This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3134302e302f32322d3232203d3e20323033303230.roa File: 34352e3133372e3134302e302f32322d3232203d3e20323033303230.roa (raw, json) Hash identifier: MGX9y0vuxYftOVLGUixq2d/vJjx0EvLj0jp2EgYrHxU= Subject key identifier: 08:DB:52:89:59:5F:1D:AA:26:63:0E:37:BA:3A:A3:AD:46:BD:59:E7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2CBE041106ED74293B50C298A39FA1596455539A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3134302e302f32322d3232203d3e20323033303230.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 203020 IP address blocks: 45.137.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:04:11:06:ed:74:29:3b:50:c2:98:a3:9f:a1:59:64:55:53:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=08DB5289595F1DAA26630E37BA3AA3AD46BD59E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3a:51:19:92:df:ea:81:a8:1d:76:bf:61:92: 66:1a:6c:69:ff:3d:49:52:44:21:11:fe:4c:68:3d: 56:d0:23:6d:c8:21:fa:22:47:93:c4:b0:04:5c:46: 47:4f:be:19:79:3f:6a:08:62:fe:4f:18:52:d0:96: 62:2c:ee:be:2a:32:30:32:d7:1c:07:64:4b:c9:32: ed:5a:4a:34:c5:66:37:7d:61:81:4b:d4:79:86:07: 1a:06:85:7e:1e:7b:ba:e7:93:1d:04:d6:48:68:9e: e9:57:7d:59:91:f3:ed:64:34:f4:2d:b2:3d:38:ba: 57:c4:1d:50:b9:75:1a:7b:c7:ad:5e:08:51:dc:f3: 98:dd:a2:75:ba:55:d5:9f:6d:dd:88:a2:13:3c:98: d9:ee:62:67:79:f0:08:2f:b4:98:c9:49:28:dd:d3: 54:5f:3d:0c:ad:58:94:36:0c:02:ac:a6:ae:7c:85: 06:af:e3:f3:00:c9:c2:81:04:ea:62:bd:a8:7c:9b: a2:d0:b1:3b:0c:2b:b1:36:36:38:13:ab:de:58:77: 1c:31:69:c0:47:d6:d5:b8:b2:22:a7:ef:56:22:c2: 31:07:3e:d3:56:c5:ef:1a:b9:03:38:34:9a:1b:cb: 53:9c:30:50:61:b6:fb:21:eb:df:52:0d:7c:83:29: 38:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DB:52:89:59:5F:1D:AA:26:63:0E:37:BA:3A:A3:AD:46:BD:59:E7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3134302e302f32322d3232203d3e20323033303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.140.0/22 Signature Algorithm: sha256WithRSAEncryption 86:d9:48:25:1e:68:d2:2a:26:9e:cc:3f:ba:16:88:99:ee:e2: 1a:cc:77:61:50:66:e8:ff:75:66:ec:d1:0a:75:56:e3:27:68: b6:e9:7a:1d:74:09:5f:df:02:25:c4:76:f7:a4:02:94:84:08: 93:82:24:b0:a5:4e:3b:df:fa:ac:66:17:19:ae:c9:4a:fd:60: db:9b:f2:a2:07:e3:04:3b:ca:ac:8d:c2:14:fc:e6:c3:e8:a1: 8c:95:57:a0:9c:b2:3b:0f:66:a7:bc:cf:3b:35:2f:79:13:f9: ec:26:07:35:c1:ad:61:22:85:ea:76:59:dd:a7:f9:a9:90:2c: 7a:39:a7:a4:24:e8:ca:99:8f:04:62:5f:8f:65:38:ee:0c:94: 04:56:18:a0:1e:1e:4b:f2:68:a6:1e:8a:5b:73:ab:8f:0e:4b: bc:35:a8:90:aa:2e:82:7d:f5:34:80:13:8a:b0:fd:0d:3b:02: f3:b8:9d:27:0a:15:08:a7:00:86:5b:4f:03:0c:84:91:a8:75: df:df:35:7a:7e:0b:f9:d1:ee:96:e9:2c:15:93:b0:14:4e:7a: 70:20:51:8b:41:b1:02:9e:7f:4b:ef:67:0e:5f:35:8f:24:73: 91:57:b9:ab:d1:42:25:f9:f3:d5:f2:12:49:df:5b:3f:21:ee: ac:fb:b3:19 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIULL4EEQbtdCk7UMKYo5+hWWRVU5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKDA4REI1Mjg5NTk1RjFEQUEyNjYzMEUzN0JBM0FBM0FENDZCRDU5RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OlEZkt/qgagddr9hkmYabGn/ PUlSRCER/kxoPVbQI23IIfoiR5PEsARcRkdPvhl5P2oIYv5PGFLQlmIs7r4qMjAy 1xwHZEvJMu1aSjTFZjd9YYFL1HmGBxoGhX4ee7rnkx0E1khonulXfVmR8+1kNPQt sj04ulfEHVC5dRp7x61eCFHc85jdonW6VdWfbd2IohM8mNnuYmd58AgvtJjJSSjd 01RfPQytWJQ2DAKspq58hQav4/MAycKBBOpivah8m6LQsTsMK7E2NjgTq95Ydxwx acBH1tW4siKn71YiwjEHPtNWxe8auQM4NJoby1OcMFBhtvsh699SDXyDKThtAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUCNtSiVlfHaomYw43ujqjrUa9WecwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzcy ZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzMzMwMzIzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi2JjDANBgkqhkiG9w0BAQsFAAOCAQEAhtlIJR5o0iomnsw/uhaIme7i Gsx3YVBm6P91ZuzRCnVW4ydotul6HXQJX98CJcR296QClIQIk4IksKVOO9/6rGYX Ga7JSv1g25vyogfjBDvKrI3CFPzmw+ihjJVXoJyyOw9mp7zPOzUveRP57CYHNcGt YSKF6nZZ3af5qZAsejmnpCToypmPBGJfj2U47gyUBFYYoB4eS/Joph6KW3Orjw5L vDWokKougn31NIATirD9DTsC87idJwoVCKcAhltPAwyEkah13981en4L+dHuluks FZOwFE56cCBRi0GxAp5/S+9nDl81jyRzkVe5q9FCJfnz1fISSd9bPyHurPuzGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:15 2025 by rpki-client