This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e203430363736.roa File: 34352e31332e35382e302f32342d3234203d3e203430363736.roa (raw, json) Hash identifier: fuewOQ4rOk+mcLBWLvjdqlQ5KTDsTNKTFZgH0onT7TE= Subject key identifier: FD:E9:B6:B9:81:A2:2F:36:C0:02:98:E9:82:6C:5C:85:FE:53:70:DF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 25124B011E30DBDFEC6B0C442819B1D9E8662361 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e203430363736.roa Signing time: Fri 28 Nov 2025 11:49:55 +0000 ROA not before: Fri 28 Nov 2025 11:44:55 +0000 ROA not after: Fri 27 Nov 2026 11:49:55 +0000 asID: 40676 IP address blocks: 45.13.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 13:43:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:12:4b:01:1e:30:db:df:ec:6b:0c:44:28:19:b1:d9:e8:66:23:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:55 2025 GMT Not After : Nov 27 11:49:55 2026 GMT Subject: CN=FDE9B6B981A22F36C00298E9826C5C85FE5370DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:14:a7:ad:49:f7:42:a8:3a:39:54:e7:72:e6: a8:00:ee:c4:68:f9:8b:78:07:bb:93:35:76:85:54: a5:f5:bd:58:d1:3f:c0:ba:1c:0e:41:3e:ea:79:7f: 82:0b:76:a2:5c:a3:e6:61:fe:96:a3:73:76:5d:c2: 4f:ec:83:02:44:6e:f0:ea:ac:db:5d:ef:19:36:eb: ed:4a:91:8b:2d:ed:92:7d:af:77:15:e5:e7:d8:11: 7d:6f:fb:e4:a0:ae:26:8f:07:bc:95:a2:60:ce:da: ea:ab:25:30:05:8f:93:3e:b0:79:8d:89:5b:f6:c9: 63:ce:0c:e5:b9:00:62:22:c7:0c:7b:6e:a8:f5:b6: 86:36:1e:55:59:4b:75:b7:f6:f3:ec:ec:58:cc:87: ad:f4:14:8d:3f:de:36:64:8d:21:83:60:05:74:d9: 1e:6d:de:4d:4f:76:bb:80:79:e9:68:63:5c:a6:e8: ca:e4:15:01:f0:43:2f:52:31:e3:04:aa:28:bd:a4: f6:e1:54:01:d2:62:7f:4d:33:12:c1:24:1d:28:07: 3e:2a:8f:cf:9b:94:69:bc:76:7a:fc:91:0a:95:ee: 9f:55:07:34:11:ad:d8:7a:ef:a1:ee:50:29:55:44: 86:30:58:cb:6a:ff:c7:6e:dd:a4:0a:65:aa:de:70: 9f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E9:B6:B9:81:A2:2F:36:C0:02:98:E9:82:6C:5C:85:FE:53:70:DF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e203430363736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.58.0/24 Signature Algorithm: sha256WithRSAEncryption e3:e6:f5:53:e3:5b:7c:ec:cc:ab:44:88:e6:54:02:74:0d:ae: ec:aa:a1:6c:09:d3:16:e1:72:33:87:f8:3f:36:68:32:8f:78: b5:fc:39:96:29:9e:12:db:9a:0b:41:00:52:74:23:5b:67:f4: a3:4b:82:96:e4:45:67:31:04:73:fb:59:e6:9d:25:e4:66:d2: f0:cb:74:46:d5:de:b2:75:d1:e8:c3:6a:cd:ac:7b:d7:66:a5: c8:f0:50:f8:d5:07:e3:56:4f:10:cc:25:e6:50:9f:7f:c9:c0: 70:9f:68:14:f8:0d:3e:f1:d5:ac:74:16:93:01:f9:7e:ad:93: 42:1c:aa:5e:17:9a:b2:37:27:42:c3:ae:67:ab:91:a1:aa:d0: 79:c6:86:de:2e:a8:b3:8c:d8:a6:be:18:dd:ee:88:42:4e:00: b3:41:e1:ff:83:34:41:0b:82:5c:ca:be:44:e7:71:41:8a:f2: 45:e7:25:89:bd:13:59:64:0e:ae:de:c1:de:78:53:0a:33:8d: 7e:75:d6:88:5a:e4:5b:7e:11:b6:fb:bc:be:4f:d6:24:5a:c9: ae:64:b0:37:90:e5:2b:4b:a1:ce:12:fc:a5:62:a9:4b:ff:51: 73:03:e7:ec:21:1e:19:bc:97:1d:e1:05:3f:df:61:dd:47:07: de:32:f7:77 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUJRJLAR4w29/sawxEKBmx2ehmI2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTVaFw0yNjExMjcxMTQ5NTVaMDMxMTAvBgNV BAMTKEZERTlCNkI5ODFBMjJGMzZDMDAyOThFOTgyNkM1Qzg1RkU1MzcwREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpFKetSfdCqDo5VOdy5qgA7sRo +Yt4B7uTNXaFVKX1vVjRP8C6HA5BPup5f4ILdqJco+Zh/pajc3Zdwk/sgwJEbvDq rNtd7xk26+1KkYst7ZJ9r3cV5efYEX1v++SgriaPB7yVomDO2uqrJTAFj5M+sHmN iVv2yWPODOW5AGIixwx7bqj1toY2HlVZS3W39vPs7FjMh630FI0/3jZkjSGDYAV0 2R5t3k1PdruAeeloY1ym6MrkFQHwQy9SMeMEqii9pPbhVAHSYn9NMxLBJB0oBz4q j8+blGm8dnr8kQqV7p9VBzQRrdh676HuUClVRIYwWMtq/8du3aQKZarecJ+FAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQU/em2uYGiLzbAApjpgmxchf5TcN8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz NTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDM2MzczNi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC0NOjANBgkqhkiG9w0BAQsFAAOCAQEA4+b1U+NbfOzMq0SI5lQCdA2u7KqhbAnT FuFyM4f4PzZoMo94tfw5limeEtuaC0EAUnQjW2f0o0uCluRFZzEEc/tZ5p0l5GbS 8Mt0RtXesnXR6MNqzax712alyPBQ+NUH41ZPEMwl5lCff8nAcJ9oFPgNPvHVrHQW kwH5fq2TQhyqXheasjcnQsOuZ6uRoarQecaG3i6os4zYpr4Y3e6IQk4As0Hh/4M0 QQuCXMq+ROdxQYryReclib0TWWQOrt7B3nhTCjONfnXWiFrkW34Rtvu8vk/WJFrJ rmSwN5DlK0uhzhL8pWKpS/9RcwPn7CEeGbyXHeEFP99h3UcH3jL3dw== -----END CERTIFICATE-----Generated at Thu Dec 18 05:41:29 2025 by rpki-client