This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232312e302f32342d3234203d3e20323034313730.roa File: 34352e39302e3232312e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: dKy4ziQ3ZeauQv09tBEpnTjEKsD8nYvUcPKhTeJmT78= Subject key identifier: 17:2E:32:43:A1:06:88:B0:EB:2F:14:3D:BB:89:63:59:0E:79:37:77 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2D6BCD27E73EA396B42C7B90CFEC4D16470C9F22 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232312e302f32342d3234203d3e20323034313730.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 204170 IP address blocks: 45.90.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:6b:cd:27:e7:3e:a3:96:b4:2c:7b:90:cf:ec:4d:16:47:0c:9f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=172E3243A10688B0EB2F143DBB8963590E793777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:01:5e:d3:08:97:ed:cd:63:da:45:d1:24:2c: 02:43:8f:c6:3d:d6:c1:6a:1f:4e:e7:51:cc:7f:d3: 6d:48:93:32:bc:b3:cc:b4:40:1b:f6:3d:c0:94:95: 52:05:18:bd:cc:60:6d:55:cd:95:f1:84:52:dd:bb: 5e:c5:52:82:de:4b:d9:a6:ac:98:57:3b:70:29:59: 41:65:e2:00:43:e7:db:ef:59:0d:63:aa:5f:85:07: 6b:75:9f:79:a9:80:2c:6c:c3:d1:2b:9f:33:46:20: c8:2b:f6:9f:2c:60:6d:88:eb:c3:0b:70:8e:04:3c: ab:eb:6d:88:e6:9e:44:75:8d:91:6b:22:ff:7e:86: e0:88:9d:1d:6a:93:ca:e8:fa:71:c5:9b:af:31:c4: c6:3c:c6:82:06:2e:d7:c6:5d:d1:c8:f9:0e:59:53: 3f:ec:00:44:e2:ae:2b:0c:4e:db:8d:3b:d0:d4:47: 32:b2:b3:63:ad:8c:f8:eb:27:d3:80:67:fb:8a:4f: cb:e0:e7:6e:b2:a4:df:72:a1:63:ff:f9:ba:32:67: 43:79:47:1d:d7:23:3f:db:c2:5c:fe:48:cd:28:75: 99:99:e5:77:b4:51:e5:5e:f4:8a:70:58:a0:aa:a1: 01:6d:62:2b:18:c4:1a:a2:99:5a:b7:95:32:e8:ac: 5c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2E:32:43:A1:06:88:B0:EB:2F:14:3D:BB:89:63:59:0E:79:37:77 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232312e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.221.0/24 Signature Algorithm: sha256WithRSAEncryption 40:18:14:b3:96:d3:ea:0b:3e:40:1e:46:0b:ed:bf:1a:a3:dd: 58:10:04:f6:23:30:d4:6d:84:eb:94:d8:e2:bb:b8:2b:d4:05: dc:28:5a:83:67:3d:73:08:a7:c9:a4:cd:0c:8b:4e:fc:0c:ee: 7d:50:21:30:f7:1e:59:be:ff:53:26:2e:8a:7c:f5:5b:5f:2e: ff:b0:a8:7e:af:c2:58:3a:32:82:d3:c7:4a:59:46:1a:79:bf: c9:57:48:2c:05:27:c5:59:43:c0:7f:ab:64:26:33:a3:9f:3b: 64:4b:c7:da:ad:9e:d9:c6:71:1a:b2:38:2c:f3:65:41:0c:e1: 85:15:a1:ab:c6:69:97:91:d6:ac:95:a0:06:b0:1f:f0:40:27: a0:b6:32:fc:64:83:8c:f3:68:ee:6d:1e:24:ad:c4:b9:ee:fa: b7:93:f0:33:c1:a1:c0:e7:fc:2b:4b:9c:7b:c2:17:61:a3:c1: 86:20:58:01:9b:a3:43:49:a8:08:0c:2b:6c:de:a6:45:ae:1d: ff:73:5e:27:ff:44:7d:1e:15:bc:3c:d1:e6:82:45:30:58:cb: 1b:e8:e6:c0:22:98:fd:a7:7e:54:d9:7d:6e:35:6e:cd:c9:b9: 08:b0:c4:d2:ed:78:bb:29:92:ba:2c:7e:12:57:28:2b:bd:55: 20:8a:1f:58 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIULWvNJ+c+o5a0LHuQz+xNFkcMnyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKDE3MkUzMjQzQTEwNjg4QjBFQjJGMTQzREJCODk2MzU5MEU3OTM3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeAV7TCJftzWPaRdEkLAJDj8Y9 1sFqH07nUcx/021IkzK8s8y0QBv2PcCUlVIFGL3MYG1VzZXxhFLdu17FUoLeS9mm rJhXO3ApWUFl4gBD59vvWQ1jql+FB2t1n3mpgCxsw9ErnzNGIMgr9p8sYG2I68ML cI4EPKvrbYjmnkR1jZFrIv9+huCInR1qk8ro+nHFm68xxMY8xoIGLtfGXdHI+Q5Z Uz/sAETirisMTtuNO9DURzKys2OtjPjrJ9OAZ/uKT8vg526ypN9yoWP/+boyZ0N5 Rx3XIz/bwlz+SM0odZmZ5Xe0UeVe9IpwWKCqoQFtYisYxBqimVq3lTLorFyTAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUFy4yQ6EGiLDrLxQ9u4ljWQ55N3cwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTMwMmUz MjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzQzMTM3MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtWt0wDQYJKoZIhvcNAQELBQADggEBAEAYFLOW0+oLPkAeRgvtvxqj3VgQ BPYjMNRthOuU2OK7uCvUBdwoWoNnPXMIp8mkzQyLTvwM7n1QITD3Hlm+/1MmLop8 9VtfLv+wqH6vwlg6MoLTx0pZRhp5v8lXSCwFJ8VZQ8B/q2QmM6OfO2RLx9qtntnG cRqyOCzzZUEM4YUVoavGaZeR1qyVoAawH/BAJ6C2Mvxkg4zzaO5tHiStxLnu+reT 8DPBocDn/CtLnHvCF2GjwYYgWAGbo0NJqAgMK2zepkWuHf9zXif/RH0eFbw80eaC RTBYyxvo5sAimP2nflTZfW41bs3JuQiwxNLteLspkrosfhJXKCu9VSCKH1g= -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:08 2025 by rpki-client