This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa File: 34352e31332e35372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 2e1djampwo6kxhqRV0XXScG6gj8Iv7KHKqxy96aj6OE= Subject key identifier: DE:63:4D:00:42:C8:85:41:B6:62:AE:E2:96:41:EE:24:65:93:F6:95 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 63BB48589AF99ADFD7CB9A23E1D7DA3D9BC6DA33 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 61317 IP address blocks: 45.13.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:bb:48:58:9a:f9:9a:df:d7:cb:9a:23:e1:d7:da:3d:9b:c6:da:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=DE634D0042C88541B662AEE29641EE246593F695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a4:2a:c7:13:c8:d1:9d:4b:fd:4d:7d:8f:8c: c2:d1:3a:86:6f:ea:f5:b6:5d:0e:78:6f:bf:89:1a: 6b:19:6f:40:a3:dd:c9:a5:f5:a5:90:fd:6a:a8:d4: 7c:7b:d4:8d:51:8f:ef:cf:95:f3:80:28:45:01:8a: df:bb:d2:35:7d:2b:b7:c1:4e:30:a0:9e:ac:14:54: d4:ff:35:c3:62:24:03:7b:6e:df:9d:f4:4b:4e:43: bb:a5:28:d4:b1:b1:18:77:ee:f5:4f:76:77:6d:4f: df:04:a7:c2:65:dc:2a:86:43:c6:df:40:e3:81:d9: cd:ac:70:f1:5d:7e:fc:81:2a:45:f9:e2:c4:c9:54: e4:f4:c6:18:e5:1f:a5:bf:e9:75:49:bc:63:be:90: 96:52:09:58:21:05:85:b1:38:2d:a9:99:64:95:04: 06:84:53:de:2f:df:76:a6:29:0e:a9:78:da:50:cb: b5:bc:8c:74:98:04:18:87:c8:5f:50:10:6a:3f:4c: f7:90:5b:9c:75:2f:09:34:75:ad:19:d7:16:bc:d0: 27:b8:92:55:e1:9e:d9:c2:e0:00:e0:a8:40:34:f0: c0:4b:3d:86:ac:44:ba:0b:33:83:68:99:dd:49:f2: 18:e7:aa:af:cb:ea:fb:14:ed:6e:70:26:1a:ab:84: c8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:63:4D:00:42:C8:85:41:B6:62:AE:E2:96:41:EE:24:65:93:F6:95 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.57.0/24 Signature Algorithm: sha256WithRSAEncryption 55:47:ab:6f:64:6c:a1:11:fc:d2:1d:1e:d1:ef:39:d3:23:80: 7b:24:d5:48:f6:d7:ae:0c:ab:14:bb:43:8e:4f:56:67:31:76: 1f:0a:46:3f:a3:79:30:c2:1e:8a:c7:5a:6f:06:67:a5:fa:de: 32:d8:7e:07:35:28:60:07:8d:c0:cd:9d:bc:68:97:02:a7:78: ba:51:46:60:60:3a:f8:35:87:e4:43:5f:a1:4f:cb:b3:04:14: 92:c7:c2:d1:12:e6:41:a0:05:1f:57:31:d8:dd:6b:0d:f0:6e: 6e:10:2b:d3:31:b7:62:50:60:41:50:38:12:0c:ec:17:80:b1: 1e:db:8d:a7:f0:3e:5c:b7:5b:bb:35:a1:b7:6d:98:71:55:3b: cd:26:1f:f3:6e:52:38:dd:a6:d1:7c:5a:49:b6:48:59:12:01: ac:fd:47:db:76:d9:55:6a:b6:97:76:4f:7a:66:88:19:0a:0f: 1c:a0:65:5a:03:67:f8:a2:db:dd:79:c9:f7:b2:b5:f4:c3:b4: 91:51:3d:b8:f9:69:43:e8:87:2a:ea:86:52:01:2d:37:dd:70: 96:54:3c:d8:44:9b:da:50:1d:84:8c:fb:df:00:99:f4:7e:82: 4d:2f:ca:3c:1b:66:8d:9c:37:ba:74:6e:c3:bf:58:e0:97:01: 65:2f:7d:65 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUY7tIWJr5mt/Xy5oj4dfaPZvG2jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKERFNjM0RDAwNDJDODg1NDFCNjYyQUVFMjk2NDFFRTI0NjU5M0Y2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXpCrHE8jRnUv9TX2PjMLROoZv 6vW2XQ54b7+JGmsZb0Cj3cml9aWQ/Wqo1Hx71I1Rj+/PlfOAKEUBit+70jV9K7fB TjCgnqwUVNT/NcNiJAN7bt+d9EtOQ7ulKNSxsRh37vVPdndtT98Ep8Jl3CqGQ8bf QOOB2c2scPFdfvyBKkX54sTJVOT0xhjlH6W/6XVJvGO+kJZSCVghBYWxOC2pmWSV BAaEU94v33amKQ6peNpQy7W8jHSYBBiHyF9QEGo/TPeQW5x1Lwk0da0Z1xa80Ce4 klXhntnC4ADgqEA08MBLPYasRLoLM4Nomd1J8hjnqq/L6vsU7W5wJhqrhMjxAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU3mNNAELIhUG2Yq7ilkHuJGWT9pUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz NTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC0NOTANBgkqhkiG9w0BAQsFAAOCAQEAVUerb2RsoRH80h0e0e850yOAeyTVSPbX rgyrFLtDjk9WZzF2HwpGP6N5MMIeisdabwZnpfreMth+BzUoYAeNwM2dvGiXAqd4 ulFGYGA6+DWH5ENfoU/LswQUksfC0RLmQaAFH1cx2N1rDfBubhAr0zG3YlBgQVA4 EgzsF4CxHtuNp/A+XLdbuzWht22YcVU7zSYf825SON2m0XxaSbZIWRIBrP1H23bZ VWq2l3ZPemaIGQoPHKBlWgNn+KLb3XnJ97K19MO0kVE9uPlpQ+iHKuqGUgEtN91w llQ82ESb2lAdhIz73wCZ9H6CTS/KPBtmjZw3unRuw79Y4JcBZS99ZQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:59:03 2025 by rpki-client