This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34332e302f32342d3234203d3e20313336373837.roa File: 34352e3135352e34332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: WnWUy05crnrFT3Fp6ywksVV/ecGgEvHE370Zs/20QlY= Subject key identifier: 7F:5A:4A:34:81:C8:2E:ED:75:B6:60:2B:C6:BF:9C:00:CA:A1:D6:18 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0FC73BA67E1828E558D4B91D60138A415EAF9CFA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 136787 IP address blocks: 45.155.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:c7:3b:a6:7e:18:28:e5:58:d4:b9:1d:60:13:8a:41:5e:af:9c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=7F5A4A3481C82EED75B6602BC6BF9C00CAA1D618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3f:46:00:85:33:83:0f:61:4c:1e:a1:6d:c7: 83:ea:4e:82:01:5b:dc:93:e4:a1:f8:ee:c1:48:1e: 8d:5c:eb:a4:00:d3:1f:67:07:2b:86:43:aa:6a:f2: f2:80:74:da:2d:45:fa:b1:a3:d5:e3:0d:5e:50:63: 63:6f:70:ed:1e:a0:c3:dd:3c:2c:7e:7c:45:03:45: 83:8d:04:d8:fc:f7:06:f4:42:58:e3:56:06:ba:81: 51:e8:b7:78:25:d1:d6:12:af:47:11:64:36:13:e5: ce:92:f4:02:80:72:e0:2a:32:d9:88:3e:2b:09:68: 10:76:f1:1b:d2:81:c8:47:3b:45:36:52:80:a7:f3: 4b:5b:e8:7b:f8:8c:b5:e8:f9:5d:69:f4:45:0f:e1: dc:89:9e:13:b4:e4:65:1c:ca:bc:05:c3:fb:f2:7d: 85:ef:d0:aa:5c:50:c9:2d:38:56:9d:85:00:d2:9f: f2:db:97:df:a0:27:db:b6:12:04:9b:97:3d:53:52: c3:ca:49:13:05:42:0e:5d:10:ec:d5:ef:c0:3b:ce: fc:9c:65:5b:78:90:07:22:5e:58:92:24:55:dd:25: ea:bb:86:fa:33:9c:22:83:1c:48:c6:00:4c:3a:c4: 4b:0a:37:4b:c2:ea:ad:3d:14:36:48:32:35:d2:2a: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5A:4A:34:81:C8:2E:ED:75:B6:60:2B:C6:BF:9C:00:CA:A1:D6:18 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135352e34332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.43.0/24 Signature Algorithm: sha256WithRSAEncryption 98:a2:1d:49:59:3c:12:24:78:c8:da:f5:8a:fa:d5:42:d3:99: a6:ab:69:e4:ef:8f:c8:71:2e:2e:66:fc:04:20:e8:1a:8b:a1: ce:bb:2b:78:0f:1b:ae:8e:79:4a:f1:d9:2f:ef:12:97:73:a1: f1:3f:96:eb:a8:69:2c:7b:f4:7d:53:35:9c:ce:86:56:fd:5b: fa:a0:ae:31:bf:5a:bc:c2:51:f5:98:03:6d:44:a1:27:40:e1: 9b:b2:89:71:82:1a:65:45:db:4b:2b:b2:e1:b9:2e:f0:1a:cd: 09:61:83:32:6b:e8:db:b3:eb:c2:00:9d:53:23:da:a7:cc:59: d9:89:55:99:51:3c:ea:f5:36:42:91:64:83:18:1b:63:4f:70: 6d:ae:ae:c4:14:1c:c5:9f:a6:62:b0:b0:ed:69:c4:3b:c5:7b: 95:46:0c:c4:ee:00:b1:56:3b:2b:a0:31:f6:b8:ec:98:c5:0a: ab:85:8f:7a:81:96:29:ee:f1:04:4c:dc:56:6c:d8:2c:67:92: a9:da:0d:0f:cb:49:8c:cd:e5:37:44:60:a8:30:0e:f9:5e:35: 18:85:dd:71:c3:8c:de:bd:3a:9e:49:89:93:c9:d7:da:ae:f3: 18:3f:97:2a:56:cb:8d:71:1a:09:7f:37:b0:f3:ea:71:6d:19: 92:5f:a9:48 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUD8c7pn4YKOVY1LkdYBOKQV6vnPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKDdGNUE0QTM0ODFDODJFRUQ3NUI2NjAyQkM2QkY5QzAwQ0FBMUQ2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClP0YAhTODD2FMHqFtx4PqToIB W9yT5KH47sFIHo1c66QA0x9nByuGQ6pq8vKAdNotRfqxo9XjDV5QY2NvcO0eoMPd PCx+fEUDRYONBNj89wb0QljjVga6gVHot3gl0dYSr0cRZDYT5c6S9AKAcuAqMtmI PisJaBB28RvSgchHO0U2UoCn80tb6Hv4jLXo+V1p9EUP4dyJnhO05GUcyrwFw/vy fYXv0KpcUMktOFadhQDSn/Lbl9+gJ9u2EgSblz1TUsPKSRMFQg5dEOzV78A7zvyc ZVt4kAciXliSJFXdJeq7hvoznCKDHEjGAEw6xEsKN0vC6q09FDZIMjXSKlzxAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUf1pKNIHILu11tmArxr+cAMqh1hgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzUy ZTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtmyswDQYJKoZIhvcNAQELBQADggEBAJiiHUlZPBIkeMja9Yr61ULTmaar aeTvj8hxLi5m/AQg6BqLoc67K3gPG66OeUrx2S/vEpdzofE/luuoaSx79H1TNZzO hlb9W/qgrjG/WrzCUfWYA21EoSdA4ZuyiXGCGmVF20srsuG5LvAazQlhgzJr6Nuz 68IAnVMj2qfMWdmJVZlRPOr1NkKRZIMYG2NPcG2ursQUHMWfpmKwsO1pxDvFe5VG DMTuALFWOyugMfa47JjFCquFj3qBlinu8QRM3FZs2CxnkqnaDQ/LSYzN5TdEYKgw DvleNRiF3XHDjN69Op5JiZPJ19qu8xg/lypWy41xGgl/N7Dz6nFtGZJfqUg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:26 2025 by rpki-client