This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20313336373837.roa File: 34352e38302e3138352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: A8ekVBtCTR08PXnBfFGs+Ji+SdcWiNSYb4nGTgC/s1E= Subject key identifier: 85:4F:A8:96:F2:E7:8F:03:7B:32:66:1B:0A:7D:CF:E3:01:31:E2:08 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1CDD177B506456DFDD19A33B95D5A94A4CF89150 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:35 +0000 ROA not before: Fri 28 Nov 2025 11:44:35 +0000 ROA not after: Fri 27 Nov 2026 11:49:35 +0000 asID: 136787 IP address blocks: 45.80.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:dd:17:7b:50:64:56:df:dd:19:a3:3b:95:d5:a9:4a:4c:f8:91:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:35 2025 GMT Not After : Nov 27 11:49:35 2026 GMT Subject: CN=854FA896F2E78F037B32661B0A7DCFE30131E208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:47:1b:5e:30:56:88:2a:f6:ed:2f:a2:51: 64:8e:02:ea:2f:8d:b4:4c:2b:34:bd:36:e2:8c:5a: a6:8b:4f:32:f2:69:be:16:37:08:eb:58:8f:70:51: a6:8d:26:31:8e:78:ef:db:10:51:a7:a8:1e:47:b7: 2b:9c:f5:55:65:58:7e:ec:92:7e:15:27:a8:41:5d: 39:be:94:84:9b:cc:63:2b:a3:40:2a:2d:c0:85:ae: 2d:4a:21:96:61:d0:97:75:e0:b9:50:66:44:ff:11: 98:af:2a:cb:08:50:89:17:54:18:6b:15:86:3a:36: d6:55:1d:6b:b5:1f:da:2c:a9:bc:13:62:c4:fb:b7: 66:91:aa:bb:52:8e:d5:28:20:30:9e:cc:82:42:e8: 10:7d:6b:9f:be:3e:06:f2:94:65:5d:d8:34:57:b6: e9:16:79:dc:8a:af:3c:dd:43:b6:5b:cd:20:ab:df: 99:ad:c6:04:26:e8:25:05:96:92:7e:94:75:ee:7a: eb:24:5d:d7:3f:2a:da:ac:dd:8b:93:97:45:4c:9b: 63:fa:a7:36:68:27:c6:62:91:0a:c0:15:f3:f0:4e: 9c:b2:ae:44:49:36:6d:af:12:1e:c7:98:22:b6:c8: ab:07:96:44:cb:34:3a:d8:05:16:74:43:b3:a7:47: 92:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4F:A8:96:F2:E7:8F:03:7B:32:66:1B:0A:7D:CF:E3:01:31:E2:08 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.185.0/24 Signature Algorithm: sha256WithRSAEncryption 53:de:00:57:82:83:a3:a8:2b:99:e5:42:27:0a:ce:bb:ed:6c: 28:83:f6:a1:42:59:e9:01:c3:f6:e3:71:45:13:4a:55:dc:b7: c4:c8:1d:c3:bb:80:d0:c2:fa:2b:47:4b:22:74:a7:93:81:df: 61:29:9d:33:b0:6a:a7:04:b1:da:36:0f:c5:4c:63:fa:08:62: 96:fb:36:e1:5a:08:ca:8c:76:83:33:16:e9:6d:1d:32:a8:9e: 2d:9e:7b:bb:a0:72:fb:45:53:f9:5c:c8:e4:75:91:97:4c:f5: 0d:91:9e:fe:ea:36:00:6c:07:c0:01:2b:35:5b:56:50:e6:97: 85:a4:25:fc:5c:9a:0a:a3:e5:42:79:36:ba:06:f6:58:cf:96: e1:4d:c3:ef:95:7d:c0:b9:da:99:11:7b:58:63:32:b3:24:d5: f9:68:dd:ae:9d:41:45:4b:52:4b:94:8a:e1:e2:f9:9e:6c:dc: 1b:59:b5:ea:99:16:77:6f:8d:cf:d7:fb:d4:c9:c5:f6:16:b1: 02:3e:d1:b9:9a:f2:23:6d:0a:0e:db:b0:f3:db:8f:3b:8f:d4: 9c:89:c8:36:ee:53:25:bf:17:7d:60:67:82:0a:13:34:b7:15: b0:55:91:b2:ef:88:e9:0b:66:62:ad:ef:41:be:6d:5d:e7:1b: 43:e4:16:13 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUHN0Xe1BkVt/dGaM7ldWpSkz4kVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzVaFw0yNjExMjcxMTQ5MzVaMDMxMTAvBgNV BAMTKDg1NEZBODk2RjJFNzhGMDM3QjMyNjYxQjBBN0RDRkUzMDEzMUUyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA0UcbXjBWiCr27S+iUWSOAuov jbRMKzS9NuKMWqaLTzLyab4WNwjrWI9wUaaNJjGOeO/bEFGnqB5Htyuc9VVlWH7s kn4VJ6hBXTm+lISbzGMro0AqLcCFri1KIZZh0Jd14LlQZkT/EZivKssIUIkXVBhr FYY6NtZVHWu1H9osqbwTYsT7t2aRqrtSjtUoIDCezIJC6BB9a5++PgbylGVd2DRX tukWedyKrzzdQ7ZbzSCr35mtxgQm6CUFlpJ+lHXueuskXdc/Ktqs3YuTl0VMm2P6 pzZoJ8ZikQrAFfPwTpyyrkRJNm2vEh7HmCK2yKsHlkTLNDrYBRZ0Q7OnR5INAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUhU+olvLnjwN7MmYbCn3P4wEx4ggwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMwMmUz MTM4MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtULkwDQYJKoZIhvcNAQELBQADggEBAFPeAFeCg6OoK5nlQicKzrvtbCiD 9qFCWekBw/bjcUUTSlXct8TIHcO7gNDC+itHSyJ0p5OB32EpnTOwaqcEsdo2D8VM Y/oIYpb7NuFaCMqMdoMzFultHTKoni2ee7ugcvtFU/lcyOR1kZdM9Q2Rnv7qNgBs B8ABKzVbVlDml4WkJfxcmgqj5UJ5NroG9ljPluFNw++VfcC52pkRe1hjMrMk1flo 3a6dQUVLUkuUiuHi+Z5s3BtZteqZFndvjc/X+9TJxfYWsQI+0bma8iNtCg7bsPPb jzuP1JyJyDbuUyW/F31gZ4IKEzS3FbBVkbLviOkLZmKt70G+bV3nG0PkFhM= -----END CERTIFICATE-----Generated at Sat Dec 6 21:40:04 2025 by rpki-client