This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34312e302f32342d3234203d3e20323037313337.roa File: 34352e3135352e34312e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: dsNtwnpNOy6Ni27r8GS1eXi1l3bJzPHzCn1rvsd0S7s= Subject key identifier: 0A:A6:C1:69:17:CD:ED:E5:E3:75:36:5D:F5:57:10:29:9F:D6:6E:1E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3F1D0F6B64780D22570FC5FC718AE57AD08D62D3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34312e302f32342d3234203d3e20323037313337.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 207137 IP address blocks: 45.155.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1d:0f:6b:64:78:0d:22:57:0f:c5:fc:71:8a:e5:7a:d0:8d:62:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=0AA6C16917CDEDE5E375365DF55710299FD66E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:bb:a8:17:58:76:37:cd:30:56:2e:63:86: 8c:05:ff:77:2b:e3:fa:d7:b1:7a:c6:57:c7:56:a5: 6c:06:4e:28:7a:f4:d6:fe:72:1c:28:34:3e:0a:c2: f8:2e:30:46:7a:0c:0a:8b:d6:c7:8f:9d:c7:c3:11: db:12:09:3d:3c:61:bc:4e:dc:95:15:b6:86:85:a2: fb:f5:06:f8:f2:52:de:7b:2e:d0:1e:61:55:7d:79: 6d:61:ed:81:78:15:41:10:56:fd:cb:17:fb:5b:6d: c2:55:e2:95:41:9d:76:d5:6d:9a:e8:74:f9:5a:23: 1b:72:3c:6b:4e:73:cf:23:98:2f:47:66:28:15:d8: ee:02:b3:7f:9e:d1:91:e3:05:56:35:f7:1d:40:81: c4:d6:ec:45:ca:d0:db:d2:83:88:52:ed:19:c8:b0: c0:01:da:3d:97:51:af:cd:d1:92:ba:2a:ec:b5:25: ba:cc:90:4e:23:74:44:a1:30:d7:df:2e:5f:a1:ce: fc:78:02:3e:d5:77:e5:87:c2:03:29:d7:e5:89:0d: 89:9a:ff:b5:a4:3f:54:53:86:b6:75:77:0a:55:9b: d3:8b:1b:3a:b8:0a:e5:c5:88:b6:de:5e:c1:2a:4d: bc:fe:8f:67:de:97:2b:64:c9:9e:66:da:11:c9:74: e8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A6:C1:69:17:CD:ED:E5:E3:75:36:5D:F5:57:10:29:9F:D6:6E:1E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34312e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.41.0/24 Signature Algorithm: sha256WithRSAEncryption de:99:e2:76:98:87:8c:9b:ac:91:ce:a4:e4:6d:45:29:11:32: 57:67:80:34:e5:fc:e6:75:2a:e6:e9:a0:0a:99:4d:6f:cd:28: 75:fb:36:e3:06:ff:99:77:93:ce:c3:34:71:bc:11:4e:f0:a7: 29:fb:d3:82:62:87:5e:48:67:5f:20:a5:40:09:b4:96:ed:36: ec:32:02:c9:be:8d:2a:1d:85:86:25:60:09:17:03:c0:e4:83: 4b:7c:15:93:1d:2a:f9:b8:c8:15:19:e4:9d:e1:1d:76:77:10: 72:66:12:37:1e:65:c5:43:38:2e:bc:20:fb:2d:8c:26:a0:0f: 3b:3f:0b:a8:c5:c5:31:ec:73:cc:66:67:58:d3:75:89:55:02: f7:8e:c1:82:66:10:82:fd:26:3f:a7:5e:9a:06:dd:11:51:a1: ac:d5:dd:c1:01:92:81:ec:d5:00:46:fa:d6:b7:e2:b7:c4:04: 1b:81:50:24:71:ca:83:17:5b:64:0d:e8:f1:29:d3:36:e4:fe: 51:a4:b4:82:cc:07:f5:36:ef:f9:83:5f:23:4d:8e:4b:e3:47: bb:17:4d:b8:0d:f3:31:be:92:8a:31:b0:05:90:65:5f:a7:50: 22:ea:49:15:e0:a4:c2:64:b7:0d:bb:c1:b5:e1:94:54:86:57: b7:e9:45:3e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUPx0Pa2R4DSJXD8X8cYrletCNYtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKDBBQTZDMTY5MTdDREVERTVFMzc1MzY1REY1NTcxMDI5OUZENjZFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDRLuoF1h2N80wVi5jhowF/3cr 4/rXsXrGV8dWpWwGTih69Nb+chwoND4KwvguMEZ6DAqL1sePncfDEdsSCT08YbxO 3JUVtoaFovv1BvjyUt57LtAeYVV9eW1h7YF4FUEQVv3LF/tbbcJV4pVBnXbVbZro dPlaIxtyPGtOc88jmC9HZigV2O4Cs3+e0ZHjBVY19x1AgcTW7EXK0NvSg4hS7RnI sMAB2j2XUa/N0ZK6Kuy1JbrMkE4jdEShMNffLl+hzvx4Aj7Vd+WHwgMp1+WJDYma /7WkP1RThrZ1dwpVm9OLGzq4CuXFiLbeXsEqTbz+j2felytkyZ5m2hHJdOhlAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUCqbBaRfN7eXjdTZd9VcQKZ/Wbh4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzUy ZTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtmykwDQYJKoZIhvcNAQELBQADggEBAN6Z4naYh4ybrJHOpORtRSkRMldn gDTl/OZ1KubpoAqZTW/NKHX7NuMG/5l3k87DNHG8EU7wpyn704Jih15IZ18gpUAJ tJbtNuwyAsm+jSodhYYlYAkXA8Dkg0t8FZMdKvm4yBUZ5J3hHXZ3EHJmEjceZcVD OC68IPstjCagDzs/C6jFxTHsc8xmZ1jTdYlVAveOwYJmEIL9Jj+nXpoG3RFRoazV 3cEBkoHs1QBG+ta34rfEBBuBUCRxyoMXW2QN6PEp0zbk/lGktILMB/U27/mDXyNN jkvjR7sXTbgN8zG+kooxsAWQZV+nUCLqSRXgpMJktw27wbXhlFSGV7fpRT4= -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:05 2025 by rpki-client