This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e372e302f32342d3234203d3e20313336373837.roa File: 34352e38312e372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: rV1x98bDdoxAtpWrpq7DafURmsYBcYC2Uj8lAmJrgFA= Subject key identifier: D2:B1:19:44:F0:7A:3E:BC:9D:46:78:DE:A5:A1:AC:8B:92:70:4D:53 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 76D7A4A0426A5731789C2C5D218F08D7FEB5ECA5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 136787 IP address blocks: 45.81.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d7:a4:a0:42:6a:57:31:78:9c:2c:5d:21:8f:08:d7:fe:b5:ec:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=D2B11944F07A3EBC9D4678DEA5A1AC8B92704D53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:86:87:89:bf:f3:1e:f4:a9:80:5f:9d:76: 26:70:58:ef:41:5f:2f:e8:08:cd:c0:b5:71:98:41: 46:d2:eb:2a:a9:ca:7b:51:ff:e4:36:12:69:af:75: 0f:d1:26:e3:f0:65:a3:48:bb:15:ce:f9:53:27:a3: e6:e6:ab:41:50:50:bc:9a:5a:69:ad:16:fe:8f:a4: c5:20:6f:a1:83:8e:03:5c:72:57:53:f2:cf:e9:47: 26:e6:51:85:cd:1f:b7:26:21:95:8b:69:70:c8:38: 44:a7:87:d3:46:78:db:07:26:65:2c:ce:0b:e7:ad: 94:83:13:5f:d7:b1:54:0c:6e:b6:00:87:cf:f7:42: 8c:35:b2:2a:ec:df:e0:df:fe:00:5e:95:54:3e:4d: 05:7a:e5:c8:04:6a:75:b5:ff:4b:03:60:51:d9:16: 09:df:d1:40:5e:1f:0f:d3:d3:a3:e3:b9:6f:1e:9d: 21:1d:b0:80:2e:b9:bf:5f:46:ab:1a:10:f9:10:f2: 93:f0:dc:11:56:9d:33:44:23:21:d4:ec:b4:ef:38: 9a:f5:e8:2d:89:70:cb:37:da:af:c2:c9:47:9a:71: 66:b9:d7:ab:19:08:9d:d5:9e:ae:21:48:ad:a3:cc: ae:bc:ff:11:33:35:e0:83:e0:c1:bf:69:99:d9:88: 5d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B1:19:44:F0:7A:3E:BC:9D:46:78:DE:A5:A1:AC:8B:92:70:4D:53 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38312e372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.7.0/24 Signature Algorithm: sha256WithRSAEncryption d2:17:73:0a:f4:e8:ba:c8:06:d3:e2:2a:cd:05:8a:09:07:2c: 78:7f:82:93:3f:26:a8:2a:89:7d:3e:84:13:5d:ed:21:71:2c: 3f:88:84:b0:4a:3b:86:ff:94:9e:f4:d9:a3:88:a5:a8:57:26: 10:3b:be:79:08:2f:b4:d1:de:25:0f:bb:24:84:3e:af:6a:c7: bf:5f:85:6f:98:72:9e:ff:b5:ba:d1:d1:fa:c0:fb:fe:19:00: 8d:0b:ea:f6:61:8e:ad:e5:a3:f3:61:02:51:e3:77:a8:9a:65: 27:f6:93:74:17:c2:2e:93:07:02:6c:52:b3:d1:24:4f:eb:da: 84:27:76:46:3e:8f:ad:28:ce:f9:f6:20:a6:6b:ce:54:dd:7c: 41:cf:0b:bf:cf:10:26:c8:bf:7c:a3:7e:c6:97:50:99:fa:a4: 73:cd:52:dd:98:68:70:9a:11:c2:76:02:0c:5e:95:aa:ab:96: f3:7f:35:98:d9:ce:a8:38:8b:2d:9a:0c:1f:26:e4:35:90:0e: 85:a8:50:f1:f4:98:a2:ae:7c:84:f9:48:ad:e5:6d:36:34:da: f1:4d:63:a6:6e:ab:a0:53:f0:f1:b3:e1:da:69:75:8c:90:30: 49:78:48:6c:2a:b4:70:a5:a7:d9:93:8f:d6:66:37:d0:64:5b: 44:30:14:cb -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUdtekoEJqVzF4nCxdIY8I1/617KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKEQyQjExOTQ0RjA3QTNFQkM5RDQ2NzhERUE1QTFBQzhCOTI3MDRENTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe0IaHib/zHvSpgF+ddiZwWO9B Xy/oCM3AtXGYQUbS6yqpyntR/+Q2EmmvdQ/RJuPwZaNIuxXO+VMno+bmq0FQULya WmmtFv6PpMUgb6GDjgNccldT8s/pRybmUYXNH7cmIZWLaXDIOESnh9NGeNsHJmUs zgvnrZSDE1/XsVQMbrYAh8/3Qow1sirs3+Df/gBelVQ+TQV65cgEanW1/0sDYFHZ Fgnf0UBeHw/T06PjuW8enSEdsIAuub9fRqsaEPkQ8pPw3BFWnTNEIyHU7LTvOJr1 6C2JcMs32q/CyUeacWa516sZCJ3Vnq4hSK2jzK68/xEzNeCD4MG/aZnZiF0zAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU0rEZRPB6PrydRnjepaGsi5JwTVMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMxMmUz NzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC1RBzANBgkqhkiG9w0BAQsFAAOCAQEA0hdzCvTousgG0+IqzQWKCQcseH+Ckz8m qCqJfT6EE13tIXEsP4iEsEo7hv+UnvTZo4ilqFcmEDu+eQgvtNHeJQ+7JIQ+r2rH v1+Fb5hynv+1utHR+sD7/hkAjQvq9mGOreWj82ECUeN3qJplJ/aTdBfCLpMHAmxS s9EkT+vahCd2Rj6PrSjO+fYgpmvOVN18Qc8Lv88QJsi/fKN+xpdQmfqkc81S3Zho cJoRwnYCDF6VqquW8381mNnOqDiLLZoMHybkNZAOhahQ8fSYoq58hPlIreVtNjTa 8U1jpm6roFPw8bPh2ml1jJAwSXhIbCq0cKWn2ZOP1mY30GRbRDAUyw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:02 2025 by rpki-client