This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133382e302f32342d3234203d3e20313336373837.roa File: 34352e3134382e3133382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: EeI2fkwvUkvxf9yvA4Jabq0Fjez1+vrPJ13eDyOV4cA= Subject key identifier: 10:BD:21:D9:AE:02:C7:08:61:60:FA:58:9E:7A:5E:CA:B9:BC:2C:01 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 406A97AEC45105D043D7854063158DD00024DFF4 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:51 +0000 ROA not before: Fri 28 Nov 2025 11:44:51 +0000 ROA not after: Fri 27 Nov 2026 11:49:51 +0000 asID: 136787 IP address blocks: 45.148.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:6a:97:ae:c4:51:05:d0:43:d7:85:40:63:15:8d:d0:00:24:df:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:51 2025 GMT Not After : Nov 27 11:49:51 2026 GMT Subject: CN=10BD21D9AE02C7086160FA589E7A5ECAB9BC2C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ab:6e:12:e5:35:fe:c8:11:f4:dd:bd:5c:03: 60:e9:8f:af:a7:c4:68:5d:95:22:45:fe:f6:2e:cd: 25:ba:69:73:46:bc:6d:c2:d2:22:ec:97:6a:14:3b: 4a:7f:fd:8c:0e:2f:0a:1b:29:9f:99:ae:ba:b2:2e: 91:10:0a:28:01:fe:6f:7d:97:23:65:b7:3e:36:3d: f2:ef:c8:32:31:f4:9b:93:a9:aa:af:77:5e:ef:15: a6:7a:c6:b3:ee:31:5e:54:eb:67:c3:e2:d2:68:a3: 56:84:8b:91:5c:aa:de:45:28:91:a0:a8:79:58:e9: 8b:e5:d0:15:f8:21:18:a1:f9:fe:a2:4d:7d:c7:33: 63:5a:c7:2f:72:21:bd:cb:02:eb:d7:32:58:b6:2d: 25:69:f8:96:15:e8:7b:76:0d:22:59:33:8e:f9:48: 84:e9:9e:4f:24:61:01:e4:96:b4:ed:ff:9a:42:3f: a0:81:ad:4e:43:6d:cb:a6:2f:44:e4:18:fe:b0:0f: 9e:9e:af:f6:c1:22:5f:b0:d5:59:2d:cf:7f:c6:25: d7:5d:aa:ba:a7:51:bb:9e:bf:db:ee:0c:b4:02:85: b3:1c:7d:43:00:85:12:59:52:9f:53:22:17:c9:f6: a8:9a:70:f6:6a:68:9d:38:95:0e:09:b1:48:db:9e: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:21:D9:AE:02:C7:08:61:60:FA:58:9E:7A:5E:CA:B9:BC:2C:01 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.138.0/24 Signature Algorithm: sha256WithRSAEncryption a2:3d:de:37:dc:eb:b6:86:d7:1f:22:a9:25:16:fd:32:94:b3: be:1a:54:80:f3:a1:d3:de:e7:d2:f4:60:d0:64:91:a1:6a:cc: de:31:d2:3b:a7:94:f8:8a:36:38:8f:a4:00:27:13:b9:cc:8f: f4:59:f1:17:e8:ac:62:94:6c:17:8a:77:0d:b0:6b:15:81:6d: 8c:07:58:29:2e:c7:a6:d2:fb:f1:1f:69:f6:7d:5b:e9:91:bb: 77:29:c4:ba:9d:e4:68:7c:9e:76:c2:b3:8e:fa:dc:f5:4a:db: 26:12:4e:4e:8b:c8:e1:f2:14:64:df:99:51:67:79:0b:67:0b: 13:9b:0d:f2:40:22:a1:18:44:f1:3f:6b:65:5a:fb:d4:40:7e: a6:05:98:0a:da:a2:76:81:20:f6:57:03:54:27:d5:3f:25:e1: 15:b6:d1:f6:2c:91:4a:53:51:cc:ff:43:9d:86:b5:be:32:b3: 70:c5:df:a2:d8:04:00:1b:0b:1d:77:02:eb:9b:70:a8:80:b3: 49:98:4d:20:a6:83:39:ac:b9:18:36:59:34:fb:c8:2a:ee:a4: 91:5d:a8:59:37:29:ad:51:92:d6:e9:cb:03:fb:15:cb:8a:a3: 2b:df:04:0d:8c:4a:5f:ae:16:b6:44:3a:05:dc:d7:20:35:a4: 3f:2e:f8:fc -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUQGqXrsRRBdBD14VAYxWN0AAk3/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTFaFw0yNjExMjcxMTQ5NTFaMDMxMTAvBgNV BAMTKDEwQkQyMUQ5QUUwMkM3MDg2MTYwRkE1ODlFN0E1RUNBQjlCQzJDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrq24S5TX+yBH03b1cA2Dpj6+n xGhdlSJF/vYuzSW6aXNGvG3C0iLsl2oUO0p//YwOLwobKZ+ZrrqyLpEQCigB/m99 lyNltz42PfLvyDIx9JuTqaqvd17vFaZ6xrPuMV5U62fD4tJoo1aEi5Fcqt5FKJGg qHlY6Yvl0BX4IRih+f6iTX3HM2Naxy9yIb3LAuvXMli2LSVp+JYV6Ht2DSJZM475 SITpnk8kYQHklrTt/5pCP6CBrU5DbcumL0TkGP6wD56er/bBIl+w1Vktz3/GJddd qrqnUbuev9vuDLQChbMcfUMAhRJZUp9TIhfJ9qiacPZqaJ04lQ4JsUjbnhPrAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUEL0h2a4CxwhhYPpYnnpeyrm8LAEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzgy ZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2UijANBgkqhkiG9w0BAQsFAAOCAQEAoj3eN9zrtobXHyKpJRb9MpSz vhpUgPOh097n0vRg0GSRoWrM3jHSO6eU+Io2OI+kACcTucyP9FnxF+isYpRsF4p3 DbBrFYFtjAdYKS7HptL78R9p9n1b6ZG7dynEup3kaHyedsKzjvrc9UrbJhJOTovI 4fIUZN+ZUWd5C2cLE5sN8kAioRhE8T9rZVr71EB+pgWYCtqidoEg9lcDVCfVPyXh FbbR9iyRSlNRzP9DnYa1vjKzcMXfotgEABsLHXcC65twqICzSZhNIKaDOay5GDZZ NPvIKu6kkV2oWTcprVGS1unLA/sVy4qjK98EDYxKX64WtkQ6BdzXIDWkPy74/A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:15 2025 by rpki-client