This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3135322e302f32322d3234203d3e203437353833.roa File: 34352e38302e3135322e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: WWsZRAOMzwvcBKjX4UJN6NKiCMYfgjgy/jaRuQlM2Uw= Subject key identifier: 4F:FE:76:7F:C2:35:02:89:B2:F6:5D:A6:78:79:FE:46:BC:20:A7:DC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2C12B770A68D05E7C95DFCE000D4AE7796BD39A9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3135322e302f32322d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:48:57 +0000 ROA not before: Fri 21 Nov 2025 15:43:57 +0000 ROA not after: Fri 20 Nov 2026 15:48:57 +0000 asID: 47583 IP address blocks: 45.80.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:12:b7:70:a6:8d:05:e7:c9:5d:fc:e0:00:d4:ae:77:96:bd:39:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:57 2025 GMT Not After : Nov 20 15:48:57 2026 GMT Subject: CN=4FFE767FC2350289B2F65DA67879FE46BC20A7DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:36:c7:16:29:be:10:a5:70:37:8a:81:0e: 51:18:5f:be:d5:64:64:7d:8f:bd:af:31:fa:fb:03: 37:28:35:bb:98:f3:18:d1:a1:b8:cc:d5:96:32:29: 28:72:12:5f:0f:43:5e:14:ba:24:f9:25:5d:a3:ab: f3:1f:ac:f8:19:76:60:b5:41:68:68:6a:3e:19:58: a7:b8:18:06:92:02:98:41:d4:bc:2a:ff:70:c7:53: 8d:06:51:1e:c0:b8:5c:7d:8c:0e:d6:d9:97:12:b3: 85:bf:a8:59:34:36:2c:dc:f8:85:5e:56:f5:33:ec: da:36:21:ee:32:51:f6:60:a1:15:18:1e:f4:3a:e6: 58:e7:dc:39:88:b1:49:dc:bd:d9:6e:ec:00:7f:0e: 27:90:46:0b:b6:94:cf:51:1a:a3:72:3d:79:6e:7d: b2:26:17:49:e0:2a:35:de:5e:a6:9c:bb:c2:8c:28: 0e:92:44:83:3d:cf:8d:8c:47:7d:88:98:5b:a0:4c: 4e:a0:32:2b:03:67:c6:ec:dd:bc:6d:0a:7b:e3:b2: 89:b4:b5:fd:0e:2c:cf:b7:5f:d1:7a:09:de:07:c3: 82:66:d4:9e:fc:41:86:6c:34:dc:86:2c:ee:bc:da: 53:76:80:96:f6:bc:29:ab:1a:43:65:01:e6:22:83: fd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FE:76:7F:C2:35:02:89:B2:F6:5D:A6:78:79:FE:46:BC:20:A7:DC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38302e3135322e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.152.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:0c:ea:db:27:70:12:f1:9a:13:ac:3b:ed:e2:fe:3e:46:10: 4f:30:aa:16:36:87:a1:4a:2b:df:28:3c:48:63:c1:8d:ab:2c: 2a:ad:f5:9c:85:a7:d6:b4:f8:8d:e5:78:5b:d7:bc:3b:11:01: b7:29:2b:a1:6e:e1:e4:76:c5:e8:41:bb:d8:8c:ce:ea:be:c8: b2:ee:20:b8:06:80:4d:5d:68:bb:43:96:a7:6c:96:3b:c6:e1: 52:e3:54:e6:f7:da:e6:f3:5b:d9:14:ff:56:5a:8b:92:8b:b5: 36:fb:10:6b:2a:9b:5f:61:1a:d7:2a:49:c1:57:9a:ce:ff:47: 13:fb:23:63:2c:08:59:42:e3:f6:7d:98:42:07:20:64:76:08: 1f:4f:5c:d2:ca:c0:3a:00:bf:ca:d3:c3:3c:d8:24:4a:f8:c2: 2c:5b:fd:9e:25:c5:c1:6b:cf:a4:41:de:f8:5a:36:e7:2d:95: 92:01:b0:4f:a8:33:f6:8e:5d:c5:1a:4b:00:15:d8:8c:92:86: 42:5f:97:3a:b9:cf:f4:ee:6a:96:25:de:a9:14:4e:55:4f:e1: 25:29:5f:e7:d6:02:a1:41:05:57:0b:1a:b0:f7:c6:42:6e:9b: a1:f0:a4:00:c2:87:92:7d:f5:f0:84:fd:6c:71:9f:e1:7e:b4: 47:fd:d6:1e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIULBK3cKaNBefJXfzgANSud5a9OakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNTdaFw0yNjExMjAxNTQ4NTdaMDMxMTAvBgNV BAMTKDRGRkU3NjdGQzIzNTAyODlCMkY2NURBNjc4NzlGRTQ2QkMyMEE3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvTbHFim+EKVwN4qBDlEYX77V ZGR9j72vMfr7AzcoNbuY8xjRobjM1ZYyKShyEl8PQ14UuiT5JV2jq/MfrPgZdmC1 QWhoaj4ZWKe4GAaSAphB1Lwq/3DHU40GUR7AuFx9jA7W2ZcSs4W/qFk0Nizc+IVe VvUz7No2Ie4yUfZgoRUYHvQ65ljn3DmIsUncvdlu7AB/DieQRgu2lM9RGqNyPXlu fbImF0ngKjXeXqacu8KMKA6SRIM9z42MR32ImFugTE6gMisDZ8bs3bxtCnvjsom0 tf0OLM+3X9F6Cd4Hw4Jm1J78QYZsNNyGLO682lN2gJb2vCmrGkNlAeYig/1FAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUT/52f8I1Aomy9l2meHn+Rrwgp9wwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODMwMmUz MTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCLVCYMA0GCSqGSIb3DQEBCwUAA4IBAQBvDOrbJ3AS8ZoTrDvt4v4+RhBPMKoW NoehSivfKDxIY8GNqywqrfWchafWtPiN5Xhb17w7EQG3KSuhbuHkdsXoQbvYjM7q vsiy7iC4BoBNXWi7Q5anbJY7xuFS41Tm99rm81vZFP9WWouSi7U2+xBrKptfYRrX KknBV5rO/0cT+yNjLAhZQuP2fZhCByBkdggfT1zSysA6AL/K08M82CRK+MIsW/2e JcXBa8+kQd74WjbnLZWSAbBPqDP2jl3FGksAFdiMkoZCX5c6uc/07mqWJd6pFE5V T+ElKV/n1gKhQQVXCxqw98ZCbpuh8KQAwoeSffXwhP1scZ/hfrRH/dYe -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:42 2025 by rpki-client