This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa File: 34352e3135312e3132302e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: rWUro1E0/rjlZXHi0CvLfIUZTBs+T/RZMWziWG58bOU= Subject key identifier: 31:99:F7:72:EF:7B:D5:A5:93:47:73:E1:4D:45:B0:ED:ED:67:34:80 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 191DC209C36804B511F3FE5B17B4C54BD1300137 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 47583 IP address blocks: 45.151.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:1d:c2:09:c3:68:04:b5:11:f3:fe:5b:17:b4:c5:4b:d1:30:01:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=3199F772EF7BD5A5934773E14D45B0EDED673480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:21:47:df:cd:54:25:7e:b8:49:79:58:2e: b9:76:48:fc:e7:dc:c0:ad:55:b9:ca:59:66:c5:f6: a4:6a:00:38:32:18:2f:b3:56:12:4b:67:c4:7b:f7: 29:36:62:7a:f9:ff:95:10:4d:d8:67:27:6f:b0:42: 66:00:b8:a8:fe:93:89:cd:c3:b3:02:8a:59:9d:c9: 92:9f:b8:97:aa:3f:51:e6:72:26:a7:7d:90:20:06: 63:93:a4:04:f7:9e:4a:bb:21:ee:85:ee:d1:d5:f4: 5e:37:80:af:08:80:15:6c:86:3f:2a:40:be:59:cb: 72:fa:b6:f7:a1:55:45:59:fd:ba:d2:1b:e7:82:51: 1f:95:f3:9d:52:7d:ed:f7:44:c8:2f:35:84:86:44: 60:48:48:95:bc:ba:31:86:11:d0:8a:bc:6d:19:07: 20:82:0b:35:aa:28:f1:bc:44:d5:88:ce:cb:fd:f5: 83:32:1f:0c:28:f0:84:22:52:c4:d8:0a:7f:ca:c4: 28:5e:33:23:02:55:a8:43:57:3a:16:6e:7a:dc:8e: b0:00:c7:29:98:a4:71:41:5a:51:fa:ca:a3:cf:ef: 86:97:ac:4b:cd:eb:fd:28:ec:59:b6:6b:be:e9:32: 26:d7:8c:c0:87:f5:73:19:2c:91:de:0e:46:2c:52: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:99:F7:72:EF:7B:D5:A5:93:47:73:E1:4D:45:B0:ED:ED:67:34:80 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3135312e3132302e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.120.0/23 Signature Algorithm: sha256WithRSAEncryption 80:da:d9:ac:3c:c9:e5:5c:27:f1:a7:c0:89:9e:fc:d1:3d:02: a0:fb:f9:d1:d9:bb:57:63:e2:f4:58:52:ae:4d:49:07:db:9c: 97:d8:37:64:9a:33:6b:2b:0e:38:f8:7b:3d:f1:59:f5:82:c8: 09:50:2e:06:56:aa:a1:24:9d:9c:c4:39:14:29:9d:8d:ed:d8: 5b:f3:cb:5f:b0:de:b3:f6:a6:1b:29:ec:8b:7d:02:da:c9:cb: 4c:d7:f9:cf:40:47:0f:8d:cf:10:e1:8d:83:b4:41:9c:c1:d2: 11:6d:9e:b8:d4:3e:f2:2d:cb:98:53:f6:92:d1:c6:a4:b4:db: c9:f2:23:1a:56:fa:50:cc:cc:ac:20:0b:f4:a3:46:3a:e1:1b: 02:99:0f:e3:66:1d:c2:17:41:13:14:00:14:09:df:66:fd:70: 73:9b:53:e9:a8:35:94:10:bc:26:e2:8d:0d:27:d3:32:e2:22: 49:1f:3a:9c:93:8e:b9:81:67:96:bd:b5:82:8c:86:d5:2e:0e: 1b:6d:7b:0e:06:28:12:a2:65:82:cb:cd:78:d1:c1:7f:8e:20: 29:2e:f6:25:b0:ea:d0:ef:f3:0c:e3:37:db:89:07:f7:28:04: 0c:f6:e3:35:fd:02:6e:c5:b5:9e:92:03:7c:37:be:3e:11:ab: 8d:b1:69:d8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUGR3CCcNoBLUR8/5bF7TFS9EwATcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKDMxOTlGNzcyRUY3QkQ1QTU5MzQ3NzNFMTRENDVCMEVERUQ2NzM0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4liFH381UJX64SXlYLrl2SPzn 3MCtVbnKWWbF9qRqADgyGC+zVhJLZ8R79yk2Ynr5/5UQTdhnJ2+wQmYAuKj+k4nN w7MCilmdyZKfuJeqP1HmcianfZAgBmOTpAT3nkq7Ie6F7tHV9F43gK8IgBVshj8q QL5Zy3L6tvehVUVZ/brSG+eCUR+V851Sfe33RMgvNYSGRGBISJW8ujGGEdCKvG0Z ByCCCzWqKPG8RNWIzsv99YMyHwwo8IQiUsTYCn/KxCheMyMCVahDVzoWbnrcjrAA xymYpHFBWlH6yqPP74aXrEvN6/0o7Fm2a77pMibXjMCH9XMZLJHeDkYsUoBjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUMZn3cu971aWTR3PhTUWw7e1nNIAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM1MzEy ZTMxMzIzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAEtl3gwDQYJKoZIhvcNAQELBQADggEBAIDa2aw8yeVcJ/GnwIme/NE9AqD7 +dHZu1dj4vRYUq5NSQfbnJfYN2SaM2srDjj4ez3xWfWCyAlQLgZWqqEknZzEORQp nY3t2Fvzy1+w3rP2phsp7It9AtrJy0zX+c9ARw+NzxDhjYO0QZzB0hFtnrjUPvIt y5hT9pLRxqS028nyIxpW+lDMzKwgC/SjRjrhGwKZD+NmHcIXQRMUABQJ32b9cHOb U+moNZQQvCbijQ0n0zLiIkkfOpyTjrmBZ5a9tYKMhtUuDhttew4GKBKiZYLLzXjR wX+OICku9iWw6tDv8wzjN9uJB/coBAz24zX9Am7FtZ6SA3w3vj4Rq42xadg= -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:41 2025 by rpki-client