This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa File: 34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa (raw, json) Hash identifier: Pu5hW3II9AzhNsLdShM1vDCQkJQ/+EKBZI/QV5STD6c= Subject key identifier: 50:02:1E:AD:9C:37:64:69:93:78:4E:54:42:2B:C3:03:C3:4C:E4:8D Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0F213B667721E81F803A95D80DF7B98A53146F07 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa Signing time: Fri 28 Nov 2025 11:49:50 +0000 ROA not before: Fri 28 Nov 2025 11:44:50 +0000 ROA not after: Fri 27 Nov 2026 11:49:50 +0000 asID: 208046 IP address blocks: 45.134.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:21:3b:66:77:21:e8:1f:80:3a:95:d8:0d:f7:b9:8a:53:14:6f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:50 2025 GMT Not After : Nov 27 11:49:50 2026 GMT Subject: CN=50021EAD9C37646993784E54422BC303C34CE48D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:31:19:25:cc:aa:e6:25:e3:03:59:e0:10:55: 51:1f:eb:42:35:a0:ad:d4:0b:0c:8c:73:2d:85:63: 52:80:ee:26:8b:2a:8b:b0:fb:54:c9:38:1a:9e:f8: d0:7f:fe:7a:b1:70:db:47:f6:66:22:01:ba:69:b2: 15:fc:46:ba:74:af:2d:3c:28:63:65:2a:9c:9b:52: 98:fa:f3:25:f2:db:98:63:32:49:14:eb:47:9e:84: 8b:67:8e:a2:b9:95:ba:58:13:ab:cb:08:fe:23:82: 8f:c5:7a:46:2e:49:06:19:f3:67:84:30:ee:71:ed: 07:65:6d:ee:2a:47:cc:10:3e:c7:e6:e1:de:5a:e2: b3:98:c4:4c:c4:6b:68:94:5c:ec:d9:35:e0:a5:fe: 3f:8b:e6:46:78:c6:4c:35:fc:85:e4:66:34:b3:b6: 11:d9:8f:22:95:4d:3b:08:1f:0d:fc:d3:15:64:71: 80:5e:d6:14:f0:ed:c9:6f:ef:7f:0f:09:ab:87:c6: 8a:d3:ad:3c:3d:ae:2d:82:99:7e:36:c2:34:2a:70: 68:94:df:f7:0e:4a:02:3c:42:88:fb:8b:a7:28:5b: 45:93:52:30:79:d4:2d:c7:f2:20:f0:03:c1:88:96: 99:d7:78:77:ef:e0:7d:f6:7f:0f:ec:58:65:81:75: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:02:1E:AD:9C:37:64:69:93:78:4E:54:42:2B:C3:03:C3:4C:E4:8D X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232352e302f32342d3234203d3e20323038303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.225.0/24 Signature Algorithm: sha256WithRSAEncryption b4:c0:05:95:bb:66:0e:f4:0b:33:fe:ff:8f:f5:41:9f:1c:95: 8d:16:df:57:76:42:7e:62:18:5c:88:82:7a:ed:9d:cc:90:96: cb:ea:7f:f2:f0:33:20:ba:cd:db:6f:bb:e7:e8:7d:4e:34:2d: 0f:e9:00:fb:a5:04:ec:4c:b5:86:9a:7e:2d:57:a4:4f:6f:25: 59:9e:ff:0a:78:a5:32:a6:ea:f4:b7:33:19:b6:ba:dc:99:ad: 34:e5:3c:1f:4c:5f:0c:aa:f3:57:31:31:90:e9:11:99:8f:ea: f9:81:96:e8:82:5a:4c:97:00:a1:bb:fd:2e:5a:9e:03:f8:2c: 85:80:1e:f8:ba:3e:31:18:c4:2f:be:39:aa:50:56:cc:fc:70: 91:29:1b:5b:1a:ab:15:e6:32:cb:d3:ff:1a:54:35:ea:7e:c9: bd:34:d6:c3:b4:ca:42:1d:22:6c:aa:c4:94:b5:6b:16:d7:0c: d2:ff:03:2c:2d:e6:84:78:2d:2e:ed:f3:23:4b:dd:e7:1d:06: 3c:07:32:cc:eb:2d:0e:b6:aa:9f:77:6e:e7:15:56:53:6a:ce: 31:9b:b2:9f:c9:55:2a:eb:1c:72:76:fd:dc:aa:e4:59:34:d7: 4c:7d:e8:53:20:1c:00:fa:fe:b1:56:f3:24:16:2e:fc:8a:3e: 19:ce:ef:55 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDyE7Znch6B+AOpXYDfe5ilMUbwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTBaFw0yNjExMjcxMTQ5NTBaMDMxMTAvBgNV BAMTKDUwMDIxRUFEOUMzNzY0Njk5Mzc4NEU1NDQyMkJDMzAzQzM0Q0U0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MRklzKrmJeMDWeAQVVEf60I1 oK3UCwyMcy2FY1KA7iaLKouw+1TJOBqe+NB//nqxcNtH9mYiAbppshX8Rrp0ry08 KGNlKpybUpj68yXy25hjMkkU60eehItnjqK5lbpYE6vLCP4jgo/FekYuSQYZ82eE MO5x7Qdlbe4qR8wQPsfm4d5a4rOYxEzEa2iUXOzZNeCl/j+L5kZ4xkw1/IXkZjSz thHZjyKVTTsIHw380xVkcYBe1hTw7clv738PCauHxorTrTw9ri2CmX42wjQqcGiU 3/cOSgI8Qoj7i6coW0WTUjB51C3H8iDwA8GIlpnXeHfv4H32fw/sWGWBdenpAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUUAIerZw3ZGmTeE5UQivDA8NM5I0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzQy ZTMyMzIzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODMwMzQzNi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2G4TANBgkqhkiG9w0BAQsFAAOCAQEAtMAFlbtmDvQLM/7/j/VBnxyV jRbfV3ZCfmIYXIiCeu2dzJCWy+p/8vAzILrN22+75+h9TjQtD+kA+6UE7Ey1hpp+ LVekT28lWZ7/CnilMqbq9LczGba63JmtNOU8H0xfDKrzVzExkOkRmY/q+YGW6IJa TJcAobv9LlqeA/gshYAe+Lo+MRjEL745qlBWzPxwkSkbWxqrFeYyy9P/GlQ16n7J vTTWw7TKQh0ibKrElLVrFtcM0v8DLC3mhHgtLu3zI0vd5x0GPAcyzOstDraqn3du 5xVWU2rOMZuyn8lVKusccnb93KrkWTTXTH3oUyAcAPr+sVbzJBYu/Io+Gc7vVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:43 2025 by rpki-client