This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e302e302f32322d3234203d3e20323033303631.roa File: 34352e39332e302e302f32322d3234203d3e20323033303631.roa (raw, json) Hash identifier: F7KTHCFIWRswtYF73sZcNuPeccQinpu60Rk2C3wjs88= Subject key identifier: BB:85:FE:DD:6E:5B:C3:FA:3F:70:6A:D9:0F:63:3C:AE:60:9D:6E:AC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 07AC34E2D31A48F599133BB0762BADB8431D3A44 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e302e302f32322d3234203d3e20323033303631.roa Signing time: Fri 28 Nov 2025 11:49:47 +0000 ROA not before: Fri 28 Nov 2025 11:44:47 +0000 ROA not after: Fri 27 Nov 2026 11:49:47 +0000 asID: 203061 IP address blocks: 45.93.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:34:e2:d3:1a:48:f5:99:13:3b:b0:76:2b:ad:b8:43:1d:3a:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:47 2025 GMT Not After : Nov 27 11:49:47 2026 GMT Subject: CN=BB85FEDD6E5BC3FA3F706AD90F633CAE609D6EAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:a6:a6:3f:0f:9d:96:7a:74:5e:5a:cc:97: 4e:37:0d:98:7e:80:99:21:11:44:b2:ea:0a:fa:a9: 35:95:08:44:dc:fb:de:47:d5:94:2a:01:d7:30:6c: 72:92:4a:3e:c5:60:23:5f:71:e9:92:4f:b8:01:a8: aa:30:ef:e3:d5:5b:ae:5b:1b:6d:21:d3:bd:c3:f2: 38:29:3e:40:b9:d1:e0:db:a2:52:57:c3:1b:8d:3c: bb:1e:7d:aa:cf:ab:27:0c:b0:a3:66:81:54:0c:78: 60:21:98:76:c7:39:52:6e:1d:f8:e7:d5:51:9f:43: 52:0c:92:78:80:f0:5d:62:f4:62:9a:47:80:78:bc: 02:91:93:d7:73:86:28:e5:5c:53:2a:26:d6:01:14: 96:63:ef:d8:db:3c:a9:a5:f2:6a:cf:0e:91:4b:6b: 8f:10:a1:8d:07:0f:4b:47:5e:e3:9e:89:9c:c7:c3: 65:0d:35:4b:5f:9e:b7:e1:9b:5d:a9:ba:bc:da:9f: bb:e4:bf:3d:d5:ef:68:10:f4:48:ae:dc:cd:5e:57: a6:67:df:40:f9:5c:82:e7:79:24:21:7c:41:92:21: b9:c8:15:94:6a:c6:bf:af:22:6b:20:54:cf:6d:79: ee:8b:be:b2:72:29:5d:c8:be:71:52:49:bf:48:39: e0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:85:FE:DD:6E:5B:C3:FA:3F:70:6A:D9:0F:63:3C:AE:60:9D:6E:AC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e302e302f32322d3234203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.0.0/22 Signature Algorithm: sha256WithRSAEncryption 62:d2:6e:11:0d:4b:eb:38:6f:70:20:21:c9:97:e6:23:92:63: 4a:9a:25:53:59:f9:9f:4f:a4:5d:c7:db:d6:5e:26:87:32:34: 21:da:2e:3b:86:d6:bd:71:0f:7e:12:81:e8:94:1b:01:26:5b: 1a:d8:d6:b6:af:6d:70:93:9a:3d:60:ec:57:5b:92:c2:5b:b7: 16:be:a7:ad:27:71:d7:49:b9:4e:c0:ae:b5:6c:ff:f0:a0:47: 55:24:cb:4c:37:c9:5f:2d:f5:51:3c:3d:62:3a:7a:04:cf:46: 08:e8:b3:49:ac:b3:9d:f6:19:fa:00:d3:57:51:0e:d5:aa:13: eb:c5:db:35:a2:95:da:42:39:a7:f8:f2:3c:69:4d:0d:0c:a7: b1:01:0a:b1:72:84:a7:46:12:ec:c6:6d:d2:89:86:ba:36:ae: d5:4d:47:09:38:ef:3d:7c:eb:0a:01:45:dc:f5:f3:58:b0:0d: b0:06:c9:27:df:59:65:94:eb:46:f0:62:40:c6:30:c2:d7:fd: b5:85:6f:7b:9c:99:48:0e:54:e5:f6:c1:1f:1c:a9:9a:3b:a1: 37:36:0b:f4:e2:e1:f2:eb:20:00:aa:59:2b:15:09:25:cf:d8: ed:5d:86:33:5e:6e:8c:3a:06:79:0b:43:20:d3:36:14:67:8b: ff:9b:3e:c3 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUB6w04tMaSPWZEzuwdiutuEMdOkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDdaFw0yNjExMjcxMTQ5NDdaMDMxMTAvBgNV BAMTKEJCODVGRURENkU1QkMzRkEzRjcwNkFEOTBGNjMzQ0FFNjA5RDZFQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKY6amPw+dlnp0XlrMl043DZh+ gJkhEUSy6gr6qTWVCETc+95H1ZQqAdcwbHKSSj7FYCNfcemST7gBqKow7+PVW65b G20h073D8jgpPkC50eDbolJXwxuNPLsefarPqycMsKNmgVQMeGAhmHbHOVJuHfjn 1VGfQ1IMkniA8F1i9GKaR4B4vAKRk9dzhijlXFMqJtYBFJZj79jbPKml8mrPDpFL a48QoY0HD0tHXuOeiZzHw2UNNUtfnrfhm12purzan7vkvz3V72gQ9Eiu3M1eV6Zn 30D5XILneSQhfEGSIbnIFZRqxr+vImsgVM9tee6LvrJyKV3IvnFSSb9IOeAhAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUu4X+3W5bw/o/cGrZD2M8rmCdbqwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTMzMmUz MDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME Ai1dADANBgkqhkiG9w0BAQsFAAOCAQEAYtJuEQ1L6zhvcCAhyZfmI5JjSpolU1n5 n0+kXcfb1l4mhzI0IdouO4bWvXEPfhKB6JQbASZbGtjWtq9tcJOaPWDsV1uSwlu3 Fr6nrSdx10m5TsCutWz/8KBHVSTLTDfJXy31UTw9Yjp6BM9GCOizSayznfYZ+gDT V1EO1aoT68XbNaKV2kI5p/jyPGlNDQynsQEKsXKEp0YS7MZt0omGujau1U1HCTjv PXzrCgFF3PXzWLANsAbJJ99ZZZTrRvBiQMYwwtf9tYVve5yZSA5U5fbBHxypmjuh NzYL9OLh8usgAKpZKxUJJc/Y7V2GM15ujDoGeQtDINM2FGeL/5s+ww== -----END CERTIFICATE-----Generated at Sat Dec 6 19:07:46 2025 by rpki-client