This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa File: 34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: mIDfiPf9CeGMaUVD4an/CnKOj8JkGU0buRVBNenAf0A= Subject key identifier: 0C:58:8E:DB:E0:E8:96:8D:AF:9F:B2:B9:38:3A:02:A9:F3:16:BA:A3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 77388BE0E492A6F61CFA499C8AAF6FFE340FF1A0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:24 +0000 ROA not before: Fri 28 Nov 2025 11:44:24 +0000 ROA not after: Fri 27 Nov 2026 11:49:24 +0000 asID: 136787 IP address blocks: 45.147.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:38:8b:e0:e4:92:a6:f6:1c:fa:49:9c:8a:af:6f:fe:34:0f:f1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:24 2025 GMT Not After : Nov 27 11:49:24 2026 GMT Subject: CN=0C588EDBE0E8968DAF9FB2B9383A02A9F316BAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:1c:80:ab:ce:7a:52:c0:a2:79:73:b1:76: d9:37:ab:8d:49:d7:bb:ae:fd:51:1a:b3:41:e3:aa: 9b:e0:cf:3c:34:04:ab:f3:77:1e:b5:64:8f:55:b1: 82:95:4b:f3:1f:14:32:85:9b:82:0b:3b:87:5a:c5: a5:7d:1f:a7:c1:16:32:ee:de:cc:41:3a:ca:7c:12: 09:51:f3:61:87:8f:84:a6:97:4c:39:10:12:23:8b: 3d:9c:1c:8e:4e:1d:76:28:5a:c8:bb:dc:a4:4c:54: 74:b0:4a:11:93:65:db:ae:ed:ff:40:d0:71:2c:20: 57:3a:61:2a:2f:bb:e9:0c:6a:a6:81:44:44:67:c2: 52:60:72:e1:15:d2:49:c6:09:14:40:db:06:c2:26: 4d:c5:c0:86:a8:a1:4d:13:fb:a9:35:07:72:3a:33: dc:7f:3c:a4:cc:a9:5f:67:66:11:ef:fd:7d:cd:33: 6d:d9:af:70:c8:b4:3b:0d:c4:ae:98:d9:c2:c9:41: d5:28:9e:97:69:ec:2e:b1:6b:22:ee:3a:a8:62:f0: f4:3f:4e:a1:e4:42:86:16:ee:74:e4:30:23:c2:7c: 74:16:26:cb:62:15:04:3a:2c:78:c8:f5:63:43:f2: ce:57:57:79:80:b4:e6:c2:0d:cc:21:90:39:85:04: 26:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:58:8E:DB:E0:E8:96:8D:AF:9F:B2:B9:38:3A:02:A9:F3:16:BA:A3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.174.0/24 Signature Algorithm: sha256WithRSAEncryption b2:99:08:5a:56:3b:db:d9:75:86:48:c6:60:c1:d8:5f:75:bb: 4f:31:5d:02:98:5b:1a:26:b2:26:8c:7f:b3:db:d5:1b:93:03: c3:aa:01:a4:96:85:77:ed:71:0c:c6:ad:0a:e4:11:3c:25:a5: ad:24:56:64:b1:12:f4:1f:12:8d:b6:e9:fc:00:9e:cb:37:b6: c9:9e:0b:af:70:ab:b3:46:dc:69:f9:33:ef:35:17:53:df:7e: 3f:ac:c1:1f:29:99:e7:ca:a1:e4:1a:f6:a8:db:8d:0e:9f:21: 3b:c6:ff:ca:e8:0e:68:dd:39:04:90:4f:1f:10:77:df:78:68: 06:da:1f:c9:ce:77:66:57:fa:03:d6:e6:96:2a:ae:48:45:50: 6e:1f:9d:85:ab:99:cc:28:f5:59:74:65:0a:6f:20:b2:48:c1: f3:62:c2:a1:73:9b:6f:67:a9:12:bd:ba:d5:49:e0:82:44:07: 8e:be:7c:d3:65:0c:0d:87:75:32:5d:c3:53:d1:85:c9:b4:db: 7c:aa:21:e1:e2:95:51:cc:a7:bf:6a:ff:82:38:3e:b3:ca:39: 6d:32:c3:e3:da:77:37:c9:c0:34:d1:4b:92:c8:3c:5f:80:a5: 9d:be:31:05:9d:67:a1:0b:99:bd:d2:5a:0f:c7:93:f6:3c:e7: ba:3a:fd:99 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUdziL4OSSpvYc+kmciq9v/jQP8aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjRaFw0yNjExMjcxMTQ5MjRaMDMxMTAvBgNV BAMTKDBDNTg4RURCRTBFODk2OERBRjlGQjJCOTM4M0EwMkE5RjMxNkJBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXByAq856UsCieXOxdtk3q41J 17uu/VEas0Hjqpvgzzw0BKvzdx61ZI9VsYKVS/MfFDKFm4ILO4daxaV9H6fBFjLu 3sxBOsp8EglR82GHj4Sml0w5EBIjiz2cHI5OHXYoWsi73KRMVHSwShGTZduu7f9A 0HEsIFc6YSovu+kMaqaBRERnwlJgcuEV0knGCRRA2wbCJk3FwIaooU0T+6k1B3I6 M9x/PKTMqV9nZhHv/X3NM23Zr3DItDsNxK6Y2cLJQdUonpdp7C6xayLuOqhi8PQ/ TqHkQoYW7nTkMCPCfHQWJstiFQQ6LHjI9WND8s5XV3mAtObCDcwhkDmFBCYzAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUDFiO2+Dolo2vn7K5ODoCqfMWuqMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy ZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2TrjANBgkqhkiG9w0BAQsFAAOCAQEAspkIWlY729l1hkjGYMHYX3W7 TzFdAphbGiayJox/s9vVG5MDw6oBpJaFd+1xDMatCuQRPCWlrSRWZLES9B8Sjbbp /ACeyze2yZ4Lr3Crs0bcafkz7zUXU99+P6zBHymZ58qh5Br2qNuNDp8hO8b/yugO aN05BJBPHxB333hoBtofyc53Zlf6A9bmliquSEVQbh+dhauZzCj1WXRlCm8gskjB 82LCoXObb2epEr261UnggkQHjr5802UMDYd1Ml3DU9GFybTbfKoh4eKVUcynv2r/ gjg+s8o5bTLD49p3N8nANNFLksg8X4Clnb4xBZ1noQuZvdJaD8eT9jznujr9mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:31 2025 by rpki-client