This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e382e302f32332d3332203d3e203531313637.roa File: 34352e39322e382e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: rIJSt80XqfhbI4CAKYYuvpDUaCj1b/l0CFayAcpPNDg= Subject key identifier: 48:B9:4D:9C:96:FB:05:18:DA:0E:23:D8:25:34:5D:68:F1:4E:75:0B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 689868DCD1BEE25769A10B3D87EDEF55B7846DB5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e382e302f32332d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 51167 IP address blocks: 45.92.8.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:98:68:dc:d1:be:e2:57:69:a1:0b:3d:87:ed:ef:55:b7:84:6d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=48B94D9C96FB0518DA0E23D825345D68F14E750B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:26:a5:db:e2:94:5d:8f:23:11:a7:d0:9f: 03:2c:ec:f0:45:4d:b1:4e:c0:1b:f5:f4:07:3f:1a: 6d:f1:65:b2:59:7b:49:7b:36:ed:97:71:09:34:11: ef:c9:23:87:bd:f0:2f:11:b4:d0:f6:14:d9:97:c2: 98:ca:9d:67:e7:b0:1d:ed:f6:57:81:b1:fd:6c:42: b5:a9:24:0d:28:ec:b8:4e:28:85:e9:eb:7e:b8:e2: 30:7e:7c:70:e7:54:32:d4:65:a5:76:c6:eb:89:01: 1b:d6:58:be:76:d4:c8:09:23:de:e9:42:b9:b3:fc: 3a:c8:82:5b:62:5c:1b:f1:a5:4a:99:05:cd:ca:10: db:cb:04:85:4c:24:4d:d0:ef:aa:d6:4c:12:bb:14: 86:d0:3d:e2:71:eb:32:dd:45:b0:a7:1c:b1:26:60: 57:e5:6e:ba:7a:9b:7e:2e:ab:eb:c8:5d:98:68:53: 7c:f5:6b:91:ac:8f:fd:88:d8:cb:06:5b:83:2b:89: ed:eb:1a:30:7d:65:5d:1e:bf:a7:da:05:09:92:c3: f1:b2:d0:1a:15:f9:1c:57:a5:09:e6:cb:ae:bc:a0: 12:4e:8c:b6:eb:b8:53:fd:3d:20:2f:92:7f:8e:22: 44:73:e5:d5:ef:be:25:5c:d9:65:3d:1a:db:d6:73: 75:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:B9:4D:9C:96:FB:05:18:DA:0E:23:D8:25:34:5D:68:F1:4E:75:0B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39322e382e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.92.8.0/23 Signature Algorithm: sha256WithRSAEncryption 79:46:8e:3f:a2:2a:1c:a3:53:f2:d0:0c:6b:7e:a4:42:68:90: da:91:e9:85:9f:bb:e5:8d:23:a7:7c:77:c2:0c:a3:69:34:0f: 41:56:dc:4f:05:4f:f5:65:e9:02:c4:9f:f3:6e:f5:b4:59:0e: 67:e7:ac:83:d5:c4:af:d4:b8:6c:86:a6:02:24:81:97:5f:eb: 94:e4:2f:7f:26:30:53:8a:01:00:a6:8a:9f:46:41:8a:78:f4: 6e:81:38:75:a4:1d:19:57:45:f1:90:fb:92:e4:bf:75:82:ef: c1:6c:54:19:0a:37:19:03:93:5a:91:84:88:84:c9:40:1e:2d: 1e:a4:da:13:ac:3d:e3:70:26:66:61:1f:ce:06:4a:85:0d:11: db:12:58:e1:ae:94:1f:b2:e7:a2:a1:c0:4f:78:4c:5e:7c:43: b7:76:32:4a:31:d4:b0:bb:5c:3e:03:2b:f0:df:46:f2:21:ec: 0e:c1:68:de:70:2a:f4:5f:6f:a4:de:52:d0:d2:52:6f:9b:29: 81:02:2e:19:7e:ce:12:77:f3:dd:54:51:07:c3:9e:90:46:2e: 49:e5:5e:1a:f1:fc:9d:80:a8:15:2c:5a:6b:c3:7f:90:57:5a: 69:a3:ce:f2:99:18:ab:71:ba:43:1d:f7:56:75:90:06:bd:55: 19:36:59:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaJho3NG+4ldpoQs9h+3vVbeEbbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKDQ4Qjk0RDlDOTZGQjA1MThEQTBFMjNEODI1MzQ1RDY4RjE0RTc1MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nial2+KUXY8jEafQnwMs7PBF TbFOwBv19Ac/Gm3xZbJZe0l7Nu2XcQk0Ee/JI4e98C8RtND2FNmXwpjKnWfnsB3t 9leBsf1sQrWpJA0o7LhOKIXp63644jB+fHDnVDLUZaV2xuuJARvWWL521MgJI97p Qrmz/DrIgltiXBvxpUqZBc3KENvLBIVMJE3Q76rWTBK7FIbQPeJx6zLdRbCnHLEm YFflbrp6m34uq+vIXZhoU3z1a5Gsj/2I2MsGW4Mrie3rGjB9ZV0ev6faBQmSw/Gy 0BoV+RxXpQnmy668oBJOjLbruFP9PSAvkn+OIkRz5dXvviVc2WU9GtvWc3XfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSLlNnJb7BRjaDiPYJTRdaPFOdQswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTMyMmUz ODJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEt XAgwDQYJKoZIhvcNAQELBQADggEBAHlGjj+iKhyjU/LQDGt+pEJokNqR6YWfu+WN I6d8d8IMo2k0D0FW3E8FT/Vl6QLEn/Nu9bRZDmfnrIPVxK/UuGyGpgIkgZdf65Tk L38mMFOKAQCmip9GQYp49G6BOHWkHRlXRfGQ+5Lkv3WC78FsVBkKNxkDk1qRhIiE yUAeLR6k2hOsPeNwJmZhH84GSoUNEdsSWOGulB+y56KhwE94TF58Q7d2Mkox1LC7 XD4DK/DfRvIh7A7BaN5wKvRfb6TeUtDSUm+bKYECLhl+zhJ3891UUQfDnpBGLknl Xhrx/J2AqBUsWmvDf5BXWmmjzvKZGKtxukMd91Z1kAa9VRk2WZw= -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:26 2025 by rpki-client