This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138372e302f32342d3234203d3e20313336373837.roa File: 34352e38302e3138372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ig18d+9iwv9vl3Q48E4wq0QHWKZK54PDk3Vp/m1FJLc= Subject key identifier: 87:AF:92:36:28:6F:B6:1B:0E:4A:D7:44:D8:EF:5B:73:96:CD:C7:04 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 76CCBAFB8CD911D20B00125EDDCC2811F54CA831 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136787 IP address blocks: 45.80.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:cc:ba:fb:8c:d9:11:d2:0b:00:12:5e:dd:cc:28:11:f5:4c:a8:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=87AF9236286FB61B0E4AD744D8EF5B7396CDC704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e0:a0:02:af:e9:53:de:a8:7f:77:0b:d6:7f: 10:c0:9e:a3:66:eb:0e:e6:ae:4c:35:82:87:a7:96: 83:f9:f0:3e:66:65:52:3f:27:3d:4f:5c:04:20:e4: 9e:5d:fe:81:83:dd:91:f2:4a:03:3b:11:05:1a:59: 3d:36:95:24:86:e9:fa:4d:6f:44:68:68:a3:4f:24: ad:80:aa:c8:9a:af:94:cf:0c:f1:b9:ce:2e:e5:3c: ea:03:15:7f:c2:9a:3e:79:81:d1:55:59:31:80:e4: 3e:3f:15:74:21:b0:6c:e7:39:78:34:f3:41:e0:44: 24:89:84:5b:ed:e8:d8:6e:2d:22:31:c0:2b:fe:c2: a6:27:41:d5:f4:fb:9f:2e:c2:5c:9b:8a:cf:b7:7f: aa:2e:ac:52:a6:93:1f:91:09:72:00:5c:ed:18:43: 02:ec:0d:ab:52:2f:27:ac:cb:df:c0:99:f3:63:14: d8:cb:d9:bd:88:08:29:df:9c:54:0b:8f:06:62:7f: 03:12:67:2c:d4:0d:a7:f0:dd:42:b3:79:34:8e:98: 2c:9c:a9:8b:b7:eb:bd:af:f4:d6:44:0b:15:d6:1a: ae:17:72:89:a0:1c:9d:d3:55:f8:e1:e9:82:f4:54: 79:fb:a7:83:18:66:2e:8b:e5:ae:3b:31:73:df:88: 1b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AF:92:36:28:6F:B6:1B:0E:4A:D7:44:D8:EF:5B:73:96:CD:C7:04 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3138372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.187.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:28:ae:9d:37:b6:8e:4b:f4:e4:74:46:ea:f6:72:f7:dd:23: ef:62:77:41:82:8b:d8:20:7b:ee:6f:29:35:c2:92:20:72:43: 88:41:ce:60:48:d2:bd:47:d9:a5:43:2e:14:57:19:7f:cd:bd: 38:bf:82:39:a3:13:b8:d2:26:04:4a:dc:aa:5d:83:a2:fe:9b: 3d:85:13:64:1d:6c:60:cb:a9:e2:8a:26:e6:ed:c1:b0:ab:7d: 4b:16:40:e1:22:6a:af:ab:dd:24:6f:d4:95:ab:63:e0:b4:99: ef:0d:0e:1b:15:1c:b1:d0:31:ba:15:d6:f2:b5:9d:91:38:0e: 72:4b:9f:47:61:4f:d0:73:ad:43:72:f8:49:2d:a3:69:9e:f2: cd:ad:a6:ec:05:0d:c1:6c:61:f7:fe:62:19:15:e7:7c:2f:ba: ee:5d:3f:7f:10:b9:a6:fd:6d:73:03:51:68:09:53:42:78:02: 0e:5e:8f:74:5d:75:a9:6f:92:87:44:6b:6e:68:08:f7:a5:a5: c7:6d:81:19:a2:38:7a:22:6e:33:cb:58:f1:55:12:a1:dc:3a: a2:25:ba:96:bd:d0:86:e0:92:12:df:2c:88:40:24:69:ef:40: f1:8d:42:bb:6d:12:60:de:51:42:54:f6:40:84:03:31:ad:c4: d6:b3:a8:0b -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUdsy6+4zZEdILABJe3cwoEfVMqDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKDg3QUY5MjM2Mjg2RkI2MUIwRTRBRDc0NEQ4RUY1QjczOTZDREM3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy4KACr+lT3qh/dwvWfxDAnqNm 6w7mrkw1goenloP58D5mZVI/Jz1PXAQg5J5d/oGD3ZHySgM7EQUaWT02lSSG6fpN b0RoaKNPJK2Aqsiar5TPDPG5zi7lPOoDFX/Cmj55gdFVWTGA5D4/FXQhsGznOXg0 80HgRCSJhFvt6NhuLSIxwCv+wqYnQdX0+58uwlybis+3f6ourFKmkx+RCXIAXO0Y QwLsDatSLyesy9/AmfNjFNjL2b2ICCnfnFQLjwZifwMSZyzUDafw3UKzeTSOmCyc qYu3672v9NZECxXWGq4XcomgHJ3TVfjh6YL0VHn7p4MYZi6L5a47MXPfiBsZAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUh6+SNihvthsOStdE2O9bc5bNxwQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMwMmUz MTM4MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtULswDQYJKoZIhvcNAQELBQADggEBAJworp03to5L9OR0Rur2cvfdI+9i d0GCi9gge+5vKTXCkiByQ4hBzmBI0r1H2aVDLhRXGX/NvTi/gjmjE7jSJgRK3Kpd g6L+mz2FE2QdbGDLqeKKJubtwbCrfUsWQOEiaq+r3SRv1JWrY+C0me8NDhsVHLHQ MboV1vK1nZE4DnJLn0dhT9BzrUNy+Ekto2me8s2tpuwFDcFsYff+YhkV53wvuu5d P38Quab9bXMDUWgJU0J4Ag5ej3RddalvkodEa25oCPelpcdtgRmiOHoibjPLWPFV EqHcOqIlupa90IbgkhLfLIhAJGnvQPGNQrttEmDeUUJU9kCEAzGtxNazqAs= -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:22 2025 by rpki-client