This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32342d3234203d3e20323132323338.roa File: 34352e31302e3135362e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: 3muWUd7O4OfE+It8LN00gzOYqeroijYZmPcQTwm1uL0= Subject key identifier: 87:8C:54:E7:95:11:6D:9A:A3:D8:34:BE:14:30:63:9C:62:67:EA:09 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 55737C21ECCC0D8DACDC650118DD5CC46B8C867C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32342d3234203d3e20323132323338.roa Signing time: Mon 17 Nov 2025 14:31:51 +0000 ROA not before: Mon 17 Nov 2025 14:26:51 +0000 ROA not after: Mon 16 Nov 2026 14:31:51 +0000 asID: 212238 IP address blocks: 45.10.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 20:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:73:7c:21:ec:cc:0d:8d:ac:dc:65:01:18:dd:5c:c4:6b:8c:86:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 17 14:26:51 2025 GMT Not After : Nov 16 14:31:51 2026 GMT Subject: CN=878C54E795116D9AA3D834BE1430639C6267EA09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:e0:3b:5b:05:e9:8b:97:b9:f8:d3:d3:74: 96:af:76:d2:8f:a6:21:8b:67:db:72:a1:4a:c4:67: 4a:5c:83:55:8e:6e:a1:74:b5:b9:0c:59:c8:c0:4a: aa:83:ac:4b:d0:6b:cf:46:06:28:96:e4:71:a3:5e: 9b:f6:eb:7b:3b:fe:ce:07:23:e4:e4:cb:2b:f1:58: 1a:f7:62:2c:ab:a8:f9:08:3c:5d:f6:f7:74:d3:c3: f8:f3:db:f5:e8:f8:dd:c0:52:c2:dd:22:25:9b:c6: 24:74:5b:4c:3a:cc:b2:ac:c9:84:4d:0a:ce:fe:12: c6:d6:aa:1b:f6:a9:ba:00:34:f7:e7:23:74:84:0d: d5:6f:f6:c5:32:50:56:ab:bb:1c:3d:af:ed:11:56: ca:b0:67:8a:f0:4d:65:24:8b:3d:0b:23:55:9a:0d: 50:bb:5e:a3:3b:32:80:dc:a8:ff:94:ad:b9:04:ac: b0:47:8e:8e:58:23:ef:22:00:ed:d3:38:48:9c:9b: d3:65:62:d2:be:a2:33:2f:19:78:97:7a:6e:8b:5b: 69:19:ac:f9:8e:94:a3:62:c3:ed:42:71:5d:1f:f9: f3:1f:8e:e7:1e:2c:51:30:e9:31:97:dc:c1:d9:36: 4c:41:1b:99:90:1b:e8:63:42:a4:30:3e:a5:32:95: c3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:8C:54:E7:95:11:6D:9A:A3:D8:34:BE:14:30:63:9C:62:67:EA:09 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135362e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.156.0/24 Signature Algorithm: sha256WithRSAEncryption 79:85:4b:d2:34:3e:a0:78:ab:7e:88:54:20:fc:cc:fd:e9:c4: f2:78:27:16:5b:b9:56:b8:a1:a4:e8:ca:34:c2:07:a4:b5:e2: ec:d2:d0:49:37:5d:d4:19:aa:85:81:86:bf:62:1a:4a:76:2a: c5:69:d0:f5:cb:9f:df:bb:fe:ee:37:e1:bc:cf:3d:06:d9:17: c6:b7:d0:10:93:b9:99:72:41:db:21:9b:ce:b3:a2:9c:13:7c: 37:ee:46:10:60:e3:68:8e:75:7d:3f:46:be:6b:d9:71:4f:21: 19:bf:81:d2:13:5d:5c:01:db:26:05:0e:b3:a0:b8:00:64:c0: d2:bc:83:b2:20:d1:e3:11:c7:c7:16:15:d9:0e:6b:f5:40:36: 9e:c4:d7:29:0c:a4:e8:21:47:61:03:5c:a9:2a:32:5b:5c:8f: b9:68:5a:d6:a1:e1:f0:e2:a0:68:ab:0e:c8:03:cb:66:85:c9: 37:c6:bf:00:e5:0c:7f:26:b7:86:0a:67:cc:6c:6c:58:a6:4c: ae:a4:96:0a:4a:34:a4:da:a2:3d:de:3f:d7:48:91:e3:66:a7: 72:9b:e4:7c:70:d9:0b:71:5b:60:36:9d:0b:9e:91:ba:5b:8b: f3:7d:b6:35:c9:14:b9:d3:ae:d3:cd:f4:24:47:db:ff:a8:2c: 9a:e7:26:4e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUVXN8IezMDY2s3GUBGN1cxGuMhnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMTcxNDI2NTFaFw0yNjExMTYxNDMxNTFaMDMxMTAvBgNV BAMTKDg3OEM1NEU3OTUxMTZEOUFBM0Q4MzRCRTE0MzA2MzlDNjI2N0VBMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHL+A7WwXpi5e5+NPTdJavdtKP piGLZ9tyoUrEZ0pcg1WObqF0tbkMWcjASqqDrEvQa89GBiiW5HGjXpv263s7/s4H I+TkyyvxWBr3YiyrqPkIPF3293TTw/jz2/Xo+N3AUsLdIiWbxiR0W0w6zLKsyYRN Cs7+EsbWqhv2qboANPfnI3SEDdVv9sUyUFaruxw9r+0RVsqwZ4rwTWUkiz0LI1Wa DVC7XqM7MoDcqP+UrbkErLBHjo5YI+8iAO3TOEicm9NlYtK+ojMvGXiXem6LW2kZ rPmOlKNiw+1CcV0f+fMfjuceLFEw6TGX3MHZNkxBG5mQG+hjQqQwPqUylcMPAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUh4xU55URbZqj2DS+FDBjnGJn6gkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtCpwwDQYJKoZIhvcNAQELBQADggEBAHmFS9I0PqB4q36IVCD8zP3pxPJ4 JxZbuVa4oaToyjTCB6S14uzS0Ek3XdQZqoWBhr9iGkp2KsVp0PXLn9+7/u434bzP PQbZF8a30BCTuZlyQdshm86zopwTfDfuRhBg42iOdX0/Rr5r2XFPIRm/gdITXVwB 2yYFDrOguABkwNK8g7Ig0eMRx8cWFdkOa/VANp7E1ykMpOghR2EDXKkqMltcj7lo Wtah4fDioGirDsgDy2aFyTfGvwDlDH8mt4YKZ8xsbFimTK6klgpKNKTaoj3eP9dI keNmp3Kb5Hxw2QtxW2A2nQuekbpbi/N9tjXJFLnTrtPN9CRH2/+oLJrnJk4= -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:07 2025 by rpki-client