This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34302e302f32342d3234203d3e20313336373837.roa File: 34352e3135352e34302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: c+BzvtfE/W+XY56mV9svzepnzup8J/f5vBplxwxfTnA= Subject key identifier: A6:1D:B8:E6:30:E5:C2:04:7E:88:60:CC:A4:AF:3F:E7:33:68:27:BC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 73F176C1FAD6737827546D490FA4283C933AAE34 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 136787 IP address blocks: 45.155.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f1:76:c1:fa:d6:73:78:27:54:6d:49:0f:a4:28:3c:93:3a:ae:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=A61DB8E630E5C2047E8860CCA4AF3FE7336827BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:21:c5:0e:69:f4:04:f5:c7:ec:71:ef:e3:2f: ae:99:41:ae:8c:cb:01:e3:75:5c:f7:cb:44:5b:22: 7e:5f:b8:e8:2f:fd:fc:da:ea:bb:d7:70:2e:d8:03: 0b:02:44:ee:51:4e:fe:b5:a2:86:d4:f6:29:5b:92: 1b:d8:c7:6c:3f:b8:8a:53:ec:73:c0:5a:13:8e:71: 20:2e:d3:d2:e6:23:25:35:dc:bb:24:20:a4:9a:6d: c7:3a:ca:b9:6d:a3:2d:d8:74:f6:e5:87:da:73:12: c3:fd:ed:a9:ee:da:a4:3a:db:8c:7b:a3:76:53:0b: 12:d0:48:3e:c4:ab:5b:8a:cc:60:98:76:e4:6f:b6: 15:8b:eb:04:f5:00:c3:7d:aa:79:57:ef:88:0f:ad: 9b:50:c9:17:41:8f:4f:b2:62:d4:96:8b:05:1b:a5: 65:d7:c9:a0:8c:f5:b2:c4:23:03:c8:34:59:09:89: af:aa:f2:e2:7a:ac:d6:a0:f1:a6:87:ec:66:88:18: 61:52:ab:f3:29:52:90:07:49:6f:e8:5c:0f:f6:eb: 43:60:2d:05:ab:6c:48:45:eb:47:97:b0:4d:ff:50: 4f:58:33:89:12:7a:7a:68:69:ad:a7:15:a4:85:cb: 0f:28:8e:4d:8e:e8:d6:9c:01:e4:b7:72:d2:85:90: 94:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:1D:B8:E6:30:E5:C2:04:7E:88:60:CC:A4:AF:3F:E7:33:68:27:BC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.40.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:e3:0b:d8:3b:00:3f:1f:83:7a:51:0e:57:01:ea:a6:77:20: 5b:85:b1:38:6e:1a:b5:4c:05:33:ea:1d:93:2b:cb:f4:59:fb: 04:57:77:88:3e:26:71:bd:ac:1e:9a:e7:86:93:37:50:8b:02: 79:7c:b2:ff:5a:2e:15:23:58:b1:d9:1a:5a:39:38:62:0d:da: 34:f4:8e:72:58:1b:7b:4d:f4:d7:ed:a2:78:22:4c:5c:40:ed: b5:73:c3:4e:54:17:65:12:b2:5b:74:cb:25:05:35:de:05:4b: 0a:0c:03:3c:d8:39:3b:8f:3c:b2:7e:a6:e8:37:61:12:0b:53: 6c:5d:fc:da:07:ca:06:be:71:1b:d2:dc:f4:cb:ba:17:74:7c: 02:46:ea:66:68:e6:a0:0f:6b:b0:87:8b:50:ab:7e:e5:41:f7: 64:d1:7f:67:c6:13:47:49:fc:e0:32:aa:b5:3f:f9:ea:36:49: 8f:30:20:4f:0b:62:6b:d7:5a:ff:a0:07:f9:65:b6:9b:41:a7: 14:fc:82:ab:11:08:e7:c7:d4:4e:f3:55:b6:6f:82:e3:90:9f: 57:b1:91:8f:26:3e:e3:17:b3:36:ce:ce:ad:85:96:53:fb:6c: a2:6a:80:c6:77:9d:f9:01:dd:8c:cd:cc:52:ba:81:52:c0:6d: 80:19:85:39 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUc/F2wfrWc3gnVG1JD6QoPJM6rjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKEE2MURCOEU2MzBFNUMyMDQ3RTg4NjBDQ0E0QUYzRkU3MzM2ODI3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdIcUOafQE9cfsce/jL66ZQa6M ywHjdVz3y0RbIn5fuOgv/fza6rvXcC7YAwsCRO5RTv61oobU9ilbkhvYx2w/uIpT 7HPAWhOOcSAu09LmIyU13LskIKSabcc6yrltoy3YdPblh9pzEsP97anu2qQ624x7 o3ZTCxLQSD7Eq1uKzGCYduRvthWL6wT1AMN9qnlX74gPrZtQyRdBj0+yYtSWiwUb pWXXyaCM9bLEIwPINFkJia+q8uJ6rNag8aaH7GaIGGFSq/MpUpAHSW/oXA/260Ng LQWrbEhF60eXsE3/UE9YM4kSenpoaa2nFaSFyw8ojk2O6NacAeS3ctKFkJQfAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUph245jDlwgR+iGDMpK8/5zNoJ7wwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzUy ZTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtmygwDQYJKoZIhvcNAQELBQADggEBAIrjC9g7AD8fg3pRDlcB6qZ3IFuF sThuGrVMBTPqHZMry/RZ+wRXd4g+JnG9rB6a54aTN1CLAnl8sv9aLhUjWLHZGlo5 OGIN2jT0jnJYG3tN9NftongiTFxA7bVzw05UF2USslt0yyUFNd4FSwoMAzzYOTuP PLJ+pug3YRILU2xd/NoHyga+cRvS3PTLuhd0fAJG6mZo5qAPa7CHi1CrfuVB92TR f2fGE0dJ/OAyqrU/+eo2SY8wIE8LYmvXWv+gB/lltptBpxT8gqsRCOfH1E7zVbZv guOQn1exkY8mPuMXszbOzq2FllP7bKJqgMZ3nfkB3YzNzFK6gVLAbYAZhTk= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:07 2025 by rpki-client