This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133382e302f32342d3234203d3e20313336373837.roa File: 34352e36362e3133382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: KZr/ibZG0Ce9B+3gZuCk9Tej0XDSbXbgTwNn4K8kip0= Subject key identifier: 75:AE:11:38:5E:BB:22:E5:C0:A6:5D:96:D1:7F:C5:FC:62:B6:E1:EC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 56C367280714CA960A1C62B30E118F20EDC92A70 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:05 +0000 ROA not before: Fri 21 Nov 2025 15:44:05 +0000 ROA not after: Fri 20 Nov 2026 15:49:05 +0000 asID: 136787 IP address blocks: 45.66.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c3:67:28:07:14:ca:96:0a:1c:62:b3:0e:11:8f:20:ed:c9:2a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:05 2025 GMT Not After : Nov 20 15:49:05 2026 GMT Subject: CN=75AE11385EBB22E5C0A65D96D17FC5FC62B6E1EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8e:07:7b:2c:1d:e7:bc:80:2f:5d:92:3b:72: ee:44:bc:33:86:98:68:cd:b5:60:db:59:27:58:13: c9:b4:81:3d:11:b0:a9:58:e2:de:d1:bb:28:ec:7f: 33:7a:7b:02:e1:cc:f9:a1:c4:40:dc:95:c5:b0:37: 69:9e:af:5e:a9:06:e7:a8:90:30:da:8a:a9:d2:3a: 07:d3:67:e8:f5:5f:3c:07:1d:d4:06:94:01:94:c9: 4f:6f:dc:72:71:a1:cc:2d:98:57:96:6d:ee:44:11: d5:4e:e2:94:84:7b:9d:f2:22:dc:5e:a3:98:39:82: 5f:bc:43:0f:20:d2:1e:19:4b:a0:59:56:88:d8:88: 7e:58:08:7b:03:08:61:f3:d1:45:45:db:3d:1b:4b: 88:e3:1f:4d:4d:a3:8c:7c:20:a9:b6:d4:12:0b:0d: 08:50:47:24:8c:cc:3e:cd:8d:24:e0:61:c0:0b:82: b9:31:7f:42:8a:dc:c6:85:d7:1d:07:d5:50:d8:6d: 0b:74:1a:d0:4d:16:de:52:ed:de:54:7d:66:b3:72: c2:01:f7:2e:21:31:f8:5c:9b:62:b3:de:0e:de:cb: ed:06:1a:44:ae:fb:21:ad:95:7a:b8:48:fe:ae:be: ec:e1:5d:58:07:bc:7c:53:44:19:71:10:b9:37:e8: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:AE:11:38:5E:BB:22:E5:C0:A6:5D:96:D1:7F:C5:FC:62:B6:E1:EC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.138.0/24 Signature Algorithm: sha256WithRSAEncryption 85:95:78:1b:8e:e2:df:9b:52:a6:03:9c:c7:ed:4a:98:56:dd: 88:53:e2:47:4d:3a:a4:b8:9f:ab:76:49:fb:fd:3e:8b:2a:f2: 72:84:14:b1:40:87:94:cb:ad:1c:1c:72:85:63:7e:84:0d:93: 51:60:82:68:f8:05:50:7c:5e:e1:e3:3c:79:5d:bb:64:63:6c: f1:0a:a3:fd:e3:c4:79:d8:e0:14:99:7b:3d:cb:28:52:e4:4f: 10:59:9f:4e:cd:64:6f:2b:7d:75:9c:93:29:82:23:fd:5b:1a: e7:22:13:be:1b:7a:6e:a4:af:03:01:2b:b3:39:c2:87:2c:0d: 4f:b1:dc:ed:a5:3e:af:c8:95:d2:95:85:a4:ac:f2:f3:6d:f9: 11:f0:02:c1:e7:e4:8b:4b:7e:5f:e7:7c:2c:52:a2:48:3f:05: 5b:27:85:26:02:3a:c5:b1:96:13:f4:50:89:42:8a:aa:cc:aa: 1b:c1:a9:3e:48:02:ab:89:4a:9b:cb:13:bf:3b:78:4e:c2:a5: f8:ce:d8:9a:b0:07:64:6a:18:ae:d6:01:2e:a4:db:6b:03:02: a3:14:8b:2e:79:72:f7:52:f1:10:f4:d3:bf:3f:70:3b:55:31: 61:ec:1d:8a:ba:54:c7:81:0b:01:bf:5e:14:7c:41:a9:71:75: cb:4f:c9:61 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUVsNnKAcUypYKHGKzDhGPIO3JKnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDVaFw0yNjExMjAxNTQ5MDVaMDMxMTAvBgNV BAMTKDc1QUUxMTM4NUVCQjIyRTVDMEE2NUQ5NkQxN0ZDNUZDNjJCNkUxRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejgd7LB3nvIAvXZI7cu5EvDOG mGjNtWDbWSdYE8m0gT0RsKlY4t7RuyjsfzN6ewLhzPmhxEDclcWwN2mer16pBueo kDDaiqnSOgfTZ+j1XzwHHdQGlAGUyU9v3HJxocwtmFeWbe5EEdVO4pSEe53yItxe o5g5gl+8Qw8g0h4ZS6BZVojYiH5YCHsDCGHz0UVF2z0bS4jjH01No4x8IKm21BIL DQhQRySMzD7NjSTgYcALgrkxf0KK3MaF1x0H1VDYbQt0GtBNFt5S7d5UfWazcsIB 9y4hMfhcm2Kz3g7ey+0GGkSu+yGtlXq4SP6uvuzhXVgHvHxTRBlxELk36GxRAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUda4ROF67IuXApl2W0X/F/GK24ewwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM2MmUz MTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtQoowDQYJKoZIhvcNAQELBQADggEBAIWVeBuO4t+bUqYDnMftSphW3YhT 4kdNOqS4n6t2Sfv9Posq8nKEFLFAh5TLrRwccoVjfoQNk1Fggmj4BVB8XuHjPHld u2RjbPEKo/3jxHnY4BSZez3LKFLkTxBZn07NZG8rfXWckymCI/1bGuciE74bem6k rwMBK7M5wocsDU+x3O2lPq/IldKVhaSs8vNt+RHwAsHn5ItLfl/nfCxSokg/BVsn hSYCOsWxlhP0UIlCiqrMqhvBqT5IAquJSpvLE787eE7CpfjO2JqwB2RqGK7WAS6k 22sDAqMUiy55cvdS8RD0078/cDtVMWHsHYq6VMeBCwG/XhR8QalxdctPyWE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:11 2025 by rpki-client