This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa File: 34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa (raw, json) Hash identifier: JBsiYQQPpZ6FvStIRyHJo+SNcoHDe7FmH6q7gYQ8OTc= Subject key identifier: 07:F4:15:80:C9:70:44:C6:AC:4E:EB:6A:16:8E:A8:14:44:95:C7:02 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1125EE03022806BA396F24A71EA4CADC93AA1C29 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa Signing time: Fri 28 Nov 2025 11:49:21 +0000 ROA not before: Fri 28 Nov 2025 11:44:21 +0000 ROA not after: Fri 27 Nov 2026 11:49:21 +0000 asID: 203020 IP address blocks: 45.134.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:25:ee:03:02:28:06:ba:39:6f:24:a7:1e:a4:ca:dc:93:aa:1c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:21 2025 GMT Not After : Nov 27 11:49:21 2026 GMT Subject: CN=07F41580C97044C6AC4EEB6A168EA8144495C702 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:93:b3:04:c1:32:7c:0e:c9:6c:7b:2c:27: 8d:77:ec:73:91:08:5e:aa:cf:77:18:07:9c:9a:a7: 33:a1:b0:ad:04:3a:77:a1:85:57:dc:7b:fa:56:fd: ec:c8:71:62:2a:9f:cd:b9:d4:db:be:46:16:40:a0: 4f:b2:80:a0:a6:6a:ee:95:75:a9:ad:b2:8b:da:e3: d3:1d:ae:0c:a6:a2:5b:2b:99:ca:e8:fb:57:ca:07: ab:50:81:89:9e:2c:5f:49:af:ac:e4:c7:5c:f3:d4: 3b:ee:2e:cc:a5:e5:a2:87:25:91:46:ac:0e:5e:62: 2e:42:ee:67:ee:e6:0c:e2:a9:8d:a3:dc:df:eb:70: a2:e3:79:1d:b7:32:43:37:3d:70:cc:3b:ce:af:bb: 4d:de:23:d1:e0:31:1f:fa:73:1d:ce:7f:c9:60:2b: bd:96:0d:07:b4:ec:43:ad:e1:e6:72:a6:57:de:06: e0:5b:d2:19:5c:31:e1:77:91:eb:f6:1d:8a:cf:57: 60:8a:f3:d8:76:ca:12:06:3b:8e:01:34:a9:51:35: 01:7c:bf:20:a4:ed:cc:3f:de:7b:be:02:e0:e6:9d: 78:ed:c7:2f:a5:ed:d6:0f:4f:1e:1b:48:b3:7f:64: 14:be:2a:77:09:03:ea:ae:9a:06:66:34:d7:97:87: c9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F4:15:80:C9:70:44:C6:AC:4E:EB:6A:16:8E:A8:14:44:95:C7:02 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3131362e302f32322d3232203d3e20323033303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.116.0/22 Signature Algorithm: sha256WithRSAEncryption de:ce:49:e1:0c:d0:ce:ee:a8:91:fe:86:54:e7:3c:41:82:8b: 6b:9e:d4:45:f2:bd:ca:5a:2e:97:72:cd:38:2c:67:60:2e:c9: 98:f0:63:9b:c7:68:39:c9:e0:21:96:7b:a3:bf:05:8e:4a:ef: 82:30:c8:e7:b4:9f:39:1b:8b:32:22:5d:aa:16:e6:29:ad:10: ff:47:d4:93:1d:ce:9c:27:08:87:1d:a1:7d:51:8e:32:17:0d: f9:44:86:18:a8:9e:6f:ea:10:55:1e:f1:16:ad:92:07:50:3c: fc:56:c6:93:17:64:42:85:03:2f:24:1e:b8:20:08:7c:46:7f: 3d:d5:2b:e3:ed:7e:3f:c2:e3:76:ad:4d:c9:ad:97:eb:12:eb: 7d:bd:f2:cc:08:dc:f0:9b:93:32:a6:6b:57:c1:f6:ce:63:b0: 5f:d6:18:17:37:25:db:28:fd:34:d6:fd:c2:3a:4f:ab:1f:cf: 5f:65:9d:7c:48:40:7a:bb:40:a8:e0:d4:70:35:1b:aa:54:51: ff:d5:90:85:8e:b6:42:76:ca:28:47:fe:06:00:71:c2:ba:60: 0a:49:db:7b:c5:41:9a:56:4e:0c:e4:55:b2:0e:fe:f3:90:80: 62:73:c4:68:31:c5:88:f9:2f:61:b5:4c:a8:d7:ed:0b:a8:96: 66:03:46:3f -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUESXuAwIoBro5bySnHqTK3JOqHCkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjFaFw0yNjExMjcxMTQ5MjFaMDMxMTAvBgNV BAMTKDA3RjQxNTgwQzk3MDQ0QzZBQzRFRUI2QTE2OEVBODE0NDQ5NUM3MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4JOzBMEyfA7JbHssJ4137HOR CF6qz3cYB5yapzOhsK0EOnehhVfce/pW/ezIcWIqn8251Nu+RhZAoE+ygKCmau6V damtsova49Mdrgymolsrmcro+1fKB6tQgYmeLF9Jr6zkx1zz1DvuLsyl5aKHJZFG rA5eYi5C7mfu5gziqY2j3N/rcKLjeR23MkM3PXDMO86vu03eI9HgMR/6cx3Of8lg K72WDQe07EOt4eZyplfeBuBb0hlcMeF3kev2HYrPV2CK89h2yhIGO44BNKlRNQF8 vyCk7cw/3nu+AuDmnXjtxy+l7dYPTx4bSLN/ZBS+KncJA+qumgZmNNeXh8lbAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUB/QVgMlwRMasTutqFo6oFESVxwIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzQy ZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzMzMwMzIzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi2GdDANBgkqhkiG9w0BAQsFAAOCAQEA3s5J4QzQzu6okf6GVOc8QYKL a57URfK9yloul3LNOCxnYC7JmPBjm8doOcngIZZ7o78FjkrvgjDI57SfORuLMiJd qhbmKa0Q/0fUkx3OnCcIhx2hfVGOMhcN+USGGKieb+oQVR7xFq2SB1A8/FbGkxdk QoUDLyQeuCAIfEZ/PdUr4+1+P8Ljdq1Nya2X6xLrfb3yzAjc8JuTMqZrV8H2zmOw X9YYFzcl2yj9NNb9wjpPqx/PX2WdfEhAertAqODUcDUbqlRR/9WQhY62QnbKKEf+ BgBxwrpgCknbe8VBmlZODORVsg7+85CAYnPEaDHFiPkvYbVMqNftC6iWZgNGPw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:35:45 2025 by rpki-client