This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232312e302f32342d3332203d3e203531313637.roa File: 34352e36372e3232312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: GyTlzLPRDTu/VssRiFWohrjo87EQmp6sDzjg+nzJHjA= Subject key identifier: 3B:EA:57:C3:CB:EC:28:61:FC:97:D4:18:F5:FC:8B:9B:04:DE:A7:56 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1EC9DBBF4BD89EADEA9F10C296B2A0E23DC94F59 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232312e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 51167 IP address blocks: 45.67.221.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c9:db:bf:4b:d8:9e:ad:ea:9f:10:c2:96:b2:a0:e2:3d:c9:4f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=3BEA57C3CBEC2861FC97D418F5FC8B9B04DEA756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:ab:17:62:be:cc:ff:07:b5:80:dc:e6:c8: 84:68:36:bc:3a:dc:c0:77:e5:d4:8b:9b:05:6d:77: 19:eb:3e:0e:7f:2e:dc:a4:21:15:32:83:d0:3c:85: b0:13:80:9a:f2:8f:e9:42:51:b5:47:7c:59:ea:1a: d7:4e:77:8b:a0:a8:11:44:0c:0f:95:eb:f2:26:c8: 7e:26:82:04:8f:fb:d8:99:5d:5e:43:06:c6:5f:47: 1c:10:ca:cd:02:3b:3a:b2:25:f1:ed:0e:06:36:14: fd:77:4f:23:a3:be:11:b7:c5:8d:b4:86:94:d9:ef: da:f5:6e:79:7f:f3:8f:19:26:68:42:3e:47:f6:b0: 70:cb:fa:94:5c:0e:2d:da:4d:ae:74:64:12:bb:00: 8b:e7:98:4f:92:ca:03:95:ba:fb:4c:94:d5:72:33: aa:3b:7d:ae:62:83:9b:d6:9d:28:ce:4e:8b:2f:47: 5b:27:fd:5e:eb:cb:c3:50:af:06:39:8c:8c:a3:b4: 2b:6b:59:89:0b:a9:0e:a3:13:90:e9:cc:85:ae:d3: 56:49:b4:46:03:99:ca:d7:3c:6c:01:56:36:11:6d: 60:05:6e:11:88:9c:6c:6a:ef:bb:eb:cc:f2:34:7c: b1:56:69:54:26:d7:d6:8c:a9:a3:29:45:db:08:40: 71:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:EA:57:C3:CB:EC:28:61:FC:97:D4:18:F5:FC:8B:9B:04:DE:A7:56 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.221.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:8d:b8:69:bc:62:b9:9e:e9:fd:bd:64:0a:b9:5b:1c:00:14: 84:0b:24:4c:08:76:40:df:7c:ad:f3:6c:5e:ba:c3:3c:e6:c1: 70:21:b7:ab:e2:9c:a9:d6:d2:5e:17:69:71:b4:a3:63:6f:c3: 3c:8e:06:08:70:87:cb:e9:70:c6:cb:e1:24:85:d8:e5:8f:a0: 60:37:a5:5a:ce:cf:32:47:f2:19:a5:4d:26:4c:35:53:5e:26: f4:8a:09:e0:0d:27:4f:5f:c1:1b:18:8d:3e:19:a4:10:dd:cd: 11:97:ff:2f:4c:bd:b4:7c:f7:84:26:6c:fa:46:0a:8f:b0:89: 7e:92:24:09:9f:7d:19:63:00:9e:b7:98:a6:5a:93:09:f1:ce: bd:af:35:d7:62:fc:7d:da:c2:f0:81:04:37:f2:f5:a4:7f:41: 0f:1c:0d:35:1b:06:f1:8e:ee:89:85:77:60:51:73:ec:d3:d3: 09:00:55:37:c5:89:86:5d:e7:7c:56:b0:c5:05:ee:1f:37:84: 9a:c5:75:f9:ff:f4:f6:e7:03:4b:41:0d:2b:cd:c8:71:4c:11: 81:29:af:6e:57:9e:f5:cd:6d:f7:7a:24:c8:20:8e:c9:1b:11: c1:c0:c8:39:f4:3b:f5:29:8d:e0:07:06:fc:58:a4:5f:59:83: c2:dc:7c:94 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUHsnbv0vYnq3qnxDClrKg4j3JT1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKDNCRUE1N0MzQ0JFQzI4NjFGQzk3RDQxOEY1RkM4QjlCMDRERUE3NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoasXYr7M/we1gNzmyIRoNrw6 3MB35dSLmwVtdxnrPg5/LtykIRUyg9A8hbATgJryj+lCUbVHfFnqGtdOd4ugqBFE DA+V6/ImyH4mggSP+9iZXV5DBsZfRxwQys0COzqyJfHtDgY2FP13TyOjvhG3xY20 hpTZ79r1bnl/848ZJmhCPkf2sHDL+pRcDi3aTa50ZBK7AIvnmE+SygOVuvtMlNVy M6o7fa5ig5vWnSjOTosvR1sn/V7ry8NQrwY5jIyjtCtrWYkLqQ6jE5DpzIWu01ZJ tEYDmcrXPGwBVjYRbWAFbhGInGxq77vrzPI0fLFWaVQm19aMqaMpRdsIQHFVAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUO+pXw8vsKGH8l9QY9fyLmwTep1YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM3MmUz MjMyMzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALUPdMA0GCSqGSIb3DQEBCwUAA4IBAQCPjbhpvGK5nun9vWQKuVscABSECyRM CHZA33yt82xeusM85sFwIber4pyp1tJeF2lxtKNjb8M8jgYIcIfL6XDGy+Ekhdjl j6BgN6Vazs8yR/IZpU0mTDVTXib0igngDSdPX8EbGI0+GaQQ3c0Rl/8vTL20fPeE Jmz6RgqPsIl+kiQJn30ZYwCet5imWpMJ8c69rzXXYvx92sLwgQQ38vWkf0EPHA01 Gwbxju6JhXdgUXPs09MJAFU3xYmGXed8VrDFBe4fN4SaxXX5//T25wNLQQ0rzchx TBGBKa9uV571zW33eiTIII7JGxHBwMg59Dv1KY3gBwb8WKRfWYPC3HyU -----END CERTIFICATE-----Generated at Thu Dec 18 07:12:14 2025 by rpki-client