This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3138392e302f32342d3332203d3e203531313637.roa File: 34352e38382e3138392e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 4ArhDIu4JEHwM6E3wHtKUl5ISgmFO59yFkiX75zhsU0= Subject key identifier: 69:FC:A8:D5:61:0B:3A:6B:74:9F:64:25:B2:78:3E:2A:19:69:5E:3F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 40ACBA8EA0D2BF69F16DEE7CC14BCFE1A089E3E6 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3138392e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:41 +0000 ROA not before: Fri 28 Nov 2025 11:44:41 +0000 ROA not after: Fri 27 Nov 2026 11:49:41 +0000 asID: 51167 IP address blocks: 45.88.189.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ac:ba:8e:a0:d2:bf:69:f1:6d:ee:7c:c1:4b:cf:e1:a0:89:e3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:41 2025 GMT Not After : Nov 27 11:49:41 2026 GMT Subject: CN=69FCA8D5610B3A6B749F6425B2783E2A19695E3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:bc:34:33:09:b8:11:25:37:41:90:32:1e: 49:10:0f:86:dc:da:cd:f9:ac:2d:ad:8b:f0:ec:98: ba:d8:36:8d:67:64:e2:fb:11:49:b7:3f:3b:33:0d: f6:e6:34:42:5a:a0:c4:b0:c4:f3:05:35:66:43:13: 2f:73:0b:b0:20:e7:46:82:c2:f3:2d:0e:0e:d0:60: f0:5e:d9:d8:7a:a4:3c:82:ac:42:b6:89:f5:cd:5f: 35:c7:94:39:46:4f:ad:4d:a0:7d:bd:a3:47:d2:73: 8b:4a:d2:8d:dd:14:d4:f5:3d:61:c9:c6:81:d2:12: 8e:7c:9b:0d:2d:31:33:2f:17:8b:07:85:29:46:2e: d8:c2:1f:54:b6:a5:5d:07:77:22:30:d2:1c:d0:be: 9b:86:b8:b1:c7:7f:08:e8:0b:da:72:2b:07:dc:27: 9f:a3:2b:3d:b2:34:2b:e1:02:e7:a5:13:00:11:5e: 59:50:6b:0f:01:27:c1:a8:9b:48:76:a9:62:ce:58: 8b:d6:e5:a9:4f:d5:50:0a:cf:d1:cb:d8:37:ae:31: 24:ae:34:d4:23:97:13:be:d5:0b:ed:ca:d4:f5:67: 0e:ed:44:24:d4:49:39:07:ba:ea:53:17:a0:3f:24: af:4c:23:9f:51:95:82:c5:2d:20:cb:e3:6c:03:fc: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FC:A8:D5:61:0B:3A:6B:74:9F:64:25:B2:78:3E:2A:19:69:5E:3F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3138392e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.189.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:11:46:3c:1d:36:8e:7b:73:6e:54:e3:09:f4:dc:1b:31:15: 27:60:d1:e2:d0:0a:a8:b0:8b:cc:21:79:12:08:ca:9d:5b:1e: d7:31:52:0e:bf:35:18:d6:33:48:63:12:08:2d:9d:01:0d:03: ba:8f:08:c1:4f:b6:03:23:1e:eb:4a:57:aa:6e:b3:7b:23:87: ea:c0:73:9e:0f:8f:ce:d5:91:18:34:a0:17:0a:ce:e0:24:43: 9b:a6:bd:6c:96:17:e9:f4:0f:d6:13:7d:4c:b7:df:7d:fc:fd: 40:9e:2c:74:ca:1d:ee:de:57:50:99:e3:03:83:9e:51:b2:d1: 17:d4:5c:a7:37:27:6d:7f:65:89:5b:de:b6:0a:3c:c5:e9:c3: 71:68:10:9c:05:c3:4e:61:8e:07:8e:77:cf:3d:20:a5:bf:4e: 7e:55:e9:f3:44:26:fa:c0:d5:f0:56:1a:9b:e8:b8:4e:d8:5b: 1c:80:65:72:ee:b0:da:85:cf:d9:0d:96:a8:65:b7:d1:f5:10: 04:2e:a3:f0:6b:61:cb:98:c5:48:9c:e8:40:ec:b1:5b:81:42: b5:e1:58:6e:87:1d:f2:9f:2c:f2:22:9e:0a:cb:8b:22:1d:d6: b6:07:0e:c7:3c:91:14:df:d8:a1:f3:47:36:1d:d6:3c:03:67: 6d:6e:49:ac -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUQKy6jqDSv2nxbe58wUvP4aCJ4+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDFaFw0yNjExMjcxMTQ5NDFaMDMxMTAvBgNV BAMTKDY5RkNBOEQ1NjEwQjNBNkI3NDlGNjQyNUIyNzgzRTJBMTk2OTVFM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgAbw0Mwm4ESU3QZAyHkkQD4bc 2s35rC2ti/DsmLrYNo1nZOL7EUm3PzszDfbmNEJaoMSwxPMFNWZDEy9zC7Ag50aC wvMtDg7QYPBe2dh6pDyCrEK2ifXNXzXHlDlGT61NoH29o0fSc4tK0o3dFNT1PWHJ xoHSEo58mw0tMTMvF4sHhSlGLtjCH1S2pV0HdyIw0hzQvpuGuLHHfwjoC9pyKwfc J5+jKz2yNCvhAuelEwARXllQaw8BJ8Gom0h2qWLOWIvW5alP1VAKz9HL2DeuMSSu NNQjlxO+1QvtytT1Zw7tRCTUSTkHuupTF6A/JK9MI59RlYLFLSDL42wD/LXFAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUafyo1WELOmt0n2Qlsng+KhlpXj8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM4MmUz MTM4MzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALVi9MA0GCSqGSIb3DQEBCwUAA4IBAQBcEUY8HTaOe3NuVOMJ9NwbMRUnYNHi 0AqosIvMIXkSCMqdWx7XMVIOvzUY1jNIYxIILZ0BDQO6jwjBT7YDIx7rSleqbrN7 I4fqwHOeD4/O1ZEYNKAXCs7gJEObpr1slhfp9A/WE31Mt999/P1Anix0yh3u3ldQ meMDg55RstEX1FynNydtf2WJW962CjzF6cNxaBCcBcNOYY4HjnfPPSClv05+Venz RCb6wNXwVhqb6LhO2FscgGVy7rDahc/ZDZaoZbfR9RAELqPwa2HLmMVInOhA7LFb gUK14Vhuhx3ynyzyIp4Ky4siHda2Bw7HPJEU39ih80c2HdY8A2dtbkms -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:53 2025 by rpki-client