This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3139312e302f32342d3332203d3e203531313637.roa File: 34352e38382e3139312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: xqAa+ezx98oMyyC2dwsepm0oKH9ZzrXQScmpiLXE90I= Subject key identifier: F6:4C:4A:7C:7B:92:9B:5F:BA:B1:BE:94:71:14:67:F8:13:22:AF:CE Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5D525D77BE13B95BCF1A46C9866BB00AEFB4140E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3139312e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:37 +0000 ROA not before: Fri 28 Nov 2025 11:44:37 +0000 ROA not after: Fri 27 Nov 2026 11:49:37 +0000 asID: 51167 IP address blocks: 45.88.191.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:52:5d:77:be:13:b9:5b:cf:1a:46:c9:86:6b:b0:0a:ef:b4:14:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:37 2025 GMT Not After : Nov 27 11:49:37 2026 GMT Subject: CN=F64C4A7C7B929B5FBAB1BE94711467F81322AFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:6c:1c:c7:d3:40:5c:f3:64:b5:f2:bc:43: 0c:ad:85:c5:39:2f:09:21:20:c6:45:44:35:70:11: d9:d0:f3:cd:ca:65:8d:a5:17:54:20:12:a1:27:93: 99:7e:ba:de:7e:8b:fd:43:32:47:b4:52:71:6a:7f: c0:9a:d1:65:1c:38:cb:11:f9:ca:18:1b:81:2c:61: 77:81:f0:81:fc:3a:96:20:ab:2a:75:21:bb:7f:8a: 0a:1c:57:2f:47:a4:2a:0a:e2:eb:9a:8c:53:55:97: 5d:fc:03:b3:ef:3c:94:0d:bb:f2:9f:52:39:f4:59: ac:15:c4:f0:56:d4:f6:9b:4f:7e:64:b0:1c:3d:4b: 72:e4:29:ff:36:7e:3a:5e:48:15:73:b9:aa:c8:4d: fd:14:3a:df:80:43:ff:0e:a4:4a:b7:f6:99:3a:4a: 22:d4:83:b4:98:41:18:d9:de:94:23:d6:47:25:ab: fd:1f:2c:f9:11:55:c7:6d:85:1f:58:17:73:13:61: 2c:24:3d:61:21:40:90:44:c3:cb:07:95:d8:ac:40: 35:5a:d5:f6:ea:92:88:21:15:43:19:2a:72:b4:9d: b2:36:62:d9:fc:d7:50:91:db:df:53:12:04:05:e1: b5:28:07:24:a6:90:ae:6f:fa:27:93:88:45:74:5a: be:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4C:4A:7C:7B:92:9B:5F:BA:B1:BE:94:71:14:67:F8:13:22:AF:CE X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38382e3139312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.191.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ec:d8:56:6b:15:dd:83:8a:83:6d:f4:63:3b:a4:19:d5:be: d0:b4:1e:e5:64:43:85:6f:7b:73:e5:b0:f4:64:b4:39:17:2d: 92:ab:e6:64:eb:87:cf:c9:0d:3e:33:34:a8:03:1b:f6:a3:39: 95:a1:4b:d3:45:e6:a5:6e:f0:6d:23:46:8e:05:5c:b8:a7:37: c6:0a:93:9b:e3:2b:aa:75:c7:60:6b:6f:24:a7:7f:f0:8b:e7: ad:04:84:8c:75:1c:e1:de:a0:de:a5:f9:92:2f:f5:99:eb:ac: 88:8a:14:e3:47:d4:41:87:6b:c6:62:41:46:cb:70:30:c2:c6: a9:d6:60:e7:6b:d2:ca:b0:9e:6d:47:b8:89:2c:9e:e8:24:af: 7d:7f:3b:b1:6b:d7:10:65:87:82:5f:09:56:dd:12:37:b2:ab: 08:05:f5:ae:08:7e:9d:c1:51:a2:ae:51:7b:5a:56:8f:8d:cf: 89:12:c3:01:70:2b:20:05:3d:27:58:bf:94:3c:f0:46:a6:97: fb:ea:9a:37:d6:24:1a:6a:fd:db:fb:55:b9:60:1c:99:65:66: f5:b3:e2:70:a4:be:f9:4b:88:0f:96:b6:12:8e:df:bb:69:a6: e8:1d:ab:9d:ba:31:fe:12:51:76:cf:23:00:69:c1:5d:2c:ff: 28:09:0f:ca -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUXVJdd74TuVvPGkbJhmuwCu+0FA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzdaFw0yNjExMjcxMTQ5MzdaMDMxMTAvBgNV BAMTKEY2NEM0QTdDN0I5MjlCNUZCQUIxQkU5NDcxMTQ2N0Y4MTMyMkFGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3mGwcx9NAXPNktfK8QwythcU5 LwkhIMZFRDVwEdnQ883KZY2lF1QgEqEnk5l+ut5+i/1DMke0UnFqf8Ca0WUcOMsR +coYG4EsYXeB8IH8OpYgqyp1Ibt/igocVy9HpCoK4uuajFNVl138A7PvPJQNu/Kf Ujn0WawVxPBW1PabT35ksBw9S3LkKf82fjpeSBVzuarITf0UOt+AQ/8OpEq39pk6 SiLUg7SYQRjZ3pQj1kclq/0fLPkRVcdthR9YF3MTYSwkPWEhQJBEw8sHldisQDVa 1fbqkoghFUMZKnK0nbI2Ytn811CR299TEgQF4bUoBySmkK5v+ieTiEV0Wr7jAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU9kxKfHuSm1+6sb6UcRRn+BMir84wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM4MmUz MTM5MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALVi/MA0GCSqGSIb3DQEBCwUAA4IBAQB67NhWaxXdg4qDbfRjO6QZ1b7QtB7l ZEOFb3tz5bD0ZLQ5Fy2Sq+Zk64fPyQ0+MzSoAxv2ozmVoUvTRealbvBtI0aOBVy4 pzfGCpOb4yuqdcdga28kp3/wi+etBISMdRzh3qDepfmSL/WZ66yIihTjR9RBh2vG YkFGy3Awwsap1mDna9LKsJ5tR7iJLJ7oJK99fzuxa9cQZYeCXwlW3RI3sqsIBfWu CH6dwVGirlF7WlaPjc+JEsMBcCsgBT0nWL+UPPBGppf76po31iQaav3b+1W5YByZ ZWb1s+JwpL75S4gPlrYSjt+7aaboHaudujH+ElF2zyMAacFdLP8oCQ/K -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:53 2025 by rpki-client