This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33342e302f32342d3234203d3e20323034313730.roa File: 34352e3132392e33342e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: sGNUAGDsILLlBr9EANhcXJyyPJwMqVJbMT7cvUq9bj4= Subject key identifier: 10:4F:24:A9:24:E6:00:D9:04:63:FE:60:FF:78:89:F1:C4:72:46:A7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 76A5C9DDA3C59ABE2CFBF4B419720696E73AA025 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33342e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:34 +0000 ROA not before: Fri 28 Nov 2025 11:44:34 +0000 ROA not after: Fri 27 Nov 2026 11:49:34 +0000 asID: 204170 IP address blocks: 45.129.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:a5:c9:dd:a3:c5:9a:be:2c:fb:f4:b4:19:72:06:96:e7:3a:a0:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:34 2025 GMT Not After : Nov 27 11:49:34 2026 GMT Subject: CN=104F24A924E600D90463FE60FF7889F1C47246A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:3a:69:d4:39:43:ea:47:27:45:66:8c:57: 5b:8f:87:6a:c0:cc:d1:6b:15:ac:cb:b3:33:df:e6: c4:6e:80:06:e7:fe:88:d9:82:4d:eb:3d:01:81:f2: 0e:a2:fb:87:be:e1:1f:34:e8:8c:91:4a:af:55:97: ca:69:69:91:29:c2:e3:8f:c0:a9:96:07:33:c6:59: 0c:cb:b8:aa:74:9f:05:28:d2:b9:5b:e3:d0:b5:5b: 64:a6:2e:84:8f:40:e1:86:74:37:f9:9b:17:32:e5: 28:df:cf:e1:25:12:23:1e:34:c9:ce:4c:6f:65:d1: 51:0b:6a:ab:18:e2:70:62:7c:49:63:ee:32:41:b7: 20:0b:49:9f:ff:47:4b:13:4b:a5:71:e0:39:36:96: cd:08:a5:1a:46:59:c1:c5:46:1f:23:14:0c:82:0a: 97:a2:4e:0a:4d:2b:14:f5:07:b2:d9:34:8c:56:5e: ce:ea:9f:3a:f5:ac:d5:4b:1e:fe:c6:8f:cc:4b:88: f1:4c:7a:00:91:fa:a2:42:1b:89:e1:4c:6e:24:0c: 44:5a:3e:2a:7a:87:26:a0:c4:cf:9d:b4:93:5b:4d: 04:69:eb:18:ea:da:6c:44:0c:a8:e0:18:c0:52:2d: a7:24:23:9d:17:fb:c6:17:9b:4e:03:87:72:03:7d: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4F:24:A9:24:E6:00:D9:04:63:FE:60:FF:78:89:F1:C4:72:46:A7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33342e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.34.0/24 Signature Algorithm: sha256WithRSAEncryption de:39:6c:cb:cb:7c:25:24:7d:ce:36:4e:af:70:71:64:fb:55: 7a:67:0e:29:e8:fa:28:fd:35:b4:08:cc:92:28:4b:a0:15:ce: 8f:3d:28:98:a5:b9:bb:4c:a9:cb:d0:e6:09:fb:27:c1:13:3f: 5b:c6:c1:c3:f5:28:c5:f1:95:5f:84:fc:26:10:a2:0b:96:c4: 06:65:a2:7e:10:b0:96:5a:87:c4:76:26:77:c9:56:74:60:db: 4b:23:e2:ce:86:99:5e:8a:6c:5c:7d:0b:f3:ed:c0:ee:4d:23: 5d:5d:f0:5e:f3:5f:8e:98:01:b6:07:06:87:66:23:04:89:78: fa:b8:1b:68:2c:2c:d9:be:ab:30:40:b0:a8:43:6b:3d:a3:32: 21:d8:94:5d:cd:72:a9:30:d3:b7:81:7c:42:fa:94:95:a2:a6: 2d:2b:34:7a:1c:ec:a4:4f:48:86:6c:b9:f3:cf:b2:66:a7:c0: 89:1b:3c:de:44:01:e4:3d:12:4d:d8:5b:f9:23:8a:b6:73:b5: a1:02:21:e1:07:92:09:20:ab:c9:27:7f:6d:2d:66:ee:40:33: d3:80:14:d1:37:6d:b4:02:2d:b8:c3:89:95:37:a3:13:cf:d1: f6:07:fe:41:6f:aa:ae:17:2d:ac:c3:28:a3:9b:2b:13:c1:b4: 6c:5b:fc:43 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUdqXJ3aPFmr4s+/S0GXIGluc6oCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzRaFw0yNjExMjcxMTQ5MzRaMDMxMTAvBgNV BAMTKDEwNEYyNEE5MjRFNjAwRDkwNDYzRkU2MEZGNzg4OUYxQzQ3MjQ2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4Tpp1DlD6kcnRWaMV1uPh2rA zNFrFazLszPf5sRugAbn/ojZgk3rPQGB8g6i+4e+4R806IyRSq9Vl8ppaZEpwuOP wKmWBzPGWQzLuKp0nwUo0rlb49C1W2SmLoSPQOGGdDf5mxcy5Sjfz+ElEiMeNMnO TG9l0VELaqsY4nBifElj7jJBtyALSZ//R0sTS6Vx4Dk2ls0IpRpGWcHFRh8jFAyC CpeiTgpNKxT1B7LZNIxWXs7qnzr1rNVLHv7Gj8xLiPFMegCR+qJCG4nhTG4kDERa Pip6hyagxM+dtJNbTQRp6xjq2mxEDKjgGMBSLackI50X+8YXm04Dh3IDfR9dAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUEE8kqSTmANkEY/5g/3iJ8cRyRqcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky ZTMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgSIwDQYJKoZIhvcNAQELBQADggEBAN45bMvLfCUkfc42Tq9wcWT7VXpn Dino+ij9NbQIzJIoS6AVzo89KJilubtMqcvQ5gn7J8ETP1vGwcP1KMXxlV+E/CYQ oguWxAZlon4QsJZah8R2JnfJVnRg20sj4s6GmV6KbFx9C/PtwO5NI11d8F7zX46Y AbYHBodmIwSJePq4G2gsLNm+qzBAsKhDaz2jMiHYlF3Ncqkw07eBfEL6lJWipi0r NHoc7KRPSIZsufPPsmanwIkbPN5EAeQ9Ek3YW/kjirZztaECIeEHkgkgq8knf20t Zu5AM9OAFNE3bbQCLbjDiZU3oxPP0fYH/kFvqq4XLazDKKObKxPBtGxb/EM= -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:17 2025 by rpki-client