This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3234203d3e203631333137.roa File: 34352e31302e3135382e302f32332d3234203d3e203631333137.roa (raw, json) Hash identifier: R92eVatSy7P/rgS13rbcgrfeNOzVCeiF7gtXCnfdYfg= Subject key identifier: 67:FF:14:90:FA:BD:A5:D3:D0:3C:9A:E3:85:99:3D:3B:7F:8F:57:D0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 77936A228FF413A652B495AA924A9B1714DDCAF9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3234203d3e203631333137.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 61317 IP address blocks: 45.10.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:93:6a:22:8f:f4:13:a6:52:b4:95:aa:92:4a:9b:17:14:dd:ca:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=67FF1490FABDA5D3D03C9AE385993D3B7F8F57D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:96:c5:e1:1c:47:c9:a2:dd:43:c2:02:07:7a: 3e:79:5f:87:57:61:30:ad:6d:d6:3c:4b:d2:24:c2: 8b:d6:a8:12:2f:05:0c:ef:ab:37:a0:ed:c8:c0:38: 46:1a:a5:0c:59:9a:7b:48:5b:ec:1f:b0:c0:dc:06: 2a:32:d0:73:cb:b2:3f:f4:0b:36:25:f8:04:e5:12: 8c:79:08:83:c5:ee:8e:18:ec:64:54:1d:eb:ec:1f: 3b:05:29:df:66:9b:d7:41:6f:92:e6:54:a1:e1:ad: 21:1b:10:5b:17:6d:b7:a9:42:50:de:af:aa:d1:2d: fd:6b:66:b5:02:3f:4a:73:1f:a1:0e:88:b8:e7:89: e3:83:70:35:ef:98:db:6e:42:95:50:b1:7f:0a:0f: c7:fd:78:ad:01:1b:0c:76:6f:ff:a1:6b:34:90:86: 52:6d:18:f8:f4:26:a4:02:e2:66:73:18:cb:14:37: 8b:3e:cf:77:db:d2:d2:1d:55:dd:1d:3c:62:03:66: c8:c7:03:b0:17:9b:ba:9a:42:be:c7:8d:65:b1:c9: b7:4e:13:72:fa:01:bb:01:51:c3:fa:35:b6:5b:d6: cc:a4:97:c4:2d:38:14:39:4d:6e:c7:e7:1a:f6:e0: 41:b8:1b:2f:49:d9:2d:56:1c:71:c9:62:98:e0:74: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:FF:14:90:FA:BD:A5:D3:D0:3C:9A:E3:85:99:3D:3B:7F:8F:57:D0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31302e3135382e302f32332d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.158.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:92:87:e8:dd:14:d3:0b:c6:3a:8a:e0:15:eb:73:aa:49:76: d5:f1:b3:a3:de:e6:49:e7:d1:92:40:fb:7f:b2:30:cf:c8:ab: 9a:35:1c:9b:15:13:1f:0d:d8:f1:44:a2:8c:ec:f2:c2:d5:29: 9f:16:98:0f:bd:fd:f7:2a:2f:9d:b0:b9:4f:83:de:f9:1a:f9: 06:bc:81:a3:ad:84:03:43:7b:3a:8b:59:fb:d7:f2:c0:59:b1: d7:16:c2:15:89:e1:96:6a:6f:1c:ad:8a:7a:d0:f9:b1:0a:44: bc:28:6b:61:98:22:b4:7c:dc:3d:92:5a:0c:0a:31:6e:e7:79: 83:77:1d:54:b7:a3:fb:3f:84:07:fa:c8:50:2e:be:da:fd:10: cb:8a:2e:b3:12:55:21:a1:ca:a4:03:87:02:52:11:86:ce:3b: e8:d3:70:08:18:15:7f:36:a8:7e:3a:9c:d1:1b:27:cb:66:6a: c4:ce:d6:8a:36:68:8f:e4:45:2d:dc:f3:3d:96:a3:88:06:91: 63:a1:4b:b9:54:e2:85:a5:d4:34:9c:c5:c5:09:2f:77:64:ad: bf:e3:58:64:df:af:de:ca:fa:78:0e:5b:7b:95:a6:5c:b0:32: be:1b:89:d1:b0:07:50:4a:12:83:0d:4f:04:08:33:be:80:5a: 0c:02:19:96 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUd5NqIo/0E6ZStJWqkkqbFxTdyvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKDY3RkYxNDkwRkFCREE1RDNEMDNDOUFFMzg1OTkzRDNCN0Y4RjU3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolsXhHEfJot1DwgIHej55X4dX YTCtbdY8S9IkwovWqBIvBQzvqzeg7cjAOEYapQxZmntIW+wfsMDcBioy0HPLsj/0 CzYl+ATlEox5CIPF7o4Y7GRUHevsHzsFKd9mm9dBb5LmVKHhrSEbEFsXbbepQlDe r6rRLf1rZrUCP0pzH6EOiLjnieODcDXvmNtuQpVQsX8KD8f9eK0BGwx2b/+hazSQ hlJtGPj0JqQC4mZzGMsUN4s+z3fb0tIdVd0dPGIDZsjHA7AXm7qaQr7HjWWxybdO E3L6AbsBUcP6NbZb1sykl8QtOBQ5TW7H5xr24EG4Gy9J2S1WHHHJYpjgdDgPAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUZ/8UkPq9pdPQPJrjhZk9O3+PV9AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMwMmUz MTM1MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLQqeMA0GCSqGSIb3DQEBCwUAA4IBAQAqkofo3RTTC8Y6iuAV63OqSXbV8bOj 3uZJ59GSQPt/sjDPyKuaNRybFRMfDdjxRKKM7PLC1SmfFpgPvf33Ki+dsLlPg975 GvkGvIGjrYQDQ3s6i1n71/LAWbHXFsIVieGWam8crYp60PmxCkS8KGthmCK0fNw9 kloMCjFu53mDdx1Ut6P7P4QH+shQLr7a/RDLii6zElUhocqkA4cCUhGGzjvo03AI GBV/Nqh+OpzRGyfLZmrEztaKNmiP5EUt3PM9lqOIBpFjoUu5VOKFpdQ0nMXFCS93 ZK2/41hk36/eyvp4Dlt7laZcsDK+G4nRsAdQShKDDU8ECDO+gFoMAhmW -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:10 2025 by rpki-client