This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa File: 34362e31372e3137322e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: W7OXYQoNGgwc3aEwGBg1XQZh3p8NG9zbhnO3oVircKs= Subject key identifier: 5B:89:20:BE:1B:05:9F:BD:C4:A6:A2:F1:BA:F1:AB:FF:A1:5B:81:52 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3FF9A2714927A5F76FF211D3F1FC8EEBA16AAA0A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:06 +0000 ROA not before: Fri 21 Nov 2025 15:44:06 +0000 ROA not after: Fri 20 Nov 2026 15:49:06 +0000 asID: 47583 IP address blocks: 46.17.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:f9:a2:71:49:27:a5:f7:6f:f2:11:d3:f1:fc:8e:eb:a1:6a:aa:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:06 2025 GMT Not After : Nov 20 15:49:06 2026 GMT Subject: CN=5B8920BE1B059FBDC4A6A2F1BAF1ABFFA15B8152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e2:89:38:6f:b6:e0:5c:7c:d8:ea:af:50:64: 4d:24:7d:f9:a9:51:a8:8f:55:98:cd:b6:26:8b:09: fc:77:68:74:2d:9f:89:e5:30:0a:2b:08:b9:22:39: 74:51:d3:17:ce:9f:7c:6d:1e:d7:0c:a1:f5:4c:dc: 56:5e:0b:50:40:56:04:7b:ac:88:1b:63:73:f2:c1: 1b:43:2a:f6:32:ae:5a:4e:3f:3a:da:2a:41:ed:51: cc:9c:e4:d9:43:d6:ee:4a:8b:fb:9c:dd:e0:2f:ec: a3:eb:75:63:de:77:d9:2a:c4:5f:9b:3c:e1:b0:66: 26:f0:c7:ee:c5:4d:f1:6c:48:af:cb:e8:d1:8b:2f: 02:1c:d3:8b:7b:fd:c0:57:b0:43:c5:e1:11:57:26: 1e:ee:03:82:ff:83:48:69:da:fb:a0:c6:26:3b:38: 96:cf:2a:48:dd:d1:8d:09:d1:60:2c:31:a7:98:35: d9:12:76:01:ab:c8:0f:15:82:70:a3:4c:d5:8b:1e: 00:d1:6f:6c:0d:17:a1:60:7c:c7:06:c1:36:d8:c7: 76:74:ce:35:ed:cf:a2:f8:fd:35:1c:5e:a9:06:c3: 1f:ac:c9:7d:8f:d3:7a:e0:7e:63:a3:b4:be:37:24: 66:d2:1b:62:12:da:21:18:3e:46:1d:12:24:23:e9: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:89:20:BE:1B:05:9F:BD:C4:A6:A2:F1:BA:F1:AB:FF:A1:5B:81:52 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137322e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.172.0/23 Signature Algorithm: sha256WithRSAEncryption 96:22:2f:5b:36:44:df:09:2b:09:d1:8c:ca:49:57:48:b3:79: 9f:a0:33:36:14:83:b3:69:c5:c4:5f:0b:08:41:8d:54:11:ab: 3d:fe:33:e6:af:74:58:de:6c:20:13:9c:9b:b7:1a:42:0e:a7: 22:4a:22:3f:9c:42:05:d7:9a:00:f1:57:3c:df:41:e0:23:c2: 38:3b:a5:c8:c2:65:2c:6a:f1:3c:2c:e7:45:1c:1c:d5:47:e3: ef:ef:91:61:e0:aa:b7:52:3f:cc:e7:85:2c:cb:b8:ed:a4:5a: 90:e2:16:02:ba:b3:13:3d:ad:90:62:76:2e:e1:bf:d5:94:72: bb:68:3e:ce:e9:f1:64:88:98:3c:63:2d:f1:be:87:b8:67:c0: 5e:99:9b:c2:17:97:c3:6f:1c:40:21:2e:22:3b:9b:5c:e2:68: 4b:f0:60:8c:7e:2f:b3:5e:73:c1:0a:d2:60:6f:30:86:f8:b8: f0:07:f7:95:77:f8:41:c8:ae:00:79:b6:dc:80:ff:21:6a:a2: f6:6c:be:62:f7:9f:82:a7:d7:20:f9:91:e9:cb:e9:58:cc:f5: 0f:5a:32:3f:fa:55:02:54:55:9c:f1:59:39:0b:27:4f:9b:01: ab:2a:99:f3:01:20:85:74:50:77:46:95:02:25:07:8b:58:99: cc:02:1a:84 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUP/micUknpfdv8hHT8fyO66FqqgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDZaFw0yNjExMjAxNTQ5MDZaMDMxMTAvBgNV BAMTKDVCODkyMEJFMUIwNTlGQkRDNEE2QTJGMUJBRjFBQkZGQTE1QjgxNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4ok4b7bgXHzY6q9QZE0kffmp UaiPVZjNtiaLCfx3aHQtn4nlMAorCLkiOXRR0xfOn3xtHtcMofVM3FZeC1BAVgR7 rIgbY3PywRtDKvYyrlpOPzraKkHtUcyc5NlD1u5Ki/uc3eAv7KPrdWPed9kqxF+b POGwZibwx+7FTfFsSK/L6NGLLwIc04t7/cBXsEPF4RFXJh7uA4L/g0hp2vugxiY7 OJbPKkjd0Y0J0WAsMaeYNdkSdgGryA8VgnCjTNWLHgDRb2wNF6FgfMcGwTbYx3Z0 zjXtz6L4/TUcXqkGwx+syX2P03rgfmOjtL43JGbSG2IS2iEYPkYdEiQj6R0HAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUW4kgvhsFn73EpqLxuvGr/6FbgVIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM2MmUzMTM3MmUz MTM3MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLhGsMA0GCSqGSIb3DQEBCwUAA4IBAQCWIi9bNkTfCSsJ0YzKSVdIs3mfoDM2 FIOzacXEXwsIQY1UEas9/jPmr3RY3mwgE5ybtxpCDqciSiI/nEIF15oA8Vc830Hg I8I4O6XIwmUsavE8LOdFHBzVR+Pv75Fh4Kq3Uj/M54Usy7jtpFqQ4hYCurMTPa2Q YnYu4b/VlHK7aD7O6fFkiJg8Yy3xvoe4Z8BemZvCF5fDbxxAIS4iO5tc4mhL8GCM fi+zXnPBCtJgbzCG+LjwB/eVd/hByK4AebbcgP8haqL2bL5i95+Cp9cg+ZHpy+lY zPUPWjI/+lUCVFWc8Vk5CydPmwGrKpnzASCFdFB3RpUCJQeLWJnMAhqE -----END CERTIFICATE-----Generated at Fri Dec 5 18:54:42 2025 by rpki-client