This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa File: 34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Hd7ThFNmVaJKBUnibUbm/zbDceEgzGozuPHQJxOzwE4= Subject key identifier: 1B:E6:5D:88:F9:69:36:A0:78:D4:EB:03:22:CB:00:97:59:93:27:78 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 34B8AC893E05EE38086C73A64392C23D9ABE4A6D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 136787 IP address blocks: 45.147.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b8:ac:89:3e:05:ee:38:08:6c:73:a6:43:92:c2:3d:9a:be:4a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=1BE65D88F96936A078D4EB0322CB009759932778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ba:c8:fa:d1:0e:87:17:5f:cc:4c:27:ad:af: 57:f3:57:6a:4c:2d:35:4f:73:b2:b1:00:de:53:f3: 6d:82:f3:36:3d:c4:72:94:c3:3d:09:ff:a5:3d:a8: e4:78:9e:a1:0b:cd:6d:41:11:83:9a:01:40:55:1e: c9:7f:e1:c7:69:af:a1:07:de:a8:ac:5a:2e:ac:c5: 13:97:ae:c0:ee:9d:2b:42:07:e4:c2:27:bb:1e:be: 0a:6f:5e:ef:e0:3f:7e:27:6e:2d:67:d6:a3:95:8d: 69:0c:85:54:c8:3c:74:e1:54:f5:39:ed:d4:84:cd: 6f:e5:56:5d:bb:12:12:fd:f6:fd:5f:56:1b:27:4c: 31:30:4b:d5:ff:25:e1:2a:f2:8a:29:0b:24:96:ff: 44:7e:f5:55:e0:89:7c:3e:85:9d:16:49:fa:15:d9: 7e:da:e1:23:de:ff:d5:e1:3e:59:37:84:0f:20:0c: 0e:64:d4:61:91:a0:69:a1:0e:8f:b8:f5:50:72:f9: d1:27:4f:dc:84:f6:68:e1:3f:a9:aa:99:29:90:a8: 7a:09:a5:37:40:a6:ea:b3:0c:36:d2:d6:b7:b8:18: dc:83:e2:88:6d:8d:f5:4c:7f:11:b8:da:dd:70:ec: e0:1a:c0:1c:ce:07:8a:3d:12:3e:07:2a:d7:32:d7: 74:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E6:5D:88:F9:69:36:A0:78:D4:EB:03:22:CB:00:97:59:93:27:78 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.172.0/24 Signature Algorithm: sha256WithRSAEncryption a6:70:20:6e:c9:3a:f5:d0:d6:41:63:f0:0e:22:35:8f:d2:6f: 14:c0:47:3a:4d:10:c8:e7:4a:f6:e0:71:2b:0a:cd:96:2f:c6: 86:f0:38:72:e7:b8:c0:b9:41:e6:5c:1d:09:f1:4c:b7:32:7f: bd:76:3c:2a:17:b0:1a:5f:7d:35:13:b5:4f:85:b7:e1:0b:35: cf:b2:74:49:27:c8:4c:e5:b7:e5:ca:43:8d:ea:8e:b3:19:2c: 69:e4:21:dd:78:dd:b4:93:13:61:ee:3e:3f:f5:d4:c4:01:c5: bb:d9:ec:da:3c:99:3f:18:b8:0c:7f:bb:57:32:b0:93:b3:d9: ae:26:7b:2b:5c:29:20:bc:a7:d5:31:f5:d6:e6:57:b9:cd:ea: cd:3d:43:e0:5a:db:0c:22:ec:2b:36:ec:38:2b:92:b8:c6:48: 19:71:77:17:16:df:81:51:fa:d0:d9:11:57:d0:7b:f4:5c:d2: 8b:f9:57:6e:ad:1e:1f:03:c5:84:65:53:16:7c:40:ec:df:79: b3:d8:b4:60:63:9d:f4:05:f1:1a:22:83:23:55:90:0b:79:26: dc:ae:f6:41:bd:9d:fc:bc:22:8d:ba:99:a2:61:2a:c2:a1:64: 6c:1f:e4:da:1d:73:fe:7e:31:21:bd:da:4d:57:3c:cb:70:f2: f8:11:b8:d9 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUNLisiT4F7jgIbHOmQ5LCPZq+Sm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDFCRTY1RDg4Rjk2OTM2QTA3OEQ0RUIwMzIyQ0IwMDk3NTk5MzI3NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6usj60Q6HF1/MTCetr1fzV2pM LTVPc7KxAN5T822C8zY9xHKUwz0J/6U9qOR4nqELzW1BEYOaAUBVHsl/4cdpr6EH 3qisWi6sxROXrsDunStCB+TCJ7sevgpvXu/gP34nbi1n1qOVjWkMhVTIPHThVPU5 7dSEzW/lVl27EhL99v1fVhsnTDEwS9X/JeEq8oopCySW/0R+9VXgiXw+hZ0WSfoV 2X7a4SPe/9XhPlk3hA8gDA5k1GGRoGmhDo+49VBy+dEnT9yE9mjhP6mqmSmQqHoJ pTdApuqzDDbS1re4GNyD4ohtjfVMfxG42t1w7OAawBzOB4o9Ej4HKtcy13QtAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUG+ZdiPlpNqB41OsDIssAl1mTJ3gwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy ZTMxMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2TrDANBgkqhkiG9w0BAQsFAAOCAQEApnAgbsk69dDWQWPwDiI1j9Jv FMBHOk0QyOdK9uBxKwrNli/GhvA4cue4wLlB5lwdCfFMtzJ/vXY8KhewGl99NRO1 T4W34Qs1z7J0SSfITOW35cpDjeqOsxksaeQh3XjdtJMTYe4+P/XUxAHFu9ns2jyZ Pxi4DH+7VzKwk7PZriZ7K1wpILyn1TH11uZXuc3qzT1D4FrbDCLsKzbsOCuSuMZI GXF3FxbfgVH60NkRV9B79FzSi/lXbq0eHwPFhGVTFnxA7N95s9i0YGOd9AXxGiKD I1WQC3km3K72Qb2d/LwijbqZomEqwqFkbB/k2h1z/n4xIb3aTVc8y3Dy+BG42Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:08 2025 by rpki-client