This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa File: 34352e39342e3231302e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: yG9x0f3Q3pjEse44f6N1L1gsrXpUBUhcjo5m/f/jVtg= Subject key identifier: BA:8E:D4:C9:29:5D:B2:9D:09:C1:8E:3C:E3:F3:75:78:CC:10:CF:A6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1ABB7BF061E8D40505884DA3EA79DDCCBD97DC45 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa Signing time: Fri 28 Nov 2025 11:49:44 +0000 ROA not before: Fri 28 Nov 2025 11:44:44 +0000 ROA not after: Fri 27 Nov 2026 11:49:44 +0000 asID: 147049 IP address blocks: 45.94.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:bb:7b:f0:61:e8:d4:05:05:88:4d:a3:ea:79:dd:cc:bd:97:dc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:44 2025 GMT Not After : Nov 27 11:49:44 2026 GMT Subject: CN=BA8ED4C9295DB29D09C18E3CE3F37578CC10CFA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:69:f6:df:55:50:70:30:9e:c4:90:c0:aa: bf:0d:0b:53:7e:86:e7:e7:cb:17:80:4b:e1:d0:66: 4a:8a:0e:bc:99:c4:13:f6:61:d0:c5:0d:98:a9:86: f3:f2:ab:ae:22:37:5b:c7:16:66:3b:35:5e:01:c6: 9b:8f:49:4d:cf:bf:41:30:35:69:5b:1f:82:31:35: 70:3c:01:57:81:84:0f:e9:d2:45:81:91:59:76:01: bd:8e:61:36:21:c3:23:b3:dc:11:e2:b7:25:75:d7: 3a:01:57:1c:c4:0b:cd:af:3d:d8:3e:c3:e6:2f:36: 5f:e5:b4:ed:b0:d7:b9:9b:db:bb:7d:23:d9:84:73: 4d:b4:1a:9f:bb:31:a6:dc:08:26:0a:86:1c:7f:e0: 84:32:6b:54:d9:2f:10:51:b2:5d:dc:3c:f9:d1:65: 5d:b3:8e:c6:c7:61:d4:2d:29:0f:44:dc:ea:4d:16: 9c:c0:93:cf:cc:b1:fd:c2:d1:d7:c1:7e:8a:8a:bd: 7f:44:00:5e:78:fe:95:0d:08:c0:02:17:98:10:09: f6:65:ef:de:0a:1c:14:3e:51:12:2f:f4:00:2d:54: d1:d8:de:13:59:bf:f7:2d:ae:01:ab:87:d4:fe:7f: 39:60:59:07:70:78:1f:10:f0:91:7f:1a:cc:5d:11: be:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8E:D4:C9:29:5D:B2:9D:09:C1:8E:3C:E3:F3:75:78:CC:10:CF:A6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e39342e3231302e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.210.0/24 Signature Algorithm: sha256WithRSAEncryption a3:44:86:7a:87:95:de:67:2c:31:c3:7b:7e:bc:57:0b:cd:9a: 84:8e:f2:cc:49:99:ac:de:db:eb:2c:47:86:ee:3b:9d:8d:b3: 27:3e:66:d7:47:85:9d:bc:80:eb:cf:a2:5a:94:f4:02:fa:d2: b9:9f:ac:99:55:5a:ea:56:f9:3a:8b:1b:22:d8:33:7d:6b:b5: 5a:a2:ad:ba:45:b4:a7:e6:5f:3b:94:91:09:54:c0:61:4d:a5: 91:20:f7:11:21:81:43:12:a0:18:6f:84:9a:d1:48:c1:ad:16: 0a:7d:fd:c6:85:b6:59:b5:26:2b:e7:a3:d4:a4:52:af:f9:7f: 9a:99:f1:4a:a0:5e:29:b9:8b:f2:8e:6e:a8:c4:a8:0d:26:24: 9f:b8:0d:aa:fb:2e:ba:c0:3a:18:d6:55:da:76:4e:c7:e1:01: 3e:ae:d1:02:fd:35:30:71:de:55:2a:0d:9b:a7:11:e0:a8:1b: d3:95:f1:69:51:5c:0c:7d:71:88:92:96:ad:1d:49:c3:b5:2f: 62:d5:45:56:f2:83:53:52:05:3e:0f:be:02:95:84:82:81:f2: 27:96:9e:66:74:6d:db:01:04:3d:ba:3a:5d:24:1c:da:56:bc: 3a:fb:bb:26:0a:f4:e8:e8:dc:22:a0:98:e4:82:93:cb:fb:2e: 4c:0e:39:49 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUGrt78GHo1AUFiE2j6nndzL2X3EUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDRaFw0yNjExMjcxMTQ5NDRaMDMxMTAvBgNV BAMTKEJBOEVENEM5Mjk1REIyOUQwOUMxOEUzQ0UzRjM3NTc4Q0MxMENGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxqmn231VQcDCexJDAqr8NC1N+ hufnyxeAS+HQZkqKDryZxBP2YdDFDZiphvPyq64iN1vHFmY7NV4BxpuPSU3Pv0Ew NWlbH4IxNXA8AVeBhA/p0kWBkVl2Ab2OYTYhwyOz3BHityV11zoBVxzEC82vPdg+ w+YvNl/ltO2w17mb27t9I9mEc020Gp+7MabcCCYKhhx/4IQya1TZLxBRsl3cPPnR ZV2zjsbHYdQtKQ9E3OpNFpzAk8/Msf3C0dfBfoqKvX9EAF54/pUNCMACF5gQCfZl 794KHBQ+URIv9AAtVNHY3hNZv/ctrgGrh9T+fzlgWQdweB8Q8JF/GsxdEb49AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUuo7UySldsp0JwY484/N1eMwQz6YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzOTM0MmUz MjMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtXtIwDQYJKoZIhvcNAQELBQADggEBAKNEhnqHld5nLDHDe368VwvNmoSO 8sxJmaze2+ssR4buO52Nsyc+ZtdHhZ28gOvPolqU9AL60rmfrJlVWupW+TqLGyLY M31rtVqirbpFtKfmXzuUkQlUwGFNpZEg9xEhgUMSoBhvhJrRSMGtFgp9/caFtlm1 Jivno9SkUq/5f5qZ8UqgXim5i/KObqjEqA0mJJ+4Dar7LrrAOhjWVdp2TsfhAT6u 0QL9NTBx3lUqDZunEeCoG9OV8WlRXAx9cYiSlq0dScO1L2LVRVbyg1NSBT4PvgKV hIKB8ieWnmZ0bdsBBD26Ol0kHNpWvDr7uyYK9Ojo3CKgmOSCk8v7LkwOOUk= -----END CERTIFICATE-----Generated at Fri Dec 5 11:34:18 2025 by rpki-client