This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138342e302f32342d3234203d3e20313336373837.roa File: 34352e38302e3138342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: qWXKcYjSRlbZ5L3t4x93+mkwpiqxe86kumeWrhoJtzY= Subject key identifier: BE:02:4E:5A:C3:36:8C:4E:3F:33:21:DF:36:5F:BD:F6:9F:77:36:FC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 600690DD6DF8E26CFFD8503899E8DCDDF11E116F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 136787 IP address blocks: 45.80.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:06:90:dd:6d:f8:e2:6c:ff:d8:50:38:99:e8:dc:dd:f1:1e:11:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=BE024E5AC3368C4E3F3321DF365FBDF69F7736FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:f0:3e:6f:8c:1d:6d:2e:66:94:ca:0f:a6:93: e5:77:b6:cc:ba:5d:52:fc:b0:1a:a2:37:3d:44:c8: 81:21:be:18:b7:63:27:23:89:01:87:4c:8a:5c:c1: df:ba:a1:83:7a:7a:04:bf:13:62:7e:48:e0:45:d3: 6f:1f:8f:58:2d:90:45:52:00:25:03:a8:c4:32:46: fc:ad:c7:3c:af:4e:12:f7:c2:54:a2:83:99:48:93: 9c:1c:e2:82:83:2e:0e:37:16:94:1a:8a:9c:5a:31: 3f:88:6e:6b:1c:88:e6:88:f2:ad:c3:d2:b4:86:24: 5c:86:8f:93:3a:3a:1a:39:c5:f3:e5:c5:c9:56:ce: 40:83:27:58:b6:1f:07:aa:30:ab:f4:a6:4f:16:27: 1e:56:cb:88:55:27:c3:69:e5:86:7f:f6:21:1a:7a: 6a:34:8b:e4:c6:22:a1:46:7d:f9:2e:48:4e:6d:33: a9:ae:6f:89:98:12:e1:77:5a:57:93:de:5b:c8:57: e6:4d:13:d2:33:ba:96:57:d2:dc:79:20:3d:6b:e3: ea:b4:0b:a8:33:e7:cf:68:86:8e:5c:2b:cb:2b:1e: bd:ac:f7:e0:88:d6:5c:36:e6:ae:d7:68:91:be:7b: 1e:a1:35:d5:b4:3a:07:71:b3:76:96:e9:bf:bb:9a: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:02:4E:5A:C3:36:8C:4E:3F:33:21:DF:36:5F:BD:F6:9F:77:36:FC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.184.0/24 Signature Algorithm: sha256WithRSAEncryption 64:f3:d5:b1:9b:16:27:12:fb:69:d0:16:65:ee:0e:04:8b:6c: 44:ed:ef:25:f1:ef:a4:91:85:ab:1a:66:79:56:ca:a3:1b:ed: 8b:b2:52:f4:d5:04:0d:13:29:4a:00:06:b7:f5:d8:45:ea:7d: c5:88:85:03:e0:d7:b6:86:b6:e2:39:53:e3:e4:6b:c8:bb:ae: 1b:bd:6c:f8:d5:0c:f1:fe:0b:b9:0b:5d:ab:e8:d6:9a:af:10: 82:95:b9:b1:34:67:4e:05:96:d5:f6:e8:f4:7b:42:b0:da:3d: 77:81:80:91:8e:6b:37:e5:75:47:b7:3d:2b:6b:e5:6f:35:cf: 6a:c8:e8:18:5a:a2:f4:c9:41:a7:fa:30:0c:71:a1:a4:05:a3: 1c:39:3d:a7:67:a9:6e:22:ad:51:0e:e1:74:44:26:51:ae:3b: 09:c6:3d:91:56:20:af:ac:c3:1d:75:18:25:c7:f6:45:df:55: 5e:ab:a4:c8:da:71:f6:93:24:cc:b7:b8:44:0f:f0:4d:86:3b: f7:c6:9d:e9:67:a2:1d:03:0f:cc:ea:e6:69:c8:41:b2:5e:73: 8f:16:95:6a:25:5f:fc:d3:ce:76:6a:c3:8a:a3:92:f7:01:75: fe:d6:8f:33:d5:e6:f1:96:d6:1f:40:96:07:20:49:c7:de:98: 4b:0a:cf:04 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUYAaQ3W344mz/2FA4mejc3fEeEW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKEJFMDI0RTVBQzMzNjhDNEUzRjMzMjFERjM2NUZCREY2OUY3NzM2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD38D5vjB1tLmaUyg+mk+V3tsy6 XVL8sBqiNz1EyIEhvhi3YycjiQGHTIpcwd+6oYN6egS/E2J+SOBF028fj1gtkEVS ACUDqMQyRvytxzyvThL3wlSig5lIk5wc4oKDLg43FpQaipxaMT+IbmsciOaI8q3D 0rSGJFyGj5M6Oho5xfPlxclWzkCDJ1i2HweqMKv0pk8WJx5Wy4hVJ8Np5YZ/9iEa emo0i+TGIqFGffkuSE5tM6mub4mYEuF3WleT3lvIV+ZNE9IzupZX0tx5ID1r4+q0 C6gz589oho5cK8srHr2s9+CI1lw25q7XaJG+ex6hNdW0Ogdxs3aW6b+7mo9dAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUvgJOWsM2jE4/MyHfNl+99p93NvwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMwMmUz MTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtULgwDQYJKoZIhvcNAQELBQADggEBAGTz1bGbFicS+2nQFmXuDgSLbETt 7yXx76SRhasaZnlWyqMb7YuyUvTVBA0TKUoABrf12EXqfcWIhQPg17aGtuI5U+Pk a8i7rhu9bPjVDPH+C7kLXavo1pqvEIKVubE0Z04FltX26PR7QrDaPXeBgJGOazfl dUe3PStr5W81z2rI6BhaovTJQaf6MAxxoaQFoxw5PadnqW4irVEO4XREJlGuOwnG PZFWIK+swx11GCXH9kXfVV6rpMjacfaTJMy3uEQP8E2GO/fGnelnoh0DD8zq5mnI QbJec48WlWolX/zTznZqw4qjkvcBdf7WjzPV5vGW1h9AlgcgScfemEsKzwQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:42 2025 by rpki-client