This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231312e302f32342d3234203d3e203632323430.roa File: 34352e39342e3231312e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: PyAOdWWmj3GUDz/qMKR5/0ff4Nk7KMODjQS0snfNKCU= Subject key identifier: C0:E2:A0:D6:A6:AF:46:BD:3A:D5:63:B7:DA:2B:8C:48:1F:B0:BD:08 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7A613B6B82FE4B9ED38B771E7EEDA528AB0A535A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231312e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 62240 IP address blocks: 45.94.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:61:3b:6b:82:fe:4b:9e:d3:8b:77:1e:7e:ed:a5:28:ab:0a:53:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=C0E2A0D6A6AF46BD3AD563B7DA2B8C481FB0BD08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:14:df:68:97:1f:35:c7:84:4f:9e:e9:16: 02:ad:42:3a:e6:1d:0f:5f:46:4e:a7:1e:0a:30:48: 7a:16:93:67:f1:cc:99:26:69:a2:4a:13:03:0a:55: 90:7a:d7:2d:80:6a:d3:e3:38:1e:45:e4:e5:60:e8: 7a:87:6e:86:ea:51:8c:e0:af:80:a6:af:9d:bc:e0: cb:23:32:59:f5:94:dd:75:cb:50:d7:cb:b1:d5:ca: c1:28:34:bc:34:92:c2:76:5f:e8:f3:f0:f5:3e:67: a6:42:b3:e6:78:76:31:5b:a3:fe:82:99:8d:9b:8e: cd:c7:b2:17:7c:f9:20:d0:66:31:59:6d:de:f1:6d: ac:dd:f2:61:31:84:2b:2c:09:78:6e:04:06:a3:14: f8:d9:bd:a2:89:d7:27:5f:81:1b:de:ca:a6:ec:db: d3:f9:7a:29:42:ad:ef:31:a8:b3:b3:c0:3d:7f:3f: 03:d7:ec:5b:8c:e7:1e:8d:e0:82:b1:dd:4c:d7:85: 36:b6:b5:b8:7f:81:f3:7d:b1:cd:2c:4c:e8:1e:54: 9f:5d:de:4d:f1:e6:dd:16:d2:1c:55:73:7e:e7:54: ea:2a:6b:c3:3b:92:e4:5a:09:1b:8a:a2:29:0c:00: 99:1c:2d:97:36:8c:64:b7:6c:45:c3:d4:b9:d1:7f: 90:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E2:A0:D6:A6:AF:46:BD:3A:D5:63:B7:DA:2B:8C:48:1F:B0:BD:08 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231312e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.211.0/24 Signature Algorithm: sha256WithRSAEncryption 84:2f:1d:03:65:47:02:24:b3:c7:ba:06:9c:93:84:f3:38:44: f1:4e:8a:42:6a:8c:da:9c:35:53:0d:ab:80:65:23:4a:c1:30: 1b:0d:6d:cb:fd:d2:ae:09:81:b5:22:8b:a0:50:5e:d2:32:e0: 40:64:c7:39:ea:20:ce:48:8b:92:64:20:88:3d:4d:b8:27:73: fc:bc:b5:7f:45:29:10:7d:8a:91:65:ab:20:92:28:c8:25:91: 39:71:fe:e6:7e:fd:5a:6b:62:9f:ef:62:29:db:f6:f8:e1:3c: da:a5:8a:cb:71:81:f9:55:4d:66:93:90:e3:e7:3d:85:93:06: ac:44:ba:5e:25:3f:75:7d:b1:78:5c:e9:a4:ca:c7:87:e8:3c: d8:34:5d:b8:d0:fa:9b:64:02:2a:33:f7:3b:9b:ab:f6:58:e6: 51:0d:8f:e8:ea:5f:c3:2f:b2:a7:45:bc:b8:dc:42:d2:28:06: a1:4e:3d:d6:af:25:b4:f1:d1:8e:c9:a7:54:0d:c6:8e:18:98: c9:65:97:6d:44:a2:ea:e8:f1:4a:7d:85:25:9d:1c:37:20:3e: de:0c:c4:a9:eb:64:fe:2e:84:cb:26:7c:24:74:cd:44:f6:fc: 6f:61:be:d2:b0:7c:64:a3:ef:e5:42:24:f3:60:74:30:75:d6: b7:4b:d6:2e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUemE7a4L+S57Ti3cefu2lKKsKU1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKEMwRTJBMEQ2QTZBRjQ2QkQzQUQ1NjNCN0RBMkI4QzQ4MUZCMEJEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HRTfaJcfNceET57pFgKtQjrm HQ9fRk6nHgowSHoWk2fxzJkmaaJKEwMKVZB61y2AatPjOB5F5OVg6HqHbobqUYzg r4Cmr5284MsjMln1lN11y1DXy7HVysEoNLw0ksJ2X+jz8PU+Z6ZCs+Z4djFbo/6C mY2bjs3Hshd8+SDQZjFZbd7xbazd8mExhCssCXhuBAajFPjZvaKJ1ydfgRveyqbs 29P5eilCre8xqLOzwD1/PwPX7FuM5x6N4IKx3UzXhTa2tbh/gfN9sc0sTOgeVJ9d 3k3x5t0W0hxVc37nVOoqa8M7kuRaCRuKoikMAJkcLZc2jGS3bEXD1LnRf5B1AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUwOKg1qavRr061WO32iuMSB+wvQgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTM0MmUz MjMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzIzNDMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALV7TMA0GCSqGSIb3DQEBCwUAA4IBAQCELx0DZUcCJLPHugack4TzOETxTopC aozanDVTDauAZSNKwTAbDW3L/dKuCYG1IougUF7SMuBAZMc56iDOSIuSZCCIPU24 J3P8vLV/RSkQfYqRZasgkijIJZE5cf7mfv1aa2Kf72Ip2/b44TzapYrLcYH5VU1m k5Dj5z2FkwasRLpeJT91fbF4XOmkyseH6DzYNF240PqbZAIqM/c7m6v2WOZRDY/o 6l/DL7KnRby43ELSKAahTj3WryW08dGOyadUDcaOGJjJZZdtRKLq6PFKfYUlnRw3 ID7eDMSp62T+LoTLJnwkdM1E9vxvYb7SsHxko+/lQiTzYHQwdda3S9Yu -----END CERTIFICATE-----Generated at Sat Dec 6 12:59:38 2025 by rpki-client