a0:4a:32:38:3e:41:4f:96:e7:6e:6a:6d:86:34: 12:a3:4c:a0:51:97:f1:f8:76:16:88:2b:3c:91:19:6e:43:c2: 3c:f3:9b:e7:de:8a:c6:0a:29:5c:42:9e:cf:36:27:bd:51:0f: ee:af:5c:d1 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUH6iL79E4B0IeT4U1DLv44cRpu3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzFaFw0yNjExMjcxMTQ5MzFaMDMxMTAvBgNV BAMTKDlFNDhGMEQzNjZDRTNDNzkwMzMxNDAxNzJCNzkxODlFQzJENkYxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIA7PrVTWBZ1w5I/cDqUzuFtyG MAx3g7v9mVTS6wEDFsoJ0ihUjeVRSjOU14XiysgEvyU+/zTknJZ/V98mXBr4fpnf Ty1ryw6IBCCGkhDRpdjh6+wrQivm+ipFhU5fLRlKSwHdEtUgAEBq1+I6b90089SF Bmo7xYpYt7lDntVR47k2XvQFnPL0IfA7xKeLz3cVM2Nw4ACe7if/dtXEOiz2JeIM zH8/3amjnlXc4hip5dmrBw4VVmgqv69iNs2NS6f6ErrsAJtCdD4dZdiSndYUS2VD ezaYtHzqS2isCCVp9FI+ofTqOCyEPevigzJEcaJhOBGCBKj0hYZf+qphP8fRAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUnkjw02bOPHkDMUAXK3kYnsLW8eIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzAy ZTMxMzgzNTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtjLkwDQYJKoZIhvcNAQELBQADggEBAGLehuhFlxfQ2/7wjQzS+hvsu8Bd SVl2VvUzKLTsDVJO/4je07XHfv4l3LwKNvUYSpRZV/y9c2hTjHCAoHFOPM3ejeYF cqwp+qCkiYsbv7D7v9n2IdntHjjc3r1treJ2Xr+Nz/mMKP/QZq6kBNIZ7i23fjsL 8ycegTvIDfJHhtqLUq0zA6v1lithvr1On96v3nZOdvgXNvM2vzFVDFluPl9vIb5F syKpGAS9U3k2j6T8GHJzOqwSNWn3wDNmsI1qlZ5lmhzLYDEnbVGgSjI4PkFPludu am2GNBKjTKBRl/H4dhaIKzyRGW5Dwjzzm+feisYKKVxCns82J71RD+6vXNE= -----END CERTIFICATE-----Generated at Sat Dec 6 12:57:22 2025 by rpki-client