This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134342e302f32342d3234203d3e20313431303339.roa File: 34352e38352e3134342e302f32342d3234203d3e20313431303339.roa (raw, json) Hash identifier: IKevSpZhZqvTVnkiP0qce04YBjXrBuoIq2BDe7e8ScM= Subject key identifier: A3:91:5D:CB:14:2E:01:B3:0C:4C:34:87:D8:FB:29:49:28:CC:8B:65 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 05BBBB39B130788CD32EE282E5A08A772F3AC32B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134342e302f32342d3234203d3e20313431303339.roa Signing time: Fri 28 Nov 2025 11:49:38 +0000 ROA not before: Fri 28 Nov 2025 11:44:38 +0000 ROA not after: Fri 27 Nov 2026 11:49:38 +0000 asID: 141039 IP address blocks: 45.85.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:bb:bb:39:b1:30:78:8c:d3:2e:e2:82:e5:a0:8a:77:2f:3a:c3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:38 2025 GMT Not After : Nov 27 11:49:38 2026 GMT Subject: CN=A3915DCB142E01B30C4C3487D8FB294928CC8B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:37:7e:60:13:f8:30:be:d0:3f:48:94:12: 52:83:d7:4e:d6:89:98:9c:b8:0d:83:fb:b1:85:16: 19:bc:1c:45:bf:af:f1:ce:ba:af:5e:77:53:0a:14: 94:fe:ca:5c:ba:66:e6:1e:89:37:59:5b:e8:5f:16: ec:c2:3d:3c:22:84:e6:e7:ba:0b:3f:8d:0d:e5:0e: e1:d1:43:c8:9f:9f:9f:ba:0f:2d:c5:87:21:cc:e0: 82:56:73:97:2c:18:fe:6d:80:65:12:cb:52:6a:4a: 64:1e:a9:5b:58:53:f8:ca:cf:b8:dd:c8:e4:8b:bb: 87:75:b1:6a:a6:98:d8:b2:9f:45:56:04:21:13:70: be:94:a8:d2:04:64:47:8d:e0:90:a4:18:29:d3:c3: 6d:12:44:0d:fc:b7:b7:00:52:14:48:54:18:9d:5f: ce:44:88:56:74:d1:e3:98:d2:84:a5:3d:ab:52:f4: f4:b7:f8:83:a2:ed:f8:e3:35:17:48:f0:c8:91:e0: 3e:6c:8b:13:60:09:90:25:34:f3:02:94:73:c9:af: b9:76:bf:0a:e8:aa:6b:85:a7:e4:ae:32:9a:e9:55: a0:4d:31:5f:f8:7f:06:21:d3:da:c6:a4:ae:c9:43: 1c:82:f7:d3:be:e7:d8:a2:19:6d:e3:11:29:3c:58: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:91:5D:CB:14:2E:01:B3:0C:4C:34:87:D8:FB:29:49:28:CC:8B:65 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134342e302f32342d3234203d3e20313431303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.144.0/24 Signature Algorithm: sha256WithRSAEncryption b9:0b:18:48:f3:be:2e:f4:ce:8f:e5:58:1c:5b:13:27:38:bb: c1:8a:7f:63:e2:e7:e5:24:62:40:7f:d3:1d:97:db:b5:46:b9: 3a:ec:26:b9:f2:03:13:43:b0:be:ac:eb:4b:5c:b7:45:7d:aa: 59:ca:31:73:b0:36:7f:2e:c5:d8:d1:7c:df:5c:08:fc:12:3e: a5:e4:ad:e7:e7:08:1a:9f:a5:2a:bb:6e:eb:eb:9e:90:4c:45: 46:0e:8c:49:6f:d2:ac:b5:3c:ca:43:41:b3:64:42:84:f1:89: 10:74:e1:f8:c3:76:5e:4c:ff:77:81:11:c5:9c:2d:45:54:96: f1:3f:89:fa:94:1c:1a:0b:3d:78:e1:11:81:db:8e:c3:24:82: 60:98:23:ed:e4:1d:d4:bf:0f:4a:f9:c7:59:94:d2:6f:e9:15: b4:ac:9b:db:9b:40:8f:9e:92:44:5b:28:dd:ca:5c:5c:42:59: c9:f2:37:09:16:de:56:f8:92:36:06:c5:d5:73:98:f9:cc:1f: bc:2d:f9:84:80:48:92:11:1b:31:8b:28:a3:b0:0e:22:bd:65: 8e:4f:fa:54:28:3b:d8:6d:b6:9d:06:c1:0a:2b:33:11:90:9d: 9d:72:c7:6b:30:35:2f:cb:98:58:14:52:81:12:c2:a1:ff:a9: 5d:d9:ad:f8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUBbu7ObEweIzTLuKC5aCKdy86wyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzhaFw0yNjExMjcxMTQ5MzhaMDMxMTAvBgNV BAMTKEEzOTE1RENCMTQyRTAxQjMwQzRDMzQ4N0Q4RkIyOTQ5MjhDQzhCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmDTd+YBP4ML7QP0iUElKD107W iZicuA2D+7GFFhm8HEW/r/HOuq9ed1MKFJT+yly6ZuYeiTdZW+hfFuzCPTwihObn ugs/jQ3lDuHRQ8ifn5+6Dy3FhyHM4IJWc5csGP5tgGUSy1JqSmQeqVtYU/jKz7jd yOSLu4d1sWqmmNiyn0VWBCETcL6UqNIEZEeN4JCkGCnTw20SRA38t7cAUhRIVBid X85EiFZ00eOY0oSlPatS9PS3+IOi7fjjNRdI8MiR4D5sixNgCZAlNPMClHPJr7l2 vwroqmuFp+SuMprpVaBNMV/4fwYh09rGpK7JQxyC99O+59iiGW3jESk8WMNzAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUo5FdyxQuAbMMTDSH2PspSSjMi2UwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM1MmUz MTM0MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDMzMzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtVZAwDQYJKoZIhvcNAQELBQADggEBALkLGEjzvi70zo/lWBxbEyc4u8GK f2Pi5+UkYkB/0x2X27VGuTrsJrnyAxNDsL6s60tct0V9qlnKMXOwNn8uxdjRfN9c CPwSPqXkrefnCBqfpSq7buvrnpBMRUYOjElv0qy1PMpDQbNkQoTxiRB04fjDdl5M /3eBEcWcLUVUlvE/ifqUHBoLPXjhEYHbjsMkgmCYI+3kHdS/D0r5x1mU0m/pFbSs m9ubQI+ekkRbKN3KXFxCWcnyNwkW3lb4kjYGxdVzmPnMH7wt+YSASJIRGzGLKKOw DiK9ZY5P+lQoO9http0GwQorMxGQnZ1yx2swNS/LmFgUUoESwqH/qV3Zrfg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:18 2025 by rpki-client