This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133372e302f32342d3234203d3e20313336373837.roa File: 34352e36362e3133372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Lf5VpYwN5QWgY1HlSK/BmWIoe95rmvXdZ1yagyOJ1Eo= Subject key identifier: D1:A1:CD:A0:54:CF:6E:C2:D8:1F:83:CB:54:FA:A9:DC:73:B6:42:8A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 085BD6157A4B112D57C32954E28B4177DC4FAC9E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 136787 IP address blocks: 45.66.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5b:d6:15:7a:4b:11:2d:57:c3:29:54:e2:8b:41:77:dc:4f:ac:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=D1A1CDA054CF6EC2D81F83CB54FAA9DC73B6428A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0e:f2:a6:93:da:b1:43:f8:7b:21:26:8f:fc: 55:29:22:f6:88:d8:53:ec:a3:a7:ee:cb:01:1b:af: bc:1a:9d:6e:81:d3:14:0f:35:ae:26:e5:3e:ca:2c: 9c:5f:ea:48:7e:16:fd:a9:8d:bb:b3:9e:a7:6b:0a: 71:d5:4c:fc:f7:59:b7:a4:6f:fe:41:70:46:f9:70: fc:04:ff:ff:1b:ac:b2:7d:b2:44:16:45:54:2d:db: 2e:5c:d0:67:7e:bf:e2:7b:a6:02:24:8c:2c:68:63: 52:87:d6:88:2a:91:ba:6f:c2:9e:ef:f2:ed:58:29: cc:e6:35:5e:9d:fa:1e:33:77:27:55:d6:5e:fa:23: 99:ac:55:2b:4c:e6:16:e4:11:94:51:5e:7c:bd:bf: f9:b2:aa:4a:ca:cc:55:b8:21:6d:fc:16:a1:30:dd: 08:20:93:9b:29:31:ba:af:c4:ec:b2:8a:09:c9:69: 03:4b:a1:52:63:16:3f:e5:34:7d:85:37:06:e2:bd: 02:86:12:43:c4:6f:01:b6:5a:26:c8:b1:f9:e3:00: 4f:2a:0e:bc:b4:cc:2e:24:98:2a:83:3f:2a:15:b3: 44:ca:58:69:4d:83:60:74:9a:40:5a:05:9c:61:de: 3a:2d:4e:d9:61:7e:ff:ee:00:f9:07:54:24:e1:a1: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A1:CD:A0:54:CF:6E:C2:D8:1F:83:CB:54:FA:A9:DC:73:B6:42:8A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.137.0/24 Signature Algorithm: sha256WithRSAEncryption 03:13:d3:19:e4:bc:5f:4e:db:7b:d6:ae:cc:c5:a0:21:fd:f5: 47:b6:37:05:0c:e1:1a:4d:e7:c1:ee:79:33:55:05:02:3e:bf: f3:59:58:87:4a:07:25:b9:28:b8:a8:0a:1f:99:e4:c3:c5:6b: 66:ad:b5:6c:8b:1c:a9:54:9f:33:21:05:1f:b4:bd:99:fe:db: 5e:3c:dd:5b:b0:99:b8:f5:7d:15:85:26:ef:c2:28:26:1b:06: f4:79:c7:81:14:eb:2a:bb:a7:7e:d0:2a:11:92:9d:98:e0:91: f5:91:bb:4a:e5:27:48:a9:56:e6:6d:16:e5:eb:72:1c:24:5f: 83:5e:82:e5:1e:9b:33:cf:e9:6e:c6:55:6b:7b:56:ed:c5:ad: a3:a0:cf:6e:d1:f2:f5:49:5d:2b:4e:30:f5:ad:8b:7b:19:3e: 21:1b:28:d1:15:84:eb:cc:d6:f5:bf:7c:86:d6:ae:76:49:c3: 86:c5:2f:b2:1b:f7:82:8f:b2:30:91:26:11:57:ae:18:52:d4: 7a:6a:16:3b:09:60:f6:59:4a:24:b0:ee:4d:6f:9b:7d:9a:f4: 1e:48:30:f3:7e:a7:5a:ed:63:d9:19:d4:ef:44:f6:af:22:47: 74:1a:a6:35:a5:b9:bd:8d:c8:6b:37:d9:37:4b:34:b5:64:b4: ba:cc:4b:1a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUCFvWFXpLES1XwylU4otBd9xPrJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKEQxQTFDREEwNTRDRjZFQzJEODFGODNDQjU0RkFBOURDNzNCNjQyOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpDvKmk9qxQ/h7ISaP/FUpIvaI 2FPso6fuywEbr7wanW6B0xQPNa4m5T7KLJxf6kh+Fv2pjbuznqdrCnHVTPz3Wbek b/5BcEb5cPwE//8brLJ9skQWRVQt2y5c0Gd+v+J7pgIkjCxoY1KH1ogqkbpvwp7v 8u1YKczmNV6d+h4zdydV1l76I5msVStM5hbkEZRRXny9v/myqkrKzFW4IW38FqEw 3Qggk5spMbqvxOyyignJaQNLoVJjFj/lNH2FNwbivQKGEkPEbwG2WibIsfnjAE8q Dry0zC4kmCqDPyoVs0TKWGlNg2B0mkBaBZxh3jotTtlhfv/uAPkHVCThoSOtAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU0aHNoFTPbsLYH4PLVPqp3HO2QoowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM2MmUz MTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtQokwDQYJKoZIhvcNAQELBQADggEBAAMT0xnkvF9O23vWrszFoCH99Ue2 NwUM4RpN58HueTNVBQI+v/NZWIdKByW5KLioCh+Z5MPFa2attWyLHKlUnzMhBR+0 vZn+21483Vuwmbj1fRWFJu/CKCYbBvR5x4EU6yq7p37QKhGSnZjgkfWRu0rlJ0ip VuZtFuXrchwkX4NeguUemzPP6W7GVWt7Vu3FraOgz27R8vVJXStOMPWti3sZPiEb KNEVhOvM1vW/fIbWrnZJw4bFL7Ib94KPsjCRJhFXrhhS1HpqFjsJYPZZSiSw7k1v m32a9B5IMPN+p1rtY9kZ1O9E9q8iR3QapjWlub2NyGs32TdLNLVktLrMSxo= -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:45 2025 by rpki-client