This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233332e302f32342d3234203d3e20313336373837.roa File: 34352e31332e3233332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: zyWIfZrNA88ZQCF5Pkg5PAu1YBDM20KiXDlrQKf6LGk= Subject key identifier: 65:88:8D:C5:5E:71:E8:CD:E5:D2:CC:07:0C:60:C2:6A:21:7A:EB:8E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 335DCF40F8EE86C595B9F9E600CF62A1F3CB808B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:17 +0000 ROA not before: Fri 28 Nov 2025 11:44:17 +0000 ROA not after: Fri 27 Nov 2026 11:49:17 +0000 asID: 136787 IP address blocks: 45.13.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:5d:cf:40:f8:ee:86:c5:95:b9:f9:e6:00:cf:62:a1:f3:cb:80:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:17 2025 GMT Not After : Nov 27 11:49:17 2026 GMT Subject: CN=65888DC55E71E8CDE5D2CC070C60C26A217AEB8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:43:82:67:49:5b:39:50:f6:40:96:2e:71: 83:76:ae:f2:81:90:81:c9:bf:e9:04:32:a3:06:8f: 7f:74:b5:6a:98:dd:00:a3:23:54:bc:9e:a4:52:1c: 05:31:a0:29:ae:60:09:05:76:e5:d3:97:c1:15:35: c5:01:c4:66:9d:2e:11:8b:5f:42:70:ef:21:79:d7: 29:26:35:4f:de:fa:65:ec:00:5a:e0:56:91:8f:0a: 99:45:ad:f0:00:fc:5b:ea:13:e1:48:e2:62:75:35: e8:88:7e:20:93:53:78:4c:67:95:0e:3d:0b:22:4e: 72:c4:2b:bf:54:ab:9c:e4:94:02:13:d3:ce:80:b5: 2f:51:b3:4b:d5:b5:a6:e4:8b:08:d9:75:b7:66:09: d5:5d:20:87:3f:69:77:d7:84:56:23:dc:19:4d:9f: d8:f6:bb:f6:f3:b7:aa:5e:c8:1d:c1:c1:70:b7:dd: 2c:9c:9b:1c:4a:e9:ac:3b:2d:9f:66:d8:12:58:ee: 19:41:e5:d7:e1:f5:ae:58:20:e4:36:65:0e:5b:d1: c4:a4:27:83:70:91:40:ff:29:7f:8b:17:77:fd:01: 99:06:41:41:91:6e:a1:97:bc:23:1a:2c:a3:94:ad: 24:1a:60:67:a8:82:51:55:f2:97:6c:47:46:e0:b7: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:88:8D:C5:5E:71:E8:CD:E5:D2:CC:07:0C:60:C2:6A:21:7A:EB:8E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e3233332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.233.0/24 Signature Algorithm: sha256WithRSAEncryption dc:23:cb:1d:d1:95:a0:4d:52:c0:11:0e:17:64:74:a0:34:33: 0c:e1:ba:4c:4b:10:8e:fd:06:5e:bf:ef:1e:78:93:1c:44:2d: b1:b4:42:7a:87:02:23:74:2a:cb:d0:0d:9e:18:ef:c6:6b:fb: de:ad:9f:0c:5b:5e:8c:53:d8:e2:ff:18:8d:9a:04:63:fa:41: cf:d8:38:d0:0f:2f:a8:cb:6f:4d:2b:07:83:42:7d:00:68:e4: 8b:2e:d3:b9:38:3d:af:55:ab:06:07:7b:1b:8c:01:26:8d:a4: 46:f9:9f:50:63:66:f9:f1:ec:51:14:d2:47:48:71:61:ff:62: 15:83:62:7d:56:a0:50:d5:18:f9:17:0a:f8:13:28:64:84:ac: e4:34:89:5a:77:59:be:6b:39:ba:4d:eb:21:2e:a5:3d:53:9c: 34:a5:ea:75:bb:82:f6:52:fd:52:08:1c:e4:7a:76:af:40:02: 44:2d:ec:54:ae:2a:2c:d4:d9:a7:39:ca:4b:3e:aa:45:30:b7: a3:ae:10:80:0b:39:dd:97:b5:77:78:94:6e:4d:e8:3f:4e:7e: c3:b0:60:dd:79:71:92:1e:2f:29:e2:c0:ec:a2:f7:23:89:82: 01:e0:9b:f8:30:bb:dc:0c:af:fb:ba:3f:a9:f8:6c:d1:1b:d7: 68:e1:dc:f2 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUM13PQPjuhsWVufnmAM9iofPLgIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTdaFw0yNjExMjcxMTQ5MTdaMDMxMTAvBgNV BAMTKDY1ODg4REM1NUU3MUU4Q0RFNUQyQ0MwNzBDNjBDMjZBMjE3QUVCOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZ0OCZ0lbOVD2QJYucYN2rvKB kIHJv+kEMqMGj390tWqY3QCjI1S8nqRSHAUxoCmuYAkFduXTl8EVNcUBxGadLhGL X0Jw7yF51ykmNU/e+mXsAFrgVpGPCplFrfAA/FvqE+FI4mJ1NeiIfiCTU3hMZ5UO PQsiTnLEK79Uq5zklAIT086AtS9Rs0vVtabkiwjZdbdmCdVdIIc/aXfXhFYj3BlN n9j2u/bzt6peyB3BwXC33SycmxxK6aw7LZ9m2BJY7hlB5dfh9a5YIOQ2ZQ5b0cSk J4NwkUD/KX+LF3f9AZkGQUGRbqGXvCMaLKOUrSQaYGeoglFV8pdsR0bgt3kBAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUZYiNxV5x6M3l0swHDGDCaiF6644wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz MjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtDekwDQYJKoZIhvcNAQELBQADggEBANwjyx3RlaBNUsARDhdkdKA0Mwzh ukxLEI79Bl6/7x54kxxELbG0QnqHAiN0KsvQDZ4Y78Zr+96tnwxbXoxT2OL/GI2a BGP6Qc/YONAPL6jLb00rB4NCfQBo5Isu07k4Pa9VqwYHexuMASaNpEb5n1BjZvnx 7FEU0kdIcWH/YhWDYn1WoFDVGPkXCvgTKGSErOQ0iVp3Wb5rObpN6yEupT1TnDSl 6nW7gvZS/VIIHOR6dq9AAkQt7FSuKizU2ac5yks+qkUwt6OuEIALOd2XtXd4lG5N 6D9OfsOwYN15cZIeLyniwOyi9yOJggHgm/gwu9wMr/u6P6n4bNEb12jh3PI= -----END CERTIFICATE-----Generated at Sat Dec 6 17:42:14 2025 by rpki-client