This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139332e302f32342d3234203d3e20383334.roa File: 34352e3133372e3139332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: CkXlFayww5BxoldaJd44wzZlXBLfQ73dHHXcVOOgGXs= Subject key identifier: 08:54:5C:70:21:CC:25:B0:66:29:81:AA:39:CA:32:5B:AA:4F:CA:EE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 08EE2EF292CFABBB08E1984190C81BF386C6DB63 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139332e302f32342d3234203d3e20383334.roa Signing time: Fri 28 Nov 2025 11:49:46 +0000 ROA not before: Fri 28 Nov 2025 11:44:46 +0000 ROA not after: Fri 27 Nov 2026 11:49:46 +0000 asID: 834 IP address blocks: 45.137.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ee:2e:f2:92:cf:ab:bb:08:e1:98:41:90:c8:1b:f3:86:c6:db:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:46 2025 GMT Not After : Nov 27 11:49:46 2026 GMT Subject: CN=08545C7021CC25B0662981AA39CA325BAA4FCAEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:5f:d1:95:f6:46:d9:c1:af:13:18:35:2d:b6: f0:d1:ad:1a:f0:70:f3:bc:98:05:3e:a3:97:8c:06: c2:25:37:4e:c1:be:4c:06:98:28:12:fc:5e:a9:16: be:7e:cb:f7:2b:ac:7e:25:12:7a:a6:2c:04:a4:52: f4:c8:e4:ae:7e:b5:be:58:d0:d1:29:70:03:e2:51: 83:74:c6:e7:5e:b3:26:02:f0:f8:f3:a3:78:81:47: 4f:49:d2:79:50:7a:cc:ed:f3:b7:be:22:0a:ac:8e: f3:4d:83:01:20:c3:3f:76:d2:f2:7e:7b:f9:1e:4e: b7:f8:9d:62:bc:b9:f6:8f:64:15:9a:80:7d:51:db: 0f:ff:58:51:95:b0:52:53:0f:62:06:38:4c:7d:6e: 5d:3a:e8:27:5e:74:57:32:3c:29:ff:13:ae:14:0e: e4:91:27:47:05:87:ea:44:6a:cc:12:a9:af:0d:25: 6c:34:32:62:5d:31:2e:0d:af:d3:04:c0:11:c7:cb: 64:2c:47:9a:8b:4b:cc:60:19:1e:bf:04:69:4c:55: 3f:9b:bf:60:b5:f0:31:b8:c0:50:9d:30:7d:6f:a6: 99:8d:e4:42:bb:c1:e6:5b:79:e1:b2:7d:59:0b:0b: 2d:62:de:79:2f:64:fe:5c:b9:da:2e:94:e2:ee:76: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:54:5C:70:21:CC:25:B0:66:29:81:AA:39:CA:32:5B:AA:4F:CA:EE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133372e3139332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.193.0/24 Signature Algorithm: sha256WithRSAEncryption 19:8e:d5:08:c3:27:b0:8f:1f:a7:09:9b:f0:e5:53:e5:84:6e: f7:c1:23:74:7c:51:f4:a0:b4:03:69:16:2a:1d:0e:20:c8:29: 83:6c:29:39:c5:a8:dc:06:c4:c6:7f:0b:96:e6:3b:70:97:4f: f6:6d:88:d3:6d:93:0f:0f:8b:8d:4e:a2:42:45:1c:98:9f:97: ff:a5:ad:d9:05:76:02:1e:4c:92:10:18:85:66:f1:60:62:e5: 38:4c:b5:d2:48:77:ad:87:24:6e:23:d8:52:1a:0a:08:63:6a: f1:e9:f9:96:74:78:bd:ae:2a:7c:fa:d3:32:78:ce:cc:5e:89: 76:41:75:a9:27:4b:37:ca:6b:bc:6e:a0:74:cb:99:03:1d:67: 5e:92:f7:e7:e6:b4:fe:02:a6:52:77:39:ae:6a:1c:9c:b7:c6: 74:53:86:6a:fe:75:1f:07:c1:ca:c1:6b:70:73:d5:48:ee:5b: 67:c1:c4:50:97:02:da:b8:71:00:ec:26:c5:d3:79:3e:dc:a5: 5b:e3:73:82:86:7c:e3:be:03:32:95:22:1a:9a:ea:35:39:e1: 28:2e:97:c2:c1:e6:6e:6c:6a:42:79:e2:3b:dc:58:0d:dd:09: d9:75:4b:ad:5d:3b:ff:88:27:e4:96:e2:84:d9:94:d8:2c:19: bb:63:47:88 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUCO4u8pLPq7sI4ZhBkMgb84bG22MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDZaFw0yNjExMjcxMTQ5NDZaMDMxMTAvBgNV BAMTKDA4NTQ1QzcwMjFDQzI1QjA2NjI5ODFBQTM5Q0EzMjVCQUE0RkNBRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxX9GV9kbZwa8TGDUttvDRrRrw cPO8mAU+o5eMBsIlN07BvkwGmCgS/F6pFr5+y/crrH4lEnqmLASkUvTI5K5+tb5Y 0NEpcAPiUYN0xudesyYC8Pjzo3iBR09J0nlQeszt87e+IgqsjvNNgwEgwz920vJ+ e/keTrf4nWK8ufaPZBWagH1R2w//WFGVsFJTD2IGOEx9bl066CdedFcyPCn/E64U DuSRJ0cFh+pEaswSqa8NJWw0MmJdMS4Nr9MEwBHHy2QsR5qLS8xgGR6/BGlMVT+b v2C18DG4wFCdMH1vppmN5EK7weZbeeGyfVkLCy1i3nkvZP5cudoulOLudpVPAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUCFRccCHMJbBmKYGqOcoyW6pPyu4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzcy ZTMxMzkzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AC2JwTANBgkqhkiG9w0BAQsFAAOCAQEAGY7VCMMnsI8fpwmb8OVT5YRu98EjdHxR 9KC0A2kWKh0OIMgpg2wpOcWo3AbExn8LluY7cJdP9m2I022TDw+LjU6iQkUcmJ+X /6Wt2QV2Ah5MkhAYhWbxYGLlOEy10kh3rYckbiPYUhoKCGNq8en5lnR4va4qfPrT MnjOzF6JdkF1qSdLN8prvG6gdMuZAx1nXpL35+a0/gKmUnc5rmocnLfGdFOGav51 HwfBysFrcHPVSO5bZ8HEUJcC2rhxAOwmxdN5PtylW+NzgoZ8474DMpUiGprqNTnh KC6XwsHmbmxqQnniO9xYDd0J2XVLrV07/4gn5JbihNmU2CwZu2NHiA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:33:51 2025 by rpki-client