This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203630373831.roa File: 34352e36372e3232322e302f32342d3234203d3e203630373831.roa (raw, json) Hash identifier: WvVj+SwMn+bdWKsYJqSjB3nmAvwJ0s46S4VHUyZyk7A= Subject key identifier: FF:11:F0:99:59:7F:06:E6:6C:E4:7B:45:5B:B9:DA:54:EF:86:44:65 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 416D2A904F7492FEA3AADC4AAF3EC9A24C307E59 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203630373831.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 60781 IP address blocks: 45.67.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6d:2a:90:4f:74:92:fe:a3:aa:dc:4a:af:3e:c9:a2:4c:30:7e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=FF11F099597F06E66CE47B455BB9DA54EF864465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:99:68:f2:04:31:ab:19:c0:9d:af:19:5a: 32:7e:2c:56:e7:89:9e:a3:3e:9a:51:98:ef:bd:7d: 02:a9:d2:54:f7:a5:5d:98:a5:30:51:a3:0c:9b:aa: 47:51:50:2e:db:01:68:8d:77:29:a9:83:51:84:90: 4e:c4:95:b4:cc:e2:26:fa:a1:40:88:ac:8d:60:5a: b4:b0:ec:f4:1d:71:33:d5:03:fc:65:43:46:59:5e: 67:f2:19:41:6c:c6:95:58:db:40:75:c9:fe:49:02: 6a:4d:a1:d0:2c:06:22:4a:79:e9:b9:61:87:86:6b: c6:05:7a:0f:8a:9b:d6:59:1c:ea:64:2f:6c:bf:e4: 3d:09:20:50:df:83:f2:15:05:cb:09:70:02:6f:df: 5f:1c:d9:e2:8e:26:37:e3:d1:39:b0:fa:1e:bc:59: bc:38:29:19:d2:26:7f:65:0f:0a:e0:95:d1:29:4d: 03:21:65:9f:16:ea:d3:a1:bd:0e:d9:90:fc:a0:40: 45:9d:84:f7:b4:93:b2:b4:6b:5e:dc:04:3f:45:9c: fa:06:33:49:f0:18:23:70:2a:10:22:64:80:7a:34: e8:b5:e0:02:73:3d:90:78:cd:77:ea:d8:8f:7d:e4: f2:b9:9a:56:ff:52:10:29:c5:46:a3:af:a2:37:01: e5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:11:F0:99:59:7F:06:E6:6C:E4:7B:45:5B:B9:DA:54:EF:86:44:65 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203630373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.222.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:e5:dc:bc:ae:91:a4:c2:ec:da:1c:b7:16:b9:70:87:96:43: 9d:c4:4e:f2:42:88:c4:57:28:02:91:d5:01:8c:df:ce:33:7c: a5:74:5c:45:d0:ef:d4:d4:f0:07:e2:87:11:99:e8:87:17:a4: e6:37:cc:6d:b1:a9:c4:9e:c3:9e:c9:cc:0c:4e:6a:28:f2:2c: 54:f7:7c:07:d2:d5:66:a9:90:2c:1a:63:67:91:61:b0:e3:a7: 8e:25:93:d2:8f:ae:f6:c1:fc:2a:a5:c4:c3:fa:7e:bf:81:e0: 4b:2c:f5:49:34:7e:34:13:30:4c:77:7e:b0:a9:7f:0d:3b:a7: 8a:22:f4:85:29:8d:6d:c0:1f:62:b9:0e:b4:e3:cb:50:78:f4: c5:68:11:a9:b2:36:92:e1:2f:ae:0f:f5:d6:50:fc:31:f1:1d: fb:19:d1:6b:91:d1:c8:b0:f5:53:ef:bc:a4:76:65:14:7f:d8: 47:bd:34:f9:2b:4e:ca:8b:bb:eb:14:e9:86:f2:88:02:3e:5a: 7a:ad:59:02:f0:94:b0:26:4f:a6:e2:3d:f2:82:14:a0:50:e7: a0:f4:cd:1c:0a:c4:12:56:8f:37:52:49:28:87:6a:cc:d5:cb: e8:a6:8c:cc:30:5b:c8:4a:22:c2:ba:df:f1:77:57:8a:2e:ce: 24:cc:75:8a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUQW0qkE90kv6jqtxKrz7JokwwflkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKEZGMTFGMDk5NTk3RjA2RTY2Q0U0N0I0NTVCQjlEQTU0RUY4NjQ0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomJlo8gQxqxnAna8ZWjJ+LFbn iZ6jPppRmO+9fQKp0lT3pV2YpTBRowybqkdRUC7bAWiNdympg1GEkE7ElbTM4ib6 oUCIrI1gWrSw7PQdcTPVA/xlQ0ZZXmfyGUFsxpVY20B1yf5JAmpNodAsBiJKeem5 YYeGa8YFeg+Km9ZZHOpkL2y/5D0JIFDfg/IVBcsJcAJv318c2eKOJjfj0Tmw+h68 Wbw4KRnSJn9lDwrgldEpTQMhZZ8W6tOhvQ7ZkPygQEWdhPe0k7K0a17cBD9FnPoG M0nwGCNwKhAiZIB6NOi14AJzPZB4zXfq2I995PK5mlb/UhApxUajr6I3AeUHAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU/xHwmVl/BuZs5HtFW7naVO+GRGUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM3MmUz MjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMwMzczODMxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALUPeMA0GCSqGSIb3DQEBCwUAA4IBAQAO5dy8rpGkwuzaHLcWuXCHlkOdxE7y QojEVygCkdUBjN/OM3yldFxF0O/U1PAH4ocRmeiHF6TmN8xtsanEnsOeycwMTmoo 8ixU93wH0tVmqZAsGmNnkWGw46eOJZPSj672wfwqpcTD+n6/geBLLPVJNH40EzBM d36wqX8NO6eKIvSFKY1twB9iuQ6048tQePTFaBGpsjaS4S+uD/XWUPwx8R37GdFr kdHIsPVT77ykdmUUf9hHvTT5K07Ki7vrFOmG8ogCPlp6rVkC8JSwJk+m4j3yghSg UOeg9M0cCsQSVo83Ukkoh2rM1cvopozMMFvISiLCut/xd1eKLs4kzHWK -----END CERTIFICATE-----Generated at Fri Dec 5 09:31:09 2025 by rpki-client