This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa File: 34352e39302e3232332e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: PSt368ttIhL90+m53b3z5wQYrlMo/Zqhmyy/bPwCoAw= Subject key identifier: D3:86:4A:47:DE:CE:F1:E9:F8:4E:E3:B2:85:11:39:3C:EA:06:35:FB Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 07490780943FAA4BECFDDDE027B270357AA2A0CD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 47583 IP address blocks: 45.90.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:49:07:80:94:3f:aa:4b:ec:fd:dd:e0:27:b2:70:35:7a:a2:a0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=D3864A47DECEF1E9F84EE3B28511393CEA0635FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:07:b6:bf:cb:0a:8a:19:1a:69:52:0e:8f: 54:da:04:7b:74:b2:d1:0c:2a:0f:46:89:f8:23:bd: 75:b4:87:31:e5:97:6e:80:52:62:f5:e3:f6:9c:5e: 23:81:2c:f4:71:f4:88:99:b3:5a:c4:8e:a0:5a:75: 73:83:bd:0d:6e:a5:f7:fd:91:9f:51:55:10:e3:5d: 7c:92:f0:71:b2:7e:8b:b8:d0:6f:6e:e2:62:31:cb: 20:65:53:9d:a9:75:77:f4:a9:dc:04:f1:b7:f4:aa: 5a:05:38:bd:6d:b2:a3:19:66:19:02:26:fb:16:bf: 4c:b5:fe:79:61:74:d7:c5:13:3e:63:92:e4:0a:6c: c8:cb:27:fb:2e:d5:14:2e:ba:2e:da:e3:c8:1d:b6: ec:5b:7d:f0:dc:44:c0:ff:81:1a:54:a3:68:3c:b7: 37:78:27:e1:d5:2d:14:4e:c9:b9:cb:98:fc:bc:6c: e8:25:c5:cb:7f:55:ed:77:cc:f8:7e:56:8a:a1:be: 91:16:e6:6f:67:98:3c:18:5c:8e:cd:fd:2b:b3:b6: c2:06:6c:13:5c:25:8d:cf:43:55:50:a5:a4:7f:4a: e9:ef:30:c5:44:31:71:d2:b3:b5:c2:d5:86:1d:36: 09:9a:6c:8b:b8:9b:61:37:e1:8d:fe:b1:c7:7b:bc: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:4A:47:DE:CE:F1:E9:F8:4E:E3:B2:85:11:39:3C:EA:06:35:FB X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232332e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.223.0/24 Signature Algorithm: sha256WithRSAEncryption 19:55:e0:5b:e4:b2:c9:b6:43:e9:64:8f:fd:ff:0e:5a:51:57: d8:5a:2c:2d:24:bc:64:30:c4:e0:86:81:24:fd:13:e6:a0:fd: 4a:c4:e3:3e:1a:9f:05:00:d8:b3:04:2a:4c:59:1c:b2:b7:31: c7:5d:17:db:c8:d6:86:a6:be:77:81:f8:f9:3e:30:10:8d:26: 2b:61:6e:bd:08:d6:eb:c0:1c:48:c7:af:35:02:2b:e3:98:7b: c0:61:94:3e:f0:0e:89:c2:7f:d4:db:97:0b:14:7e:ae:90:bd: 03:6b:42:63:58:41:a4:54:ff:c3:66:73:09:57:f2:5a:18:38: a8:36:12:81:f6:a1:07:6d:63:6d:f3:98:2c:34:4b:83:54:2d: 4d:32:a1:81:27:d9:0e:ee:18:3e:f4:31:de:8a:c4:b9:42:0c: 7b:c3:dc:b7:3b:c4:d5:29:4e:97:1d:f4:20:87:3a:9b:d8:cf: 56:bd:7b:34:32:38:22:ad:6c:d2:70:1f:e1:d5:5f:8c:62:2f: a4:85:19:71:1d:e8:9d:9c:fc:2b:fe:aa:62:af:3a:33:11:60: a5:4e:26:3b:fc:d4:fa:c5:13:b4:b2:94:5e:d0:9c:a6:da:ec: 9d:69:e0:3c:f9:fb:eb:c1:6d:80:6a:62:16:01:3d:72:44:42: 13:20:5a:02 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUB0kHgJQ/qkvs/d3gJ7JwNXqioM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKEQzODY0QTQ3REVDRUYxRTlGODRFRTNCMjg1MTEzOTNDRUEwNjM1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOAe2v8sKihkaaVIOj1TaBHt0 stEMKg9GifgjvXW0hzHll26AUmL14/acXiOBLPRx9IiZs1rEjqBadXODvQ1upff9 kZ9RVRDjXXyS8HGyfou40G9u4mIxyyBlU52pdXf0qdwE8bf0qloFOL1tsqMZZhkC JvsWv0y1/nlhdNfFEz5jkuQKbMjLJ/su1RQuui7a48gdtuxbffDcRMD/gRpUo2g8 tzd4J+HVLRROybnLmPy8bOglxct/Ve13zPh+VoqhvpEW5m9nmDwYXI7N/SuztsIG bBNcJY3PQ1VQpaR/SunvMMVEMXHSs7XC1YYdNgmabIu4m2E34Y3+scd7vATjAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU04ZKR97O8en4TuOyhRE5POoGNfswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTMwMmUz MjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALVrfMA0GCSqGSIb3DQEBCwUAA4IBAQAZVeBb5LLJtkPpZI/9/w5aUVfYWiwt JLxkMMTghoEk/RPmoP1KxOM+Gp8FANizBCpMWRyytzHHXRfbyNaGpr53gfj5PjAQ jSYrYW69CNbrwBxIx681AivjmHvAYZQ+8A6Jwn/U25cLFH6ukL0Da0JjWEGkVP/D ZnMJV/JaGDioNhKB9qEHbWNt85gsNEuDVC1NMqGBJ9kO7hg+9DHeisS5Qgx7w9y3 O8TVKU6XHfQghzqb2M9WvXs0MjgirWzScB/h1V+MYi+khRlxHeidnPwr/qpirzoz EWClTiY7/NT6xRO0spRe0Jym2uydaeA8+fvrwW2AamIWAT1yREITIFoC -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:42 2025 by rpki-client