This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232372e302f32342d3234203d3e20383334.roa File: 34352e3133342e3232372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: uj02LVO7h+J1UpaHqdyLdcGJyU4OiOl3KEKn4BNJB5s= Subject key identifier: C4:DD:78:F7:B1:BD:4C:88:3F:EA:77:9E:22:38:83:FF:C3:BC:ED:A7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1AE35E2894136871A1CAB78274551EFDCC32B9C7 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232372e302f32342d3234203d3e20383334.roa Signing time: Fri 28 Nov 2025 11:49:27 +0000 ROA not before: Fri 28 Nov 2025 11:44:27 +0000 ROA not after: Fri 27 Nov 2026 11:49:27 +0000 asID: 834 IP address blocks: 45.134.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:e3:5e:28:94:13:68:71:a1:ca:b7:82:74:55:1e:fd:cc:32:b9:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:27 2025 GMT Not After : Nov 27 11:49:27 2026 GMT Subject: CN=C4DD78F7B1BD4C883FEA779E223883FFC3BCEDA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:3f:5d:d1:bf:cb:9c:18:59:66:f7:6f:38: 51:98:e9:77:64:08:22:a5:7b:79:b1:d1:df:28:dc: a6:8d:76:36:e0:36:f4:85:c5:27:25:96:26:37:24: 0a:76:0e:8c:72:31:74:75:8b:86:44:94:2c:51:76: 0f:6e:f7:88:67:7f:22:15:a8:3f:37:ef:6e:50:f3: 90:82:21:02:83:38:c3:76:ca:a7:01:8e:85:e0:19: 0a:18:6d:8e:e8:2a:ff:b9:4c:c1:bf:2e:64:40:08: 39:0b:dd:02:1d:50:78:f8:2c:77:e2:cf:1c:4d:a7: 4d:2d:ed:0a:a4:e3:93:7d:59:22:db:d6:38:47:bb: 76:25:3a:2f:e7:43:1c:fa:89:0a:33:d5:d0:a1:98: 51:47:42:07:60:d1:1c:c7:68:9e:41:ca:97:64:c9: f1:fe:89:9e:84:74:ec:d6:63:a9:50:54:4f:5a:c1: 76:32:60:d4:41:82:05:67:f1:d9:bc:0c:28:c0:19: 39:7a:70:03:da:e8:03:d9:0d:81:ec:52:a5:dd:8a: a2:64:39:6d:04:50:3d:86:94:52:0c:b7:a6:fe:4d: 0b:40:43:9e:6d:d7:9d:9e:fd:2c:15:62:51:fa:cc: 7e:09:41:ad:c4:9c:2e:e2:80:2d:d2:c2:3d:85:80: 41:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DD:78:F7:B1:BD:4C:88:3F:EA:77:9E:22:38:83:FF:C3:BC:ED:A7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.227.0/24 Signature Algorithm: sha256WithRSAEncryption 08:ad:f0:b6:20:d5:77:45:07:61:a2:d0:e7:cd:83:94:52:14: ba:ae:69:5f:23:21:b0:1b:bd:e4:87:c3:48:89:cb:77:00:83: f6:36:7c:f3:3d:6a:f2:24:a4:0f:f3:01:98:2f:f6:0d:ba:5f: 40:64:dc:e7:11:45:80:42:63:00:e9:32:d4:45:c5:b7:05:35: f1:ce:f0:43:07:ee:ff:49:7c:0d:ff:de:12:e4:d8:3e:89:c4: 2c:f8:33:48:04:42:c3:fa:00:d2:b3:ca:41:ce:24:72:85:7d: 6f:c0:7b:08:30:62:f0:a1:31:08:84:05:9f:34:a7:b6:e5:81: 59:73:73:94:61:91:6f:e8:31:aa:ec:ed:1e:a6:d1:1b:1f:c2: a4:72:e7:29:be:3e:bf:d1:f5:8b:e8:83:3c:28:b1:b6:83:15: cd:43:ae:d6:8d:b0:d4:3a:bf:6d:6a:d0:40:65:cb:2b:47:f6: 34:20:21:3d:c8:dc:ff:8c:2d:d9:85:d5:94:b2:e0:53:b9:80: 92:d5:f4:2d:f1:13:c4:f3:34:97:c0:71:25:bb:a3:31:cd:4a: d3:e7:b0:9e:4f:3a:50:46:61:1f:0e:b9:4e:e0:ca:a7:32:d5: eb:32:0b:8b:26:d0:88:0b:a6:63:68:68:71:ab:56:c2:42:27: 1d:98:a3:bd -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUGuNeKJQTaHGhyreCdFUe/cwyuccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjdaFw0yNjExMjcxMTQ5MjdaMDMxMTAvBgNV BAMTKEM0REQ3OEY3QjFCRDRDODgzRkVBNzc5RTIyMzg4M0ZGQzNCQ0VEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8j9d0b/LnBhZZvdvOFGY6Xdk CCKle3mx0d8o3KaNdjbgNvSFxSclliY3JAp2DoxyMXR1i4ZElCxRdg9u94hnfyIV qD83725Q85CCIQKDOMN2yqcBjoXgGQoYbY7oKv+5TMG/LmRACDkL3QIdUHj4LHfi zxxNp00t7Qqk45N9WSLb1jhHu3YlOi/nQxz6iQoz1dChmFFHQgdg0RzHaJ5Bypdk yfH+iZ6EdOzWY6lQVE9awXYyYNRBggVn8dm8DCjAGTl6cAPa6APZDYHsUqXdiqJk OW0EUD2GlFIMt6b+TQtAQ55t152e/SwVYlH6zH4JQa3EnC7igC3Swj2FgEFjAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUxN1497G9TIg/6neeIjiD/8O87acwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzQy ZTMyMzIzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC2G4zANBgkqhkiG9w0BAQsFAAOCAQEACK3wtiDVd0UHYaLQ582DlFIUuq5pXyMh sBu95IfDSInLdwCD9jZ88z1q8iSkD/MBmC/2DbpfQGTc5xFFgEJjAOky1EXFtwU1 8c7wQwfu/0l8Df/eEuTYPonELPgzSARCw/oA0rPKQc4kcoV9b8B7CDBi8KExCIQF nzSntuWBWXNzlGGRb+gxquztHqbRGx/CpHLnKb4+v9H1i+iDPCixtoMVzUOu1o2w 1Dq/bWrQQGXLK0f2NCAhPcjc/4wt2YXVlLLgU7mAktX0LfETxPM0l8BxJbujMc1K 0+ewnk86UEZhHw65TuDKpzLV6zILiybQiAumY2hocatWwkInHZijvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:31 2025 by rpki-client