This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa File: 34362e31372e3137342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: tKCM5nnjBj5ukzfxcEYd1IOpqnmh8zbAljtLniBNsn8= Subject key identifier: 41:19:A0:F8:7C:52:78:D9:4A:CD:1A:12:CE:B2:C2:D4:71:44:5B:D6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 57868D2C09CD763FAA8E776A973EB07B9F832315 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa Signing time: Fri 21 Nov 2025 15:49:11 +0000 ROA not before: Fri 21 Nov 2025 15:44:11 +0000 ROA not after: Fri 20 Nov 2026 15:49:11 +0000 asID: 47583 IP address blocks: 46.17.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:86:8d:2c:09:cd:76:3f:aa:8e:77:6a:97:3e:b0:7b:9f:83:23:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:11 2025 GMT Not After : Nov 20 15:49:11 2026 GMT Subject: CN=4119A0F87C5278D94ACD1A12CEB2C2D471445BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:aa:52:67:9c:60:5c:27:e4:8a:f1:e3:fe:5b: 12:40:dd:32:77:d3:63:74:e5:84:ac:2a:7a:05:42: 3d:c2:a6:2e:92:8e:c7:13:8a:78:a6:40:8b:4b:35: 87:33:49:44:6c:6a:87:4e:cf:21:cb:7c:3e:85:0a: 98:8b:5d:9c:60:e8:ba:b7:66:57:74:54:85:2f:80: 0b:85:b1:b1:f4:fc:98:42:1b:30:69:6f:99:4d:ca: bc:b5:28:5d:fd:a9:31:39:91:bf:a9:43:69:2f:1e: de:d1:2b:69:32:e8:2e:a5:84:0a:63:08:94:25:fb: 5f:a9:b0:e9:23:ef:c8:a6:14:19:86:d8:23:a5:5c: 72:e0:09:a8:03:24:d1:74:8e:38:b3:15:1e:9c:05: 16:e9:9e:28:4e:de:94:c0:a9:4b:8e:cc:33:f3:40: 55:f1:ac:16:ef:bc:b9:4b:44:95:3b:ea:fc:c1:84: ac:bc:49:7d:b2:45:70:87:36:51:30:a2:d0:ce:49: 46:bc:15:d6:b3:63:ff:15:5c:08:44:46:cf:f0:47: 39:20:f9:69:f8:af:32:94:b9:91:31:c3:d0:a6:4c: c6:0f:3b:8d:a1:0d:1b:fe:1e:a1:9b:47:30:28:04: 3d:ec:64:8b:ce:a3:96:84:e0:54:15:ab:58:26:ca: ec:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:19:A0:F8:7C:52:78:D9:4A:CD:1A:12:CE:B2:C2:D4:71:44:5B:D6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34362e31372e3137342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.174.0/23 Signature Algorithm: sha256WithRSAEncryption 07:41:73:2b:b8:04:b6:f1:70:a2:f3:fb:ba:09:c4:02:ec:dc: ed:2e:af:ed:33:f3:29:88:14:00:9b:94:e3:60:02:e3:0c:bf: 1b:ee:fd:5a:b1:ce:0f:fe:24:aa:91:9b:f2:13:76:5c:f3:2b: 93:2e:a1:50:8a:3d:4d:3f:6a:fd:b9:8f:ba:32:9e:48:62:69: 76:ca:1a:08:2d:72:33:da:fa:ff:cf:b3:ac:82:95:9a:82:a9: e9:c7:33:36:5e:9f:ec:19:9b:fe:f7:c2:7e:3f:25:7b:30:d6: 1e:90:88:58:f1:10:59:2f:41:c4:d6:8f:63:a6:41:c9:a4:6f: 80:95:77:cd:f3:e1:1b:f5:12:53:df:19:f8:7c:18:a0:69:30: b4:77:b7:da:fa:12:9e:45:d1:d5:c9:86:87:05:e9:a1:dd:28: 31:40:49:c9:44:e0:fa:ea:e9:dd:98:ef:e6:48:79:4f:48:4c: ce:3c:ec:ea:6c:49:62:c7:d3:8d:1f:c1:14:71:86:49:b1:fd: c3:b0:48:12:cf:5d:6b:1c:90:e3:c5:02:48:23:ee:9e:da:18: 15:ea:33:14:0e:9e:e9:9f:34:e2:e0:6a:31:a9:69:04:2c:06: 1b:0c:3b:42:c5:ae:62:a0:86:18:ba:22:b8:fb:7b:4d:b8:b6: 11:ce:eb:cd -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUV4aNLAnNdj+qjndqlz6we5+DIxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTFaFw0yNjExMjAxNTQ5MTFaMDMxMTAvBgNV BAMTKDQxMTlBMEY4N0M1Mjc4RDk0QUNEMUExMkNFQjJDMkQ0NzE0NDVCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjqlJnnGBcJ+SK8eP+WxJA3TJ3 02N05YSsKnoFQj3Cpi6SjscTinimQItLNYczSURsaodOzyHLfD6FCpiLXZxg6Lq3 Zld0VIUvgAuFsbH0/JhCGzBpb5lNyry1KF39qTE5kb+pQ2kvHt7RK2ky6C6lhApj CJQl+1+psOkj78imFBmG2COlXHLgCagDJNF0jjizFR6cBRbpnihO3pTAqUuOzDPz QFXxrBbvvLlLRJU76vzBhKy8SX2yRXCHNlEwotDOSUa8FdazY/8VXAhERs/wRzkg +Wn4rzKUuZExw9CmTMYPO42hDRv+HqGbRzAoBD3sZIvOo5aE4FQVq1gmyuzFAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUQRmg+HxSeNlKzRoSzrLC1HFEW9YwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM2MmUzMTM3MmUz MTM3MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBLhGuMA0GCSqGSIb3DQEBCwUAA4IBAQAHQXMruAS28XCi8/u6CcQC7NztLq/t M/MpiBQAm5TjYALjDL8b7v1asc4P/iSqkZvyE3Zc8yuTLqFQij1NP2r9uY+6Mp5I Yml2yhoILXIz2vr/z7OsgpWagqnpxzM2Xp/sGZv+98J+PyV7MNYekIhY8RBZL0HE 1o9jpkHJpG+AlXfN8+Eb9RJT3xn4fBigaTC0d7fa+hKeRdHVyYaHBemh3SgxQEnJ ROD66undmO/mSHlPSEzOPOzqbElix9ONH8EUcYZJsf3DsEgSz11rHJDjxQJII+6e 2hgV6jMUDp7pnzTi4GoxqWkELAYbDDtCxa5ioIYYuiK4+3tNuLYRzuvN -----END CERTIFICATE-----Generated at Fri Dec 5 19:00:27 2025 by rpki-client