This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa File: 34352e3132382e3136302e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: G5/fBG5CapEMsiELJxrJJVjKV34uEJTp19nWLbxhDTc= Subject key identifier: 4A:96:51:E2:71:21:9E:54:66:A4:4C:BB:71:FA:08:17:C5:75:C1:4A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 29576559AB229E7F60617B4F7EBE89B769693022 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:09 +0000 ROA not before: Fri 21 Nov 2025 15:44:09 +0000 ROA not after: Fri 20 Nov 2026 15:49:09 +0000 asID: 47583 IP address blocks: 45.128.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:57:65:59:ab:22:9e:7f:60:61:7b:4f:7e:be:89:b7:69:69:30:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:09 2025 GMT Not After : Nov 20 15:49:09 2026 GMT Subject: CN=4A9651E271219E5466A44CBB71FA0817C575C14A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:70:99:cd:0c:e5:fa:24:63:4c:2c:cc:48:2a: d8:d3:77:48:2f:a7:b3:62:b0:5e:49:27:b8:ea:1c: 72:0b:ce:22:b5:af:04:4c:06:ad:9c:98:d5:e0:51: 99:89:dc:c6:c9:4a:da:ec:60:5b:94:7b:6e:cd:11: fe:e3:28:d2:fc:da:f0:83:6e:7e:4e:56:9c:67:ed: 5b:81:3e:f2:41:02:3e:b8:dc:ea:11:e3:89:c6:8d: 52:6b:00:e3:b4:a1:07:76:22:e3:6b:b2:8d:bf:ce: c3:66:e2:b6:7f:4e:fb:15:c2:37:aa:9f:2a:e9:be: f4:6b:bf:ea:60:43:1d:88:37:fb:ac:10:3d:83:20: dc:75:c5:71:0a:70:2d:ee:db:5f:86:19:6f:58:08: f6:ed:f0:76:5b:bd:66:7a:4b:cc:8b:b8:55:65:0d: 32:87:9c:e1:7d:ee:c9:92:99:5c:bc:c6:bb:4b:de: 81:e0:59:5b:72:c6:b6:a4:4d:74:65:32:91:bb:a6: 83:52:10:f3:e6:46:e4:97:1e:49:45:b4:f7:30:ea: 13:65:46:ca:4a:67:6a:59:02:af:dd:e4:c5:e7:4a: 5b:ad:d0:2b:a7:46:cd:2b:7f:29:97:f3:26:91:e8: 70:c0:0d:52:5a:bd:16:cb:f4:f5:d6:10:20:10:c1: 56:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:96:51:E2:71:21:9E:54:66:A4:4C:BB:71:FA:08:17:C5:75:C1:4A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132382e3136302e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.128.160.0/22 Signature Algorithm: sha256WithRSAEncryption 62:70:ae:12:d2:ee:5a:cf:99:6f:16:2c:87:8c:93:77:e3:9c: 91:5f:9a:2c:d6:63:b3:a2:bd:e9:6f:ea:6d:ca:82:54:e1:d6: 2a:79:02:5c:2b:1f:c2:ab:95:cf:ff:c9:59:f9:19:8c:57:d8: 4a:c8:96:45:78:ff:ee:77:a0:48:4f:66:4d:7f:68:14:80:3d: 72:b2:3c:cc:ff:10:30:56:10:d2:d8:13:2f:71:50:11:fe:f5: b3:84:86:64:d4:57:8a:57:88:1d:2a:cb:f4:87:14:44:9a:5a: 4f:e2:53:e1:89:ae:12:8f:0f:47:a9:df:a0:96:e6:06:87:d1: 44:ba:83:f5:58:d6:c5:a3:97:78:5a:86:0d:76:3b:7d:95:cf: 08:56:14:1a:71:e1:f6:df:4c:81:58:9a:6f:9d:22:ea:b4:e7: 08:34:a2:3e:91:06:53:6a:5e:4f:d8:a0:4a:82:2a:35:42:94: 21:5e:f1:ba:96:fc:e7:ee:47:80:ad:2a:55:e9:cc:cc:c4:b6: 91:29:42:da:a5:9a:61:dd:b8:28:1a:a5:c1:c8:7f:d8:bd:0a: 27:7b:ab:7b:1f:e7:d2:a1:4a:52:44:c3:76:8d:bd:91:56:e1: 8b:01:80:42:25:03:c1:84:96:c2:77:16:7d:d3:14:b0:71:85: 07:89:a4:7d -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUKVdlWasinn9gYXtPfr6Jt2lpMCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDlaFw0yNjExMjAxNTQ5MDlaMDMxMTAvBgNV BAMTKDRBOTY1MUUyNzEyMTlFNTQ2NkE0NENCQjcxRkEwODE3QzU3NUMxNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChcJnNDOX6JGNMLMxIKtjTd0gv p7NisF5JJ7jqHHILziK1rwRMBq2cmNXgUZmJ3MbJStrsYFuUe27NEf7jKNL82vCD bn5OVpxn7VuBPvJBAj643OoR44nGjVJrAOO0oQd2IuNrso2/zsNm4rZ/TvsVwjeq nyrpvvRrv+pgQx2IN/usED2DINx1xXEKcC3u21+GGW9YCPbt8HZbvWZ6S8yLuFVl DTKHnOF97smSmVy8xrtL3oHgWVtyxrakTXRlMpG7poNSEPPmRuSXHklFtPcw6hNl RspKZ2pZAq/d5MXnSlut0CunRs0rfymX8yaR6HDADVJavRbL9PXWECAQwVY3AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUSpZR4nEhnlRmpEy7cfoIF8V1wUowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzgy ZTMxMzYzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM0MzczNTM4MzMucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAItgKAwDQYJKoZIhvcNAQELBQADggEBAGJwrhLS7lrPmW8WLIeMk3fjnJFf mizWY7Oivelv6m3KglTh1ip5AlwrH8Krlc//yVn5GYxX2ErIlkV4/+53oEhPZk1/ aBSAPXKyPMz/EDBWENLYEy9xUBH+9bOEhmTUV4pXiB0qy/SHFESaWk/iU+GJrhKP D0ep36CW5gaH0US6g/VY1sWjl3hahg12O32VzwhWFBpx4fbfTIFYmm+dIuq05wg0 oj6RBlNqXk/YoEqCKjVClCFe8bqW/OfuR4CtKlXpzMzEtpEpQtqlmmHduCgapcHI f9i9Cid7q3sf59KhSlJEw3aNvZFW4YsBgEIlA8GElsJ3Fn3TFLBxhQeJpH0= -----END CERTIFICATE-----Generated at Fri Dec 5 18:58:54 2025 by rpki-client