This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32332e302f32342d3234203d3e20313336373837.roa File: 34352e3134312e32332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tkhwVWp064OO7Vby8XI/xyCuNKzbSvtbBqYCKji256M= Subject key identifier: DB:2B:AC:0A:6E:59:68:08:47:F1:A8:94:9E:E4:DE:38:2F:34:A4:E8 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 633D0BE87A2AA593C84E43D5B78DCC137DB2B4F8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 136787 IP address blocks: 45.141.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3d:0b:e8:7a:2a:a5:93:c8:4e:43:d5:b7:8d:cc:13:7d:b2:b4:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=DB2BAC0A6E59680847F1A8949EE4DE382F34A4E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6b:ba:eb:fb:9f:05:a7:84:d8:d0:24:01:63: a9:5b:4f:23:f8:92:88:84:aa:f9:7f:eb:ea:9e:df: dd:41:e8:5a:77:d9:f6:28:05:9c:68:88:57:fb:86: 6d:cf:77:45:7c:0f:a7:5f:0a:86:5e:12:77:40:1b: f1:82:de:0b:e9:93:b0:70:6c:a3:ab:af:eb:26:78: 40:8f:ce:2d:78:c1:0c:8e:44:98:fa:0a:ec:58:c1: 5d:fc:e8:c5:7c:45:5a:71:78:40:73:34:1e:8d:ba: 96:17:9a:80:d1:57:17:f9:e8:2b:68:13:32:46:5e: 01:ba:ce:0e:40:22:8b:25:e0:45:27:c6:5f:39:02: b9:34:68:b6:70:ce:9d:a0:bf:53:86:92:0f:0f:20: ea:12:f1:b7:b7:6a:7a:7a:c3:59:c2:98:23:b6:0d: 11:1c:3a:10:60:3d:c5:45:36:33:9a:a5:53:d7:cb: 59:99:f8:b6:ed:5b:fd:2f:c9:8e:a0:b8:39:3e:f1: ec:0f:e2:f9:b5:50:10:ee:f1:4d:d8:85:cb:60:52: 62:c4:0e:9e:26:0b:6f:b7:f5:ed:0e:1a:79:9b:de: 28:d6:c3:39:35:f0:39:63:b4:a9:8b:04:77:37:8d: 95:36:c8:2b:90:3b:2d:d0:d9:c4:a2:24:3c:1a:41: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2B:AC:0A:6E:59:68:08:47:F1:A8:94:9E:E4:DE:38:2F:34:A4:E8 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.23.0/24 Signature Algorithm: sha256WithRSAEncryption bb:dd:a4:39:d1:8b:97:ce:5d:23:4b:a9:be:df:c6:40:6c:68: c5:15:c5:ab:26:86:d6:82:f8:07:30:2f:cb:51:73:45:9d:0a: 1a:55:f0:e7:28:fb:c5:9d:86:ae:6e:6b:d3:90:25:1b:d2:c0: 40:37:20:ad:be:20:50:51:1d:6f:9d:c6:11:f1:cf:f7:bf:eb: bc:38:f9:2c:9f:f9:51:2d:ea:e2:81:17:52:9b:b2:43:7d:5f: ea:4f:55:1d:fe:d5:c1:5b:90:a7:c7:97:90:f2:a6:3e:0b:f1: 38:97:1a:69:61:11:3b:30:32:56:6c:f5:11:6b:6e:e4:1c:6d: f3:1c:ea:de:0f:50:5a:40:d4:58:8e:b9:11:3b:78:74:f2:03: eb:86:c6:ce:bf:cc:72:da:58:ba:33:e6:d9:24:87:78:6c:87: 1d:eb:18:77:72:e6:54:b5:4f:2c:50:95:e3:02:48:4b:8f:0d: da:fe:9e:9c:a6:2f:bf:ea:a3:70:74:a3:3a:c8:39:5f:52:31: 85:cd:36:2f:29:18:d8:1f:53:39:39:5d:64:bd:6a:c6:26:41: f9:79:23:97:62:06:f0:35:c7:7b:4d:51:6e:c8:16:94:1b:d2: 12:c8:7f:c6:37:00:4a:01:93:35:13:5b:71:86:af:b9:40:5b: 65:2d:77:62 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYz0L6HoqpZPITkPVt43ME32ytPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKERCMkJBQzBBNkU1OTY4MDg0N0YxQTg5NDlFRTRERTM4MkYzNEE0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5a7rr+58Fp4TY0CQBY6lbTyP4 koiEqvl/6+qe391B6Fp32fYoBZxoiFf7hm3Pd0V8D6dfCoZeEndAG/GC3gvpk7Bw bKOrr+smeECPzi14wQyORJj6CuxYwV386MV8RVpxeEBzNB6NupYXmoDRVxf56Cto EzJGXgG6zg5AIosl4EUnxl85Ark0aLZwzp2gv1OGkg8PIOoS8be3anp6w1nCmCO2 DREcOhBgPcVFNjOapVPXy1mZ+LbtW/0vyY6guDk+8ewP4vm1UBDu8U3YhctgUmLE Dp4mC2+39e0OGnmb3ijWwzk18DljtKmLBHc3jZU2yCuQOy3Q2cSiJDwaQWCnAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU2yusCm5ZaAhH8aiUnuTeOC80pOgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzEy ZTMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtjRcwDQYJKoZIhvcNAQELBQADggEBALvdpDnRi5fOXSNLqb7fxkBsaMUV xasmhtaC+AcwL8tRc0WdChpV8Oco+8Wdhq5ua9OQJRvSwEA3IK2+IFBRHW+dxhHx z/e/67w4+Syf+VEt6uKBF1KbskN9X+pPVR3+1cFbkKfHl5Dypj4L8TiXGmlhETsw MlZs9RFrbuQcbfMc6t4PUFpA1FiOuRE7eHTyA+uGxs6/zHLaWLoz5tkkh3hshx3r GHdy5lS1TyxQleMCSEuPDdr+npymL7/qo3B0ozrIOV9SMYXNNi8pGNgfUzk5XWS9 asYmQfl5I5diBvA1x3tNUW7IFpQb0hLIf8Y3AEoBkzUTW3GGr7lAW2Utd2I= -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:23 2025 by rpki-client