This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa File: 34352e3132392e33332e302f32342d3234203d3e20323036383034.roa (raw, json) Hash identifier: dsRE+KGmI1yhuyjHkt1xazaeZ8PxHZm3ELIK/XqdYNs= Subject key identifier: 2E:71:79:57:91:7C:4A:43:48:0D:46:00:B3:C8:B6:24:E7:BF:83:C3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2A52ECCC31EC1A4510487CAB835EC2100BE96EC7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa Signing time: Fri 28 Nov 2025 11:49:28 +0000 ROA not before: Fri 28 Nov 2025 11:44:28 +0000 ROA not after: Fri 27 Nov 2026 11:49:28 +0000 asID: 206804 IP address blocks: 45.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:52:ec:cc:31:ec:1a:45:10:48:7c:ab:83:5e:c2:10:0b:e9:6e:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:28 2025 GMT Not After : Nov 27 11:49:28 2026 GMT Subject: CN=2E717957917C4A43480D4600B3C8B624E7BF83C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fb:4c:52:69:b5:75:84:02:13:4f:4e:00:e3: 70:74:c3:10:7c:b7:bc:71:72:2a:cc:7c:1f:34:69: c6:d9:e8:58:0b:aa:5f:af:90:2a:b5:26:76:b1:1c: e5:15:7a:b2:b2:ba:3b:bb:93:61:5c:ec:a7:89:d6: bf:f4:9c:75:39:64:9e:1c:1c:1e:8f:d7:f6:2e:12: fc:ab:fd:ac:5a:54:2c:78:1a:e3:57:d2:25:f5:6a: 8c:6b:83:d9:cd:42:31:6d:5f:1c:f3:fb:f9:0c:1c: 9b:7a:7e:16:66:3c:80:25:59:9f:e4:0f:e2:ae:2f: 81:1d:e3:81:f8:bd:f9:dd:6e:08:22:39:e1:d8:79: c3:b6:d9:a4:7a:53:e2:b7:52:ec:1d:43:ad:3c:da: 12:ca:4d:0e:8c:dd:ce:df:89:38:eb:20:c0:cc:ad: c5:df:b6:d8:59:cb:c7:f6:a6:f1:0f:d4:01:ed:0e: b5:0e:56:b9:e5:d5:1d:6a:c3:13:3a:99:f5:72:64: 4e:9f:55:a4:56:9b:22:29:1d:58:a0:0f:f2:10:26: 64:5c:6d:aa:c7:7b:13:a3:bc:6e:68:b7:3f:ff:1b: ba:9d:60:6e:b5:35:89:b7:f6:93:4e:74:54:7a:86: 28:23:e4:fc:82:6f:32:89:72:b8:d0:d9:9a:48:35: ff:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:71:79:57:91:7C:4A:43:48:0D:46:00:B3:C8:B6:24:E7:BF:83:C3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323036383034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.33.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e8:c8:cb:ff:5d:94:11:dd:e3:80:54:fe:47:85:d0:d3:2d: 75:e6:c6:4f:69:5e:67:b4:d4:41:8e:24:3f:08:61:98:33:be: 07:45:05:65:9e:91:1a:73:c7:b1:69:03:01:76:1a:51:19:b2: b5:3a:b9:4e:08:e4:02:59:17:68:5b:91:34:b6:a7:f3:9d:dc: 15:8d:02:f8:8d:48:89:06:42:42:bb:90:5f:be:2a:f8:0a:88: bc:5a:86:ef:49:66:43:36:a9:89:34:58:8c:5c:9f:6b:bf:31: 20:74:cf:19:38:04:e2:a8:f7:05:31:ab:1d:38:52:07:ab:d1: 5a:6f:c2:37:b4:fd:2c:3e:b2:5c:0c:9a:0c:91:91:4c:5f:31: 16:e1:fb:58:94:57:cc:b0:22:e9:c9:5f:94:bc:45:56:b5:dc: 00:cd:e3:9c:c3:47:81:8c:27:dc:d7:bb:78:05:64:36:d6:d6: f1:38:40:cf:35:0a:67:d3:b0:48:87:c3:b6:33:cb:34:b5:d2: dd:ab:65:57:1e:eb:e6:3f:30:a8:fa:02:a3:de:97:47:ff:20: d2:f2:6d:16:ae:4c:bf:c8:cc:ac:81:b4:3b:c0:e8:fd:c7:3e: d2:bd:4f:72:de:02:40:66:aa:22:a8:d8:d8:cb:7c:33:2d:38: 81:cc:9e:7e -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUKlLszDHsGkUQSHyrg17CEAvpbscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjhaFw0yNjExMjcxMTQ5MjhaMDMxMTAvBgNV BAMTKDJFNzE3OTU3OTE3QzRBNDM0ODBENDYwMEIzQzhCNjI0RTdCRjgzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2+0xSabV1hAITT04A43B0wxB8 t7xxcirMfB80acbZ6FgLql+vkCq1JnaxHOUVerKyuju7k2Fc7KeJ1r/0nHU5ZJ4c HB6P1/YuEvyr/axaVCx4GuNX0iX1aoxrg9nNQjFtXxzz+/kMHJt6fhZmPIAlWZ/k D+KuL4Ed44H4vfndbggiOeHYecO22aR6U+K3UuwdQ6082hLKTQ6M3c7fiTjrIMDM rcXftthZy8f2pvEP1AHtDrUOVrnl1R1qwxM6mfVyZE6fVaRWmyIpHVigD/IQJmRc barHexOjvG5otz//G7qdYG61NYm39pNOdFR6higj5PyCbzKJcrjQ2ZpINf/xAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQULnF5V5F8SkNIDUYAs8i2JOe/g8MwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky ZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzODMwMzQucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgSEwDQYJKoZIhvcNAQELBQADggEBAA3oyMv/XZQR3eOAVP5HhdDTLXXm xk9pXme01EGOJD8IYZgzvgdFBWWekRpzx7FpAwF2GlEZsrU6uU4I5AJZF2hbkTS2 p/Od3BWNAviNSIkGQkK7kF++KvgKiLxahu9JZkM2qYk0WIxcn2u/MSB0zxk4BOKo 9wUxqx04Uger0Vpvwje0/Sw+slwMmgyRkUxfMRbh+1iUV8ywIunJX5S8RVa13ADN 45zDR4GMJ9zXu3gFZDbW1vE4QM81CmfTsEiHw7YzyzS10t2rZVce6+Y/MKj6AqPe l0f/INLybRauTL/IzKyBtDvA6P3HPtK9T3LeAkBmqiKo2NjLfDMtOIHMnn4= -----END CERTIFICATE-----Generated at Sat Dec 6 16:05:26 2025 by rpki-client