This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e382e3135302e302f32332d3332203d3e203531313637.roa File: 34352e382e3135302e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: ZoueYDZpJ1qtww2XRZvDcx+Dgv6cL/3LQHmel+bBMa8= Subject key identifier: F2:3D:20:BE:08:46:E3:1E:40:D8:74:D8:B5:7B:14:F0:6E:63:23:FA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 433CF3BAE6A5A2458925A21A945E844E15C7DA1E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e382e3135302e302f32332d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 51167 IP address blocks: 45.8.150.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:3c:f3:ba:e6:a5:a2:45:89:25:a2:1a:94:5e:84:4e:15:c7:da:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=F23D20BE0846E31E40D874D8B57B14F06E6323FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:0e:23:70:8d:b8:40:27:4d:e9:27:99:14: 46:1d:a2:6b:bd:b0:1f:86:0c:de:1c:4c:dd:13:74: 69:9f:c7:63:09:25:ba:01:c3:d5:83:8a:51:2d:27: 91:3b:a4:d6:ca:c9:65:54:f4:52:15:f5:3f:45:96: d7:a2:fd:cc:29:79:c4:db:94:b6:40:76:33:cd:05: bc:5c:79:c8:36:0f:8d:24:20:a0:d3:07:dc:09:e0: f4:fb:5c:4f:b3:db:2a:59:08:79:c4:75:6d:34:ed: a4:e5:cc:eb:b4:f4:6b:7b:12:70:6b:02:dd:81:6f: 50:0c:91:90:8c:f3:41:40:9c:2a:78:8a:df:13:ae: 7e:15:53:75:88:a3:9b:79:3d:cd:01:bd:7d:4f:fc: 21:48:f6:b5:06:08:34:40:04:de:c8:27:96:5b:d7: fa:b9:fe:f8:72:eb:59:ae:b2:df:74:87:3c:83:c2: 08:7f:09:64:57:60:e5:37:c4:bb:fe:a4:4c:2e:6f: c5:ef:e6:25:06:f5:71:04:3e:ec:78:7a:7c:2d:6a: c8:bf:5b:c2:1d:d6:e7:56:71:22:9a:61:57:c9:9c: 54:32:bc:31:c3:e0:50:bc:d4:84:f6:67:de:11:71: 50:eb:e5:ca:9d:ea:dd:69:af:5c:4e:55:9a:ae:db: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:20:BE:08:46:E3:1E:40:D8:74:D8:B5:7B:14:F0:6E:63:23:FA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e382e3135302e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.150.0/23 Signature Algorithm: sha256WithRSAEncryption 06:4d:bc:73:2e:51:c7:70:50:44:f9:8e:55:c8:cc:71:c2:7a: 26:ff:36:c0:b6:e9:91:b5:c6:be:23:dc:2d:52:fd:3c:ec:f0: 1a:f2:a2:8d:c5:9c:7f:f7:53:12:4d:59:96:d2:ee:aa:16:ac: fb:06:ef:ae:27:70:52:8f:57:14:3d:35:9d:e3:be:28:78:88: 8d:2f:42:9e:8a:6c:47:08:09:0d:c2:2f:79:c1:22:ee:37:fe: 08:e2:c1:06:73:8a:e2:c2:1c:51:01:94:c8:db:19:bf:bf:9e: d1:d2:29:e3:ed:a8:e8:bf:31:98:67:08:7c:ae:8b:bd:40:75: b4:db:7b:46:8a:89:f6:ad:93:c1:47:cd:f4:e8:50:48:3c:00: 73:67:76:1a:e6:1f:3f:4b:c1:9f:ba:4b:90:2c:23:53:bf:c0: 66:30:bf:54:e8:13:f3:ab:34:62:db:80:5e:26:98:4f:08:63: 30:c5:80:84:84:8b:9e:c5:bf:22:d8:81:63:c4:a5:e0:58:e8: 22:09:6c:05:a5:f8:e6:53:9b:6a:3e:a7:b6:5a:e7:3c:3f:d6: 50:a0:fc:13:5d:36:6c:6b:f0:ba:4f:e5:49:e2:83:0d:f2:6d: 6a:0b:a4:09:3d:dd:f1:19:50:e2:dc:23:a3:3c:74:21:37:58: b6:57:05:75 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQzzzuualokWJJaIalF6EThXH2h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKEYyM0QyMEJFMDg0NkUzMUU0MEQ4NzREOEI1N0IxNEYwNkU2MzIzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAlA4jcI24QCdN6SeZFEYdomu9 sB+GDN4cTN0TdGmfx2MJJboBw9WDilEtJ5E7pNbKyWVU9FIV9T9Fltei/cwpecTb lLZAdjPNBbxcecg2D40kIKDTB9wJ4PT7XE+z2ypZCHnEdW007aTlzOu09Gt7EnBr At2Bb1AMkZCM80FAnCp4it8Trn4VU3WIo5t5Pc0BvX1P/CFI9rUGCDRABN7IJ5Zb 1/q5/vhy61must90hzyDwgh/CWRXYOU3xLv+pEwub8Xv5iUG9XEEPux4enwtasi/ W8Id1udWcSKaYVfJnFQyvDHD4FC81IT2Z94RcVDr5cqd6t1pr1xOVZqu23nVAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU8j0gvghG4x5A2HTYtXsU8G5jI/owHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODJlMzEz NTMwMmUzMDJmMzIzMzJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AS0IljANBgkqhkiG9w0BAQsFAAOCAQEABk28cy5Rx3BQRPmOVcjMccJ6Jv82wLbp kbXGviPcLVL9POzwGvKijcWcf/dTEk1ZltLuqhas+wbvridwUo9XFD01neO+KHiI jS9CnopsRwgJDcIvecEi7jf+COLBBnOK4sIcUQGUyNsZv7+e0dIp4+2o6L8xmGcI fK6LvUB1tNt7RoqJ9q2TwUfN9OhQSDwAc2d2GuYfP0vBn7pLkCwjU7/AZjC/VOgT 86s0YtuAXiaYTwhjMMWAhISLnsW/ItiBY8Sl4FjoIglsBaX45lObaj6ntlrnPD/W UKD8E102bGvwuk/lSeKDDfJtagukCT3d8RlQ4twjozx0ITdYtlcFdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:06 2025 by rpki-client