This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa File: 34352e3134332e38322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tZRVuKlzodVDzZVvr9GXkI55hTGxSPdcyhl6Z9dTH/o= Subject key identifier: D8:3A:61:67:A3:65:5E:29:4F:6E:C9:2A:12:B3:AC:8C:30:E2:25:02 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 43CEA14B2F5EB997665EA81BE89EF0EE7701BEEE Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 136787 IP address blocks: 45.143.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:ce:a1:4b:2f:5e:b9:97:66:5e:a8:1b:e8:9e:f0:ee:77:01:be:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=D83A6167A3655E294F6EC92A12B3AC8C30E22502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:d0:1f:25:73:88:7d:a9:fb:80:1b:b8:33: 25:6e:fc:6d:63:76:71:4d:5b:84:0c:57:1b:73:50: 95:13:ed:fa:c7:51:2d:4b:f6:e5:d1:b3:02:52:4c: 85:1a:95:22:0e:e4:f0:72:4d:4b:bb:8c:be:be:79: 09:76:ec:96:9e:2f:69:1d:b6:37:81:aa:1e:d6:fe: 0d:ab:dd:de:95:08:4f:9a:ad:42:68:4e:7f:aa:66: 24:27:65:46:8b:83:5e:33:76:9a:e5:14:3b:dc:92: 7c:04:bf:52:f4:9d:cd:e4:23:64:19:46:b7:df:ed: 68:24:23:d3:48:87:d3:bd:7c:1f:60:24:1b:84:c6: 41:d7:d6:9d:a2:6d:ea:48:d1:ca:9b:c9:3b:b1:3e: 48:5b:86:49:70:f4:7d:f9:4c:32:2f:44:03:49:4f: 68:d8:81:65:b3:cb:b2:3e:b9:44:c8:72:ec:b0:10: c5:c7:7b:a8:3d:bb:d1:18:6a:4f:4c:c3:8a:11:eb: 96:c7:67:eb:52:35:d6:8c:0b:1b:05:ba:20:85:9d: 55:e3:7b:3c:0e:66:bb:b6:92:4b:cf:63:a7:21:d8: 40:39:9a:19:f8:eb:6f:24:4e:38:e3:6b:fc:00:68: b4:44:85:6a:02:96:a6:f3:4c:e5:77:6c:cb:18:da: ed:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:3A:61:67:A3:65:5E:29:4F:6E:C9:2A:12:B3:AC:8C:30:E2:25:02 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.82.0/24 Signature Algorithm: sha256WithRSAEncryption 24:0e:dc:68:f8:29:7c:22:f8:18:7c:6a:e0:76:1f:7c:ee:35: 7d:28:73:5f:f7:0a:00:26:7a:ad:43:24:d7:9f:74:f5:1d:b9: 68:83:51:01:18:23:3f:4d:c7:f1:79:bd:e4:ce:db:81:01:f8: 51:d3:96:9d:64:67:0b:83:8e:de:c9:df:c2:98:b5:dc:f7:df: 4f:07:7c:cb:94:6d:da:21:ba:48:7c:e2:fe:3a:71:fc:47:33: 96:7a:46:b2:a2:e8:09:8e:9d:02:db:eb:3d:1e:46:53:ce:8c: 5b:1e:5f:cc:c1:c8:84:cb:67:12:c5:cf:9f:de:63:e3:bf:c2: 24:7b:81:b6:c2:34:78:69:91:d4:ef:b5:ac:21:34:4f:c1:2c: 09:ca:35:4e:ca:be:47:d9:2e:42:3a:a5:c5:92:d1:11:bd:ea: bc:b5:da:dd:f2:8f:2a:8d:5a:2d:45:16:c2:df:79:c0:4d:16: 61:af:77:e1:ea:0e:41:67:dd:13:50:2f:71:3f:4e:2c:e9:68: be:6b:7f:1c:9d:98:97:e5:cd:93:02:e6:86:50:f8:0e:77:0d: fd:1c:e9:7a:c5:e1:75:39:07:68:3f:a5:6b:26:a4:a4:d0:f1: 98:a2:76:42:22:a9:f9:b1:8d:d3:5f:19:8f:3f:10:35:91:81: 9e:4a:f8:77 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUQ86hSy9euZdmXqgb6J7w7ncBvu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKEQ4M0E2MTY3QTM2NTVFMjk0RjZFQzkyQTEyQjNBQzhDMzBFMjI1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+NAfJXOIfan7gBu4MyVu/G1j dnFNW4QMVxtzUJUT7frHUS1L9uXRswJSTIUalSIO5PByTUu7jL6+eQl27JaeL2kd tjeBqh7W/g2r3d6VCE+arUJoTn+qZiQnZUaLg14zdprlFDvcknwEv1L0nc3kI2QZ Rrff7WgkI9NIh9O9fB9gJBuExkHX1p2ibepI0cqbyTuxPkhbhklw9H35TDIvRANJ T2jYgWWzy7I+uUTIcuywEMXHe6g9u9EYak9Mw4oR65bHZ+tSNdaMCxsFuiCFnVXj ezwOZru2kkvPY6ch2EA5mhn4628kTjjja/wAaLREhWoClqbzTOV3bMsY2u3PAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU2DphZ6NlXilPbskqErOsjDDiJQIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzMy ZTM4MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtj1IwDQYJKoZIhvcNAQELBQADggEBACQO3Gj4KXwi+Bh8auB2H3zuNX0o c1/3CgAmeq1DJNefdPUduWiDUQEYIz9Nx/F5veTO24EB+FHTlp1kZwuDjt7J38KY tdz3308HfMuUbdohukh84v46cfxHM5Z6RrKi6AmOnQLb6z0eRlPOjFseX8zByITL ZxLFz5/eY+O/wiR7gbbCNHhpkdTvtawhNE/BLAnKNU7KvkfZLkI6pcWS0RG96ry1 2t3yjyqNWi1FFsLfecBNFmGvd+HqDkFn3RNQL3E/TizpaL5rfxydmJflzZMC5oZQ +A53Df0c6XrF4XU5B2g/pWsmpKTQ8ZiidkIiqfmxjdNfGY8/EDWRgZ5K+Hc= -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:40 2025 by rpki-client