This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa File: 34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: n7yk2P0N9R1iN2fLmtpujEwvQaiBqxuzKAMxP2g0l50= Subject key identifier: E1:50:D7:89:44:78:5B:6A:5C:EE:37:9C:B3:CD:72:60:2D:3C:FD:B3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 47D84A6DBADDEE49B34E463E34D65917B8CEBA6B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:33 +0000 ROA not before: Fri 28 Nov 2025 11:44:33 +0000 ROA not after: Fri 27 Nov 2026 11:49:33 +0000 asID: 136787 IP address blocks: 45.148.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d8:4a:6d:ba:dd:ee:49:b3:4e:46:3e:34:d6:59:17:b8:ce:ba:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:33 2025 GMT Not After : Nov 27 11:49:33 2026 GMT Subject: CN=E150D78944785B6A5CEE379CB3CD72602D3CFDB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:19:5b:59:4c:aa:54:45:46:e0:fa:5d:ed: 1f:11:85:26:44:9a:37:e5:40:03:ad:33:6c:8e:bc: d2:8f:88:88:e7:95:21:ca:d4:77:e4:cf:ff:48:e3: f9:34:47:21:c7:0a:40:b3:26:5c:2c:a5:e4:f4:15: a5:75:5d:86:98:05:46:00:41:a9:70:55:ea:c8:d2: 27:0c:28:d0:dd:91:f8:c4:33:a4:44:35:f1:c4:e3: 4c:62:dd:6d:80:ab:21:d3:69:6b:d2:7a:cc:9d:47: 53:27:95:ac:13:bf:6a:3d:e1:c1:fc:ad:8b:b9:4d: d9:30:1a:19:b5:17:95:92:cc:ad:d8:93:52:96:b4: 08:b8:6f:60:f9:52:c5:76:b7:f3:96:82:d2:3a:62: 7e:0d:cb:32:6b:23:95:6f:c6:5c:b4:69:01:f9:5b: 6e:95:ad:50:b2:00:c4:3b:66:61:32:49:69:79:02: 85:9a:27:a4:a1:52:1b:c8:5c:14:dc:6c:99:33:86: b9:5e:63:9e:9b:e9:d8:b1:f0:9b:3e:ec:32:4f:2c: 1e:04:f9:97:d5:60:d8:0f:0f:c9:0e:18:fb:05:81: d5:ce:73:26:d2:18:0b:70:2e:1f:1d:c7:dd:e4:b9: e7:fa:1b:0c:15:8b:e7:c9:c5:07:af:bd:a8:d8:bd: 6a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:50:D7:89:44:78:5B:6A:5C:EE:37:9C:B3:CD:72:60:2D:3C:FD:B3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.137.0/24 Signature Algorithm: sha256WithRSAEncryption 54:79:20:8b:f1:63:a4:7a:f8:c6:6d:10:ff:3a:4c:03:02:c0: 92:c7:58:06:ec:14:a4:d0:e0:ea:a2:58:69:66:d4:95:16:16: 61:46:f1:4b:d0:06:0e:39:7c:ed:ac:53:91:0b:17:d1:0a:8b: 00:16:10:67:18:bf:8d:a1:6c:cb:45:4e:d1:f9:34:c2:30:06: 79:0c:0b:0f:02:3a:bf:19:13:d4:e7:23:b8:94:b1:31:69:ce: cc:12:53:e7:8c:11:60:83:b6:c9:4e:fb:98:27:a0:52:33:e6: a6:03:57:f1:f7:93:aa:8d:b7:b9:60:f7:80:71:d3:02:b2:cb: cc:ca:5f:69:2a:a8:b4:ba:96:ca:90:ed:2e:c6:33:52:a6:06: b4:fe:1d:36:2b:be:bc:64:82:9f:ae:7b:26:d2:c9:51:73:66: cc:a8:d5:98:62:42:34:c0:14:d1:6d:29:7c:40:c2:a6:3c:6d: 44:eb:a2:58:ae:9f:ad:9e:39:73:a9:6d:39:51:c9:92:bd:f7: 60:bd:33:e3:65:94:7a:0c:a8:23:5e:27:38:07:c2:ef:62:e5: 4c:5d:87:f1:80:4b:dc:9e:ff:46:61:ee:63:2d:4f:61:5e:39: c8:a2:b1:7b:9c:74:d6:a5:6e:a0:83:7d:98:ee:63:ee:b0:04: 95:99:09:e2 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUR9hKbbrd7kmzTkY+NNZZF7jOumswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzNaFw0yNjExMjcxMTQ5MzNaMDMxMTAvBgNV BAMTKEUxNTBENzg5NDQ3ODVCNkE1Q0VFMzc5Q0IzQ0Q3MjYwMkQzQ0ZEQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmuhlbWUyqVEVG4Ppd7R8RhSZE mjflQAOtM2yOvNKPiIjnlSHK1Hfkz/9I4/k0RyHHCkCzJlwspeT0FaV1XYaYBUYA QalwVerI0icMKNDdkfjEM6RENfHE40xi3W2AqyHTaWvSesydR1MnlawTv2o94cH8 rYu5TdkwGhm1F5WSzK3Yk1KWtAi4b2D5UsV2t/OWgtI6Yn4NyzJrI5Vvxly0aQH5 W26VrVCyAMQ7ZmEySWl5AoWaJ6ShUhvIXBTcbJkzhrleY56b6dix8Js+7DJPLB4E +ZfVYNgPD8kOGPsFgdXOcybSGAtwLh8dx93kuef6GwwVi+fJxQevvajYvWq9AgMB AAGjggJEMIICQDAdBgNVHQ4EFgQU4VDXiUR4W2pc7jecs81yYC08/bMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzgy ZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2UiTANBgkqhkiG9w0BAQsFAAOCAQEAVHkgi/FjpHr4xm0Q/zpMAwLA ksdYBuwUpNDg6qJYaWbUlRYWYUbxS9AGDjl87axTkQsX0QqLABYQZxi/jaFsy0VO 0fk0wjAGeQwLDwI6vxkT1OcjuJSxMWnOzBJT54wRYIO2yU77mCegUjPmpgNX8feT qo23uWD3gHHTArLLzMpfaSqotLqWypDtLsYzUqYGtP4dNiu+vGSCn657JtLJUXNm zKjVmGJCNMAU0W0pfEDCpjxtROuiWK6frZ45c6ltOVHJkr33YL0z42WUegyoI14n OAfC72LlTF2H8YBL3J7/RmHuYy1PYV45yKKxe5x01qVuoIN9mO5j7rAElZkJ4g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:22 2025 by rpki-client