This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133362e302f32342d3234203d3e20313336373837.roa File: 34352e38342e3133362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: WjE9gKVjgmUkCnH4tsudGR3v2PWLMSnhXi6TMqouPhs= Subject key identifier: 07:E2:65:67:C0:C0:9D:20:DE:1F:4C:58:D8:57:3B:5D:33:D8:E3:B4 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 14EB8AC42C02F544BA7AF7BF27631CF23AFF59C3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:34 +0000 ROA not before: Fri 28 Nov 2025 11:44:34 +0000 ROA not after: Fri 27 Nov 2026 11:49:34 +0000 asID: 136787 IP address blocks: 45.84.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:eb:8a:c4:2c:02:f5:44:ba:7a:f7:bf:27:63:1c:f2:3a:ff:59:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:34 2025 GMT Not After : Nov 27 11:49:34 2026 GMT Subject: CN=07E26567C0C09D20DE1F4C58D8573B5D33D8E3B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6b:0d:01:1a:bf:49:af:0a:c2:ba:1b:e6:72: 7c:b6:34:c2:3a:6a:06:2d:3a:5e:6f:a8:93:61:62: 65:b6:2b:8d:58:d1:03:4f:17:0a:62:a3:0d:41:6e: 97:79:6e:77:6f:a9:a1:e8:56:f2:42:57:1a:2d:00: 0c:8b:2b:b1:53:01:41:5c:e3:60:5a:a9:f5:e4:7c: 3d:61:7e:6e:18:1b:c0:d7:82:7a:19:b8:ff:36:cd: c0:20:6d:1b:c8:4b:91:9c:1e:5a:ad:a1:fe:a4:9d: 0c:e4:a3:ea:54:36:19:01:bc:ce:48:38:ce:c2:74: a6:8a:db:56:e8:91:cc:09:07:58:a2:02:d9:15:2a: f4:bf:db:e9:a5:3c:41:fc:fd:a2:f6:df:91:48:b0: e1:df:3b:f7:80:a5:2c:34:e6:2a:b3:86:51:30:65: 23:76:21:4f:51:56:40:c5:72:1d:1f:6e:56:60:a7: d4:8f:4a:9b:3d:8c:f9:f5:a9:41:72:fd:44:46:af: e1:ab:f5:48:5b:c4:f0:17:97:ee:09:f6:3c:e5:46: 18:7b:f8:c2:eb:41:81:5e:f9:08:4d:b9:41:34:90: c7:de:4c:43:31:ba:61:15:d5:1e:4a:ae:18:5c:b3: b5:20:46:d9:a8:76:4f:bc:14:9d:e5:09:47:20:a0: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E2:65:67:C0:C0:9D:20:DE:1F:4C:58:D8:57:3B:5D:33:D8:E3:B4 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.136.0/24 Signature Algorithm: sha256WithRSAEncryption ae:40:89:3f:18:ef:9c:ed:35:91:ff:9b:bd:5c:a3:b6:c7:bb: d1:9a:bd:29:3c:13:c5:4f:3e:81:60:c4:26:f1:25:2e:3f:dd: 8a:96:da:ab:37:6b:f6:b3:e0:0f:33:82:c4:d2:77:1e:c7:dc: 4d:bc:1c:11:87:44:25:05:8f:5c:c0:82:01:04:88:d5:7a:68: 01:29:7f:a3:8a:f0:cd:66:c8:01:df:d1:d9:f8:7a:e1:bb:40: 39:a1:86:e1:7f:9f:df:42:61:cf:79:7a:2a:1e:3d:c7:f7:23: 2d:2d:79:4d:27:83:df:2b:5b:a0:ed:4d:98:1f:c3:d4:26:e0: 41:e9:8c:9e:83:d4:5e:7e:b0:05:23:b2:b5:2e:86:7f:e5:c7: 82:a2:22:f7:f6:0e:7f:46:9b:9d:01:ef:03:16:e7:4b:0e:dd: e6:6b:10:b3:1b:6b:a3:71:d7:ff:70:9c:32:0f:94:a7:a7:50: a6:b3:23:fc:91:e5:57:e1:71:0d:16:10:dd:a8:36:52:47:51: bd:22:96:dd:a0:e8:3c:b9:64:ca:3e:0e:c6:da:53:6f:eb:95: 16:4a:16:cd:d3:66:81:58:62:da:a6:50:c1:a0:2d:72:de:0c: dc:61:93:70:43:60:65:67:57:2a:f3:3c:8e:66:6a:10:75:cd: 19:24:5c:6d -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUFOuKxCwC9US6eve/J2Mc8jr/WcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzRaFw0yNjExMjcxMTQ5MzRaMDMxMTAvBgNV BAMTKDA3RTI2NTY3QzBDMDlEMjBERTFGNEM1OEQ4NTczQjVEMzNEOEUzQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKaw0BGr9JrwrCuhvmcny2NMI6 agYtOl5vqJNhYmW2K41Y0QNPFwpiow1Bbpd5bndvqaHoVvJCVxotAAyLK7FTAUFc 42BaqfXkfD1hfm4YG8DXgnoZuP82zcAgbRvIS5GcHlqtof6knQzko+pUNhkBvM5I OM7CdKaK21bokcwJB1iiAtkVKvS/2+mlPEH8/aL235FIsOHfO/eApSw05iqzhlEw ZSN2IU9RVkDFch0fblZgp9SPSps9jPn1qUFy/URGr+Gr9UhbxPAXl+4J9jzlRhh7 +MLrQYFe+QhNuUE0kMfeTEMxumEV1R5Krhhcs7UgRtmodk+8FJ3lCUcgoLn1AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUB+JlZ8DAnSDeH0xY2Fc7XTPY47QwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM0MmUz MTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtVIgwDQYJKoZIhvcNAQELBQADggEBAK5AiT8Y75ztNZH/m71co7bHu9Ga vSk8E8VPPoFgxCbxJS4/3YqW2qs3a/az4A8zgsTSdx7H3E28HBGHRCUFj1zAggEE iNV6aAEpf6OK8M1myAHf0dn4euG7QDmhhuF/n99CYc95eioePcf3Iy0teU0ng98r W6DtTZgfw9Qm4EHpjJ6D1F5+sAUjsrUuhn/lx4KiIvf2Dn9Gm50B7wMW50sO3eZr ELMba6Nx1/9wnDIPlKenUKazI/yR5VfhcQ0WEN2oNlJHUb0ilt2g6Dy5ZMo+Dsba U2/rlRZKFs3TZoFYYtqmUMGgLXLeDNxhk3BDYGVnVyrzPI5mahB1zRkkXG0= -----END CERTIFICATE-----Generated at Sat Dec 6 18:44:57 2025 by rpki-client