This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133372e302f32342d3234203d3e20313336373837.roa File: 34352e38342e3133372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: rP1kZWyngknyutL1NbRDcLi2iPylWBOSdZgysor+r/0= Subject key identifier: 6E:72:D3:A0:60:A3:26:9E:68:D8:A5:76:21:7B:41:A0:83:3A:40:42 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6E005D422877E2134820DFA943DBFD75FAA3E6EB Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 136787 IP address blocks: 45.84.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:00:5d:42:28:77:e2:13:48:20:df:a9:43:db:fd:75:fa:a3:e6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=6E72D3A060A3269E68D8A576217B41A0833A4042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:87:e1:83:4e:a2:7a:41:ce:de:19:0b:99:ef: bb:9b:b6:42:00:9e:45:bd:54:4b:1d:07:67:45:a0: 5f:e3:3c:3a:b4:6d:ff:51:73:6d:9f:59:6b:e6:a5: 20:98:44:3a:5d:e1:32:e3:21:b1:09:c8:46:dd:96: f9:1f:d0:76:86:87:42:a5:81:b2:3e:53:6c:ee:02: 42:43:30:50:9e:ba:be:39:5a:1e:81:8f:30:79:d6: 9f:14:f6:9c:ac:73:4c:38:5a:4b:f4:8e:bd:20:ac: b8:3e:07:fd:04:dc:8b:11:78:b1:66:22:70:c8:2a: cd:39:88:03:b4:3b:03:fd:bb:43:b7:56:28:a1:1f: c7:8c:f2:ab:c4:bd:28:46:0b:87:f1:89:6a:c1:b0: 4e:4f:6e:03:24:1e:0a:df:73:e6:11:e3:f1:65:43: c1:be:b7:08:09:29:e0:7a:c8:07:56:e5:f7:d9:75: cb:ae:e3:78:ab:cc:00:27:13:3b:07:11:2f:7a:e0: d2:4d:df:6f:23:1f:68:51:63:96:cb:bc:15:35:61: 6e:a9:cb:78:07:c4:c0:36:a6:9b:4b:be:03:04:67: dd:8b:47:dc:9f:45:5f:cb:0c:30:02:f8:23:db:d9: 7c:dd:be:60:03:a2:99:53:38:4d:80:a1:74:a4:da: 7b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:72:D3:A0:60:A3:26:9E:68:D8:A5:76:21:7B:41:A0:83:3A:40:42 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.137.0/24 Signature Algorithm: sha256WithRSAEncryption 30:73:fd:29:c2:f7:5c:f2:e2:4b:e0:b6:13:a9:68:4a:4e:d8: 30:e0:36:73:42:da:8a:fa:53:43:4f:24:9d:23:ba:a0:7d:17: f8:40:a1:8f:c6:65:dc:5b:db:df:35:20:cd:c6:42:ea:5a:6b: c3:68:20:68:6a:ca:6e:a0:27:39:69:6a:da:a4:7d:e4:a8:c5: a7:69:7f:ea:d0:60:8b:03:99:72:1c:db:a4:dd:73:a2:60:7b: 3b:f1:38:f5:9a:26:cf:2f:e1:27:b8:d1:70:ff:41:8a:0c:5f: b9:51:8c:08:49:80:d5:43:67:79:95:41:4d:e1:d3:7d:e6:8f: 59:a4:b3:64:b2:7a:9a:0d:28:f8:1d:a6:1d:91:3e:58:b7:13: c2:9d:2f:11:cb:7d:df:ba:c7:86:ca:1d:73:c1:e4:c1:6f:93: 0c:aa:8d:6c:2d:7f:68:fb:95:70:c2:a2:3d:61:72:89:d8:83: f6:90:19:11:75:78:c3:b6:e5:79:d0:bb:90:39:3c:e8:73:8c: fa:d5:63:b7:a4:f8:41:a8:15:70:d8:6a:15:ac:0c:70:9c:0b: 01:bd:81:3d:41:b6:8c:61:7a:dd:be:32:bc:fd:6a:e0:0a:e1: 77:93:6d:07:d9:0a:62:7f:7d:1a:3d:ed:da:b1:1a:78:8d:a7: 26:20:55:e8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUbgBdQih34hNIIN+pQ9v9dfqj5uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDZFNzJEM0EwNjBBMzI2OUU2OEQ4QTU3NjIxN0I0MUEwODMzQTQwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCh+GDTqJ6Qc7eGQuZ77ubtkIA nkW9VEsdB2dFoF/jPDq0bf9Rc22fWWvmpSCYRDpd4TLjIbEJyEbdlvkf0HaGh0Kl gbI+U2zuAkJDMFCeur45Wh6BjzB51p8U9pysc0w4Wkv0jr0grLg+B/0E3IsReLFm InDIKs05iAO0OwP9u0O3ViihH8eM8qvEvShGC4fxiWrBsE5PbgMkHgrfc+YR4/Fl Q8G+twgJKeB6yAdW5ffZdcuu43irzAAnEzsHES964NJN328jH2hRY5bLvBU1YW6p y3gHxMA2pptLvgMEZ92LR9yfRV/LDDAC+CPb2XzdvmADoplTOE2AoXSk2nt3AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUbnLToGCjJp5o2KV2IXtBoIM6QEIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM0MmUz MTMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtVIkwDQYJKoZIhvcNAQELBQADggEBADBz/SnC91zy4kvgthOpaEpO2DDg NnNC2or6U0NPJJ0juqB9F/hAoY/GZdxb2981IM3GQupaa8NoIGhqym6gJzlpatqk feSoxadpf+rQYIsDmXIc26Tdc6JgezvxOPWaJs8v4Se40XD/QYoMX7lRjAhJgNVD Z3mVQU3h033mj1mks2SyepoNKPgdph2RPli3E8KdLxHLfd+6x4bKHXPB5MFvkwyq jWwtf2j7lXDCoj1hconYg/aQGRF1eMO25XnQu5A5POhzjPrVY7ek+EGoFXDYahWs DHCcCwG9gT1Btoxhet2+Mrz9auAK4XeTbQfZCmJ/fRo97dqxGniNpyYgVeg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:41 2025 by rpki-client