This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa File: 34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 8WefXo9yE1KqaDXqkYJogtOjEPX+qI+W8GlPOfrZyPs= Subject key identifier: 17:9F:18:DF:AE:9A:C3:D3:ED:2C:11:A5:13:CC:3A:53:8A:8B:36:81 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 337FC16F1F8F3298D73955CA44207D11C8155D6D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 136787 IP address blocks: 45.147.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:7f:c1:6f:1f:8f:32:98:d7:39:55:ca:44:20:7d:11:c8:15:5d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=179F18DFAE9AC3D3ED2C11A513CC3A538A8B3681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:b9:94:fa:8d:e6:0c:39:82:7b:ca:d6:8f: 2d:22:bf:ba:8c:ff:aa:e5:1f:45:ff:4c:3a:57:23: 5e:8b:71:f2:68:78:99:aa:6b:28:66:d0:d4:92:af: 68:3f:83:d6:0a:1c:4f:f6:e3:00:d3:90:ad:ac:65: 18:9e:62:e6:7b:37:ea:46:74:1b:0a:f4:a3:3b:08: 3f:ca:c6:c0:8c:b1:10:7f:14:c5:44:4a:06:54:c0: c8:8b:19:de:80:3f:19:6e:f3:2e:75:4a:8e:4a:09: bf:c3:39:6a:3f:66:b0:95:9c:ad:0a:75:ca:79:bd: ea:45:0c:df:7b:73:66:d1:2d:f2:51:af:26:59:8b: 73:d0:8a:22:9b:76:f1:d6:93:50:ec:51:96:54:a1: bc:da:25:e3:cb:9c:2c:11:a1:f6:14:d2:2b:4a:be: f0:e6:61:e7:0f:b7:89:1a:6b:d8:0d:b6:ad:90:79: 1e:fa:57:88:25:ab:63:4e:1d:59:94:d0:a8:0a:53: b7:e2:ce:0b:65:cc:10:51:89:b2:d7:1b:30:8f:7f: f4:5d:41:d7:fc:7a:2d:04:02:44:32:e9:cd:16:6b: 74:8b:08:38:3a:e1:2a:1c:5c:69:e3:cf:d5:43:68: 9b:5b:e0:e6:66:a5:a4:13:f6:c4:d1:b9:e1:99:e6: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9F:18:DF:AE:9A:C3:D3:ED:2C:11:A5:13:CC:3A:53:8A:8B:36:81 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.173.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:3f:e3:b8:9c:28:3e:64:5e:06:29:c2:be:68:8c:b4:97:69: 95:d0:ca:4a:e9:b3:36:b3:63:77:ec:00:f2:c7:7d:75:63:f4: f4:0a:8d:e8:a0:0d:ad:33:22:41:1b:67:0e:ab:fa:5b:3e:78: 67:b1:09:ed:bb:be:9e:df:d3:2a:a4:e6:19:72:16:e0:64:4e: f2:34:0f:78:c0:24:98:73:1c:f3:d6:03:eb:7d:77:99:50:2d: 09:0b:11:31:5c:a7:52:91:ae:d0:d1:e8:3a:8e:7b:d6:b2:80: 75:96:10:05:f2:5d:b3:cd:90:90:e6:c8:70:0e:04:c0:bc:45: 68:12:2d:2d:4b:d4:ac:d3:c5:ea:99:ac:a5:4e:ce:52:d1:63: 5f:06:59:2f:45:07:3c:7f:24:bb:f6:8e:1d:e4:e3:d4:c4:5b: 02:a9:d8:61:b5:26:8b:47:6e:c4:5e:4f:4e:88:d1:1b:7a:88: fc:d6:69:45:b7:6e:f1:46:c4:77:fe:ce:21:fe:a6:b0:e1:d0: 85:92:c7:78:1b:8a:31:13:36:46:2d:1b:5b:67:e4:22:fe:aa: 3d:9e:d3:ff:b0:5b:7c:74:09:01:68:13:96:17:c6:8e:0f:9a: 16:ff:65:e1:fa:68:3c:60:9b:e9:61:68:06:01:a8:70:43:56: 12:8e:44:27 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUM3/Bbx+PMpjXOVXKRCB9EcgVXW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDE3OUYxOERGQUU5QUMzRDNFRDJDMTFBNTEzQ0MzQTUzOEE4QjM2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYprmU+o3mDDmCe8rWjy0iv7qM /6rlH0X/TDpXI16LcfJoeJmqayhm0NSSr2g/g9YKHE/24wDTkK2sZRieYuZ7N+pG dBsK9KM7CD/KxsCMsRB/FMVESgZUwMiLGd6APxlu8y51So5KCb/DOWo/ZrCVnK0K dcp5vepFDN97c2bRLfJRryZZi3PQiiKbdvHWk1DsUZZUobzaJePLnCwRofYU0itK vvDmYecPt4kaa9gNtq2QeR76V4glq2NOHVmU0KgKU7fizgtlzBBRibLXGzCPf/Rd Qdf8ei0EAkQy6c0Wa3SLCDg64SocXGnjz9VDaJtb4OZmpaQT9sTRueGZ5jz3AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUF58Y366aw9PtLBGlE8w6U4qLNoEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy ZTMxMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2TrTANBgkqhkiG9w0BAQsFAAOCAQEAaz/juJwoPmReBinCvmiMtJdp ldDKSumzNrNjd+wA8sd9dWP09AqN6KANrTMiQRtnDqv6Wz54Z7EJ7bu+nt/TKqTm GXIW4GRO8jQPeMAkmHMc89YD6313mVAtCQsRMVynUpGu0NHoOo571rKAdZYQBfJd s82QkObIcA4EwLxFaBItLUvUrNPF6pmspU7OUtFjXwZZL0UHPH8ku/aOHeTj1MRb AqnYYbUmi0duxF5PTojRG3qI/NZpRbdu8UbEd/7OIf6msOHQhZLHeBuKMRM2Ri0b W2fkIv6qPZ7T/7BbfHQJAWgTlhfGjg+aFv9l4fpoPGCb6WFoBgGocENWEo5EJw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:17 2025 by rpki-client