This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e382e3134382e302f32332d3332203d3e203531313637.roa File: 34352e382e3134382e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: GOfwnXz5Y0GhCl97RPfcqIRmsWpqTxLpG6AFeZ7bAio= Subject key identifier: 59:18:36:C0:E5:50:E5:E2:3D:F1:86:50:65:0A:B6:8E:31:38:CE:DA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 449AE2A042731AC5E5E1B5EA8A89183108527E4D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e382e3134382e302f32332d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:27 +0000 ROA not before: Fri 28 Nov 2025 11:44:27 +0000 ROA not after: Fri 27 Nov 2026 11:49:27 +0000 asID: 51167 IP address blocks: 45.8.148.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:9a:e2:a0:42:73:1a:c5:e5:e1:b5:ea:8a:89:18:31:08:52:7e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:27 2025 GMT Not After : Nov 27 11:49:27 2026 GMT Subject: CN=591836C0E550E5E23DF18650650AB68E3138CEDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1c:38:ce:8d:32:a6:53:32:3e:ff:ce:9d:32: 13:08:11:ba:90:f1:c8:dd:72:3c:bf:00:3c:81:0b: a9:1e:9a:17:22:d1:d7:a0:56:e8:e1:96:68:a3:ca: 43:e9:83:46:cc:53:b1:7f:d0:8b:95:76:db:bb:8a: e1:9a:f1:e1:71:c3:b6:4d:7f:da:5a:b2:c9:ae:39: 59:b9:e8:5f:1c:33:80:5c:87:1d:96:ba:e8:78:86: 2b:eb:81:26:b8:07:06:2c:8c:19:d0:c1:eb:a0:58: 14:92:ac:da:29:e8:b3:f3:7e:98:44:02:74:c0:40: c6:f6:8a:dc:9c:f1:6a:48:f1:e5:17:e2:70:71:64: cb:c5:26:15:14:86:71:7e:39:f3:45:a9:0a:f8:cd: 75:7f:31:90:55:e3:12:09:32:c0:16:e8:58:6d:a6: 37:61:27:d8:08:d7:00:1f:86:3d:8c:7c:2c:fa:9a: ac:6d:f2:eb:a1:63:ba:35:b4:44:e6:62:c4:64:aa: 28:33:f6:c9:68:f7:ba:ca:7d:de:ad:28:9c:0c:4f: 16:ed:3b:29:54:14:b4:fc:26:8d:f3:b9:09:b8:aa: 00:37:f5:3e:2f:ce:f8:c5:a4:d6:61:22:a5:d4:57: 76:61:07:ed:97:0a:d7:67:ea:7d:bb:e9:6c:5f:1d: e5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:18:36:C0:E5:50:E5:E2:3D:F1:86:50:65:0A:B6:8E:31:38:CE:DA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e382e3134382e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.148.0/23 Signature Algorithm: sha256WithRSAEncryption 56:f2:ed:48:b2:7a:bd:5a:19:9b:f0:43:0b:bb:0d:b8:04:f7: 4d:45:99:dd:59:9b:19:16:24:4f:d8:9e:69:cd:3e:15:e6:aa: 4b:bb:3a:31:d6:23:88:e3:53:18:6e:75:ff:57:30:3e:74:c1: 79:ac:ec:79:e0:0c:69:f6:cf:5b:7c:b3:aa:89:33:6d:db:53: 1a:74:3f:f9:e8:ed:3b:4b:14:3f:f7:23:71:60:c9:e1:57:6e: 4a:72:37:10:a3:5d:c8:8a:fa:72:e8:3c:7e:e5:f1:17:7d:73: 35:c0:14:8b:03:08:e1:d3:f8:74:21:aa:18:45:00:dd:67:09: 1b:c9:07:26:53:e1:e7:65:b1:af:3d:ff:aa:47:ca:5c:c5:db: 9f:45:47:98:c6:ec:af:02:da:1a:fb:62:2e:33:38:14:b8:ac: 9b:86:a3:e4:dd:82:4d:03:78:9a:7d:4e:95:50:fa:8d:d2:50: 27:c5:a5:eb:44:63:b0:47:7f:67:00:c3:ba:f7:e2:7d:8f:ea: 8e:d7:0c:2e:f3:ca:8e:8a:ab:03:1f:59:e4:4e:a9:37:7d:09: 0d:4f:b3:3f:77:f9:10:7f:80:93:58:1c:02:a3:f5:04:e5:28: c7:8f:a5:8a:7c:44:4c:5b:c2:45:ba:53:a6:9a:a4:df:99:58: 9a:c9:ef:92 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIURJrioEJzGsXl4bXqiokYMQhSfk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjdaFw0yNjExMjcxMTQ5MjdaMDMxMTAvBgNV BAMTKDU5MTgzNkMwRTU1MEU1RTIzREYxODY1MDY1MEFCNjhFMzEzOENFREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HDjOjTKmUzI+/86dMhMIEbqQ 8cjdcjy/ADyBC6kemhci0degVujhlmijykPpg0bMU7F/0IuVdtu7iuGa8eFxw7ZN f9passmuOVm56F8cM4Bchx2Wuuh4hivrgSa4BwYsjBnQweugWBSSrNop6LPzfphE AnTAQMb2ityc8WpI8eUX4nBxZMvFJhUUhnF+OfNFqQr4zXV/MZBV4xIJMsAW6Fht pjdhJ9gI1wAfhj2MfCz6mqxt8uuhY7o1tETmYsRkqigz9slo97rKfd6tKJwMTxbt OylUFLT8Jo3zuQm4qgA39T4vzvjFpNZhIqXUV3ZhB+2XCtdn6n276WxfHeU1AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUWRg2wOVQ5eI98YZQZQq2jjE4ztowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODJlMzEz NDM4MmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AS0IlDANBgkqhkiG9w0BAQsFAAOCAQEAVvLtSLJ6vVoZm/BDC7sNuAT3TUWZ3Vmb GRYkT9ieac0+FeaqS7s6MdYjiONTGG51/1cwPnTBeazseeAMafbPW3yzqokzbdtT GnQ/+ejtO0sUP/cjcWDJ4VduSnI3EKNdyIr6cug8fuXxF31zNcAUiwMI4dP4dCGq GEUA3WcJG8kHJlPh52Wxrz3/qkfKXMXbn0VHmMbsrwLaGvtiLjM4FLism4aj5N2C TQN4mn1OlVD6jdJQJ8Wl60RjsEd/ZwDDuvfifY/qjtcMLvPKjoqrAx9Z5E6pN30J DU+zP3f5EH+Ak1gcAqP1BOUox4+linxETFvCRbpTppqk35lYmsnvkg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:50 2025 by rpki-client