This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133392e302f32342d3234203d3e20313336373837.roa File: 34352e3134382e3133392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Zq8kVYVrqh0K9S5FVMTS95U1v6EubgG4CwV0sVtbIV4= Subject key identifier: 1B:42:98:6A:A1:1B:F9:1E:1F:BD:AF:43:C1:D3:DD:96:4C:8B:DD:A6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5FEFFBC4E809ECB8B06B9CFFCCCA017138AFD3D9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:46 +0000 ROA not before: Fri 28 Nov 2025 11:44:46 +0000 ROA not after: Fri 27 Nov 2026 11:49:46 +0000 asID: 136787 IP address blocks: 45.148.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ef:fb:c4:e8:09:ec:b8:b0:6b:9c:ff:cc:ca:01:71:38:af:d3:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:46 2025 GMT Not After : Nov 27 11:49:46 2026 GMT Subject: CN=1B42986AA11BF91E1FBDAF43C1D3DD964C8BDDA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:32:71:b5:0a:17:af:b1:67:1f:8e:df:f3:f5: 1f:8e:00:f7:74:62:1b:f0:64:d8:e5:47:ad:f3:81: d3:bd:bb:b7:65:6b:53:14:91:34:9c:ea:51:27:0a: ce:18:ca:e0:e8:a2:5a:27:38:e6:06:1a:c8:bd:c5: 84:fd:4a:76:c7:cc:45:bc:d4:f1:8a:fe:17:cc:08: f6:3b:9c:fe:70:5e:15:98:28:cf:c9:37:97:e9:cb: ae:5c:05:34:98:15:6f:05:32:a7:69:cb:6b:c7:3d: db:da:70:2d:d7:61:5c:c7:de:47:41:99:2d:f7:02: 1f:1a:e7:c7:8d:9b:c4:3a:80:23:38:e5:c9:c9:d6: ad:a3:8d:87:73:96:02:92:6a:e3:b3:f7:3d:93:db: 25:21:58:47:73:50:9c:7d:94:cd:39:c8:55:a1:66: 7e:ac:51:fe:c9:1e:9b:8e:a8:9a:90:e3:8e:f0:b9: 54:d6:21:16:23:7b:69:eb:45:e4:96:15:47:be:07: 9d:2a:69:48:c4:d1:34:ce:68:46:26:41:31:c1:3f: ef:0f:38:34:ea:26:a7:ff:61:5b:69:6e:bb:f1:3c: 53:85:8d:a4:5f:4f:a7:96:80:5d:3a:29:92:f1:9f: 0c:18:2f:85:67:3e:df:70:75:92:23:4c:c7:af:43: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:42:98:6A:A1:1B:F9:1E:1F:BD:AF:43:C1:D3:DD:96:4C:8B:DD:A6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134382e3133392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.139.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:c6:11:e5:5c:10:62:f8:74:11:9e:0c:42:6c:bf:c7:ca:f7: 4c:fd:68:41:ed:e0:4c:a3:b4:14:a9:22:52:33:ef:54:e0:a1: 36:3b:85:d8:c1:d1:29:fb:20:e8:cc:ed:34:a3:d1:12:af:20: cb:7c:fb:4f:cc:54:3d:34:ee:0e:69:e8:6f:0d:c9:7f:88:29: 05:34:af:17:b2:db:f9:07:ae:84:ab:31:a0:c5:50:46:4c:44: 18:f3:5f:af:68:f3:ae:18:b8:81:01:22:19:83:75:37:e4:5e: f9:31:61:b7:76:87:b8:ff:da:b5:3a:cf:26:10:e9:a1:95:79: c2:42:9c:52:0f:aa:6b:23:e4:85:e9:24:06:ce:61:c4:e8:2a: 5f:59:9c:2c:70:13:80:3f:ce:67:02:6b:00:5a:84:38:62:59: b6:cb:7a:de:f7:fd:fc:7a:7a:49:e7:d9:9f:ec:37:ca:c3:d1: 08:a0:d6:bf:37:d6:7e:14:5f:eb:41:e4:c5:89:38:a5:1f:9a: 9f:ef:b7:fd:b5:f0:d0:7a:f0:7e:8d:dc:6f:64:9e:b0:ff:53: 22:1e:91:9c:fa:bb:70:bf:d0:d7:23:0d:4b:df:71:ce:0b:11: 5e:fe:79:13:45:74:10:bf:65:e0:80:ee:e7:fe:52:75:b0:c5: 97:51:a0:c4 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUX+/7xOgJ7Liwa5z/zMoBcTiv09kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDZaFw0yNjExMjcxMTQ5NDZaMDMxMTAvBgNV BAMTKDFCNDI5ODZBQTExQkY5MUUxRkJEQUY0M0MxRDNERDk2NEM4QkREQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMnG1ChevsWcfjt/z9R+OAPd0 YhvwZNjlR63zgdO9u7dla1MUkTSc6lEnCs4YyuDoolonOOYGGsi9xYT9SnbHzEW8 1PGK/hfMCPY7nP5wXhWYKM/JN5fpy65cBTSYFW8FMqdpy2vHPdvacC3XYVzH3kdB mS33Ah8a58eNm8Q6gCM45cnJ1q2jjYdzlgKSauOz9z2T2yUhWEdzUJx9lM05yFWh Zn6sUf7JHpuOqJqQ447wuVTWIRYje2nrReSWFUe+B50qaUjE0TTOaEYmQTHBP+8P ODTqJqf/YVtpbrvxPFOFjaRfT6eWgF06KZLxnwwYL4VnPt9wdZIjTMevQ83vAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUG0KYaqEb+R4fva9DwdPdlkyL3aYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzgy ZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2UizANBgkqhkiG9w0BAQsFAAOCAQEAnMYR5VwQYvh0EZ4MQmy/x8r3 TP1oQe3gTKO0FKkiUjPvVOChNjuF2MHRKfsg6MztNKPREq8gy3z7T8xUPTTuDmno bw3Jf4gpBTSvF7Lb+QeuhKsxoMVQRkxEGPNfr2jzrhi4gQEiGYN1N+Re+TFht3aH uP/atTrPJhDpoZV5wkKcUg+qayPkhekkBs5hxOgqX1mcLHATgD/OZwJrAFqEOGJZ tst63vf9/Hp6SefZn+w3ysPRCKDWvzfWfhRf60HkxYk4pR+an++3/bXw0Hrwfo3c b2SesP9TIh6RnPq7cL/Q1yMNS99xzgsRXv55E0V0EL9l4IDu5/5SdbDFl1GgxA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:42 2025 by rpki-client