This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa File: 34352e3132392e33332e302f32342d3234203d3e20323038303436.roa (raw, json) Hash identifier: ED77tA7Sqju4wIjIlr0K0Glerm8dHZXFvXvUEDnm/IE= Subject key identifier: 5C:C8:25:C2:42:F4:D1:6B:1A:36:EF:76:66:C2:0A:43:34:9D:C9:5F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 08DDA9304A6F299F5B53F7B0B8C1F9FA7BDD9D6D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa Signing time: Fri 28 Nov 2025 11:49:46 +0000 ROA not before: Fri 28 Nov 2025 11:44:46 +0000 ROA not after: Fri 27 Nov 2026 11:49:46 +0000 asID: 208046 IP address blocks: 45.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:dd:a9:30:4a:6f:29:9f:5b:53:f7:b0:b8:c1:f9:fa:7b:dd:9d:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:46 2025 GMT Not After : Nov 27 11:49:46 2026 GMT Subject: CN=5CC825C242F4D16B1A36EF7666C20A43349DC95F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:39:95:68:b1:43:a4:2b:40:b2:bb:78:6a: d2:7a:af:60:b4:cd:48:1b:c6:ab:50:ad:0b:44:8e: 95:60:f1:5d:89:13:e6:0e:7e:e0:6d:f1:5a:c5:d9: 72:fc:31:40:05:68:ee:12:89:bc:7e:74:95:c5:7c: de:d8:34:aa:69:f3:7d:73:45:7e:ca:75:ed:c1:9c: 8a:63:84:bd:ec:40:38:5b:f6:d4:50:b3:e7:e8:22: f3:59:83:a0:bb:a9:7d:0d:9b:38:94:0f:cb:35:62: aa:13:7d:dc:7c:39:f3:e8:10:6c:54:ae:84:ce:3c: 51:d1:24:86:71:0d:c7:ba:66:ab:c9:ef:3b:6d:ef: 85:f7:cc:9f:a9:50:76:75:68:fa:bd:e4:fe:bb:d8: bd:35:9f:61:ab:b6:8b:9c:1f:63:a5:bf:92:72:b1: 5c:40:ed:5a:a0:d4:e2:3b:54:da:85:80:7d:05:98: ca:5c:77:fc:45:c7:bb:2f:a7:ec:56:bc:e6:f3:ff: 14:17:33:d7:51:d2:e3:5e:d1:4f:d7:cb:a1:c4:30: f4:11:c5:cf:65:94:b2:be:0a:fa:a2:78:ab:55:07: 70:2e:32:b9:17:7c:61:cc:75:7f:28:6e:59:e2:ff: 12:99:e5:3e:9f:00:55:17:0c:98:86:5f:1e:cc:8b: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C8:25:C2:42:F4:D1:6B:1A:36:EF:76:66:C2:0A:43:34:9D:C9:5F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323038303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.33.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f5:b9:bd:11:44:b9:6e:ac:26:97:e4:3b:82:8f:97:41:26: d7:9e:ef:50:93:e0:a1:00:4e:e2:44:8d:fb:6a:f5:ec:b5:f3: bc:bb:77:a5:0e:10:51:ea:e5:6d:bb:98:c3:a4:69:83:f3:17: 80:a7:ff:de:39:0c:4a:84:74:e9:e9:d8:08:ab:f7:df:d4:5d: 06:85:60:31:22:e6:e4:a9:44:44:1a:76:53:fa:cb:4c:da:d9: c5:fb:33:6e:51:50:b9:f1:fe:51:c2:55:31:c2:39:6b:ae:9d: 38:50:30:fb:17:f1:6c:ca:d5:b9:8c:a1:0e:e6:6c:1c:89:cb: 86:19:84:86:3e:7b:75:89:d4:c0:dc:e8:8a:45:26:da:1c:4f: f1:52:db:a5:43:37:8e:6b:2b:b1:91:64:6d:f2:fc:b0:97:2f: 06:5e:16:29:2f:64:1b:38:e8:f2:04:05:8b:77:09:3f:6e:42: 29:f0:51:c0:25:0a:5e:84:ab:e2:08:ef:c9:d0:e1:ed:4a:58: cb:66:b4:b1:94:51:23:a2:5e:2d:75:71:d6:95:c2:e6:66:d0: 87:8d:16:eb:c5:42:95:aa:6a:aa:2c:7c:32:89:34:2b:30:db: 9f:ca:55:c0:71:85:37:95:4b:61:37:df:1b:80:a8:c9:12:98: 9b:ce:9a:31 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUCN2pMEpvKZ9bU/ewuMH5+nvdnW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDZaFw0yNjExMjcxMTQ5NDZaMDMxMTAvBgNV BAMTKDVDQzgyNUMyNDJGNEQxNkIxQTM2RUY3NjY2QzIwQTQzMzQ5REM5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WzmVaLFDpCtAsrt4atJ6r2C0 zUgbxqtQrQtEjpVg8V2JE+YOfuBt8VrF2XL8MUAFaO4Sibx+dJXFfN7YNKpp831z RX7Kde3BnIpjhL3sQDhb9tRQs+foIvNZg6C7qX0NmziUD8s1YqoTfdx8OfPoEGxU roTOPFHRJIZxDce6ZqvJ7ztt74X3zJ+pUHZ1aPq95P672L01n2GrtoucH2Olv5Jy sVxA7Vqg1OI7VNqFgH0FmMpcd/xFx7svp+xWvObz/xQXM9dR0uNe0U/Xy6HEMPQR xc9llLK+CvqieKtVB3AuMrkXfGHMdX8oblni/xKZ5T6fAFUXDJiGXx7Mi+JnAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUXMglwkL00WsaNu92ZsIKQzSdyV8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky ZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzgzMDM0MzYucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgSEwDQYJKoZIhvcNAQELBQADggEBAC/1ub0RRLlurCaX5DuCj5dBJtee 71CT4KEATuJEjftq9ey187y7d6UOEFHq5W27mMOkaYPzF4Cn/945DEqEdOnp2Air 99/UXQaFYDEi5uSpREQadlP6y0za2cX7M25RULnx/lHCVTHCOWuunThQMPsX8WzK 1bmMoQ7mbByJy4YZhIY+e3WJ1MDc6IpFJtocT/FS26VDN45rK7GRZG3y/LCXLwZe FikvZBs46PIEBYt3CT9uQinwUcAlCl6Eq+II78nQ4e1KWMtmtLGUUSOiXi11cdaV wuZm0IeNFuvFQpWqaqosfDKJNCsw25/KVcBxhTeVS2E33xuAqMkSmJvOmjE= -----END CERTIFICATE-----Generated at Sat Dec 6 11:30:48 2025 by rpki-client