This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa File: 34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 7yTUeNOow4klxN61XmhxCHtvqJVAJtdPf1vDrxOAv6s= Subject key identifier: EA:3A:70:D1:2F:10:E6:29:84:72:1D:5D:43:9A:BF:26:2F:26:F6:1E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 66619BA0357314B97EB57C9C56EDDD4D5EAE6012 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136787 IP address blocks: 45.147.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:61:9b:a0:35:73:14:b9:7e:b5:7c:9c:56:ed:dd:4d:5e:ae:60:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=EA3A70D12F10E62984721D5D439ABF262F26F61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:95:fd:93:9b:1c:8f:c3:26:3c:2d:95:29: 83:34:c7:e7:55:db:1c:bd:29:e3:66:08:c8:30:76: 83:95:db:11:b3:85:12:42:4d:ee:49:f6:87:a5:2b: 1a:6c:05:1d:f2:9a:ea:a9:48:16:4b:a4:36:74:17: 4c:9e:bb:53:c1:5f:ea:f1:40:74:6c:a1:30:8a:0a: 0d:50:06:35:54:9a:08:70:13:3c:e0:7f:f8:70:0e: d6:1b:ac:f0:a0:32:69:70:90:47:3d:3b:63:d6:bc: 1a:58:fb:4e:9c:3a:cf:f7:45:24:75:22:5c:f5:8a: f3:b4:3a:5c:51:fc:55:ed:ce:5e:ac:77:ab:93:56: ef:97:31:50:2e:03:66:16:25:56:a7:ea:5d:b3:16: 9f:89:2d:6e:a6:0f:f5:a6:4f:02:bd:06:70:07:32: ac:8b:e2:b9:82:75:95:a6:b8:b1:90:24:70:df:67: d2:5a:4a:92:fe:78:e8:3e:1e:59:68:ee:21:8f:c6: 5d:9f:89:a7:71:e1:d3:4a:7e:ed:d3:e3:74:56:52: 19:ca:91:e4:3c:93:de:05:47:25:eb:3a:f3:83:4f: 28:3a:28:ab:25:6b:28:4c:d5:bc:f5:9e:ed:08:7c: 3f:9a:a1:40:aa:fe:1d:c7:b7:14:8f:cd:75:9c:27: 15:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3A:70:D1:2F:10:E6:29:84:72:1D:5D:43:9A:BF:26:2F:26:F6:1E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e3137352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.175.0/24 Signature Algorithm: sha256WithRSAEncryption c2:a4:a6:c0:07:32:bd:77:ba:17:d5:5e:c4:f7:a1:a6:b8:90: be:ac:3d:e7:cc:9c:27:ac:25:23:b4:b2:69:09:35:77:c5:c8: 80:0c:18:46:47:27:e7:96:4f:07:e3:5d:74:80:78:1c:d2:c3: 6b:ac:ee:e0:72:e6:cb:f7:09:ab:28:84:5b:4e:1f:d3:2e:30: 57:3c:ff:e6:a8:55:29:f1:d6:13:42:05:16:08:8f:42:d2:4d: 92:f4:fd:15:c3:a3:87:cf:96:e7:7a:eb:ec:fd:e8:df:6c:e6: f7:36:d4:26:d2:88:05:2c:b8:16:a6:ee:90:0d:92:cc:70:ec: 12:12:3d:74:f4:42:94:54:3a:b7:9f:e3:b7:a2:32:33:d9:36: c2:e3:4f:c5:91:5b:e6:39:a6:5c:ed:84:75:5c:fe:37:61:64: e2:1f:1f:46:3e:16:e7:e2:29:ab:ed:2f:7e:86:1b:6d:e0:02: 06:ec:84:3e:5d:f9:6a:2c:01:37:67:9c:c5:eb:26:6f:e9:6f: c4:b2:9a:3b:2f:d3:56:6a:14:e3:d3:b7:ef:2b:66:ba:37:4a: 19:b2:4e:be:39:52:52:0a:1b:35:cc:da:2c:2c:b0:f8:a4:f9: 56:ad:b7:d5:31:ff:d3:63:27:61:6e:1f:8a:d4:cc:f8:8c:4b: 0d:f4:f4:46 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUZmGboDVzFLl+tXycVu3dTV6uYBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKEVBM0E3MEQxMkYxMEU2Mjk4NDcyMUQ1RDQzOUFCRjI2MkYyNkY2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/kJX9k5scj8MmPC2VKYM0x+dV 2xy9KeNmCMgwdoOV2xGzhRJCTe5J9oelKxpsBR3ymuqpSBZLpDZ0F0yeu1PBX+rx QHRsoTCKCg1QBjVUmghwEzzgf/hwDtYbrPCgMmlwkEc9O2PWvBpY+06cOs/3RSR1 Ilz1ivO0OlxR/FXtzl6sd6uTVu+XMVAuA2YWJVan6l2zFp+JLW6mD/WmTwK9BnAH MqyL4rmCdZWmuLGQJHDfZ9JaSpL+eOg+Hllo7iGPxl2fiadx4dNKfu3T43RWUhnK keQ8k94FRyXrOvODTyg6KKslayhM1bz1nu0IfD+aoUCq/h3HtxSPzXWcJxU5AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU6jpw0S8Q5imEch1dQ5q/Ji8m9h4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy ZTMxMzczNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2TrzANBgkqhkiG9w0BAQsFAAOCAQEAwqSmwAcyvXe6F9VexPehpriQ vqw958ycJ6wlI7SyaQk1d8XIgAwYRkcn55ZPB+NddIB4HNLDa6zu4HLmy/cJqyiE W04f0y4wVzz/5qhVKfHWE0IFFgiPQtJNkvT9FcOjh8+W53rr7P3o32zm9zbUJtKI BSy4FqbukA2SzHDsEhI9dPRClFQ6t5/jt6IyM9k2wuNPxZFb5jmmXO2EdVz+N2Fk 4h8fRj4W5+Ipq+0vfoYbbeACBuyEPl35aiwBN2ecxesmb+lvxLKaOy/TVmoU49O3 7ytmujdKGbJOvjlSUgobNczaLCyw+KT5Vq231TH/02MnYW4fitTM+IxLDfT0Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:03 2025 by rpki-client