This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e352e302f32342d3234203d3e20313336373837.roa File: 34352e38312e352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 2stXfa21D4c6p5hRrQ9EdZDGaUhXKOPTXXqcoM9BJK0= Subject key identifier: 7E:F4:35:36:6E:21:06:6B:66:AA:2C:E3:AC:72:98:A7:B0:46:BD:0E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1CC6D312BECE57AAFF3F4DD5A40F5940CB5806C1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 136787 IP address blocks: 45.81.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c6:d3:12:be:ce:57:aa:ff:3f:4d:d5:a4:0f:59:40:cb:58:06:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=7EF435366E21066B66AA2CE3AC7298A7B046BD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a5:74:f4:75:bb:48:21:c5:16:1b:df:98:9f: cd:c6:da:93:b9:87:13:6b:42:7e:4d:42:f1:83:92: 4c:be:87:45:90:2e:c4:cf:72:fd:27:00:eb:06:22: 32:14:b9:ae:3b:20:88:14:d6:29:c0:cc:fc:ad:81: 41:39:b0:b6:45:b8:5a:2b:5a:f8:80:77:f7:8c:db: 80:5e:af:b0:a4:68:e8:29:94:66:ed:15:90:c1:46: 5c:cf:a0:8f:41:2e:53:13:3a:d9:71:9a:ca:74:52: a6:75:67:4b:73:9d:54:bb:74:6e:f1:92:74:f2:89: 27:39:b1:81:58:47:e1:75:74:9b:8c:f9:f5:91:f5: df:58:0c:85:12:e0:17:e9:d8:82:02:ce:d2:43:d9: 1e:57:aa:bf:9d:7c:3b:8b:26:3a:a8:50:f7:c9:b4: 56:67:f2:62:ce:1f:51:ec:32:7c:13:39:ad:13:58: ae:fc:41:5e:43:6b:ef:8d:bd:0e:11:14:c1:16:bd: 88:ab:d0:05:09:69:7b:77:d7:d4:5b:c1:49:8c:9a: 52:28:e8:3a:fb:cc:4a:9e:c0:e9:7a:76:7c:2b:ca: 69:c5:4e:92:5a:36:86:40:95:45:2d:3c:34:cd:49: 04:b4:cc:d7:33:53:de:69:ea:f2:26:88:fa:f5:de: c1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F4:35:36:6E:21:06:6B:66:AA:2C:E3:AC:72:98:A7:B0:46:BD:0E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.5.0/24 Signature Algorithm: sha256WithRSAEncryption 86:b1:92:f7:fa:1b:d9:3a:99:c4:e8:9e:64:3a:01:22:4f:48: af:8b:4e:55:d7:8d:d1:cf:25:19:7c:bc:94:a7:ff:92:a3:c1: d3:4d:2b:4b:1c:6b:36:cc:d9:9c:ff:e2:01:ce:df:93:bb:d2: f5:ec:f1:08:2e:13:b8:7f:f3:1f:f3:96:f9:8d:e3:4c:8a:cc: 00:51:57:08:d0:8c:92:f2:81:81:46:88:84:02:5d:6c:57:9b: d8:85:27:d3:6f:f3:14:0a:61:4e:26:6c:e4:38:a1:11:ed:25: a6:23:58:e7:b6:70:9b:a8:f2:77:47:f0:d2:f7:ff:8a:85:40: 41:69:25:bf:48:55:fc:6f:15:68:f1:0b:03:06:32:5c:4a:de: 2d:0c:d6:64:fa:28:d6:19:0e:bd:6c:10:44:ed:46:70:05:43: 93:6c:10:44:85:9f:1a:f9:00:b9:f7:9e:10:47:1b:9f:6d:2c: 9e:66:dd:75:8d:6c:a7:d3:1b:30:d4:28:0f:fb:36:e6:e5:10: d8:25:9c:2b:10:0f:4b:d7:90:3c:e1:6a:b5:da:87:e6:6e:97: a5:55:16:59:0c:16:3c:58:49:f9:2d:a8:f0:01:ce:45:17:99: 6c:5e:78:02:3a:cc:b5:45:c5:95:c8:7e:0d:4f:b6:3e:4c:72: 52:73:70:39 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUHMbTEr7OV6r/P03VpA9ZQMtYBsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDdFRjQzNTM2NkUyMTA2NkI2NkFBMkNFM0FDNzI5OEE3QjA0NkJEMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpXT0dbtIIcUWG9+Yn83G2pO5 hxNrQn5NQvGDkky+h0WQLsTPcv0nAOsGIjIUua47IIgU1inAzPytgUE5sLZFuFor WviAd/eM24Ber7CkaOgplGbtFZDBRlzPoI9BLlMTOtlxmsp0UqZ1Z0tznVS7dG7x knTyiSc5sYFYR+F1dJuM+fWR9d9YDIUS4Bfp2IICztJD2R5Xqr+dfDuLJjqoUPfJ tFZn8mLOH1HsMnwTOa0TWK78QV5Da++NvQ4RFMEWvYir0AUJaXt319RbwUmMmlIo 6Dr7zEqewOl6dnwrymnFTpJaNoZAlUUtPDTNSQS0zNczU95p6vImiPr13sH5AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUfvQ1Nm4hBmtmqizjrHKYp7BGvQ4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMxMmUz NTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC1RBTANBgkqhkiG9w0BAQsFAAOCAQEAhrGS9/ob2TqZxOieZDoBIk9Ir4tOVdeN 0c8lGXy8lKf/kqPB000rSxxrNszZnP/iAc7fk7vS9ezxCC4TuH/zH/OW+Y3jTIrM AFFXCNCMkvKBgUaIhAJdbFeb2IUn02/zFAphTiZs5DihEe0lpiNY57Zwm6jyd0fw 0vf/ioVAQWklv0hV/G8VaPELAwYyXEreLQzWZPoo1hkOvWwQRO1GcAVDk2wQRIWf GvkAufeeEEcbn20snmbddY1sp9MbMNQoD/s25uUQ2CWcKxAPS9eQPOFqtdqH5m6X pVUWWQwWPFhJ+S2o8AHORReZbF54AjrMtUXFlch+DU+2PkxyUnNwOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:41 2025 by rpki-client