This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35392e302f32342d3332203d3e203531313637.roa File: 34352e31332e35392e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: oTk7XGIe2fSY5a+inSa8Vtptwxlp48FHcjQG7TDjBBs= Subject key identifier: AF:31:9F:40:6B:1F:05:DC:AC:64:BF:3B:39:EC:E7:9B:15:53:18:C6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 41C730ABE5E3E2CEDEEACAE9E60DD627DB030AB7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35392e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 51167 IP address blocks: 45.13.59.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c7:30:ab:e5:e3:e2:ce:de:ea:ca:e9:e6:0d:d6:27:db:03:0a:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=AF319F406B1F05DCAC64BF3B39ECE79B155318C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:3f:d6:08:c8:bf:13:50:52:25:58:42:fa: 0c:2e:37:7c:8e:b7:da:da:3b:d7:ac:22:8e:a6:df: f4:42:26:d2:c8:8c:8e:6b:d9:36:e6:a3:ff:38:e5: 2d:d7:ef:9c:79:39:84:44:52:49:3e:8e:cd:11:0b: d8:d5:3a:98:42:cc:25:22:f3:d2:1b:67:7d:3d:3a: 14:f7:46:7b:ee:cc:1c:84:b0:c8:d1:30:81:b2:8e: e4:b3:6a:91:bd:2c:90:4f:36:c6:d0:69:fe:2c:96: f3:ae:19:b1:39:37:6e:78:32:73:91:7a:d5:3e:7d: 01:f2:85:6e:c0:28:e3:e8:35:fa:d0:a1:8a:b0:e7: d6:ed:d1:0f:49:4c:53:ca:98:47:18:f7:0c:e2:79: b8:11:97:45:b1:f1:dc:a7:6f:25:b9:ce:3b:29:6a: 2f:ab:48:32:f6:7b:84:a2:40:c0:6e:58:1d:93:1b: 02:4d:c3:ee:0c:39:3b:61:6f:a5:79:8b:72:fa:0c: 88:b8:72:aa:87:7f:40:f6:8e:de:9c:84:04:7f:a4: 1a:ca:38:e0:48:9c:86:0b:6b:94:b0:76:eb:fc:94: aa:ae:f0:9b:40:bd:bd:1e:56:56:8d:d4:a8:44:06: ed:71:cd:30:1f:02:84:3a:ea:f3:50:83:92:eb:f5: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:31:9F:40:6B:1F:05:DC:AC:64:BF:3B:39:EC:E7:9B:15:53:18:C6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35392e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.59.0/24 Signature Algorithm: sha256WithRSAEncryption a0:50:13:fa:af:29:f8:37:34:67:93:4b:48:7a:1a:93:81:40: b2:8b:4b:80:7a:a9:45:e1:aa:2c:74:2c:ab:08:40:5e:8a:66: d6:f1:3e:0e:01:17:63:eb:d8:ff:57:58:88:ad:41:60:e6:ad: 62:08:89:3a:76:cc:3a:05:fd:9b:70:3d:b6:19:7a:bf:ff:80: 6b:6c:de:6a:4e:a3:f7:8c:e2:1a:3f:9f:f2:3d:79:b5:ff:b0: 6c:b8:c6:1d:34:50:cf:63:2b:55:37:8b:a1:de:ce:0b:7a:09: 57:83:5c:71:49:94:91:12:b0:74:b4:77:24:9e:99:c6:07:79: 05:eb:30:32:61:f3:90:c7:be:fa:02:1a:d2:72:86:7d:f2:c7: 47:d3:b6:b4:4b:f3:0e:3e:e7:fe:d3:e0:d5:ca:6f:80:68:6a: 0f:63:35:f9:0e:74:93:7c:bb:bf:84:0d:cd:ed:00:10:1e:9c: 5e:1b:6b:fd:98:b6:e7:68:f6:37:f2:0e:e2:d0:0e:8f:5a:16: 77:46:65:6c:a6:4d:da:f1:0b:b1:41:13:9d:c6:22:0c:72:84: 03:d6:3d:ae:ec:7a:8b:bc:81:00:23:e4:71:0a:42:18:9b:42: 34:a2:31:9e:bf:de:f9:0e:55:24:5b:42:41:84:1c:12:2f:63: 10:4b:3a:11 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQccwq+Xj4s7e6srp5g3WJ9sDCrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEFGMzE5RjQwNkIxRjA1RENBQzY0QkYzQjM5RUNFNzlCMTU1MzE4QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHrz/WCMi/E1BSJVhC+gwuN3yO t9raO9esIo6m3/RCJtLIjI5r2Tbmo/845S3X75x5OYREUkk+js0RC9jVOphCzCUi 89IbZ309OhT3RnvuzByEsMjRMIGyjuSzapG9LJBPNsbQaf4slvOuGbE5N254MnOR etU+fQHyhW7AKOPoNfrQoYqw59bt0Q9JTFPKmEcY9wziebgRl0Wx8dynbyW5zjsp ai+rSDL2e4SiQMBuWB2TGwJNw+4MOTthb6V5i3L6DIi4cqqHf0D2jt6chAR/pBrK OOBInIYLa5Swduv8lKqu8JtAvb0eVlaN1KhEBu1xzTAfAoQ66vNQg5Lr9cE7AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUrzGfQGsfBdysZL87OeznmxVTGMYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz NTM5MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC0NOzANBgkqhkiG9w0BAQsFAAOCAQEAoFAT+q8p+Dc0Z5NLSHoak4FAsotLgHqp ReGqLHQsqwhAXopm1vE+DgEXY+vY/1dYiK1BYOatYgiJOnbMOgX9m3A9thl6v/+A a2zeak6j94ziGj+f8j15tf+wbLjGHTRQz2MrVTeLod7OC3oJV4NccUmUkRKwdLR3 JJ6Zxgd5BeswMmHzkMe++gIa0nKGffLHR9O2tEvzDj7n/tPg1cpvgGhqD2M1+Q50 k3y7v4QNze0AEB6cXhtr/Zi252j2N/IO4tAOj1oWd0ZlbKZN2vELsUETncYiDHKE A9Y9rux6i7yBACPkcQpCGJtCNKIxnr/e+Q5VJFtCQYQcEi9jEEs6EQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:55 2025 by rpki-client