This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa File: 34352e31352e32342e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: QOvYu2gOutehimpWtDBBuOHHvDiAyqeijfFb0PbWD44= Subject key identifier: 42:BE:C5:56:98:05:5A:7F:B1:76:E3:59:DD:20:95:73:DE:AE:00:19 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 796E37BDD437BA296A119232FCC2865CD32C69DB Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:53 +0000 ROA not before: Fri 28 Nov 2025 11:44:53 +0000 ROA not after: Fri 27 Nov 2026 11:49:53 +0000 asID: 47583 IP address blocks: 45.15.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:6e:37:bd:d4:37:ba:29:6a:11:92:32:fc:c2:86:5c:d3:2c:69:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:53 2025 GMT Not After : Nov 27 11:49:53 2026 GMT Subject: CN=42BEC55698055A7FB176E359DD209573DEAE0019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:3b:fb:99:fa:18:5c:65:2a:bb:af:b5:96: 77:bf:25:9d:44:e7:05:a5:0f:a8:08:8a:9d:82:47: 04:f0:36:64:32:6b:10:f3:19:07:6b:4e:38:86:f7: 16:f7:2c:f5:4b:1d:38:14:67:64:39:99:38:c6:c7: 96:76:27:c1:18:44:bf:7b:1c:43:99:16:48:79:51: be:f6:5d:2b:ff:ec:0c:73:e8:f1:66:bb:65:6b:e8: 2c:a4:64:7b:47:bb:84:0d:db:70:1a:a1:79:8d:2d: f4:16:4d:10:97:8a:5f:95:a3:b5:51:fe:e4:11:3a: e0:7f:33:e3:76:e0:5d:ff:85:d7:52:8f:16:79:9d: e9:e0:55:55:ff:84:ea:09:95:20:7e:d4:d1:19:4b: 6e:9b:e1:69:74:04:8d:1a:cc:15:08:6e:66:40:42: 3c:3d:7f:a9:1e:08:57:60:60:16:2e:00:d2:ab:92: 78:56:58:d0:ee:6e:92:07:d3:d7:77:c8:48:7a:01: e4:c7:89:b5:86:10:2f:98:39:ad:1b:87:5e:72:ac: 37:82:26:98:a8:8c:91:6d:5b:a7:04:6a:69:0f:16: 00:e2:81:ec:c2:a7:04:3e:ff:4e:0e:9d:34:5e:db: b8:9f:1b:27:f6:0a:53:09:7e:08:1c:02:3d:e3:7b: 71:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BE:C5:56:98:05:5A:7F:B1:76:E3:59:DD:20:95:73:DE:AE:00:19 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31352e32342e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.24.0/22 Signature Algorithm: sha256WithRSAEncryption 54:57:da:b6:76:1c:66:20:77:0e:d9:63:c2:8b:7a:65:f6:68: fa:1b:48:ae:ec:67:e6:3c:96:2f:16:0b:e6:62:18:b3:b0:81: f0:10:19:6b:10:55:b5:c8:26:0f:50:0c:d5:5c:c0:8c:d9:7c: 6a:d6:16:05:68:82:4e:2f:17:15:91:98:3b:14:d8:24:a2:f0: cb:da:06:71:f8:76:ae:3d:b6:5c:f5:13:51:1e:85:97:7b:c2: 5f:85:6c:b4:90:9c:b6:a1:56:28:e6:8a:f1:b4:29:05:ae:d7: 19:52:d7:ad:f1:f2:f6:94:66:b4:19:76:2e:eb:25:49:10:d7: 6e:cb:fa:cc:51:f5:1b:5e:2c:05:13:da:24:d8:d0:96:12:6c: a4:e8:60:9e:98:dc:e3:97:b2:2f:39:37:1a:50:17:87:c9:20: 46:ba:05:95:7e:d6:71:98:be:b8:e1:41:16:a1:23:b5:c0:09: d0:5d:d2:e7:e7:7e:1e:bb:70:67:2a:0a:dd:d6:4d:1d:aa:85: 30:74:47:2a:15:a1:e6:6b:0c:67:4c:01:88:c4:94:ae:0d:0a: 18:dd:81:94:6b:80:43:bc:da:6c:09:81:00:01:96:2e:dc:64: 7a:6e:0e:85:96:d8:3d:e9:96:b4:02:ca:11:86:24:fe:fd:ea: 0d:8b:e1:f3 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUeW43vdQ3uilqEZIy/MKGXNMsadswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTNaFw0yNjExMjcxMTQ5NTNaMDMxMTAvBgNV BAMTKDQyQkVDNTU2OTgwNTVBN0ZCMTc2RTM1OUREMjA5NTczREVBRTAwMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDczv7mfoYXGUqu6+1lne/JZ1E 5wWlD6gIip2CRwTwNmQyaxDzGQdrTjiG9xb3LPVLHTgUZ2Q5mTjGx5Z2J8EYRL97 HEOZFkh5Ub72XSv/7Axz6PFmu2Vr6CykZHtHu4QN23AaoXmNLfQWTRCXil+Vo7VR /uQROuB/M+N24F3/hddSjxZ5nengVVX/hOoJlSB+1NEZS26b4Wl0BI0azBUIbmZA Qjw9f6keCFdgYBYuANKrknhWWNDubpIH09d3yEh6AeTHibWGEC+YOa0bh15yrDeC JpiojJFtW6cEamkPFgDigezCpwQ+/04OnTRe27ifGyf2ClMJfggcAj3je3H1AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUQr7FVpgFWn+xduNZ3SCVc96uABkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MmUz MjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Ai0PGDANBgkqhkiG9w0BAQsFAAOCAQEAVFfatnYcZiB3Dtljwot6ZfZo+htIruxn 5jyWLxYL5mIYs7CB8BAZaxBVtcgmD1AM1VzAjNl8atYWBWiCTi8XFZGYOxTYJKLw y9oGcfh2rj22XPUTUR6Fl3vCX4VstJCctqFWKOaK8bQpBa7XGVLXrfHy9pRmtBl2 LuslSRDXbsv6zFH1G14sBRPaJNjQlhJspOhgnpjc45eyLzk3GlAXh8kgRroFlX7W cZi+uOFBFqEjtcAJ0F3S5+d+HrtwZyoK3dZNHaqFMHRHKhWh5msMZ0wBiMSUrg0K GN2BlGuAQ7zabAmBAAGWLtxkem4OhZbYPemWtALKEYYk/v3qDYvh8w== -----END CERTIFICATE-----Generated at Fri Dec 5 18:55:03 2025 by rpki-client