This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa File: 34352e36362e3133362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: IC17BG4i22ejrKz13XKhKNt6VUod9IhYWBeJXuUC8JI= Subject key identifier: EE:67:4E:A7:57:50:20:E5:2E:21:F9:02:27:E6:36:A1:D5:2D:9E:82 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 04DB43674785716A6375233664BA99C444A9FF83 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 136787 IP address blocks: 45.66.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:db:43:67:47:85:71:6a:63:75:23:36:64:ba:99:c4:44:a9:ff:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=EE674EA7575020E52E21F90227E636A1D52D9E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bf:77:88:3e:3b:b3:87:b1:a8:87:54:61:50: cf:2c:de:4c:1e:a6:ab:a7:b2:0b:cd:b9:d6:ed:4a: ee:a2:2c:50:eb:7d:07:1e:3e:75:ea:07:5e:9f:b4: 3e:32:3d:3d:0c:9a:9f:4f:7d:5b:bc:57:a2:f1:13: 88:c8:21:16:f2:88:b8:2b:12:d4:30:16:da:f8:d9: b5:97:58:a2:81:06:30:d3:40:ec:ab:31:bd:ec:dd: 5c:4c:13:69:b6:57:a4:0f:74:74:ba:09:29:5f:37: cf:0d:af:af:7b:07:8a:9f:3c:08:98:bb:fc:3b:35: 96:36:e7:8c:64:e6:9b:e1:9e:89:86:ae:bc:11:96: 1a:fe:18:8e:e7:de:35:6e:d6:28:0b:17:57:97:bd: d8:7a:46:92:e4:02:f7:42:21:0f:6b:d4:16:74:c1: 50:5d:81:60:83:91:bf:1d:93:eb:24:db:ed:f7:00: e1:b4:e5:21:64:36:3d:f5:d9:f7:7d:12:6c:6b:d7: 18:aa:a8:0d:2f:f2:9d:0b:61:cd:4a:d9:ac:6e:c3: 95:27:33:d9:d3:4b:c7:1d:3b:02:95:cc:62:e8:49: 50:d0:50:8f:b5:5f:26:b0:ee:45:a1:18:dc:c8:1d: 19:8c:28:fe:a8:97:5f:f4:17:84:ba:be:11:ed:66: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:67:4E:A7:57:50:20:E5:2E:21:F9:02:27:E6:36:A1:D5:2D:9E:82 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36362e3133362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.136.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:e9:f9:97:64:92:a9:11:80:94:6b:75:a0:96:80:25:81:1b: 22:5d:27:fa:45:0a:05:4b:6e:08:fe:85:48:e9:23:ee:8a:44: 8f:1e:60:e3:c8:43:21:77:97:16:7b:25:a5:99:d1:cc:c7:cd: 4d:62:24:34:f0:75:9c:86:6d:40:45:8e:e0:47:6d:d8:cd:b6: c0:1d:f3:d9:05:3d:e8:1e:a4:10:df:85:8d:90:c4:04:fb:a1: 1f:5c:a4:fc:b2:3a:23:37:8d:84:73:3a:12:c0:53:24:d0:c2: 7d:da:70:36:c5:ef:99:2e:83:71:ab:1a:58:8b:ac:2f:c8:2f: a8:13:ea:79:84:cd:24:02:1d:fb:54:be:2c:2a:1b:2b:26:7b: 9b:9c:83:6e:c9:fd:98:29:aa:d1:42:3e:c1:bb:a0:85:48:2a: dd:aa:a7:8b:7c:c9:0d:7f:ac:9e:bd:47:5c:b0:ce:42:b2:25: b7:14:92:74:d3:8b:c5:76:db:a8:b8:13:8b:e6:56:50:7d:72: 87:da:db:6b:cd:b8:01:4c:43:17:b1:59:22:28:9d:19:11:c6: 04:0f:46:95:c3:b4:e8:90:b0:76:85:0e:5d:cc:21:92:4f:f5: 14:e6:02:19:71:23:a2:aa:c4:1d:3f:66:2b:f7:82:52:d9:4a: 3d:b2:c3:8a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUBNtDZ0eFcWpjdSM2ZLqZxESp/4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKEVFNjc0RUE3NTc1MDIwRTUyRTIxRjkwMjI3RTYzNkExRDUyRDlFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBv3eIPjuzh7Goh1RhUM8s3kwe pqunsgvNudbtSu6iLFDrfQcePnXqB16ftD4yPT0Mmp9PfVu8V6LxE4jIIRbyiLgr EtQwFtr42bWXWKKBBjDTQOyrMb3s3VxME2m2V6QPdHS6CSlfN88Nr697B4qfPAiY u/w7NZY254xk5pvhnomGrrwRlhr+GI7n3jVu1igLF1eXvdh6RpLkAvdCIQ9r1BZ0 wVBdgWCDkb8dk+sk2+33AOG05SFkNj312fd9Emxr1xiqqA0v8p0LYc1K2axuw5Un M9nTS8cdOwKVzGLoSVDQUI+1Xyaw7kWhGNzIHRmMKP6ol1/0F4S6vhHtZjj3AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU7mdOp1dQIOUuIfkCJ+Y2odUtnoIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM2MmUz MTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtQogwDQYJKoZIhvcNAQELBQADggEBAJrp+ZdkkqkRgJRrdaCWgCWBGyJd J/pFCgVLbgj+hUjpI+6KRI8eYOPIQyF3lxZ7JaWZ0czHzU1iJDTwdZyGbUBFjuBH bdjNtsAd89kFPegepBDfhY2QxAT7oR9cpPyyOiM3jYRzOhLAUyTQwn3acDbF75ku g3GrGliLrC/IL6gT6nmEzSQCHftUviwqGysme5ucg27J/ZgpqtFCPsG7oIVIKt2q p4t8yQ1/rJ69R1ywzkKyJbcUknTTi8V226i4E4vmVlB9cofa22vNuAFMQxexWSIo nRkRxgQPRpXDtOiQsHaFDl3MIZJP9RTmAhlxI6KqxB0/Ziv3glLZSj2yw4o= -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:30 2025 by rpki-client