This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa File: 34352e38392e3230342e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: CxpFJwtbpRBU89fC2gjSYIRQldB1GO9I+bRIoCWX1+c= Subject key identifier: DF:F6:F8:0E:3A:D1:7A:C0:6C:AB:A8:6B:81:8B:76:6C:35:5A:B1:E7 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2AC4B084694207A372959F6FCEC6B33F234026C9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:10 +0000 ROA not before: Fri 21 Nov 2025 15:44:10 +0000 ROA not after: Fri 20 Nov 2026 15:49:10 +0000 asID: 47583 IP address blocks: 45.89.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c4:b0:84:69:42:07:a3:72:95:9f:6f:ce:c6:b3:3f:23:40:26:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:10 2025 GMT Not After : Nov 20 15:49:10 2026 GMT Subject: CN=DFF6F80E3AD17AC06CABA86B818B766C355AB1E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:74:ac:3a:7f:60:4d:99:87:17:f1:09:41:13: a4:ce:9c:b4:4b:7b:c6:ad:50:87:75:e9:50:4c:b2: 02:7a:60:60:85:61:04:7a:f9:84:b5:c4:bb:aa:6a: e7:c4:d4:b3:ee:56:9e:71:77:3b:96:d7:60:74:23: 3b:16:d8:03:e3:79:0d:bb:68:6e:57:9e:ab:15:1c: e9:92:52:a8:be:22:e0:a5:d1:5d:1d:78:3e:44:e5: 48:3f:3d:1a:81:88:fb:4b:fc:0d:f4:72:17:bb:e4: d3:76:14:56:7d:cc:35:52:db:29:36:06:19:71:32: cd:71:54:bd:a3:0a:57:19:86:e5:2f:54:33:d0:c6: 24:55:8b:cf:25:e2:e9:b5:05:db:53:14:ba:42:0c: 32:4c:56:7f:e9:5d:59:2d:53:35:4e:d5:d5:85:ae: 36:bb:82:80:93:97:e4:8e:d3:3f:e3:b4:59:42:31: 99:18:44:e5:62:4e:77:68:f9:7d:c2:0b:99:64:11: fd:56:41:85:cb:7d:77:47:47:91:79:08:7c:40:c8: 32:ca:c0:68:95:64:01:41:46:ac:6c:96:24:40:68: 94:97:ec:a7:ef:ae:8a:b2:7c:c0:5a:26:de:85:c9: e8:4c:86:06:64:2d:46:e1:f1:7e:47:15:2c:6d:f1: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F6:F8:0E:3A:D1:7A:C0:6C:AB:A8:6B:81:8B:76:6C:35:5A:B1:E7 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38392e3230342e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.204.0/22 Signature Algorithm: sha256WithRSAEncryption c5:28:c5:b7:1c:0a:00:27:28:63:ce:e6:e5:6a:54:9c:97:03: 58:8e:33:ae:c3:8e:29:fb:22:ed:f8:41:28:cc:b5:78:cc:23: 3f:c1:c4:53:14:57:50:2e:51:79:fc:7d:ad:b7:c8:51:a9:ea: 8d:be:47:67:51:ae:35:1d:23:55:0c:44:7c:1d:00:14:4f:3b: bc:5d:07:83:e4:ea:8d:9f:28:17:0c:78:79:70:d5:4e:90:30: 99:a4:70:94:19:a8:ff:43:a6:0e:36:c4:16:c3:45:d2:09:e5: 0f:16:ad:01:a3:b7:e7:6b:44:77:7b:cc:f5:b3:90:b6:e1:f6: f6:2d:73:00:09:34:35:36:e9:cf:fb:fa:46:b8:a5:e3:75:49: 31:75:3f:fe:6e:54:4d:cd:99:ff:30:5a:3a:1c:42:d4:b6:cb: bd:d6:a3:fd:72:13:d3:7d:49:ff:5d:ee:dd:89:6b:4a:d6:ab: 70:0d:05:96:47:6d:b5:17:26:94:86:dc:73:c0:fe:70:6b:c2: 02:a0:9d:c5:cd:95:ce:33:b1:93:29:26:42:a9:0f:11:95:6e: db:8a:fc:58:41:01:c0:1b:03:d3:4b:0f:5d:28:03:9c:95:36: 78:bf:74:42:f9:0f:ce:d1:9e:a3:43:63:19:4c:5e:20:c4:47: cc:b4:29:10 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUKsSwhGlCB6NylZ9vzsazPyNAJskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTBaFw0yNjExMjAxNTQ5MTBaMDMxMTAvBgNV BAMTKERGRjZGODBFM0FEMTdBQzA2Q0FCQTg2QjgxOEI3NjZDMzU1QUIxRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdKw6f2BNmYcX8QlBE6TOnLRL e8atUId16VBMsgJ6YGCFYQR6+YS1xLuqaufE1LPuVp5xdzuW12B0IzsW2APjeQ27 aG5XnqsVHOmSUqi+IuCl0V0deD5E5Ug/PRqBiPtL/A30che75NN2FFZ9zDVS2yk2 BhlxMs1xVL2jClcZhuUvVDPQxiRVi88l4um1BdtTFLpCDDJMVn/pXVktUzVO1dWF rja7goCTl+SO0z/jtFlCMZkYROViTndo+X3CC5lkEf1WQYXLfXdHR5F5CHxAyDLK wGiVZAFBRqxsliRAaJSX7KfvroqyfMBaJt6FyehMhgZkLUbh8X5HFSxt8XnZAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU3/b4DjrResBsq6hrgYt2bDVasecwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM5MmUz MjMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCLVnMMA0GCSqGSIb3DQEBCwUAA4IBAQDFKMW3HAoAJyhjzublalSclwNYjjOu w44p+yLt+EEozLV4zCM/wcRTFFdQLlF5/H2tt8hRqeqNvkdnUa41HSNVDER8HQAU Tzu8XQeD5OqNnygXDHh5cNVOkDCZpHCUGaj/Q6YONsQWw0XSCeUPFq0Bo7fna0R3 e8z1s5C24fb2LXMACTQ1NunP+/pGuKXjdUkxdT/+blRNzZn/MFo6HELUtsu91qP9 chPTfUn/Xe7diWtK1qtwDQWWR221FyaUhtxzwP5wa8ICoJ3FzZXOM7GTKSZCqQ8R lW7bivxYQQHAGwPTSw9dKAOclTZ4v3RC+Q/O0Z6jQ2MZTF4gxEfMtCkQ -----END CERTIFICATE-----Generated at Fri Dec 5 18:55:01 2025 by rpki-client