This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32342d3234203d3e20313336373837.roa File: 34352e38312e342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 7s/L6uegLLye1TSpU3YocnxGY2A1959FqD+H3As89tY= Subject key identifier: 72:1F:87:73:22:E2:4A:A9:3F:CB:F6:87:30:72:D5:F4:A8:CA:17:BB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7DEBDE07AAFC7933E6DB3E7A6219B9A9B43D6964 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:15 +0000 ROA not before: Fri 28 Nov 2025 11:44:15 +0000 ROA not after: Fri 27 Nov 2026 11:49:15 +0000 asID: 136787 IP address blocks: 45.81.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:eb:de:07:aa:fc:79:33:e6:db:3e:7a:62:19:b9:a9:b4:3d:69:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:15 2025 GMT Not After : Nov 27 11:49:15 2026 GMT Subject: CN=721F877322E24AA93FCBF6873072D5F4A8CA17BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:57:f5:91:2f:94:05:0c:55:74:f0:5e:ff: 51:0d:ab:6f:d5:f0:70:31:f5:fe:ad:66:e1:87:69: bc:12:73:1f:58:fb:b2:87:8f:09:c4:66:cf:17:a3: bf:47:a6:cc:8e:a2:2c:9b:63:38:d1:4d:77:b4:b6: 4f:9d:6c:b1:37:be:5f:fc:63:e0:86:a2:d1:4c:09: 24:1f:a2:68:e7:00:d6:43:a4:5f:75:9b:f2:97:6e: e2:21:72:f3:42:4b:7c:15:56:fa:b4:1f:c6:44:d9: c7:7b:15:9c:a8:3a:8e:a8:98:4d:ef:b1:31:4e:c7: 26:cd:21:11:d5:ce:8b:d2:8d:79:ac:dd:7e:3b:40: 7a:ba:d6:50:64:d3:86:ea:85:84:24:db:01:c8:26: 71:90:ed:3b:a9:21:63:5e:17:9f:ee:78:9e:21:7b: 68:04:97:13:96:2a:d7:86:cc:2b:ec:3c:97:d2:09: a4:e4:ff:27:1a:bf:c0:e8:9a:cc:d7:e6:37:af:05: 2c:b0:ed:9c:e9:a3:b6:eb:11:1e:e0:83:80:41:7b: 94:48:59:2c:03:40:d9:60:2b:09:9c:34:ef:56:6b: 18:50:7b:5a:65:f2:f1:74:f3:46:91:ac:bc:0b:af: 8d:e1:27:43:6c:b3:a0:b9:66:d1:32:e4:91:80:55: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:1F:87:73:22:E2:4A:A9:3F:CB:F6:87:30:72:D5:F4:A8:CA:17:BB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.4.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:2a:1c:d7:78:ba:07:2a:5f:c6:4e:bb:ce:16:8f:94:46:cb: 69:96:8f:47:c0:37:56:1b:b7:f6:c9:10:ac:e6:32:85:8e:73: ef:3b:c0:ce:9b:a5:85:ce:5f:fe:16:a2:d9:1a:dc:95:87:45: 55:77:44:58:e0:f3:35:45:53:70:59:bf:5d:31:dc:80:07:40: 73:97:4d:2f:ff:d6:2f:c0:c0:69:56:5d:85:74:b0:75:af:26: 83:c8:90:26:e2:a5:ff:68:12:36:a6:04:3b:56:4e:04:ba:26: df:64:77:be:31:63:87:b4:8e:4c:22:ee:e7:f7:ac:17:e4:37: 6f:1d:f5:88:d4:5a:9c:fb:52:b5:64:0c:42:e7:70:3b:e8:74: 83:f9:2a:54:52:cb:1a:2c:24:57:57:39:24:d7:24:2c:2b:45: c0:c7:9c:61:b9:72:53:1a:c0:e7:d0:90:5f:46:f4:4f:34:3b: f9:b8:e1:24:3e:f8:a0:4b:b8:0b:b5:08:2c:f7:96:74:88:97: 5f:2e:07:0d:4c:10:d0:62:d3:3a:a2:f7:54:1b:65:7c:92:18: f1:cd:58:84:a7:d5:43:fe:74:f6:14:0c:13:c6:44:22:70:57: 46:6c:9a:ac:14:b8:43:f4:da:c0:c5:53:25:45:42:f8:a7:ac: 1d:14:f6:5f -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfeveB6r8eTPm2z56Yhm5qbQ9aWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTVaFw0yNjExMjcxMTQ5MTVaMDMxMTAvBgNV BAMTKDcyMUY4NzczMjJFMjRBQTkzRkNCRjY4NzMwNzJENUY0QThDQTE3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe9Ff1kS+UBQxVdPBe/1ENq2/V 8HAx9f6tZuGHabwScx9Y+7KHjwnEZs8Xo79HpsyOoiybYzjRTXe0tk+dbLE3vl/8 Y+CGotFMCSQfomjnANZDpF91m/KXbuIhcvNCS3wVVvq0H8ZE2cd7FZyoOo6omE3v sTFOxybNIRHVzovSjXms3X47QHq61lBk04bqhYQk2wHIJnGQ7TupIWNeF5/ueJ4h e2gElxOWKteGzCvsPJfSCaTk/ycav8DomszX5jevBSyw7Zzpo7brER7gg4BBe5RI WSwDQNlgKwmcNO9WaxhQe1pl8vF080aRrLwLr43hJ0Nss6C5ZtEy5JGAVYoHAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUch+HcyLiSqk/y/aHMHLV9KjKF7swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMxMmUz NDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC1RBDANBgkqhkiG9w0BAQsFAAOCAQEAXSoc13i6Bypfxk67zhaPlEbLaZaPR8A3 Vhu39skQrOYyhY5z7zvAzpulhc5f/hai2RrclYdFVXdEWODzNUVTcFm/XTHcgAdA c5dNL//WL8DAaVZdhXSwda8mg8iQJuKl/2gSNqYEO1ZOBLom32R3vjFjh7SOTCLu 5/esF+Q3bx31iNRanPtStWQMQudwO+h0g/kqVFLLGiwkV1c5JNckLCtFwMecYbly UxrA59CQX0b0TzQ7+bjhJD74oEu4C7UILPeWdIiXXy4HDUwQ0GLTOqL3VBtlfJIY 8c1YhKfVQ/509hQME8ZEInBXRmyarBS4Q/TawMVTJUVC+KesHRT2Xw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:15 2025 by rpki-client