This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32302e302f32332d3233203d3e203239303636.roa File: 34352e3134312e32302e302f32332d3233203d3e203239303636.roa (raw, json) Hash identifier: ysIxRryG1sc3klI2UNm2q5uZkRdrKuaE35mZXOe8jZU= Subject key identifier: 70:E4:F0:A7:73:A0:EB:F7:AC:8D:B9:F4:9C:91:52:3C:09:FE:9D:51 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4AE42622F8E293B90EBE4D16B86FF5074F6B610E Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32302e302f32332d3233203d3e203239303636.roa Signing time: Fri 28 Nov 2025 11:49:16 +0000 ROA not before: Fri 28 Nov 2025 11:44:16 +0000 ROA not after: Fri 27 Nov 2026 11:49:16 +0000 asID: 29066 IP address blocks: 45.141.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e4:26:22:f8:e2:93:b9:0e:be:4d:16:b8:6f:f5:07:4f:6b:61:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:16 2025 GMT Not After : Nov 27 11:49:16 2026 GMT Subject: CN=70E4F0A773A0EBF7AC8DB9F49C91523C09FE9D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d9:c8:69:e3:15:6a:7a:b8:38:8b:0f:62:fd: cc:50:10:16:69:7e:27:27:3d:12:88:44:2f:ee:66: 67:1c:d7:fc:75:ca:ff:d1:23:02:0b:e4:b8:b4:d0: 12:96:11:1c:34:88:35:30:e8:53:b3:88:51:1d:82: e4:c0:45:33:14:4a:7f:d8:52:9e:c7:1d:01:c3:f9: e0:7e:95:61:46:a5:60:74:21:e5:5a:c8:e1:58:43: 16:df:ec:09:f9:52:76:c2:e5:60:61:35:b0:45:cd: 6a:c6:9b:c9:f9:a1:bf:c3:28:2c:c4:04:9c:c7:6b: 3c:bf:5b:b4:e6:d3:c5:86:23:4f:e6:e5:73:33:ef: 17:ec:2a:9f:18:a8:f1:e2:21:8c:d3:94:cb:80:92: 1b:03:7d:97:fc:a5:10:f5:b4:c8:27:73:c3:26:a2: a9:fd:9f:77:1e:17:38:0e:90:91:37:90:49:74:e3: 81:15:b1:4d:d5:e7:0e:db:f0:3b:7a:87:f6:0a:db: f1:da:1c:e3:20:87:58:31:8f:b3:ad:65:db:df:20: e0:91:56:1e:27:86:e1:49:9a:f9:0a:1e:e7:96:a2: e4:e5:7c:9a:22:fa:fd:47:b6:4f:f9:dd:19:98:2c: a2:50:cf:47:ab:8f:38:7e:00:74:35:d0:fb:6c:04: 01:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:F0:A7:73:A0:EB:F7:AC:8D:B9:F4:9C:91:52:3C:09:FE:9D:51 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134312e32302e302f32332d3233203d3e203239303636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.20.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:bf:43:a3:da:66:45:b1:bc:20:74:a2:cb:90:82:f8:e5:d0: 92:1b:4a:a8:7a:6a:b0:b5:da:72:7f:a9:55:14:cf:2f:a1:51: 00:6a:12:a9:12:39:cd:cc:1a:22:e9:e8:4e:6d:7e:0b:a3:81: 16:09:84:c6:61:2f:c8:01:f6:04:24:5c:52:df:41:50:52:d1: b7:df:0a:a5:d7:88:57:fd:60:c9:2c:9e:d5:53:d5:62:28:f5: e8:1e:ab:3f:69:75:db:1a:43:65:bd:3e:b8:cc:59:40:ec:9d: 63:0f:f4:a0:9d:13:73:23:d5:21:16:68:22:bc:26:65:f0:c3: 11:91:ee:e8:20:86:8e:6b:9a:3f:54:35:a4:93:b8:3f:03:63: 11:26:55:65:14:f8:60:42:bc:63:45:28:7a:ad:df:3f:ab:3a: 7c:98:1e:a4:04:cd:27:78:6a:66:46:dd:c9:d2:63:93:32:b5: ed:a9:50:fe:e0:17:13:a7:e8:9d:ae:3e:88:8f:c2:21:6d:42: cf:e7:83:bc:3a:bf:f1:a8:5d:7c:31:e2:b2:9f:d2:93:cd:68: 25:a7:f7:e6:d0:a7:31:32:8d:86:6c:18:f4:8d:37:b3:cc:32: 3b:94:0d:c8:2a:79:55:ea:37:bb:2f:e4:94:0f:b7:80:61:bb: ba:38:96:56 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUSuQmIvjik7kOvk0WuG/1B09rYQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTZaFw0yNjExMjcxMTQ5MTZaMDMxMTAvBgNV BAMTKDcwRTRGMEE3NzNBMEVCRjdBQzhEQjlGNDlDOTE1MjNDMDlGRTlENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2chp4xVqerg4iw9i/cxQEBZp ficnPRKIRC/uZmcc1/x1yv/RIwIL5Li00BKWERw0iDUw6FOziFEdguTARTMUSn/Y Up7HHQHD+eB+lWFGpWB0IeVayOFYQxbf7An5UnbC5WBhNbBFzWrGm8n5ob/DKCzE BJzHazy/W7Tm08WGI0/m5XMz7xfsKp8YqPHiIYzTlMuAkhsDfZf8pRD1tMgnc8Mm oqn9n3ceFzgOkJE3kEl044EVsU3V5w7b8Dt6h/YK2/HaHOMgh1gxj7OtZdvfIOCR Vh4nhuFJmvkKHueWouTlfJoi+v1Htk/53RmYLKJQz0erjzh+AHQ10PtsBAHpAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUcOTwp3Og6/esjbn0nJFSPAn+nVEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzEy ZTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM5MzAzNjM2LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLY0UMA0GCSqGSIb3DQEBCwUAA4IBAQAev0Oj2mZFsbwgdKLLkIL45dCSG0qo emqwtdpyf6lVFM8voVEAahKpEjnNzBoi6ehObX4Lo4EWCYTGYS/IAfYEJFxS30FQ UtG33wql14hX/WDJLJ7VU9ViKPXoHqs/aXXbGkNlvT64zFlA7J1jD/SgnRNzI9Uh FmgivCZl8MMRke7oIIaOa5o/VDWkk7g/A2MRJlVlFPhgQrxjRSh6rd8/qzp8mB6k BM0neGpmRt3J0mOTMrXtqVD+4BcTp+idrj6Ij8IhbULP54O8Or/xqF18MeKyn9KT zWglp/fm0KcxMo2GbBj0jTezzDI7lA3IKnlV6je7L+SUD7eAYbu6OJZW -----END CERTIFICATE-----Generated at Fri Dec 5 07:05:31 2025 by rpki-client