This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa File: 34352e3133322e3135372e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: qrxC4IMnLcaBNqH2/1nvl7UNpjHmpbdrLXLrvigd9bg= Subject key identifier: 72:78:9D:F7:6D:C3:1B:B0:6A:64:BB:C2:C9:89:1A:C7:57:D5:BD:99 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 36305968954845D4C0F9788D37358DA1A567B5AF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 47583 IP address blocks: 45.132.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:30:59:68:95:48:45:d4:c0:f9:78:8d:37:35:8d:a1:a5:67:b5:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=72789DF76DC31BB06A64BBC2C9891AC757D5BD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:07:c0:6e:3d:e2:f5:94:ff:e1:16:8a:e4:80: ee:69:9d:81:65:a7:9f:9b:a1:3f:79:90:e2:a9:89: a1:f6:c1:bf:5a:10:0f:99:96:24:81:55:3b:fe:63: 08:9e:d7:4f:29:13:37:0a:6f:a1:f6:44:63:ba:b0: 5a:67:c3:49:eb:50:e4:e0:f5:cc:99:c5:cd:54:39: ab:2d:75:60:b6:64:08:a4:85:94:72:67:dd:47:1b: f4:9e:b8:4f:8e:3c:27:85:4d:e1:c8:7e:5c:23:c8: 9f:1b:78:83:1e:c6:0a:86:4a:2f:1f:bb:f6:e2:6c: 11:02:79:d2:2e:62:5f:0c:86:a9:cc:c9:b4:f3:61: f1:15:ce:77:4d:03:91:90:e8:16:b9:b1:86:22:c5: cc:25:87:20:b4:9a:93:4f:4c:19:b7:36:0d:58:23: c1:36:4f:02:bd:f8:07:ac:4a:f1:2d:70:51:90:a3: d9:06:4c:a6:41:cd:38:a8:2c:ec:60:80:6f:77:a3: 8f:a1:1b:ff:c9:bf:3d:63:a6:f3:9d:09:3b:51:8a: 3a:27:1f:7b:a5:2c:79:5c:db:1d:52:73:8c:a0:8d: b5:b4:89:27:21:9c:19:bd:06:b5:65:a5:59:82:8a: 79:3f:ab:50:3f:9d:d4:e7:ba:a5:25:a4:45:8f:3a: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:78:9D:F7:6D:C3:1B:B0:6A:64:BB:C2:C9:89:1A:C7:57:D5:BD:99 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133322e3135372e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.157.0/24 Signature Algorithm: sha256WithRSAEncryption 98:6e:97:9a:30:4c:2a:6a:8d:c2:0b:b3:30:9c:84:43:1f:aa: 0f:5e:bc:52:1f:2e:8f:91:a4:51:32:6d:0c:f1:86:d4:1c:81: 68:88:30:d4:ab:ec:cc:cc:82:51:bc:6b:21:92:a7:67:3d:ef: 5f:81:5c:a9:dc:0c:df:fd:03:bd:ab:73:e2:9f:af:7f:7f:f3: da:13:af:b0:11:0d:80:21:c1:e2:36:00:2e:4d:cc:cc:de:14: ce:81:64:50:0b:34:18:28:39:ee:1c:53:a3:e6:67:9d:47:40: 71:6c:3c:3e:6d:52:ff:b5:7c:f2:89:65:7a:0a:55:a5:57:ce: 20:d3:a1:b9:f8:49:7e:22:15:9c:1d:ed:32:22:8c:ea:cf:61: c2:fb:e6:c6:ee:fe:ad:28:13:9c:05:bc:ca:e1:2a:99:6b:eb: ee:d2:86:3f:30:85:39:e5:54:82:80:53:32:e3:73:59:47:43: d0:ab:bb:ee:f8:85:e8:6a:79:26:6e:80:ca:aa:5a:58:94:2e: 23:95:d1:a2:4f:39:13:99:0a:bb:b8:02:b5:9f:02:f0:2c:a2: 42:23:f9:5f:b7:94:15:e7:b3:57:53:e7:3a:f5:fa:6a:3e:03: 39:75:6c:dc:a1:94:d0:65:88:d6:83:1d:b6:dd:42:ed:62:3a: 0b:96:7b:7b -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUNjBZaJVIRdTA+XiNNzWNoaVnta8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKDcyNzg5REY3NkRDMzFCQjA2QTY0QkJDMkM5ODkxQUM3NTdENUJEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYB8BuPeL1lP/hForkgO5pnYFl p5+boT95kOKpiaH2wb9aEA+ZliSBVTv+Ywie108pEzcKb6H2RGO6sFpnw0nrUOTg 9cyZxc1UOastdWC2ZAikhZRyZ91HG/SeuE+OPCeFTeHIflwjyJ8beIMexgqGSi8f u/bibBECedIuYl8MhqnMybTzYfEVzndNA5GQ6Ba5sYYixcwlhyC0mpNPTBm3Ng1Y I8E2TwK9+AesSvEtcFGQo9kGTKZBzTioLOxggG93o4+hG//Jvz1jpvOdCTtRijon H3ulLHlc2x1Sc4ygjbW0iSchnBm9BrVlpVmCink/q1A/ndTnuqUlpEWPOtrlAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUcnid923DG7BqZLvCyYkax1fVvZkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzIy ZTMxMzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAthJ0wDQYJKoZIhvcNAQELBQADggEBAJhul5owTCpqjcILszCchEMfqg9e vFIfLo+RpFEybQzxhtQcgWiIMNSr7MzMglG8ayGSp2c971+BXKncDN/9A72rc+Kf r39/89oTr7ARDYAhweI2AC5NzMzeFM6BZFALNBgoOe4cU6PmZ51HQHFsPD5tUv+1 fPKJZXoKVaVXziDTobn4SX4iFZwd7TIijOrPYcL75sbu/q0oE5wFvMrhKplr6+7S hj8whTnlVIKAUzLjc1lHQ9Cru+74hehqeSZugMqqWliULiOV0aJPOROZCru4ArWf AvAsokIj+V+3lBXns1dT5zr1+mo+Azl1bNyhlNBliNaDHbbdQu1iOguWe3s= -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:42 2025 by rpki-client