This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138362e302f32342d3234203d3e20313336373837.roa File: 34352e38302e3138362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: f1tl8bn+QjhqqSRL6w7nEcXaIMGkhkwSpXf5oFAj3uM= Subject key identifier: 5B:69:B8:58:84:9C:6F:B5:E4:A1:43:5C:3F:CF:00:CE:8A:0D:85:C1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 16A48A81CAEAF5B58B1AC89952B2EB6036AA1744 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:23 +0000 ROA not before: Fri 28 Nov 2025 11:44:23 +0000 ROA not after: Fri 27 Nov 2026 11:49:23 +0000 asID: 136787 IP address blocks: 45.80.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a4:8a:81:ca:ea:f5:b5:8b:1a:c8:99:52:b2:eb:60:36:aa:17:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:23 2025 GMT Not After : Nov 27 11:49:23 2026 GMT Subject: CN=5B69B858849C6FB5E4A1435C3FCF00CE8A0D85C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:8f:df:0f:5a:81:fe:a6:ac:a2:1f:c2:b5: 66:b1:94:24:c7:35:d4:01:9e:ce:38:3e:58:48:e6: 38:00:b6:14:9e:9b:48:00:57:27:ec:7a:72:85:af: e6:51:7c:6d:22:b7:1b:4e:9d:4c:9d:6f:7d:e5:30: 08:b2:4b:9f:60:b6:8a:72:17:38:5c:5e:b0:e7:d5: 1e:6a:ef:01:66:10:e9:aa:6a:51:26:43:1f:d8:f7: 4e:d3:53:4b:e7:22:6e:05:d5:b2:3e:62:62:f4:e3: 88:6a:27:96:22:51:d9:13:09:21:8f:7e:33:7e:79: 68:65:d7:76:2c:eb:f1:0f:6e:77:01:bc:2a:16:06: e9:f4:09:9c:fb:a5:56:e1:d4:19:61:91:a2:30:2f: ef:01:fa:de:04:9b:8b:99:84:e4:3e:0c:9d:16:c9: 63:26:d2:4f:8c:95:2a:3a:22:47:c5:4a:7a:b3:20: 56:7b:f8:a5:29:49:c0:ab:e1:aa:f1:38:dd:5e:59: 03:9f:b1:12:95:07:a1:a5:0b:2a:30:4f:38:2e:e8: 9a:7e:85:28:ad:3d:03:00:75:84:df:ae:3a:78:c9: bf:d0:ae:20:56:37:33:1d:b2:4c:95:5a:71:b2:51: fc:f8:7a:0d:05:5b:14:86:2a:65:5d:f5:a3:c3:fa: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:69:B8:58:84:9C:6F:B5:E4:A1:43:5C:3F:CF:00:CE:8A:0D:85:C1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.186.0/24 Signature Algorithm: sha256WithRSAEncryption 25:d6:27:7d:d8:dc:83:32:4b:17:e4:48:22:99:79:e0:b3:cd: 46:b8:f0:72:c5:84:ce:9d:be:8b:60:02:86:8c:d4:ae:22:c8: ab:94:93:d4:6d:47:98:98:e1:ce:14:37:9b:2c:eb:06:ad:00: a3:6c:a0:fc:78:86:ab:6a:ef:f3:2a:e5:71:48:05:15:4a:95: 28:21:8e:76:cf:fa:c1:ca:57:ec:a5:05:e8:cb:61:0a:5f:62: 96:a9:ba:64:4a:ea:80:da:b9:a2:c5:8d:5a:92:49:41:fe:83: 29:a4:91:ac:ac:dd:ac:a5:43:b6:9b:48:66:a7:a6:18:60:74: 42:68:c6:32:62:c9:ac:15:c2:fd:ca:2f:8d:79:e5:65:66:02: f0:18:44:f6:f3:d6:a1:6d:52:83:a8:64:89:2a:21:5c:4d:a4: 99:c6:1b:ca:da:cf:f5:9a:d5:0c:c8:f2:83:55:fe:7a:8c:7b: 91:63:e8:0f:08:db:36:b0:64:2e:07:ed:ce:5e:b2:9c:4e:5c: ae:38:a5:6c:a5:76:fe:36:6d:11:d8:dc:cd:e2:1e:a2:25:35: ba:66:c4:4d:71:1d:d4:35:cf:d5:d4:06:a1:a7:cd:91:d1:e1: 2e:c1:b7:a9:3e:1d:d4:39:20:3c:ed:00:51:73:b7:e1:17:e6: 83:26:67:db -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUFqSKgcrq9bWLGsiZUrLrYDaqF0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjNaFw0yNjExMjcxMTQ5MjNaMDMxMTAvBgNV BAMTKDVCNjlCODU4ODQ5QzZGQjVFNEExNDM1QzNGQ0YwMENFOEEwRDg1QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8Y/fD1qB/qasoh/CtWaxlCTH NdQBns44PlhI5jgAthSem0gAVyfsenKFr+ZRfG0itxtOnUydb33lMAiyS59gtopy FzhcXrDn1R5q7wFmEOmqalEmQx/Y907TU0vnIm4F1bI+YmL044hqJ5YiUdkTCSGP fjN+eWhl13Ys6/EPbncBvCoWBun0CZz7pVbh1BlhkaIwL+8B+t4Em4uZhOQ+DJ0W yWMm0k+MlSo6IkfFSnqzIFZ7+KUpScCr4arxON1eWQOfsRKVB6GlCyowTzgu6Jp+ hSitPQMAdYTfrjp4yb/QriBWNzMdskyVWnGyUfz4eg0FWxSGKmVd9aPD+qNlAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUW2m4WIScb7XkoUNcP88AzooNhcEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMwMmUz MTM4MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtULowDQYJKoZIhvcNAQELBQADggEBACXWJ33Y3IMySxfkSCKZeeCzzUa4 8HLFhM6dvotgAoaM1K4iyKuUk9RtR5iY4c4UN5ss6watAKNsoPx4hqtq7/Mq5XFI BRVKlSghjnbP+sHKV+ylBejLYQpfYpapumRK6oDauaLFjVqSSUH+gymkkays3ayl Q7abSGanphhgdEJoxjJiyawVwv3KL4155WVmAvAYRPbz1qFtUoOoZIkqIVxNpJnG G8raz/Wa1QzI8oNV/nqMe5Fj6A8I2zawZC4H7c5espxOXK44pWyldv42bRHY3M3i HqIlNbpmxE1xHdQ1z9XUBqGnzZHR4S7Bt6k+HdQ5IDztAFFzt+EX5oMmZ9s= -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:11 2025 by rpki-client