This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa File: 34352e39302e3232382e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: z7G7V0mQlRPDmjVUvUieo7zbC9FP6sjR2WmpJ2RKzds= Subject key identifier: 13:11:DD:82:4A:83:9B:7E:6D:E1:C3:73:97:3D:C7:C4:1D:7D:BA:34 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0646378D70473D966AFE895E05005189D82987AF Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 47583 IP address blocks: 45.90.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:46:37:8d:70:47:3d:96:6a:fe:89:5e:05:00:51:89:d8:29:87:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=1311DD824A839B7E6DE1C373973DC7C41D7DBA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:06:3f:c5:14:2b:55:7f:47:ab:80:19:68:48: 1a:aa:a0:78:73:fa:f4:b2:d3:d4:56:69:49:bf:7b: 24:c8:57:a9:c7:4c:c2:d3:47:5b:03:d5:e5:1a:f9: 22:3f:e5:d5:ac:d7:df:7a:47:9c:d3:53:d7:61:a0: 4f:28:14:b3:30:1e:8f:b2:53:45:b2:8e:4c:cb:bb: 0b:48:54:76:e2:8d:23:c6:9c:cf:26:11:96:3c:49: 27:15:ae:67:ed:a2:14:da:60:e3:d4:05:e1:56:ea: 5b:75:61:94:f4:0c:91:6d:be:3a:b4:21:f2:a5:17: 5c:c7:68:3a:e1:c3:65:8c:a7:b0:a8:38:78:d3:66: 1e:9b:9b:d7:01:c5:70:f0:37:05:fd:35:ca:76:d7: 00:45:5f:31:c2:d6:46:86:c9:79:d0:a2:ab:c2:9d: 59:91:1c:69:73:64:68:92:11:54:ac:fc:ed:fc:92: b9:6b:ca:5f:5b:2b:52:85:c1:8b:0a:7b:ed:21:00: 35:12:d4:c6:4b:4e:cb:ee:35:15:b5:05:88:79:fe: 31:1f:1d:cb:f1:67:ad:29:ce:36:de:9b:c7:91:68: ce:be:30:f3:a0:1d:1b:ab:bb:40:e7:ed:e1:eb:58: eb:b1:d0:19:2a:28:c8:41:d6:68:03:ae:4b:6e:90: 6b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:11:DD:82:4A:83:9B:7E:6D:E1:C3:73:97:3D:C7:C4:1D:7D:BA:34 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39302e3232382e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.228.0/22 Signature Algorithm: sha256WithRSAEncryption ca:bd:0c:75:c0:6b:c3:5f:3a:9b:d8:9b:c7:41:94:09:0b:2d: 92:b3:97:9d:14:37:61:6f:93:1a:67:02:1a:79:39:95:ba:99: 92:0f:2c:7b:8b:43:a4:39:a8:5a:c6:8e:6f:06:c1:a8:f6:54: 7f:58:f8:8b:c4:7f:14:a8:01:70:5a:cf:42:e0:53:54:9f:d0: db:45:89:3a:48:83:59:9d:96:4f:9a:57:d3:bd:e0:5d:63:7f: 11:7a:28:96:57:9b:49:29:69:7b:31:32:8f:e2:dc:fb:f6:4d: 92:dd:f0:f7:52:00:21:53:9c:97:2c:01:88:41:98:1b:72:53: 0b:6b:dc:1f:a0:fd:f7:a0:a3:be:92:a3:e2:2d:e3:0d:cc:63: 0d:9e:dc:0c:14:4d:86:0d:17:09:ab:8d:1b:c4:96:10:e2:a9: bd:85:20:d3:7a:60:a5:78:a5:46:35:8c:53:ec:ee:d7:f5:3b: ff:9f:08:a8:e1:62:3b:cc:0e:b1:75:c0:47:47:d6:f9:56:f1: 1d:77:ed:40:f6:e1:1d:b6:e1:40:f5:fb:4d:90:06:05:4c:07: bf:c8:31:c1:61:e0:01:8e:39:1a:d6:96:bd:ec:8a:a3:bb:73: ad:bc:8c:34:3a:2c:9a:de:9c:76:f8:fb:54:d7:d1:5a:40:62: d8:3a:c5:d6 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUBkY3jXBHPZZq/oleBQBRidgph68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKDEzMTFERDgyNEE4MzlCN0U2REUxQzM3Mzk3M0RDN0M0MUQ3REJBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBj/FFCtVf0ergBloSBqqoHhz +vSy09RWaUm/eyTIV6nHTMLTR1sD1eUa+SI/5dWs1996R5zTU9dhoE8oFLMwHo+y U0WyjkzLuwtIVHbijSPGnM8mEZY8SScVrmftohTaYOPUBeFW6lt1YZT0DJFtvjq0 IfKlF1zHaDrhw2WMp7CoOHjTZh6bm9cBxXDwNwX9Ncp21wBFXzHC1kaGyXnQoqvC nVmRHGlzZGiSEVSs/O38krlryl9bK1KFwYsKe+0hADUS1MZLTsvuNRW1BYh5/jEf HcvxZ60pzjbem8eRaM6+MPOgHRuru0Dn7eHrWOux0BkqKMhB1mgDrktukGuJAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUExHdgkqDm35t4cNzlz3HxB19ujQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTMwMmUz MjMyMzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCLVrkMA0GCSqGSIb3DQEBCwUAA4IBAQDKvQx1wGvDXzqb2JvHQZQJCy2Ss5ed FDdhb5MaZwIaeTmVupmSDyx7i0OkOahaxo5vBsGo9lR/WPiLxH8UqAFwWs9C4FNU n9DbRYk6SINZnZZPmlfTveBdY38ReiiWV5tJKWl7MTKP4tz79k2S3fD3UgAhU5yX LAGIQZgbclMLa9wfoP33oKO+kqPiLeMNzGMNntwMFE2GDRcJq40bxJYQ4qm9hSDT emCleKVGNYxT7O7X9Tv/nwio4WI7zA6xdcBHR9b5VvEdd+1A9uEdtuFA9ftNkAYF TAe/yDHBYeABjjka1pa97Iqju3OtvIw0Oiya3px2+PtU19FaQGLYOsXW -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:41 2025 by rpki-client