This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38302e302f32332d3234203d3e203437353833.roa File: 34352e3134332e38302e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: PAu446aygQsXMf+sp89QgU8VgFAaPjLWTIyr5B6o42o= Subject key identifier: D6:51:D7:3C:87:61:94:4F:67:C1:4C:CD:15:5D:D9:8F:65:80:5F:F1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 345BA5CEF3AC519AED42817F58EC66009704073A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38302e302f32332d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:11 +0000 ROA not before: Fri 21 Nov 2025 15:44:11 +0000 ROA not after: Fri 20 Nov 2026 15:49:11 +0000 asID: 47583 IP address blocks: 45.143.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:5b:a5:ce:f3:ac:51:9a:ed:42:81:7f:58:ec:66:00:97:04:07:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:11 2025 GMT Not After : Nov 20 15:49:11 2026 GMT Subject: CN=D651D73C8761944F67C14CCD155DD98F65805FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:c9:5c:6c:05:1e:38:a7:2a:9b:94:3a:64: 8f:44:1f:68:2d:6b:f2:74:37:2a:52:a6:2b:d6:bc: d1:c5:5f:1d:e5:af:21:e2:9a:86:95:74:5b:37:16: e2:bb:40:ea:9d:40:c1:23:16:6b:c9:3c:ab:66:cc: d6:cd:b7:a1:2c:94:42:d4:20:10:a4:69:3c:26:a7: 75:5d:09:06:83:db:36:f7:33:93:2d:2f:c4:90:84: 48:8f:d2:1a:61:dc:28:c5:a3:76:10:96:2b:9c:f6: 97:de:17:0c:57:25:4b:4e:64:f5:7f:7e:1d:55:21: 1c:af:c8:e0:18:46:9d:ec:ff:58:7b:41:92:a7:e3: e5:20:23:c2:2f:1d:2e:47:28:24:0d:96:f6:40:cc: 49:90:ef:0a:26:72:b1:96:33:92:26:b0:6b:c0:78: 53:f0:20:3f:19:68:bf:75:d2:78:40:2f:16:8a:b4: ae:bd:d5:06:7e:18:f9:89:56:5d:97:dc:b1:6f:f3: e8:41:79:93:82:0c:10:e0:86:17:ab:49:6f:cc:be: 13:81:5a:75:27:de:5b:e7:ae:75:51:78:d0:eb:43: 15:a6:d4:e2:f8:cd:22:21:ed:61:0c:79:66:c7:65: b1:7f:52:e8:09:f4:ec:04:b7:e9:03:0a:94:6e:b9: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:51:D7:3C:87:61:94:4F:67:C1:4C:CD:15:5D:D9:8F:65:80:5F:F1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3134332e38302e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.80.0/23 Signature Algorithm: sha256WithRSAEncryption 53:5c:8d:68:c6:f2:05:fc:cb:3d:77:94:34:7d:8f:fb:50:db: 67:88:4a:bc:19:64:9f:4d:b7:89:44:7a:41:98:d7:e9:23:6f: 0b:64:22:49:58:28:f0:91:72:81:2b:69:be:2b:be:8e:6f:11: f7:b9:f1:56:28:f1:9a:48:72:b1:05:f4:55:25:da:13:44:44: 35:86:2b:4e:1c:6b:91:d8:00:ef:ce:a8:95:d1:53:8a:f6:91: f4:a8:c0:cf:ae:8a:e8:ae:15:2f:f6:c0:a6:9a:0c:72:c6:fd: 14:41:5c:85:fe:bd:92:e9:fe:8b:c9:0e:59:55:bc:2f:ad:55: d9:fa:12:af:b5:bf:f6:bf:1c:a7:35:ca:43:1d:94:a3:1e:07: c6:6a:17:7a:0b:c6:05:79:bd:fd:31:8f:a1:f0:af:db:29:f9: c9:e1:3f:24:a0:6b:71:09:da:5b:a7:f0:3c:9c:2b:c0:01:df: 59:1e:89:32:65:5c:28:79:f9:13:96:be:5c:09:00:3d:e1:4c: bd:5c:23:6b:2e:6c:ac:b7:d2:33:b2:10:6a:fa:b7:98:8a:63: 73:87:e7:18:c2:19:63:84:e9:56:ed:cc:bc:c4:04:00:e2:f3: 27:95:b3:e6:0c:5b:ea:60:f6:35:18:b7:1d:01:44:5f:6b:c7: f3:db:27:a3 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUNFulzvOsUZrtQoF/WOxmAJcEBzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTFaFw0yNjExMjAxNTQ5MTFaMDMxMTAvBgNV BAMTKEQ2NTFENzNDODc2MTk0NEY2N0MxNENDRDE1NUREOThGNjU4MDVGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4TclcbAUeOKcqm5Q6ZI9EH2gt a/J0NypSpivWvNHFXx3lryHimoaVdFs3FuK7QOqdQMEjFmvJPKtmzNbNt6EslELU IBCkaTwmp3VdCQaD2zb3M5MtL8SQhEiP0hph3CjFo3YQliuc9pfeFwxXJUtOZPV/ fh1VIRyvyOAYRp3s/1h7QZKn4+UgI8IvHS5HKCQNlvZAzEmQ7womcrGWM5ImsGvA eFPwID8ZaL910nhALxaKtK691QZ+GPmJVl2X3LFv8+hBeZOCDBDghherSW/MvhOB WnUn3lvnrnVReNDrQxWm1OL4zSIh7WEMeWbHZbF/UugJ9OwEt+kDCpRuucHVAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU1lHXPIdhlE9nwUzNFV3Zj2WAX/EwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTM0MzMy ZTM4MzAyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLY9QMA0GCSqGSIb3DQEBCwUAA4IBAQBTXI1oxvIF/Ms9d5Q0fY/7UNtniEq8 GWSfTbeJRHpBmNfpI28LZCJJWCjwkXKBK2m+K76ObxH3ufFWKPGaSHKxBfRVJdoT REQ1hitOHGuR2ADvzqiV0VOK9pH0qMDPrororhUv9sCmmgxyxv0UQVyF/r2S6f6L yQ5ZVbwvrVXZ+hKvtb/2vxynNcpDHZSjHgfGahd6C8YFeb39MY+h8K/bKfnJ4T8k oGtxCdpbp/A8nCvAAd9ZHokyZVwoefkTlr5cCQA94Uy9XCNrLmyst9IzshBq+reY imNzh+cYwhljhOlW7cy8xAQA4vMnlbPmDFvqYPY1GLcdAURfa8fz2yej -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:40 2025 by rpki-client