This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa File: 34352e36362e3133392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: fu0EVRksHCtUhwZwdvo5YyCZT2Qvqf91jMA9FK2kbnk= Subject key identifier: 63:5B:34:BB:71:D2:2F:4D:1C:82:5D:3B:E5:9C:6C:7C:81:F8:40:E1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6E32D55565BC98D9E8C24C4D0266C3D193DB2709 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:01 +0000 ROA not before: Fri 21 Nov 2025 15:44:01 +0000 ROA not after: Fri 20 Nov 2026 15:49:01 +0000 asID: 136787 IP address blocks: 45.66.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:32:d5:55:65:bc:98:d9:e8:c2:4c:4d:02:66:c3:d1:93:db:27:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:01 2025 GMT Not After : Nov 20 15:49:01 2026 GMT Subject: CN=635B34BB71D22F4D1C825D3BE59C6C7C81F840E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:11:49:d6:4f:b3:ef:e3:c5:c8:16:c6:24:99: dc:26:a2:3f:0c:20:5a:ac:c5:98:42:8d:67:c2:fb: e7:95:3f:ef:c4:b4:80:ba:76:d7:cc:61:0f:d9:2d: 42:02:f7:88:18:15:f1:e5:af:0c:75:8c:74:54:3b: 90:55:f5:13:c8:5e:57:6d:24:46:58:ec:46:cc:11: 70:9e:d9:67:2f:6f:51:1d:c7:e7:28:ab:50:1b:94: be:a6:44:27:16:39:c6:db:81:2e:ed:09:3a:51:04: 7c:9e:af:e2:4a:93:a5:5e:9f:1e:7e:fc:c4:f7:99: 5b:25:da:bd:f2:3d:12:fb:b5:86:02:a7:b3:a8:e5: 4b:3f:29:fa:c4:cd:bc:ca:6a:bd:05:f2:f5:53:c0: 1b:40:78:0b:a9:97:73:63:89:c1:11:d2:05:c4:ab: ca:17:f9:35:3d:46:2e:75:4e:aa:5e:b5:fc:72:09: 6a:e3:1a:67:c9:e5:7e:93:6b:99:8e:d2:36:c9:59: f7:5b:34:f7:ec:6a:ba:75:52:5c:eb:96:9b:fa:c7: c4:97:25:a4:da:88:7d:0e:f9:c8:1f:4e:97:9c:f9: 05:41:8f:0c:24:11:d1:c6:c0:b0:f5:6c:4e:fd:f6: 39:20:34:d9:52:c2:4c:6c:8f:f8:a1:1d:26:50:53: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5B:34:BB:71:D2:2F:4D:1C:82:5D:3B:E5:9C:6C:7C:81:F8:40:E1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.139.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:87:ef:7d:fb:e3:6a:bd:5c:ec:f3:b5:8a:1c:78:3a:0c:ec: b4:d4:38:d0:5d:85:69:03:6b:23:b5:9b:98:18:ed:ba:da:4b: 79:fa:b9:c4:99:f1:6f:0f:18:49:96:6b:72:65:91:4d:cd:f3: c5:dd:8b:e1:10:02:05:6e:e8:4e:5a:65:8c:f9:0e:1c:c4:ec: 66:90:44:36:7b:e2:90:7d:bb:19:a1:a9:f6:25:13:3d:6f:6d: 4b:82:c2:4a:ad:2f:e5:b5:f4:c1:c0:7d:f3:bb:bb:b8:55:e1: 5d:bd:9e:1b:08:7b:1f:2e:b1:31:a3:c7:de:56:14:c9:5e:1b: 10:20:ca:25:23:18:bd:70:97:39:7f:7f:cc:92:0f:9a:53:b4: 59:d1:c4:c7:09:c8:93:c8:f3:50:92:49:88:d8:f9:6b:99:e2: bc:2c:a2:e1:84:a8:95:4a:d5:14:21:da:63:10:54:0d:03:32: 29:08:77:1c:d8:6c:1f:56:88:06:14:f1:d1:e6:1b:15:16:83: 99:25:44:2c:31:84:5b:5f:d0:f8:1b:7e:f8:6b:19:8f:43:5f: 64:33:82:01:ae:28:75:cc:59:e9:08:2e:cb:9c:25:b2:79:d8: c5:e5:a4:14:e2:69:c5:ed:ae:1f:03:9d:df:e2:03:48:86:0d: 7c:cf:27:d3 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUbjLVVWW8mNnowkxNAmbD0ZPbJwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDFaFw0yNjExMjAxNTQ5MDFaMDMxMTAvBgNV BAMTKDYzNUIzNEJCNzFEMjJGNEQxQzgyNUQzQkU1OUM2QzdDODFGODQwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpEUnWT7Pv48XIFsYkmdwmoj8M IFqsxZhCjWfC++eVP+/EtIC6dtfMYQ/ZLUIC94gYFfHlrwx1jHRUO5BV9RPIXldt JEZY7EbMEXCe2Wcvb1Edx+coq1AblL6mRCcWOcbbgS7tCTpRBHyer+JKk6Venx5+ /MT3mVsl2r3yPRL7tYYCp7Oo5Us/KfrEzbzKar0F8vVTwBtAeAupl3NjicER0gXE q8oX+TU9Ri51TqpetfxyCWrjGmfJ5X6Ta5mO0jbJWfdbNPfsarp1Ulzrlpv6x8SX JaTaiH0O+cgfTpec+QVBjwwkEdHGwLD1bE799jkgNNlSwkxsj/ihHSZQU/7lAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUY1s0u3HSL00cgl075ZxsfIH4QOEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM2MmUz MTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtQoswDQYJKoZIhvcNAQELBQADggEBAFuH733742q9XOzztYoceDoM7LTU ONBdhWkDayO1m5gY7braS3n6ucSZ8W8PGEmWa3JlkU3N88Xdi+EQAgVu6E5aZYz5 DhzE7GaQRDZ74pB9uxmhqfYlEz1vbUuCwkqtL+W19MHAffO7u7hV4V29nhsIex8u sTGjx95WFMleGxAgyiUjGL1wlzl/f8ySD5pTtFnRxMcJyJPI81CSSYjY+WuZ4rws ouGEqJVK1RQh2mMQVA0DMikIdxzYbB9WiAYU8dHmGxUWg5klRCwxhFtf0Pgbfvhr GY9DX2QzggGuKHXMWekILsucJbJ52MXlpBTiacXtrh8Dnd/iA0iGDXzPJ9M= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:04 2025 by rpki-client