This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133362e302f32342d3234203d3e20313336373837.roa File: 34352e3134382e3133362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: hH1Ae+bGg1XJJcnrxNdpQjqSfQ4XI+/eu30/dyv8m5Q= Subject key identifier: 97:37:25:67:BD:13:CE:55:B8:E2:B0:F6:52:B8:9A:8B:20:19:F5:E5 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4592592649A624534D9D6965244EE99EAEAFCF41 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:32 +0000 ROA not before: Fri 28 Nov 2025 11:44:32 +0000 ROA not after: Fri 27 Nov 2026 11:49:32 +0000 asID: 136787 IP address blocks: 45.148.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:92:59:26:49:a6:24:53:4d:9d:69:65:24:4e:e9:9e:ae:af:cf:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:32 2025 GMT Not After : Nov 27 11:49:32 2026 GMT Subject: CN=97372567BD13CE55B8E2B0F652B89A8B2019F5E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:a5:a9:36:84:a6:d7:70:38:5f:48:ef:a5: a7:0b:58:11:11:ea:02:6b:a5:90:0c:10:2f:c3:a6: ff:8b:13:c4:17:5d:6b:6b:7f:24:89:56:ce:fd:6f: d7:a5:d4:4b:38:2b:04:31:25:f5:a4:f1:03:e4:43: 84:d3:16:65:5c:13:2a:ae:6f:0c:01:2d:6f:7b:62: bc:57:21:55:48:3e:da:22:7a:f6:f4:fa:07:ab:b4: a2:cb:00:c8:2c:54:9a:cf:16:ba:1d:cc:6d:06:8d: 2c:1c:90:fb:be:c6:f1:2c:2a:56:79:c3:24:58:da: 69:ab:d4:a6:28:90:44:72:10:ff:ac:55:fe:88:be: e2:f4:d9:97:15:c0:52:6c:e9:2a:73:b4:50:6d:3f: e7:dd:2a:86:4f:48:56:8b:f3:e5:fa:4c:81:c8:0e: 95:53:9b:e1:27:7b:b4:d3:3b:5f:cc:8a:39:18:9e: 43:3b:46:a9:66:48:11:32:b4:12:ed:71:c2:9d:45: 24:81:9a:6b:ae:37:7b:92:28:e7:1b:89:68:03:a3: ce:b0:90:d4:88:7b:5f:f3:3f:c9:9c:a5:5c:ce:52: be:cd:2f:76:a6:f1:98:cd:68:fd:ec:5b:c9:37:63: 5b:bc:e2:0e:84:e8:70:ca:21:f2:6d:c5:2b:52:80: 01:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:37:25:67:BD:13:CE:55:B8:E2:B0:F6:52:B8:9A:8B:20:19:F5:E5 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.136.0/24 Signature Algorithm: sha256WithRSAEncryption 97:f7:5a:68:39:ed:c9:82:56:fd:68:45:b7:e9:ac:84:ce:ba: 3c:87:b5:0b:ec:25:85:c0:fc:fd:23:6f:69:73:a0:f7:7b:d1: 7c:ef:1d:90:0a:bc:6f:e9:75:8e:9b:f2:f6:83:a3:ba:e9:37: 85:fe:91:78:0c:31:b8:5b:c1:a6:1a:38:6e:94:9d:6f:82:19: ff:3d:6c:89:e2:22:b0:c5:b6:10:c7:47:ea:9f:18:20:65:a5: 0f:79:23:4f:56:59:d0:4b:af:b1:30:cf:f8:27:8b:84:5d:5e: 75:87:f6:aa:07:fa:ce:28:48:7b:c2:2d:50:f2:49:73:6a:ae: 81:4a:e2:76:95:84:f0:6c:ae:4a:70:fe:db:e6:f5:27:2c:d5: 28:8a:aa:6a:c4:32:79:13:35:28:99:7b:b5:11:ea:74:ff:7c: 17:fe:5e:26:f2:a7:85:2c:b8:45:5f:f4:d3:4c:2d:74:57:a4: 4b:0e:d8:46:46:83:c5:e7:8a:2c:67:21:74:12:24:63:0e:f6: 59:b1:3d:21:e3:a4:10:e1:34:d3:c8:88:9d:40:87:c7:1b:c2: c5:cc:6b:03:2d:34:9c:d5:e1:f5:71:d2:08:9c:65:c5:29:13: 97:bb:30:1f:fb:3c:07:85:2f:d0:16:7d:6c:d9:58:ac:7c:de: dd:d2:48:da -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIURZJZJkmmJFNNnWllJE7pnq6vz0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzJaFw0yNjExMjcxMTQ5MzJaMDMxMTAvBgNV BAMTKDk3MzcyNTY3QkQxM0NFNTVCOEUyQjBGNjUyQjg5QThCMjAxOUY1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8d6WpNoSm13A4X0jvpacLWBER 6gJrpZAMEC/Dpv+LE8QXXWtrfySJVs79b9el1Es4KwQxJfWk8QPkQ4TTFmVcEyqu bwwBLW97YrxXIVVIPtoievb0+gertKLLAMgsVJrPFrodzG0GjSwckPu+xvEsKlZ5 wyRY2mmr1KYokERyEP+sVf6IvuL02ZcVwFJs6SpztFBtP+fdKoZPSFaL8+X6TIHI DpVTm+Ene7TTO1/MijkYnkM7RqlmSBEytBLtccKdRSSBmmuuN3uSKOcbiWgDo86w kNSIe1/zP8mcpVzOUr7NL3am8ZjNaP3sW8k3Y1u84g6E6HDKIfJtxStSgAFxAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUlzclZ70TzlW44rD2UriaiyAZ9eUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzgy ZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2UiDANBgkqhkiG9w0BAQsFAAOCAQEAl/daaDntyYJW/WhFt+mshM66 PIe1C+wlhcD8/SNvaXOg93vRfO8dkAq8b+l1jpvy9oOjuuk3hf6ReAwxuFvBpho4 bpSdb4IZ/z1sieIisMW2EMdH6p8YIGWlD3kjT1ZZ0EuvsTDP+CeLhF1edYf2qgf6 zihIe8ItUPJJc2qugUridpWE8GyuSnD+2+b1JyzVKIqqasQyeRM1KJl7tRHqdP98 F/5eJvKnhSy4RV/000wtdFekSw7YRkaDxeeKLGchdBIkYw72WbE9IeOkEOE008iI nUCHxxvCxcxrAy00nNXh9XHSCJxlxSkTl7swH/s8B4Uv0BZ9bNlYrHze3dJI2g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:15 2025 by rpki-client