This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32322e302f32342d3332203d3e203531313637.roa File: 34352e3134312e32322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: rjgsTsKJaT+WZ3zmyYCKTaxfjmbo3pVGLpUl1+5243c= Subject key identifier: 9D:E4:BE:A6:0B:F4:C9:AC:BB:7C:B7:1F:40:9E:C3:29:9E:20:8F:E2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 220CE22C10D05C045B1F18FF6BE65A073348E9B4 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32322e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:22 +0000 ROA not before: Fri 28 Nov 2025 11:44:22 +0000 ROA not after: Fri 27 Nov 2026 11:49:22 +0000 asID: 51167 IP address blocks: 45.141.22.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:0c:e2:2c:10:d0:5c:04:5b:1f:18:ff:6b:e6:5a:07:33:48:e9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:22 2025 GMT Not After : Nov 27 11:49:22 2026 GMT Subject: CN=9DE4BEA60BF4C9ACBB7CB71F409EC3299E208FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:52:af:9c:3a:fc:0a:40:39:b1:a6:fc:79:91: 5e:e5:94:2d:d9:f6:25:c1:82:94:c9:a1:2c:d7:ed: 70:92:a0:31:92:df:a5:3c:b6:c0:c1:c1:34:7e:f7: bd:fd:7e:28:02:c1:07:3a:c3:4e:13:fa:4f:d0:78: 0a:61:e9:7d:d4:46:27:67:b1:d7:07:09:f8:f6:9a: 3c:b0:b8:58:22:09:71:2d:7c:63:9c:3b:ad:fd:c3: e4:62:7d:44:ec:ef:0f:0a:a7:82:86:04:f3:e6:3c: af:8b:ec:c9:dc:bb:ab:9d:a0:7b:a7:1c:da:9b:90: 13:5f:61:66:a1:7f:3d:10:c1:87:83:7e:98:f4:39: 28:4b:c2:84:3d:e7:6d:00:57:8e:5a:fb:61:a7:99: 5f:c2:e0:8a:31:4a:b6:82:ff:15:b7:0c:bf:f4:95: db:a3:84:05:01:de:6d:77:9d:4e:36:ea:ae:fb:cb: e8:a0:fc:bb:4a:2e:02:7b:72:24:08:25:5b:d2:41: 3b:03:06:a3:3f:2d:37:54:2c:34:79:24:86:fb:de: ee:1d:6d:c0:72:8b:61:1a:02:4e:9c:9e:bc:45:15: 8d:30:53:bc:12:25:b3:f9:2e:54:05:ed:d6:54:d1: c3:20:97:9f:c2:62:77:1a:64:0b:1c:8d:4d:12:4e: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E4:BE:A6:0B:F4:C9:AC:BB:7C:B7:1F:40:9E:C3:29:9E:20:8F:E2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.22.0/24 Signature Algorithm: sha256WithRSAEncryption d4:bc:90:56:b8:d3:4b:6c:23:cc:d7:97:25:03:b9:8b:a5:f1: 88:92:c6:94:34:46:55:08:2f:a4:a2:90:01:7f:e4:17:a5:34: e8:ca:a4:db:b7:81:69:c6:08:30:63:d2:98:a3:a1:97:4d:83: 92:dc:e5:df:73:af:f9:2e:c6:26:47:bd:7b:53:a8:89:2a:de: 78:c3:00:6f:69:03:49:81:cb:38:12:d9:15:18:69:3d:75:5f: 71:c4:23:80:0a:cc:55:02:37:ed:87:9f:c4:3c:34:0e:32:86: 17:df:e0:07:e8:1d:b6:55:7a:38:74:cc:5b:5c:98:d3:29:fe: 92:62:98:01:78:7f:32:0d:1b:a3:38:cc:c4:40:57:91:ed:68: f4:ea:1c:4f:9f:57:ed:9c:60:98:bb:51:f8:f7:6d:e7:a3:d6: 51:aa:be:81:e0:1c:34:ed:d6:d0:50:75:22:c1:ed:be:2d:2b: b2:c9:ca:12:4c:ef:cf:4b:db:e0:69:80:ee:0b:81:22:78:12: 87:30:ad:6b:67:c7:fc:35:2b:44:76:ff:42:a4:d3:51:df:33: 24:92:85:ea:cb:6b:df:9b:3e:e7:f1:fe:ef:8e:ee:e4:3f:e5: 88:50:68:2f:08:b0:fc:d3:93:a6:99:07:c9:d4:87:c8:46:35: b0:bf:b6:9b -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUIgziLBDQXARbHxj/a+ZaBzNI6bQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjJaFw0yNjExMjcxMTQ5MjJaMDMxMTAvBgNV BAMTKDlERTRCRUE2MEJGNEM5QUNCQjdDQjcxRjQwOUVDMzI5OUUyMDhGRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Uq+cOvwKQDmxpvx5kV7llC3Z 9iXBgpTJoSzX7XCSoDGS36U8tsDBwTR+9739figCwQc6w04T+k/QeAph6X3URidn sdcHCfj2mjywuFgiCXEtfGOcO639w+RifUTs7w8Kp4KGBPPmPK+L7Mncu6udoHun HNqbkBNfYWahfz0QwYeDfpj0OShLwoQ9520AV45a+2GnmV/C4IoxSraC/xW3DL/0 ldujhAUB3m13nU426q77y+ig/LtKLgJ7ciQIJVvSQTsDBqM/LTdULDR5JIb73u4d bcByi2EaAk6cnrxFFY0wU7wSJbP5LlQF7dZU0cMgl5/CYncaZAscjU0STjTDAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUneS+pgv0yay7fLcfQJ7DKZ4gj+IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzEy ZTMyMzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALY0WMA0GCSqGSIb3DQEBCwUAA4IBAQDUvJBWuNNLbCPM15clA7mLpfGIksaU NEZVCC+kopABf+QXpTToyqTbt4FpxggwY9KYo6GXTYOS3OXfc6/5LsYmR717U6iJ Kt54wwBvaQNJgcs4EtkVGGk9dV9xxCOACsxVAjfth5/EPDQOMoYX3+AH6B22VXo4 dMxbXJjTKf6SYpgBeH8yDRujOMzEQFeR7Wj06hxPn1ftnGCYu1H4923no9ZRqr6B 4Bw07dbQUHUiwe2+LSuyycoSTO/PS9vgaYDuC4EieBKHMK1rZ8f8NStEdv9CpNNR 3zMkkoXqy2vfmz7n8f7vju7kP+WIUGgvCLD805OmmQfJ1IfIRjWwv7ab -----END CERTIFICATE-----Generated at Sat Dec 6 16:02:35 2025 by rpki-client