This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133382e302f32342d3332203d3e203531313637.roa File: 34352e38342e3133382e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: pIVUlKtMqD2oRQ3G6UZczBG7Exx4CkKXxHGwrmMfac8= Subject key identifier: AC:F8:76:98:D8:EB:D2:2C:19:8F:08:1A:3F:1D:0D:E7:0E:CF:27:43 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2D5FA54C37A91A8DA5478040CAE2AA07A2187305 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133382e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:27 +0000 ROA not before: Fri 28 Nov 2025 11:44:27 +0000 ROA not after: Fri 27 Nov 2026 11:49:27 +0000 asID: 51167 IP address blocks: 45.84.138.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5f:a5:4c:37:a9:1a:8d:a5:47:80:40:ca:e2:aa:07:a2:18:73:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:27 2025 GMT Not After : Nov 27 11:49:27 2026 GMT Subject: CN=ACF87698D8EBD22C198F081A3F1D0DE70ECF2743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:e9:72:30:1d:fa:06:63:c0:da:e3:fb:cf: 61:3c:1c:01:25:cd:d3:24:e9:dd:f5:1e:db:a3:93: 69:52:58:06:a5:ad:b8:c8:e3:a8:fb:bc:37:30:6d: 6a:74:90:4c:7c:09:98:34:6a:03:6f:2a:c9:f6:bd: 97:3f:e2:ca:f5:c3:06:e3:58:dd:28:2c:47:4c:99: 8f:9d:85:66:d8:b4:cb:ee:51:77:78:82:1f:f9:b7: 71:77:ad:6a:32:a7:f0:fa:3b:c8:fb:51:74:04:64: 23:0e:55:ec:b5:2e:73:24:2a:3e:c0:73:67:b8:ed: 95:5b:93:f4:a4:84:a0:60:10:59:d0:74:9b:60:ee: b0:aa:b8:fa:4e:91:cf:0f:97:01:be:03:77:fc:23: 26:08:93:5f:96:7b:e6:c6:68:5a:98:e0:e9:ce:06: 17:d8:e9:20:ac:45:3d:71:9c:d3:16:ab:c8:bb:ec: 7f:59:97:65:6f:7d:38:4f:55:ab:57:4c:a4:17:2c: f6:2b:ee:ee:fd:ea:2d:88:d7:c8:5e:75:ef:92:8a: bd:d6:82:bd:37:ce:bd:35:5b:53:01:61:04:c7:a2: f5:dd:1e:94:8e:92:c4:d1:c7:59:a7:2a:bd:36:0e: 5b:00:bf:b9:55:f8:fa:7f:8d:be:b9:49:fe:81:ac: 3a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F8:76:98:D8:EB:D2:2C:19:8F:08:1A:3F:1D:0D:E7:0E:CF:27:43 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133382e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.138.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:a3:99:b1:13:89:07:e0:0b:be:5a:53:41:60:79:80:a6:75: 3a:89:0f:28:2b:b2:b1:55:d2:84:b9:7b:ab:9e:09:44:3a:05: 26:0b:07:db:ff:80:eb:da:9d:ed:74:c5:5e:01:d7:3d:4e:57: 09:7c:3e:50:5e:bd:a8:21:2b:26:02:00:e5:51:6b:23:75:d0: 12:01:f5:ee:9d:58:b2:ef:88:87:d4:31:c7:c2:31:49:c7:f1: 05:89:0d:1c:64:98:83:fc:a7:c3:e4:8e:9a:4f:47:93:0c:6c: af:c2:50:d4:18:f6:f7:41:79:58:e7:6e:56:a7:00:46:22:5f: ac:84:ef:57:67:b2:7d:47:5c:45:f9:cd:1f:c1:9d:46:18:ab: 17:ac:74:8e:38:1c:1c:f0:27:79:94:2e:d7:92:90:2a:75:c7: 20:8a:f8:94:df:eb:c6:78:84:e2:c9:8d:8f:52:44:12:ab:c9: 0c:3a:bd:e9:c9:33:b7:57:fb:ea:a1:bf:dc:fe:19:09:b5:c9: 0f:ca:3b:e6:aa:b5:f2:51:ca:cb:2d:9e:0c:7e:00:e5:11:e9: 30:87:ed:c9:19:55:d6:7f:b4:13:d3:9a:53:42:e9:e3:db:be: 83:7e:02:52:4c:99:f4:b4:8c:1a:5d:6c:ec:72:be:3d:ac:7c: 76:9f:2f:a0 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIULV+lTDepGo2lR4BAyuKqB6IYcwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjdaFw0yNjExMjcxMTQ5MjdaMDMxMTAvBgNV BAMTKEFDRjg3Njk4RDhFQkQyMkMxOThGMDgxQTNGMUQwREU3MEVDRjI3NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVelyMB36BmPA2uP7z2E8HAEl zdMk6d31Htujk2lSWAalrbjI46j7vDcwbWp0kEx8CZg0agNvKsn2vZc/4sr1wwbj WN0oLEdMmY+dhWbYtMvuUXd4gh/5t3F3rWoyp/D6O8j7UXQEZCMOVey1LnMkKj7A c2e47ZVbk/SkhKBgEFnQdJtg7rCquPpOkc8PlwG+A3f8IyYIk1+We+bGaFqY4OnO BhfY6SCsRT1xnNMWq8i77H9Zl2VvfThPVatXTKQXLPYr7u796i2I18hede+Sir3W gr03zr01W1MBYQTHovXdHpSOksTRx1mnKr02DlsAv7lV+Pp/jb65Sf6BrDpNAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUrPh2mNjr0iwZjwgaPx0N5w7PJ0MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM0MmUz MTMzMzgyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALVSKMA0GCSqGSIb3DQEBCwUAA4IBAQCNo5mxE4kH4Au+WlNBYHmApnU6iQ8o K7KxVdKEuXurnglEOgUmCwfb/4Dr2p3tdMVeAdc9TlcJfD5QXr2oISsmAgDlUWsj ddASAfXunViy74iH1DHHwjFJx/EFiQ0cZJiD/KfD5I6aT0eTDGyvwlDUGPb3QXlY 525WpwBGIl+shO9XZ7J9R1xF+c0fwZ1GGKsXrHSOOBwc8Cd5lC7XkpAqdccgiviU 3+vGeITiyY2PUkQSq8kMOr3pyTO3V/vqob/c/hkJtckPyjvmqrXyUcrLLZ4MfgDl Eekwh+3JGVXWf7QT05pTQunj276DfgJSTJn0tIwaXWzscr49rHx2ny+g -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:42 2025 by rpki-client