This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e3132342e302f32322d3234203d3e203437353833.roa File: 34352e39332e3132342e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: ZImotYHOQ3tHizGf0w1jKysfRqmIbSE9i9v73l8ARiY= Subject key identifier: 7C:DD:B8:89:97:60:BC:DA:03:DE:5E:70:6C:AE:C7:97:C4:95:F0:FF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1120DBAF106EBB0E835CB3A15954B7F5E18A8A8B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e3132342e302f32322d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 47583 IP address blocks: 45.93.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:20:db:af:10:6e:bb:0e:83:5c:b3:a1:59:54:b7:f5:e1:8a:8a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=7CDDB8899760BCDA03DE5E706CAEC797C495F0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:11:33:71:08:78:2d:2a:cc:d3:c5:01:03:b8: b4:4d:ee:7e:a8:4e:b3:00:70:bf:b2:03:4a:dc:e4: 8d:c0:c5:56:92:ff:59:2f:1b:77:6b:6a:54:5d:de: 34:73:65:e8:7d:05:55:30:0a:4d:40:d8:4d:7c:9f: 20:55:9c:75:31:be:d3:e9:70:7d:5a:8e:e5:69:19: 89:fb:0b:4e:2c:11:e6:62:cd:c1:ae:c0:46:82:86: 73:bd:f4:3a:c8:82:7b:fe:20:a4:d9:4d:30:6d:5f: 63:b8:5b:52:fb:d5:fe:72:37:c6:a6:2f:70:01:67: e0:b5:a9:89:02:e2:31:ed:dc:be:9a:11:98:f8:39: 03:4c:71:d6:36:45:f9:dd:4a:a7:e3:23:2b:e3:00: ef:05:d3:9c:9c:0f:1f:13:b7:d6:93:00:bd:73:da: ea:78:64:ca:5c:1b:3c:4e:15:dd:06:c7:7c:f7:d1: d6:e8:3a:09:fc:09:dc:c9:ad:df:32:3b:81:ef:b5: 04:39:34:50:76:7a:17:58:39:f7:7f:43:ef:99:af: bb:46:8d:1d:3c:38:56:e0:9a:b4:7c:60:fe:f9:c8: 69:9b:b3:83:8f:22:4c:3d:75:20:fe:c9:65:a7:bb: e8:9b:0c:63:13:ef:c5:e2:e8:0d:03:d6:4a:71:6c: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DD:B8:89:97:60:BC:DA:03:DE:5E:70:6C:AE:C7:97:C4:95:F0:FF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39332e3132342e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.93.124.0/22 Signature Algorithm: sha256WithRSAEncryption 60:cd:70:e8:95:38:74:65:81:c0:b4:47:69:9e:d2:32:23:aa: 18:03:1f:5e:b5:a7:b2:d4:d7:db:c9:6e:6a:b5:dc:08:34:f9: eb:c4:ca:a2:06:64:25:49:23:fe:8e:31:63:c4:c9:18:30:4e: 10:7b:9f:eb:39:13:4e:7d:b4:fe:e1:cc:ea:be:13:5f:8f:fd: 74:57:09:94:ae:18:43:f8:3e:5c:88:49:fb:eb:18:a3:f8:ef: 6f:03:34:a8:08:4c:1f:cc:15:3a:e9:bd:7f:31:1f:da:97:4e: 2a:6d:b0:7e:dc:ce:94:54:d2:a6:76:2c:e0:1b:6f:b5:5b:0e: a4:e9:9d:e0:6b:3f:d6:86:11:af:8a:11:5d:b7:e5:40:e1:6e: c4:65:d6:12:e9:38:58:c2:87:ae:b1:3c:37:f9:0e:c9:98:41: a4:21:fe:0f:63:db:18:91:02:04:8f:44:70:75:f6:17:43:fe: df:8b:c8:ba:20:cd:69:27:f8:ac:c5:a8:e1:1e:84:cd:ce:aa: 76:48:90:8f:2c:8d:ce:27:66:02:b8:f0:7d:93:c0:f4:c3:89: 32:8e:37:47:f6:b7:c2:44:32:5b:ef:e7:41:44:82:c6:7f:1a: e0:8c:73:54:76:79:0e:32:6b:b7:29:33:d8:00:d6:81:ac:11: 8d:6b:7a:f7 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUESDbrxBuuw6DXLOhWVS39eGKioswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKDdDRERCODg5OTc2MEJDREEwM0RFNUU3MDZDQUVDNzk3QzQ5NUYwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjETNxCHgtKszTxQEDuLRN7n6o TrMAcL+yA0rc5I3AxVaS/1kvG3dralRd3jRzZeh9BVUwCk1A2E18nyBVnHUxvtPp cH1ajuVpGYn7C04sEeZizcGuwEaChnO99DrIgnv+IKTZTTBtX2O4W1L71f5yN8am L3ABZ+C1qYkC4jHt3L6aEZj4OQNMcdY2RfndSqfjIyvjAO8F05ycDx8Tt9aTAL1z 2up4ZMpcGzxOFd0Gx3z30dboOgn8CdzJrd8yO4HvtQQ5NFB2ehdYOfd/Q++Zr7tG jR08OFbgmrR8YP75yGmbs4OPIkw9dSD+yWWnu+ibDGMT78Xi6A0D1kpxbHwLAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUfN24iZdgvNoD3l5wbK7Hl8SV8P8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTMzMmUz MTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCLV18MA0GCSqGSIb3DQEBCwUAA4IBAQBgzXDolTh0ZYHAtEdpntIyI6oYAx9e taey1NfbyW5qtdwINPnrxMqiBmQlSSP+jjFjxMkYME4Qe5/rORNOfbT+4czqvhNf j/10VwmUrhhD+D5ciEn76xij+O9vAzSoCEwfzBU66b1/MR/al04qbbB+3M6UVNKm dizgG2+1Ww6k6Z3gaz/WhhGvihFdt+VA4W7EZdYS6ThYwoeusTw3+Q7JmEGkIf4P Y9sYkQIEj0RwdfYXQ/7fi8i6IM1pJ/isxajhHoTNzqp2SJCPLI3OJ2YCuPB9k8D0 w4kyjjdH9rfCRDJb7+dBRILGfxrgjHNUdnkOMmu3KTPYANaBrBGNa3r3 -----END CERTIFICATE-----Generated at Fri Dec 5 19:00:26 2025 by rpki-client