This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134362e302f32332d3332203d3e203531313637.roa File: 34352e38352e3134362e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: pdRhoE/4kXQ8JCDvNmQ9T8mqlqpyx+T6n6W7iQGtKXU= Subject key identifier: 3C:25:17:EE:CD:25:63:95:CA:D9:62:A2:F5:97:A8:4B:ED:5D:90:A0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 57DF64C782EDA3DBED805238F4762C745B1206A8 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134362e302f32332d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 51167 IP address blocks: 45.85.146.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:df:64:c7:82:ed:a3:db:ed:80:52:38:f4:76:2c:74:5b:12:06:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=3C2517EECD256395CAD962A2F597A84BED5D90A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:0e:df:60:d3:ae:31:46:4d:d7:77:21:e2: da:e4:66:df:48:63:97:0b:08:2b:fc:16:0a:03:0e: 5a:a6:e7:22:27:e7:0a:ba:d0:a9:f9:a2:c6:ff:12: 76:b3:38:71:86:c9:71:ab:06:f5:e2:5f:95:3d:ca: 99:46:51:6f:38:00:3a:ec:55:82:24:13:68:ec:49: c0:6e:a2:2b:29:c4:4b:a5:3d:b5:3f:36:85:04:fd: 79:aa:db:95:f2:c0:d1:a0:55:67:0d:4b:f6:dd:41: 8d:a4:93:f9:46:22:9a:fa:c5:67:f0:a8:5c:47:77: f0:15:b0:da:f5:98:81:b6:3c:3c:3e:8a:99:f7:1e: 79:44:0f:cb:41:0e:f1:90:64:5e:0f:ac:08:de:67: 8e:89:ee:b3:42:09:63:59:fb:d5:e6:3e:62:61:35: b5:72:56:23:6b:97:71:4e:73:13:d9:ca:5c:e6:2c: f1:5e:c9:99:d4:bf:6b:d2:cc:14:2e:67:a0:1e:d4: 4f:71:9b:e6:03:03:90:dd:a5:75:bd:d0:0b:e5:67: aa:b2:04:27:e5:2c:13:cf:78:13:75:66:ab:02:ad: 32:f4:54:f6:b9:ad:4e:23:29:30:9e:47:74:6e:5b: 2a:1f:dd:62:4d:46:e8:f1:4d:d0:71:fa:59:fe:a9: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:25:17:EE:CD:25:63:95:CA:D9:62:A2:F5:97:A8:4B:ED:5D:90:A0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134362e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.146.0/23 Signature Algorithm: sha256WithRSAEncryption d7:a9:1e:18:b3:08:f9:5f:5b:fc:02:5c:8e:24:9c:d6:66:ec: e2:01:9f:93:35:0c:81:b6:d5:16:77:d2:6d:6f:e9:1b:08:6c: 2d:04:b6:9d:c6:45:9b:0e:2a:ee:06:0b:83:92:7c:79:38:7e: 52:d8:cb:ef:36:3d:67:fc:81:6c:08:d0:ec:60:92:41:27:6b: b4:d2:d3:bb:e3:09:7c:57:ea:56:77:f4:d6:04:f7:58:4c:82: 02:5d:cd:16:7b:2b:63:5f:35:36:dd:68:f8:91:f4:6d:ff:27: 46:77:b4:c5:a1:86:c2:47:69:34:fb:00:b3:48:e6:76:f1:c5: 95:91:16:1e:25:08:e3:9b:a7:25:df:84:a5:11:02:bb:c3:05: a8:bb:0c:7d:c5:e4:54:ff:c8:ad:68:f3:d6:20:6a:f8:2f:36: 04:46:cb:72:d4:6b:b8:cd:d4:01:e4:f5:f2:90:ea:8b:b5:76: c7:d8:71:4d:f8:d9:e3:81:17:69:6a:8e:67:fb:ff:bf:ed:98: c9:c5:4d:4c:ea:05:9f:d4:7e:17:6d:b8:3c:61:96:56:0e:63: df:32:89:fa:2e:b0:0a:8e:83:37:e7:98:85:ee:ea:d0:a2:ac: 8b:0a:4a:7e:15:02:ee:9d:60:1d:3a:83:50:ee:fd:6d:39:9a: fd:7d:14:b1 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUV99kx4Lto9vtgFI49HYsdFsSBqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDNDMjUxN0VFQ0QyNTYzOTVDQUQ5NjJBMkY1OTdBODRCRUQ1RDkwQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYQ7fYNOuMUZN13ch4trkZt9I Y5cLCCv8FgoDDlqm5yIn5wq60Kn5osb/EnazOHGGyXGrBvXiX5U9yplGUW84ADrs VYIkE2jsScBuoispxEulPbU/NoUE/Xmq25XywNGgVWcNS/bdQY2kk/lGIpr6xWfw qFxHd/AVsNr1mIG2PDw+ipn3HnlED8tBDvGQZF4PrAjeZ46J7rNCCWNZ+9XmPmJh NbVyViNrl3FOcxPZylzmLPFeyZnUv2vSzBQuZ6Ae1E9xm+YDA5DdpXW90AvlZ6qy BCflLBPPeBN1ZqsCrTL0VPa5rU4jKTCeR3RuWyof3WJNRujxTdBx+ln+qS/hAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUPCUX7s0lY5XK2WKi9ZeoS+1dkKAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM1MmUz MTM0MzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLVWSMA0GCSqGSIb3DQEBCwUAA4IBAQDXqR4Yswj5X1v8AlyOJJzWZuziAZ+T NQyBttUWd9Jtb+kbCGwtBLadxkWbDiruBguDknx5OH5S2MvvNj1n/IFsCNDsYJJB J2u00tO74wl8V+pWd/TWBPdYTIICXc0WeytjXzU23Wj4kfRt/ydGd7TFoYbCR2k0 +wCzSOZ28cWVkRYeJQjjm6cl34SlEQK7wwWouwx9xeRU/8itaPPWIGr4LzYERsty 1Gu4zdQB5PXykOqLtXbH2HFN+NnjgRdpao5n+/+/7ZjJxU1M6gWf1H4Xbbg8YZZW DmPfMon6LrAKjoM355iF7urQoqyLCkp+FQLunWAdOoNQ7v1tOZr9fRSx -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:38 2025 by rpki-client