This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa File: 34352e3132392e33332e302f32342d3234203d3e20323032343235.roa (raw, json) Hash identifier: g5cDjYUz4j0tgdXvGSGDjo2j3Dt4GX74tOm3S1JolY4= Subject key identifier: FE:50:AE:76:36:5F:A7:F3:41:70:E5:45:20:4F:A0:C8:A4:9D:0B:9B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 525A450C8FE178461E8EB1961EA321177B217BE2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 202425 IP address blocks: 45.129.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:5a:45:0c:8f:e1:78:46:1e:8e:b1:96:1e:a3:21:17:7b:21:7b:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=FE50AE76365FA7F34170E545204FA0C8A49D0B9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:aa:a4:04:c0:59:ce:01:9b:da:75:0b:66:a3: a9:91:a7:f8:34:1f:9f:b5:34:8e:b1:c6:4d:ee:19: 67:a8:97:8f:e5:54:fe:9d:d5:e1:34:32:c6:11:3a: 9a:fc:2e:70:7d:88:40:7c:da:0e:06:ff:7a:8d:f5: 82:90:ec:df:e4:02:ad:c3:30:df:e1:2f:98:e8:20: c6:4a:a4:52:e5:e4:f9:93:a5:83:75:ec:1d:4b:39: 01:6d:ea:c0:b8:75:b9:02:ab:ec:20:09:62:1d:d8: b2:8b:56:d9:50:ff:f0:29:77:0f:95:70:f8:bd:54: 9d:8b:0a:d3:e0:91:e1:a4:45:f7:cf:34:88:4f:9e: 93:84:60:4f:08:b8:fc:ec:9d:55:fe:e7:72:26:1e: 33:39:ba:dd:38:a6:c7:de:d1:10:cd:42:e2:87:18: 34:84:5a:53:9b:f5:7c:23:f3:56:77:d5:08:19:aa: 5a:3b:d0:73:60:a3:9e:ea:22:42:c6:d6:4a:fc:23: 83:d4:1e:3a:cf:1a:39:79:26:92:3e:a8:50:f0:77: 20:a5:20:7d:ad:4c:af:34:3c:dd:bd:62:5a:eb:66: 87:33:99:eb:0b:48:4b:ab:8e:b2:97:49:83:3c:01: b2:ea:5b:20:c7:4a:50:3a:f8:26:e8:97:69:ec:2d: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:50:AE:76:36:5F:A7:F3:41:70:E5:45:20:4F:A0:C8:A4:9D:0B:9B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3132392e33332e302f32342d3234203d3e20323032343235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.33.0/24 Signature Algorithm: sha256WithRSAEncryption 37:0c:43:a7:d0:d3:62:00:0e:d0:86:ef:c0:df:90:1e:5a:bf: 68:c2:1e:74:be:cb:38:b8:a0:57:fe:d8:34:3b:3f:5e:3a:0b: 94:7d:1c:1a:c2:f9:19:76:55:f8:87:2f:dd:fa:96:07:e4:1d: 10:a8:0e:4a:6a:c1:62:65:63:e1:ef:07:b3:dd:79:cb:d6:b1: e8:2e:48:e3:0d:93:a9:79:c4:f6:7c:30:8e:b3:31:06:df:d4: 08:64:f6:cd:36:20:70:bc:ad:6b:18:76:2c:21:93:2e:87:5b: e9:45:8d:06:82:be:45:8b:06:a8:eb:56:47:b4:ac:0b:3b:d8: 71:87:ec:a6:fa:62:29:db:48:59:b4:70:30:ad:f8:48:2a:5d: 1b:1c:6f:8c:99:cf:fd:48:fd:c1:e1:ff:14:62:81:1a:71:21: 47:76:99:71:cd:af:c2:29:63:68:a5:3d:8c:7b:71:a5:2c:e8: 04:c8:3f:6b:6a:10:a3:88:e3:6c:97:1b:1a:b3:41:3b:1a:55: c3:e2:4d:c0:db:fe:b2:b0:d0:33:40:11:41:eb:a5:32:b4:3a: 9e:63:27:1d:e0:09:7b:80:7f:6a:a8:74:83:12:63:44:fb:a1: 47:18:e3:bf:12:f5:e0:f3:42:ff:44:65:65:6f:7f:83:60:b8: 19:d0:7c:3a -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUUlpFDI/heEYejrGWHqMhF3she+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKEZFNTBBRTc2MzY1RkE3RjM0MTcwRTU0NTIwNEZBMEM4QTQ5RDBCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGqqQEwFnOAZvadQtmo6mRp/g0 H5+1NI6xxk3uGWeol4/lVP6d1eE0MsYROpr8LnB9iEB82g4G/3qN9YKQ7N/kAq3D MN/hL5joIMZKpFLl5PmTpYN17B1LOQFt6sC4dbkCq+wgCWId2LKLVtlQ//Apdw+V cPi9VJ2LCtPgkeGkRffPNIhPnpOEYE8IuPzsnVX+53ImHjM5ut04psfe0RDNQuKH GDSEWlOb9Xwj81Z31QgZqlo70HNgo57qIkLG1kr8I4PUHjrPGjl5JpI+qFDwdyCl IH2tTK80PN29YlrrZoczmesLSEurjrKXSYM8AbLqWyDHSlA6+Cbol2nsLb/HAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU/lCudjZfp/NBcOVFIE+gyKSdC5swHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMyMzky ZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzNDMyMzUucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgSEwDQYJKoZIhvcNAQELBQADggEBADcMQ6fQ02IADtCG78DfkB5av2jC HnS+yzi4oFf+2DQ7P146C5R9HBrC+Rl2VfiHL936lgfkHRCoDkpqwWJlY+HvB7Pd ecvWseguSOMNk6l5xPZ8MI6zMQbf1Ahk9s02IHC8rWsYdiwhky6HW+lFjQaCvkWL BqjrVke0rAs72HGH7Kb6YinbSFm0cDCt+EgqXRscb4yZz/1I/cHh/xRigRpxIUd2 mXHNr8IpY2ilPYx7caUs6ATIP2tqEKOI42yXGxqzQTsaVcPiTcDb/rKw0DNAEUHr pTK0Op5jJx3gCXuAf2qodIMSY0T7oUcY478S9eDzQv9EZWVvf4NguBnQfDo= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:43 2025 by rpki-client