This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232302e302f32342d3234203d3e20323031333431.roa File: 34352e36372e3232302e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: O89b4It9/WjlouDrNHfrNqwLRkqlSw8H760i75lBdA4= Subject key identifier: 1D:F9:77:91:36:E7:14:32:6E:EB:83:AE:DC:D6:87:AD:4E:56:1B:F6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4121E8BA6F575412E824892A2F6472F246C6EE0A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232302e302f32342d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:32 +0000 ROA not before: Fri 28 Nov 2025 11:44:32 +0000 ROA not after: Fri 27 Nov 2026 11:49:32 +0000 asID: 201341 IP address blocks: 45.67.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:21:e8:ba:6f:57:54:12:e8:24:89:2a:2f:64:72:f2:46:c6:ee:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:32 2025 GMT Not After : Nov 27 11:49:32 2026 GMT Subject: CN=1DF9779136E714326EEB83AEDCD687AD4E561BF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d2:a5:fb:53:c1:95:76:a3:70:78:ad:f6:76: ef:36:ad:9d:ed:b7:cb:25:31:64:6f:c7:23:1a:60: 94:19:61:0c:5c:c7:0b:e9:4e:28:22:00:74:3b:c0: a7:e5:c4:9e:6a:a6:91:db:a2:ae:a7:3c:e8:24:ae: 2b:8c:00:7d:25:4b:09:a2:7e:c0:91:f7:8c:bc:bc: 7b:5e:01:7b:f9:72:96:4c:7b:39:3e:eb:b9:3a:d2: 26:35:e9:8d:88:3c:a3:9f:8e:91:ab:9b:24:12:3c: a6:37:70:4f:d3:e9:d9:dc:67:6d:0a:30:f8:41:84: e3:cf:33:99:b7:2d:e3:e3:db:13:61:21:7c:bf:b9: 64:4a:7f:62:c9:c5:3b:09:64:e0:3d:bf:4e:2f:c5: 7c:b1:99:cb:a8:72:3b:16:47:08:0e:8c:55:72:31: 31:8d:37:ac:8e:8a:60:3b:53:6a:dd:ff:fa:60:48: 16:41:c5:a9:d0:6e:e3:3d:89:a6:0e:20:b8:0b:e2: e6:c8:7d:49:0a:78:42:5a:e3:4f:8f:72:91:c9:8a: 44:9a:eb:0f:cc:b6:f5:f5:47:8a:05:1b:b7:6a:00: 4e:0d:8b:32:8b:b7:43:60:17:08:9e:f0:45:f6:ac: 6d:a6:66:60:7d:dd:1a:8b:cf:d7:1e:41:e4:18:fc: 28:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F9:77:91:36:E7:14:32:6E:EB:83:AE:DC:D6:87:AD:4E:56:1B:F6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232302e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.220.0/24 Signature Algorithm: sha256WithRSAEncryption bb:0a:5b:42:f6:43:55:62:53:d4:48:54:be:27:01:57:bc:58: 02:4d:5c:80:2f:06:b4:0a:cb:06:7e:74:21:46:bb:67:7f:48: ef:5a:68:41:95:9e:87:5b:c5:bf:55:bd:b5:44:0e:15:2e:42: 5d:69:13:f8:34:ad:c3:b9:6b:98:69:17:07:b3:29:4d:40:a4: 99:cd:2f:d6:ee:2e:7e:47:0f:43:fe:53:49:00:93:6e:d2:14: f8:35:1a:f9:ec:d0:ec:d8:52:09:97:76:e2:71:87:22:2e:18: 76:9f:1e:81:da:3c:fc:c1:7a:e6:f2:28:cc:92:11:55:c6:aa: 60:d8:34:2c:85:1b:41:ab:ec:07:bb:df:fb:9a:32:68:00:57: 9e:75:cf:de:7a:f8:c8:84:f8:0b:6f:7c:bb:52:aa:55:cb:79: 82:8d:da:48:d5:94:59:ef:3c:87:55:79:d1:35:08:82:0d:19: 15:f9:fc:e9:41:fb:7f:72:e1:d0:74:4e:df:a1:dc:e9:ef:5b: ab:86:5d:3b:83:b6:92:11:36:5e:bd:4f:c2:0e:7c:72:13:85: c0:b9:16:6b:d6:4e:de:35:ad:e9:e6:50:2b:51:6a:5e:39:3a: 9a:c6:97:35:b7:24:b8:1c:31:fd:45:9f:b6:bd:0b:d7:81:70: f1:a3:25:a3 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUQSHoum9XVBLoJIkqL2Ry8kbG7gowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzJaFw0yNjExMjcxMTQ5MzJaMDMxMTAvBgNV BAMTKDFERjk3NzkxMzZFNzE0MzI2RUVCODNBRURDRDY4N0FENEU1NjFCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC60qX7U8GVdqNweK32du82rZ3t t8slMWRvxyMaYJQZYQxcxwvpTigiAHQ7wKflxJ5qppHboq6nPOgkriuMAH0lSwmi fsCR94y8vHteAXv5cpZMezk+67k60iY16Y2IPKOfjpGrmyQSPKY3cE/T6dncZ20K MPhBhOPPM5m3LePj2xNhIXy/uWRKf2LJxTsJZOA9v04vxXyxmcuocjsWRwgOjFVy MTGNN6yOimA7U2rd//pgSBZBxanQbuM9iaYOILgL4ubIfUkKeEJa40+PcpHJikSa 6w/MtvX1R4oFG7dqAE4NizKLt0NgFwie8EX2rG2mZmB93RqLz9ceQeQY/Cg5AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUHfl3kTbnFDJu64Ou3NaHrU5WG/YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM3MmUz MjMyMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtQ9wwDQYJKoZIhvcNAQELBQADggEBALsKW0L2Q1ViU9RIVL4nAVe8WAJN XIAvBrQKywZ+dCFGu2d/SO9aaEGVnodbxb9VvbVEDhUuQl1pE/g0rcO5a5hpFwez KU1ApJnNL9buLn5HD0P+U0kAk27SFPg1Gvns0OzYUgmXduJxhyIuGHafHoHaPPzB eubyKMySEVXGqmDYNCyFG0Gr7Ae73/uaMmgAV551z956+MiE+AtvfLtSqlXLeYKN 2kjVlFnvPIdVedE1CIINGRX5/OlB+39y4dB0Tt+h3OnvW6uGXTuDtpIRNl69T8IO fHIThcC5FmvWTt41renmUCtRal45OprGlzW3JLgcMf1Fn7a9C9eBcPGjJaM= -----END CERTIFICATE-----Generated at Sat Dec 6 22:55:53 2025 by rpki-client