This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa File: 34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa (raw, json) Hash identifier: mUFTJdLXlUhacZ1VhiGETiLSX877GMwQzFyKPvz9qVg= Subject key identifier: BD:27:75:E6:0E:C0:45:DB:0C:7A:FA:AD:91:28:FB:66:B0:54:30:66 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 279ECBDF7EE3077FF15BC57BB4563B30E90EC02C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 201341 IP address blocks: 45.141.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9e:cb:df:7e:e3:07:7f:f1:5b:c5:7b:b4:56:3b:30:e9:0e:c0:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=BD2775E60EC045DB0C7AFAAD9128FB66B0543066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:64:da:99:b2:b1:a4:c1:4c:9c:2b:11:33: b9:57:69:5f:da:5f:37:43:5e:40:a6:5a:1e:87:86: 65:fa:3d:84:f6:df:fe:b5:50:70:74:99:9c:7b:39: 93:1e:54:22:43:c4:34:79:68:35:f8:ab:0d:8e:52: eb:9b:10:17:b6:bb:6f:02:02:02:77:8a:f4:82:11: 6b:63:21:c0:a5:2e:bd:5f:d6:67:27:3d:1e:e4:bb: 02:d9:06:38:ba:46:f2:96:82:5f:64:a2:b5:8c:55: 29:4a:d2:47:0f:6e:c0:f1:7c:ee:a3:4d:dd:44:a0: 83:bb:94:75:ac:91:f3:8a:1b:83:38:52:dd:55:3c: c1:48:01:06:6c:5b:99:70:f8:38:86:8d:bc:bc:2b: 54:55:e0:f7:dd:17:01:43:3e:1c:1f:f9:f6:1e:cd: eb:90:43:77:c0:00:69:5c:48:76:3c:d7:28:68:16: 4b:b9:a3:11:8f:93:7b:ce:b8:20:04:7e:8a:9c:d1: 00:e4:33:a9:e5:d6:4a:de:22:5f:e0:6c:9c:01:e9: 3e:72:53:5c:2e:04:0b:45:3f:d3:20:3c:35:cd:8c: 8a:8d:bc:2a:31:b1:1d:3c:1b:ff:93:87:43:60:76: ca:e0:53:a8:15:af:57:b9:05:52:98:02:7c:34:71: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:27:75:E6:0E:C0:45:DB:0C:7A:FA:AD:91:28:FB:66:B0:54:30:66 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e3232302e302f32322d3232203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.220.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:f9:5b:5c:c3:b8:19:e2:ec:4f:b4:6a:e2:c6:4a:46:50:eb: a3:73:a8:a0:79:f9:97:10:0c:bf:e6:9d:47:a3:e8:cc:4c:38: ed:b0:1f:19:93:46:03:cd:6c:a7:dd:e0:ed:e9:9f:92:c3:20: d8:ec:88:1d:df:85:d9:c7:b8:29:29:1d:4b:0d:e2:ed:5a:ef: 27:aa:97:62:3e:02:6c:2d:81:23:10:9b:5a:2a:51:d8:c6:d8: 9c:b3:2b:bd:33:f7:93:5e:14:0b:82:4d:80:24:70:ea:cf:01: 01:3d:da:8c:12:90:1e:91:96:05:5c:11:cb:4c:90:9b:d8:b6: ab:ac:14:45:02:fb:8f:c7:55:c2:b2:72:bd:c8:d6:26:a9:c6: 22:4c:f5:b9:cd:aa:4e:36:79:97:38:a6:b2:20:a3:dc:c0:a1: e9:07:c6:31:9f:2d:28:55:97:e6:45:40:6d:84:c4:b2:c1:6f: 4a:73:11:b5:a8:27:35:8b:f4:81:64:80:dc:45:41:58:78:1a: 71:67:f1:f1:1e:54:e1:b9:03:f2:c1:9d:8e:9b:cd:57:99:82: 34:6a:b2:ec:1c:37:86:50:22:f9:c6:1d:61:8c:9b:04:e3:8b: 96:4b:93:f1:b5:91:6e:90:2a:ce:db:c1:5e:e8:31:19:2e:29: 91:42:e2:65 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUJ57L337jB3/xW8V7tFY7MOkOwCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKEJEMjc3NUU2MEVDMDQ1REIwQzdBRkFBRDkxMjhGQjY2QjA1NDMwNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD2mTambKxpMFMnCsRM7lXaV/a XzdDXkCmWh6HhmX6PYT23/61UHB0mZx7OZMeVCJDxDR5aDX4qw2OUuubEBe2u28C AgJ3ivSCEWtjIcClLr1f1mcnPR7kuwLZBji6RvKWgl9korWMVSlK0kcPbsDxfO6j Td1EoIO7lHWskfOKG4M4Ut1VPMFIAQZsW5lw+DiGjby8K1RV4PfdFwFDPhwf+fYe zeuQQ3fAAGlcSHY81yhoFku5oxGPk3vOuCAEfoqc0QDkM6nl1kreIl/gbJwB6T5y U1wuBAtFP9MgPDXNjIqNvCoxsR08G/+Th0NgdsrgU6gVr1e5BVKYAnw0cS6xAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUvSd15g7ARdsMevqtkSj7ZrBUMGYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzEy ZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzAzMTMzMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAi2N3DANBgkqhkiG9w0BAQsFAAOCAQEATvlbXMO4GeLsT7Rq4sZKRlDr o3OooHn5lxAMv+adR6PozEw47bAfGZNGA81sp93g7emfksMg2OyIHd+F2ce4KSkd Sw3i7VrvJ6qXYj4CbC2BIxCbWipR2MbYnLMrvTP3k14UC4JNgCRw6s8BAT3ajBKQ HpGWBVwRy0yQm9i2q6wURQL7j8dVwrJyvcjWJqnGIkz1uc2qTjZ5lzimsiCj3MCh 6QfGMZ8tKFWX5kVAbYTEssFvSnMRtagnNYv0gWSA3EVBWHgacWfx8R5U4bkD8sGd jpvNV5mCNGqy7Bw3hlAi+cYdYYybBOOLlkuT8bWRbpAqztvBXugxGS4pkULiZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:49:34 2025 by rpki-client