This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa File: 34352e3135312e3132322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: ZBIfEyGOJokJ2XYxxJzEiH1YFu9OdEl9Q2uD8PzqwvI= Subject key identifier: 2D:D7:97:E1:2B:74:02:41:C8:83:26:5B:CA:97:6C:D8:F9:AB:FD:DB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 27E71BFB4479415B693F501A08E78E2C35A843DD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:55 +0000 ROA not before: Fri 28 Nov 2025 11:44:55 +0000 ROA not after: Fri 27 Nov 2026 11:49:55 +0000 asID: 51167 IP address blocks: 45.151.122.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e7:1b:fb:44:79:41:5b:69:3f:50:1a:08:e7:8e:2c:35:a8:43:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:55 2025 GMT Not After : Nov 27 11:49:55 2026 GMT Subject: CN=2DD797E12B740241C883265BCA976CD8F9ABFDDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:83:96:f2:0a:55:fb:9e:d8:c7:2a:30:13:3e: 0d:f5:8b:95:9a:8f:6d:4d:61:cf:fd:1e:8e:a8:d4: 21:2f:e1:57:97:7f:36:84:68:4a:2b:63:52:44:cb: 44:30:14:f0:42:2f:9c:62:63:8d:2c:48:ed:c9:41: fe:34:e7:39:7c:f4:b1:30:5a:d1:ae:40:af:0b:2e: 00:90:09:39:1d:f4:6c:b9:c1:40:5b:0e:59:90:d2: 77:00:1e:b7:9d:6d:59:d1:59:46:be:5c:fb:79:a9: a4:14:82:4e:a1:51:bc:cf:48:fe:cd:27:d9:52:b0: 0b:9f:3d:b4:db:51:24:29:f2:d7:15:39:de:88:99: 1e:6e:f7:7f:b1:9e:a7:48:56:bb:bd:9a:0f:3a:09: 73:b6:66:00:84:50:91:2f:43:a7:5e:d8:25:6a:c2: 95:08:e6:52:65:46:d0:ad:08:6d:aa:73:75:2d:4f: 71:32:c4:e1:45:ef:c1:66:40:47:84:53:67:a5:8e: d7:b3:03:37:cd:2e:0d:44:76:07:2a:fc:64:62:d9: b3:d6:2e:bb:40:14:65:11:cd:e9:47:e7:e9:e6:74: a9:a1:97:30:ec:ed:46:8d:f6:07:3e:25:96:df:74: a9:c9:c4:b7:9a:18:a3:14:ba:b0:d2:68:9f:12:80: da:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D7:97:E1:2B:74:02:41:C8:83:26:5B:CA:97:6C:D8:F9:AB:FD:DB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.122.0/24 Signature Algorithm: sha256WithRSAEncryption 31:d4:7a:0b:a2:b6:a7:a7:65:d8:81:d6:ff:b3:8a:1c:44:9c: dc:1e:ee:0d:51:ff:10:f9:38:64:b6:23:bf:0f:59:4e:6a:51: 6b:a0:8f:ed:ba:63:47:36:00:1e:c2:a2:05:58:95:88:9c:63: 41:2e:4e:8d:67:96:9c:79:00:26:cf:df:22:00:37:2a:e8:a7: 60:b9:bb:56:9b:89:1a:c3:71:12:f3:c8:39:85:dd:1e:32:03: 3e:36:59:5f:6e:f7:b0:f2:15:ef:3d:b6:a6:13:a2:6a:62:cc: 8a:f4:8f:95:b7:1a:e1:e9:99:e5:63:96:e6:db:8f:e3:c6:50: 2d:84:47:a7:90:ab:28:c8:93:9f:aa:8f:3b:fd:70:66:92:08: 62:47:a2:75:dc:46:ab:c1:88:c3:a1:a8:01:19:8d:ea:7b:9b: c7:df:d3:46:9e:05:76:80:b4:96:c1:db:59:cb:55:6e:4a:a0: 07:79:cc:07:0f:68:1e:ce:3b:e6:53:f6:ed:ef:fc:e9:72:aa: c7:4f:47:d1:1d:02:17:43:ef:6e:be:e6:e0:5f:88:1a:64:dd: 43:5c:57:08:62:be:0e:d2:5d:7b:32:a5:13:95:7c:0b:4b:ea: af:4b:ca:e4:97:99:85:95:58:3a:98:90:8f:b5:90:c8:23:e7: f7:85:e0:75 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUJ+cb+0R5QVtpP1AaCOeOLDWoQ90wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTVaFw0yNjExMjcxMTQ5NTVaMDMxMTAvBgNV BAMTKDJERDc5N0UxMkI3NDAyNDFDODgzMjY1QkNBOTc2Q0Q4RjlBQkZEREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDg5byClX7ntjHKjATPg31i5Wa j21NYc/9Ho6o1CEv4VeXfzaEaEorY1JEy0QwFPBCL5xiY40sSO3JQf405zl89LEw WtGuQK8LLgCQCTkd9Gy5wUBbDlmQ0ncAHredbVnRWUa+XPt5qaQUgk6hUbzPSP7N J9lSsAufPbTbUSQp8tcVOd6ImR5u93+xnqdIVru9mg86CXO2ZgCEUJEvQ6de2CVq wpUI5lJlRtCtCG2qc3UtT3EyxOFF78FmQEeEU2eljtezAzfNLg1Edgcq/GRi2bPW LrtAFGURzelH5+nmdKmhlzDs7UaN9gc+JZbfdKnJxLeaGKMUurDSaJ8SgNpzAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQULdeX4St0AkHIgyZbypds2Pmr/dswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzEy ZTMxMzIzMjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtl3owDQYJKoZIhvcNAQELBQADggEBADHUeguitqenZdiB1v+zihxEnNwe 7g1R/xD5OGS2I78PWU5qUWugj+26Y0c2AB7CogVYlYicY0EuTo1nlpx5ACbP3yIA Nyrop2C5u1abiRrDcRLzyDmF3R4yAz42WV9u97DyFe89tqYTompizIr0j5W3GuHp meVjlubbj+PGUC2ER6eQqyjIk5+qjzv9cGaSCGJHonXcRqvBiMOhqAEZjep7m8ff 00aeBXaAtJbB21nLVW5KoAd5zAcPaB7OO+ZT9u3v/OlyqsdPR9EdAhdD726+5uBf iBpk3UNcVwhivg7SXXsypROVfAtL6q9LyuSXmYWVWDqYkI+1kMgj5/eF4HU= -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:13 2025 by rpki-client