This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37322e302f32322d3232203d3e20323033303230.roa File: 34352e3134372e37322e302f32322d3232203d3e20323033303230.roa (raw, json) Hash identifier: UTaVIr07RWbwMiM8Dr71hm3X7NOV5S19RgBlcDqrfnY= Subject key identifier: AA:17:9F:9E:B6:0F:B0:97:8A:6D:34:52:DC:34:5C:8A:53:86:40:45 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1AF03F3FF23D01684767959A044C3D096C4273C8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37322e302f32322d3232203d3e20323033303230.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 203020 IP address blocks: 45.147.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f0:3f:3f:f2:3d:01:68:47:67:95:9a:04:4c:3d:09:6c:42:73:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=AA179F9EB60FB0978A6D3452DC345C8A53864045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:2e:c9:c2:71:a9:8b:fd:c5:bc:98:c4:c0: 57:de:05:7c:1b:a6:97:9a:68:c7:8f:bd:1c:3f:fc: ab:3a:12:e8:f8:6d:1e:d3:a8:29:d6:0f:d9:34:29: 08:72:6b:81:ca:1b:bb:c1:82:0d:23:49:a8:17:80: e9:99:89:2b:84:9c:cc:99:95:03:a2:25:d3:67:ed: a0:ef:a0:59:aa:fc:67:91:23:4b:5d:10:48:ac:da: 59:0a:39:1d:37:97:c5:c9:57:58:48:5c:18:f2:22: 8c:a6:93:e7:c1:f8:9c:52:5a:3c:ea:a2:03:92:55: 70:4d:74:51:6c:6f:82:ed:a9:4f:56:54:9d:a0:dd: a2:f3:95:c5:e9:94:9d:8d:36:4e:bb:85:a7:96:ff: 1f:74:ed:8f:cd:8d:86:b0:e0:74:04:28:d9:69:7e: f1:67:bc:22:6a:9c:94:ef:83:5e:89:a6:5c:91:46: fd:7b:fe:d3:c7:d3:93:5e:f7:42:e9:83:6a:5b:db: 32:d0:fc:36:2f:f3:bb:d6:3c:f5:22:ec:a2:0b:66: 06:8a:92:d9:95:f5:66:15:c9:80:f7:1d:6e:85:0f: 8f:20:ff:d2:40:72:02:b9:aa:21:4e:57:35:dd:c0: f7:d6:7c:13:37:17:b9:3e:b5:d2:35:ba:ee:21:92: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:17:9F:9E:B6:0F:B0:97:8A:6D:34:52:DC:34:5C:8A:53:86:40:45 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134372e37322e302f32322d3232203d3e20323033303230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.72.0/22 Signature Algorithm: sha256WithRSAEncryption 55:02:52:18:79:b2:2d:24:af:94:dd:ba:03:fe:28:fe:fe:f1: 49:bc:9d:52:53:0b:55:4a:e5:1d:5c:69:96:e8:42:b4:5a:65: 19:7c:84:55:a8:c3:7c:b1:93:70:24:b8:97:1f:93:06:ad:9a: 36:7f:f1:e4:8f:d5:b6:b9:ea:1a:4c:57:f8:0c:e6:03:15:47: fa:6a:fd:1b:4d:ea:24:b6:26:65:b6:b5:6b:33:66:42:33:29: c9:d7:16:a5:d4:c6:d9:1d:d9:1c:3c:95:25:99:4f:29:9a:0e: d0:af:4b:d1:c9:ab:fb:7d:50:69:22:d3:7d:5c:26:c3:3d:2b: 39:03:75:d4:d6:10:47:ca:26:5a:6f:56:ed:ea:43:57:a5:13: 0b:9b:c5:03:6a:05:ea:b1:05:fb:a7:fc:bd:a5:c0:06:1a:d0: e2:91:61:ec:a1:56:d5:49:1f:4a:8a:73:f0:9f:20:1d:0c:9f: 39:a1:77:19:28:41:97:c7:81:89:86:ec:ec:93:ca:b8:3d:c3: 6e:6e:63:17:43:e2:a8:82:c3:de:0d:8a:c9:f4:42:32:4a:b4: 55:a3:0a:5e:ae:d3:44:c8:40:2b:75:31:0a:91:52:ed:b0:b7: e6:30:5a:d7:38:22:27:23:69:2b:be:9b:4a:1b:a9:2f:e0:21: 2d:0d:76:1a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUGvA/P/I9AWhHZ5WaBEw9CWxCc8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKEFBMTc5RjlFQjYwRkIwOTc4QTZEMzQ1MkRDMzQ1QzhBNTM4NjQwNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBy7JwnGpi/3FvJjEwFfeBXwb ppeaaMePvRw//Ks6Euj4bR7TqCnWD9k0KQhya4HKG7vBgg0jSagXgOmZiSuEnMyZ lQOiJdNn7aDvoFmq/GeRI0tdEEis2lkKOR03l8XJV1hIXBjyIoymk+fB+JxSWjzq ogOSVXBNdFFsb4LtqU9WVJ2g3aLzlcXplJ2NNk67haeW/x907Y/NjYaw4HQEKNlp fvFnvCJqnJTvg16JplyRRv17/tPH05Ne90Lpg2pb2zLQ/DYv87vWPPUi7KILZgaK ktmV9WYVyYD3HW6FD48g/9JAcgK5qiFOVzXdwPfWfBM3F7k+tdI1uu4hksu5AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUqhefnrYPsJeKbTRS3DRcilOGQEUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0Mzcy ZTM3MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjMwMzMzMDMyMzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAItk0gwDQYJKoZIhvcNAQELBQADggEBAFUCUhh5si0kr5TdugP+KP7+8Um8 nVJTC1VK5R1caZboQrRaZRl8hFWow3yxk3AkuJcfkwatmjZ/8eSP1ba56hpMV/gM 5gMVR/pq/RtN6iS2JmW2tWszZkIzKcnXFqXUxtkd2Rw8lSWZTymaDtCvS9HJq/t9 UGki031cJsM9KzkDddTWEEfKJlpvVu3qQ1elEwubxQNqBeqxBfun/L2lwAYa0OKR YeyhVtVJH0qKc/CfIB0MnzmhdxkoQZfHgYmG7OyTyrg9w25uYxdD4qiCw94Nisn0 QjJKtFWjCl6u00TIQCt1MQqRUu2wt+YwWtc4IicjaSu+m0obqS/gIS0Ndho= -----END CERTIFICATE-----Generated at Sat Dec 6 08:39:38 2025 by rpki-client