This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e20333937343233.roa File: 34352e31332e35382e302f32342d3234203d3e20333937343233.roa (raw, json) Hash identifier: Lcol8/8Md1SQrQORZkuC+VU5B/+QQRah0bZdsIPd9+A= Subject key identifier: 5B:35:56:CF:BD:A1:BA:B1:CB:FE:D2:53:35:91:27:48:46:C5:EC:95 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 39E446C62E6CEB6595F4CC889C9D942A5937D57F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e20333937343233.roa Signing time: Fri 28 Nov 2025 11:49:54 +0000 ROA not before: Fri 28 Nov 2025 11:44:54 +0000 ROA not after: Fri 27 Nov 2026 11:49:54 +0000 asID: 397423 IP address blocks: 45.13.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 14:23:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:e4:46:c6:2e:6c:eb:65:95:f4:cc:88:9c:9d:94:2a:59:37:d5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:54 2025 GMT Not After : Nov 27 11:49:54 2026 GMT Subject: CN=5B3556CFBDA1BAB1CBFED2533591274846C5EC95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a9:89:cb:20:f2:17:00:aa:c2:e4:90:33:a4: e6:6b:e8:33:03:8f:ee:1e:72:c6:11:fd:be:f9:11: 2c:0c:29:2b:c9:01:28:78:c4:53:90:27:4e:68:43: af:ab:13:31:74:46:dc:f3:f5:7d:4e:11:85:dc:dd: 88:dc:91:93:10:1e:32:10:e2:5c:2d:fa:86:ba:0e: a0:42:19:13:1c:e9:7a:82:6a:2a:5a:c8:2d:86:2e: 01:40:be:18:78:88:bb:bc:1b:a8:21:9e:59:13:4b: 52:d9:74:c1:11:08:e1:5a:a6:da:c5:74:44:ee:f4: 99:b5:58:11:46:13:2d:18:f7:75:c2:a4:0c:6c:a6: 9d:e8:f9:61:45:49:d2:f1:5d:7a:cc:24:14:36:e6: 32:f6:64:c6:bd:0c:ba:4f:56:0a:04:19:38:6b:37: 8e:bf:96:cc:08:e2:22:78:4d:fa:ba:45:cb:c4:83: 33:64:8f:ab:fa:76:ca:f4:cf:71:cd:ea:42:5b:73: e9:92:50:a8:d4:71:e0:c0:0b:2a:71:e8:5a:59:38: 35:e2:65:69:6b:82:fa:05:ce:fa:c8:ab:63:d5:03: e5:cf:e1:e9:5a:43:31:5a:c4:80:2d:bc:80:76:7e: ab:db:6b:e3:15:79:6f:b9:c2:f6:61:18:14:21:5c: 63:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:56:CF:BD:A1:BA:B1:CB:FE:D2:53:35:91:27:48:46:C5:EC:95 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e31332e35382e302f32342d3234203d3e20333937343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.58.0/24 Signature Algorithm: sha256WithRSAEncryption ab:67:77:e3:cf:f9:7d:6c:99:a5:b6:1c:7f:d3:97:93:f4:34: e7:4a:e5:0f:a6:4e:ee:b2:f9:5d:89:7a:3c:6b:aa:3f:0d:f9: 38:16:b9:18:50:b4:77:68:cb:3a:bf:6a:ac:0d:93:c3:ec:0d: 2d:d6:9d:1d:cf:62:f9:35:02:de:76:e5:d4:08:03:4b:89:70: 1d:ba:8d:ce:47:0c:be:92:6d:dd:9c:af:bd:9f:2a:43:d3:0f: 40:0b:52:56:75:e1:0c:32:bf:73:af:f8:2b:0a:8c:30:f4:f8: f7:32:f0:19:ef:73:94:43:90:62:ec:bd:39:24:29:12:6d:35: 9f:b0:20:d4:b3:85:46:f7:77:44:b7:80:81:36:9b:27:1d:47: f2:f7:14:9a:f0:93:81:a3:79:42:bb:5d:0a:fc:9d:4f:08:88: ce:4c:cf:69:60:1b:71:db:5d:5e:bd:3c:ed:76:c4:2e:8b:e6: be:20:70:79:c0:ce:ab:c3:36:a8:52:9a:de:de:98:b6:e2:db: 05:8e:f4:31:78:fb:db:0e:49:16:d0:27:8e:79:a0:1c:5a:45: 42:1b:75:5f:f1:95:fc:a0:b9:b9:64:05:a9:9e:31:92:f9:f9: a8:40:db:9b:e4:a2:0d:13:b7:68:61:0e:97:cd:e3:29:48:28: 5d:b4:13:78 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUOeRGxi5s62WV9MyInJ2UKlk31X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTRaFw0yNjExMjcxMTQ5NTRaMDMxMTAvBgNV BAMTKDVCMzU1NkNGQkRBMUJBQjFDQkZFRDI1MzM1OTEyNzQ4NDZDNUVDOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqYnLIPIXAKrC5JAzpOZr6DMD j+4ecsYR/b75ESwMKSvJASh4xFOQJ05oQ6+rEzF0Rtzz9X1OEYXc3YjckZMQHjIQ 4lwt+oa6DqBCGRMc6XqCaipayC2GLgFAvhh4iLu8G6ghnlkTS1LZdMERCOFaptrF dETu9Jm1WBFGEy0Y93XCpAxspp3o+WFFSdLxXXrMJBQ25jL2ZMa9DLpPVgoEGThr N46/lswI4iJ4Tfq6RcvEgzNkj6v6dsr0z3HN6kJbc+mSUKjUceDACypx6FpZODXi ZWlrgvoFzvrIq2PVA+XP4elaQzFaxIAtvIB2fqvba+MVeW+5wvZhGBQhXGMPAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUWzVWz72hurHL/tJTNZEnSEbF7JUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMmUz NTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzQzMjMzLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALQ06MA0GCSqGSIb3DQEBCwUAA4IBAQCrZ3fjz/l9bJmlthx/05eT9DTnSuUP pk7usvldiXo8a6o/Dfk4FrkYULR3aMs6v2qsDZPD7A0t1p0dz2L5NQLeduXUCANL iXAduo3ORwy+km3dnK+9nypD0w9AC1JWdeEMMr9zr/grCoww9Pj3MvAZ73OUQ5Bi 7L05JCkSbTWfsCDUs4VG93dEt4CBNpsnHUfy9xSa8JOBo3lCu10K/J1PCIjOTM9p YBtx211evTztdsQui+a+IHB5wM6rwzaoUpre3pi24tsFjvQxePvbDkkW0CeOeaAc WkVCG3Vf8ZX8oLm5ZAWpnjGS+fmoQNub5KINE7doYQ6XzeMpSChdtBN4 -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:25 2025 by rpki-client