This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa File: 34352e3135312e3132332e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 7yz7wVxlcqLCneNURc3XSgIz60pZXVYNZiuz9lpce6o= Subject key identifier: AC:46:97:FB:D0:7A:9E:2B:71:6B:D2:D9:95:23:9B:2B:C4:2D:A9:6B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 37B2A6DA3891B21E9C586CD473292CC51B9D9C76 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 51167 IP address blocks: 45.151.123.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:b2:a6:da:38:91:b2:1e:9c:58:6c:d4:73:29:2c:c5:1b:9d:9c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=AC4697FBD07A9E2B716BD2D995239B2BC42DA96B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:56:ab:57:76:79:4c:22:73:46:57:08:b0:f1: ea:86:94:6a:15:b4:76:31:fb:84:20:5d:e5:9a:c2: 10:00:8a:8e:01:31:8a:be:eb:16:67:18:4a:e5:d0: 20:bb:2e:0f:de:9c:a1:9e:f4:d0:98:9a:b4:99:28: c6:60:73:cd:62:f4:47:d8:57:46:72:1e:88:17:6d: 90:f1:87:a9:44:0a:89:7b:88:3f:cb:11:a8:66:bd: aa:34:7e:3f:93:dd:10:c9:bf:a2:9e:b3:6d:02:f6: fb:ed:f9:a7:a3:34:77:b2:71:76:8e:6c:04:ad:67: 01:ac:d0:75:d9:2c:e7:ba:ba:30:fe:87:2a:91:c1: 37:e7:41:cc:d2:a4:10:29:4a:52:b6:22:48:2e:06: 44:71:62:7f:06:55:ae:20:f9:23:ed:17:b4:58:9b: 43:23:79:84:8c:73:81:08:3f:17:bc:10:72:c9:f0: 1f:60:29:72:82:c0:d4:22:29:a3:58:ad:6c:e9:76: db:f7:61:fb:9b:75:a3:68:de:69:a6:2f:b7:3b:5c: 71:cc:98:81:50:81:6e:41:d2:d3:57:3b:70:36:67: a4:d1:c7:e1:f8:89:41:a1:99:d6:7a:a0:29:20:6d: 44:21:47:3a:c0:28:52:af:e1:f4:ac:fa:8f:81:d1: 89:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:46:97:FB:D0:7A:9E:2B:71:6B:D2:D9:95:23:9B:2B:C4:2D:A9:6B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132332e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.123.0/24 Signature Algorithm: sha256WithRSAEncryption 46:3f:30:88:aa:1b:30:4f:68:24:2c:03:e4:34:85:fe:70:0b: 89:ba:c2:5b:76:28:e5:b7:71:93:5c:f6:c3:1c:65:68:4e:71: 76:57:c2:5f:5a:cd:2c:fa:30:0f:5d:9a:ff:00:6a:b6:2e:93: 4a:5f:35:29:9e:c6:24:d2:1b:6f:11:66:cb:3b:42:61:4c:90: ee:c7:17:d0:0f:ab:87:56:ce:68:80:fe:bd:55:a5:b5:a6:7c: 50:ec:9e:c7:64:5c:83:22:6d:af:7c:4d:b8:c4:56:cf:3c:75: 8d:a8:3d:0d:ea:53:42:05:1f:50:7b:97:0d:34:6e:b7:59:8b: 7b:84:72:8a:13:c7:75:7e:3c:8a:a0:e1:44:bd:b3:17:4b:a8: 87:c2:13:2b:f6:1b:59:bf:7d:3e:5d:1f:50:b2:1f:6a:fe:50: 00:24:3f:32:ae:9d:ca:31:44:e9:af:03:fd:3a:bd:07:0d:9c: 1c:f1:20:a2:f3:da:84:a4:e0:38:6d:ad:96:70:2d:e1:ee:b8: eb:56:aa:c1:9b:ce:7d:e3:bf:81:41:bf:40:43:5f:ad:6f:fe: 0d:ba:5d:ac:f9:4b:31:ad:6a:30:21:34:fd:e1:b6:c0:2b:ae: d0:b9:fe:2f:f7:f8:24:48:b5:b0:d2:bd:06:4e:b0:81:7e:8b: 28:69:e7:c7 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUN7Km2jiRsh6cWGzUcyksxRudnHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEFDNDY5N0ZCRDA3QTlFMkI3MTZCRDJEOTk1MjM5QjJCQzQyREE5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VqtXdnlMInNGVwiw8eqGlGoV tHYx+4QgXeWawhAAio4BMYq+6xZnGErl0CC7Lg/enKGe9NCYmrSZKMZgc81i9EfY V0ZyHogXbZDxh6lECol7iD/LEahmvao0fj+T3RDJv6Kes20C9vvt+aejNHeycXaO bAStZwGs0HXZLOe6ujD+hyqRwTfnQczSpBApSlK2IkguBkRxYn8GVa4g+SPtF7RY m0MjeYSMc4EIPxe8EHLJ8B9gKXKCwNQiKaNYrWzpdtv3YfubdaNo3mmmL7c7XHHM mIFQgW5B0tNXO3A2Z6TRx+H4iUGhmdZ6oCkgbUQhRzrAKFKv4fSs+o+B0YlBAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUrEaX+9B6nitxa9LZlSObK8QtqWswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzEy ZTMxMzIzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtl3swDQYJKoZIhvcNAQELBQADggEBAEY/MIiqGzBPaCQsA+Q0hf5wC4m6 wlt2KOW3cZNc9sMcZWhOcXZXwl9azSz6MA9dmv8AarYuk0pfNSmexiTSG28RZss7 QmFMkO7HF9APq4dWzmiA/r1VpbWmfFDsnsdkXIMiba98TbjEVs88dY2oPQ3qU0IF H1B7lw00brdZi3uEcooTx3V+PIqg4US9sxdLqIfCEyv2G1m/fT5dH1CyH2r+UAAk PzKuncoxROmvA/06vQcNnBzxIKLz2oSk4DhtrZZwLeHuuOtWqsGbzn3jv4FBv0BD X61v/g26Xaz5SzGtajAhNP3htsArrtC5/i/3+CRItbDSvQZOsIF+iyhp58c= -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:06 2025 by rpki-client