This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa File: 34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: nTdUrJ7NRXHqvZK30BWxKJ/mivEsD+WaZskpW7issHs= Subject key identifier: AC:F3:52:12:F2:F5:D5:F4:93:F6:40:67:1C:1D:C7:23:FF:95:DC:5F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0DAF1F863B22E4FAC83E1FBD11867872F8CA91EC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 147049 IP address blocks: 45.134.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:af:1f:86:3b:22:e4:fa:c8:3e:1f:bd:11:86:78:72:f8:ca:91:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=ACF35212F2F5D5F493F640671C1DC723FF95DC5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a5:82:3a:22:67:d4:2f:c4:6b:ba:fe:9d:61: bc:69:7c:d3:30:29:b2:b5:1f:9b:ee:3c:98:d9:3f: ac:7f:f5:6b:ca:d0:7a:2e:f6:ad:97:d4:15:19:75: 55:0a:a6:d9:b3:ac:27:64:59:00:54:b0:22:01:a1: d3:21:bd:c6:5d:5f:25:95:a8:92:01:5a:b5:46:c8: 22:e3:29:b9:ca:ef:e3:b3:ba:ca:ec:56:04:bb:24: fd:bc:1a:03:f8:d1:d7:56:ea:4c:24:3a:fb:c8:43: b3:1f:be:38:41:52:aa:ac:36:21:44:90:f3:96:33: 9b:36:f1:f4:71:50:e2:b2:ec:a6:56:00:3d:5a:aa: e5:32:9e:7f:97:85:d4:ae:5a:3b:da:81:8b:4e:d0: f5:4c:0e:80:5e:a2:6e:71:d7:21:35:74:16:2f:a1: 8c:48:cb:4d:b9:5c:61:22:e4:5e:9f:2f:1c:e1:bd: 32:08:44:00:13:ad:66:8c:9a:3c:1a:e5:63:5b:72: 93:20:6f:32:72:6e:72:f9:88:da:e0:3a:0a:9f:f1: 5a:1c:07:08:20:80:db:50:47:2b:1b:d6:7c:17:d5: b7:e2:a7:6e:de:cf:c0:88:32:18:37:1a:fc:2d:50: ec:e1:5a:5f:75:3c:15:b4:b1:03:ea:40:2d:be:a3: 52:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F3:52:12:F2:F5:D5:F4:93:F6:40:67:1C:1D:C7:23:FF:95:DC:5F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133342e3232342e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.224.0/24 Signature Algorithm: sha256WithRSAEncryption a7:de:0e:4a:2a:d8:66:3c:19:3d:92:51:f1:95:a8:4a:3e:ed: 05:10:29:86:73:ed:e5:a7:3e:78:68:06:f4:3a:d9:ae:91:61: 37:cc:f5:d3:0b:41:05:d5:c5:f0:06:42:c8:b8:31:5e:b8:bb: d7:9a:8b:30:42:50:b0:01:5b:91:74:82:06:84:94:f3:44:dc: bd:63:4c:bb:3d:3d:e8:c0:96:47:9e:17:1f:7c:80:b0:b7:03: b5:77:41:7e:25:e5:57:a5:9e:ed:d8:f3:79:13:e5:84:df:d7: 9b:33:ab:da:cd:8e:b0:e2:93:0e:22:15:75:24:fd:da:1f:ff: 65:33:b3:91:43:b8:10:9a:05:aa:c5:aa:c3:bf:e6:fa:da:cb: 57:fd:d3:86:67:8e:9c:a7:b5:9f:fe:6a:3f:a2:2f:94:8d:df: 51:3e:1a:ee:d1:45:8e:b9:ad:c2:7f:bd:ce:10:14:d1:30:e1: 02:e8:f9:47:e3:ac:9d:a8:8f:36:7b:2b:dc:e9:51:95:e6:00: 19:be:7a:5d:32:a3:8e:66:03:c5:d3:e0:ac:3b:29:ca:71:37: 30:3d:20:fa:13:23:6a:42:d6:a7:d9:72:fa:7e:e2:fa:6c:a6: d2:ab:c8:48:58:87:20:01:37:0b:87:90:49:dd:25:a2:15:76: 7f:47:37:53 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgIUDa8fhjsi5PrIPh+9EYZ4cvjKkewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKEFDRjM1MjEyRjJGNUQ1RjQ5M0Y2NDA2NzFDMURDNzIzRkY5NURDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjpYI6ImfUL8Rruv6dYbxpfNMw KbK1H5vuPJjZP6x/9WvK0Hou9q2X1BUZdVUKptmzrCdkWQBUsCIBodMhvcZdXyWV qJIBWrVGyCLjKbnK7+OzusrsVgS7JP28GgP40ddW6kwkOvvIQ7MfvjhBUqqsNiFE kPOWM5s28fRxUOKy7KZWAD1aquUynn+XhdSuWjvagYtO0PVMDoBeom5x1yE1dBYv oYxIy025XGEi5F6fLxzhvTIIRAATrWaMmjwa5WNbcpMgbzJybnL5iNrgOgqf8Voc BwgggNtQRysb1nwX1bfip27ez8CIMhg3GvwtUOzhWl91PBW0sQPqQC2+o1LhAgMB AAGjggJEMIICQDAdBgNVHQ4EFgQUrPNSEvL11fST9kBnHB3HI/+V3F8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzQy ZTMyMzIzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNzMwMzQzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAC2G4DANBgkqhkiG9w0BAQsFAAOCAQEAp94OSirYZjwZPZJR8ZWoSj7t BRAphnPt5ac+eGgG9DrZrpFhN8z10wtBBdXF8AZCyLgxXri715qLMEJQsAFbkXSC BoSU80TcvWNMuz096MCWR54XH3yAsLcDtXdBfiXlV6We7djzeRPlhN/XmzOr2s2O sOKTDiIVdST92h//ZTOzkUO4EJoFqsWqw7/m+trLV/3ThmeOnKe1n/5qP6IvlI3f UT4a7tFFjrmtwn+9zhAU0TDhAuj5R+OsnaiPNnsr3OlRleYAGb56XTKjjmYDxdPg rDspynE3MD0g+hMjakLWp9ly+n7i+mym0qvISFiHIAE3C4eQSd0lohV2f0c3Uw== -----END CERTIFICATE-----Generated at Fri Dec 5 11:35:57 2025 by rpki-client