This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230392e302f32342d3332203d3e203531313637.roa File: 34352e39342e3230392e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: k+XAqKc7bHCQqtkctZH0bqjwJpITZ5yx7OlgfFYR1XU= Subject key identifier: 3E:E9:AE:3F:01:B2:A7:ED:E0:E0:A3:1B:EF:2F:C9:1A:72:93:45:83 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 52EA3390388915A5713686987D00A35EA1CD6350 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230392e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:40 +0000 ROA not before: Fri 28 Nov 2025 11:44:40 +0000 ROA not after: Fri 27 Nov 2026 11:49:40 +0000 asID: 51167 IP address blocks: 45.94.209.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:ea:33:90:38:89:15:a5:71:36:86:98:7d:00:a3:5e:a1:cd:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:40 2025 GMT Not After : Nov 27 11:49:40 2026 GMT Subject: CN=3EE9AE3F01B2A7EDE0E0A31BEF2FC91A72934583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:4b:78:2b:63:04:65:dc:fa:8c:ee:98:c5:e4: 51:9f:55:ef:c9:33:81:05:a5:0c:3d:30:a2:c3:ec: 3c:a2:a3:ec:ae:cb:44:98:68:e6:ca:aa:23:6c:14: 10:ff:9b:b2:6c:21:fb:17:d0:ec:18:7b:00:5c:e3: 82:fe:78:d3:a6:3e:7e:eb:bc:42:dd:0f:6f:fa:f0: 89:da:e0:8c:1f:e7:6a:30:cd:67:b6:e0:39:3c:bf: 0e:23:22:10:2f:57:c2:c7:87:e0:e0:f9:fa:b3:72: 1e:ea:5b:dd:85:15:b0:14:9b:d4:ff:3a:b2:b2:5b: 82:2b:53:94:a3:c5:f0:3a:6e:5b:3d:57:36:ee:f5: d6:f4:45:d8:d9:8c:54:52:81:c5:c3:0c:52:30:d1: 6f:71:46:bf:5f:99:22:0f:f0:a3:d1:4a:1c:89:71: 46:64:ac:58:e9:c6:3f:4a:83:b2:45:26:a9:67:40: 55:2e:53:47:fd:a7:af:3e:44:c5:93:b3:21:82:e7: 96:36:18:b0:57:97:c7:3e:1c:9f:35:cf:68:cf:25: bf:62:92:96:64:46:39:7d:c0:a8:55:5e:df:9d:83: 64:c9:5e:e1:c1:07:02:7c:1d:1d:45:3e:90:30:d5: 1f:e1:77:a7:eb:7b:7f:2e:19:55:32:24:9a:c9:f7: 9d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E9:AE:3F:01:B2:A7:ED:E0:E0:A3:1B:EF:2F:C9:1A:72:93:45:83 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3230392e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.209.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ae:a6:cf:90:f3:2d:4c:ab:de:db:7c:44:f1:ff:db:3d:f3: 2e:82:29:84:43:bd:83:cb:ee:7f:ec:37:26:30:c4:9a:03:e9: 61:44:e3:50:93:0b:da:a5:58:48:75:18:92:78:93:dd:7a:55: 26:78:cc:e9:b2:67:74:83:8c:20:13:74:04:c2:08:a1:26:f8: 88:42:f0:19:a6:0e:d0:d2:68:16:20:86:c2:6f:8b:b1:79:7c: 46:ca:17:b2:01:de:9a:20:10:3b:ec:86:05:0e:80:10:f7:bf: da:dd:2e:14:17:94:e7:3d:60:d6:7a:df:ef:26:79:26:3d:9f: e4:e3:1e:93:83:12:a8:74:1a:29:4b:63:0e:5a:b9:e1:fc:24: f7:2c:2b:68:62:7c:fc:22:b4:20:ad:a8:c3:97:68:12:92:40: 13:cd:b5:b8:b8:40:f1:04:4b:13:24:b4:66:c1:4c:e8:00:20: 44:f1:36:f2:fa:54:5e:1e:47:f0:7e:81:08:c0:84:ed:7f:42: 09:8a:cc:fa:68:21:aa:04:47:37:52:45:9e:98:11:f8:fd:c3: ed:48:15:f7:e9:09:75:90:2a:0c:0a:bd:78:60:17:26:0e:9a: 1a:96:33:97:94:99:7f:37:98:28:fb:4d:d4:97:87:c6:f9:84: e7:78:8e:cb -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUUuozkDiJFaVxNoaYfQCjXqHNY1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDBaFw0yNjExMjcxMTQ5NDBaMDMxMTAvBgNV BAMTKDNFRTlBRTNGMDFCMkE3RURFMEUwQTMxQkVGMkZDOTFBNzI5MzQ1ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuS3grYwRl3PqM7pjF5FGfVe/J M4EFpQw9MKLD7Dyio+yuy0SYaObKqiNsFBD/m7JsIfsX0OwYewBc44L+eNOmPn7r vELdD2/68Ina4Iwf52owzWe24Dk8vw4jIhAvV8LHh+Dg+fqzch7qW92FFbAUm9T/ OrKyW4IrU5SjxfA6bls9Vzbu9db0RdjZjFRSgcXDDFIw0W9xRr9fmSIP8KPRShyJ cUZkrFjpxj9Kg7JFJqlnQFUuU0f9p68+RMWTsyGC55Y2GLBXl8c+HJ81z2jPJb9i kpZkRjl9wKhVXt+dg2TJXuHBBwJ8HR1FPpAw1R/hd6fre38uGVUyJJrJ951HAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUPumuPwGyp+3g4KMb7y/JGnKTRYMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTM0MmUz MjMwMzkyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALV7RMA0GCSqGSIb3DQEBCwUAA4IBAQBSrqbPkPMtTKve23xE8f/bPfMugimE Q72Dy+5/7DcmMMSaA+lhRONQkwvapVhIdRiSeJPdelUmeMzpsmd0g4wgE3QEwgih JviIQvAZpg7Q0mgWIIbCb4uxeXxGyheyAd6aIBA77IYFDoAQ97/a3S4UF5TnPWDW et/vJnkmPZ/k4x6TgxKodBopS2MOWrnh/CT3LCtoYnz8IrQgrajDl2gSkkATzbW4 uEDxBEsTJLRmwUzoACBE8Tby+lReHkfwfoEIwITtf0IJisz6aCGqBEc3UkWemBH4 /cPtSBX36Ql1kCoMCr14YBcmDpoaljOXlJl/N5go+03Ul4fG+YTneI7L -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:52 2025 by rpki-client