This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130352e302f32342d3234203d3e203632323430.roa File: 34352e3133302e3130352e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: yvN1LUv5vRBj+REuOak0+CK4sFJqleIgk6C11U7lTlM= Subject key identifier: C1:57:1E:E0:1C:BE:8B:8B:94:49:7A:DA:B3:37:21:91:CD:03:C1:57 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 22C0A5EF9B4B58440D2FDAA23F30C36D338ECB44 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130352e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:34 +0000 ROA not before: Fri 28 Nov 2025 11:44:34 +0000 ROA not after: Fri 27 Nov 2026 11:49:34 +0000 asID: 62240 IP address blocks: 45.130.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:c0:a5:ef:9b:4b:58:44:0d:2f:da:a2:3f:30:c3:6d:33:8e:cb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:34 2025 GMT Not After : Nov 27 11:49:34 2026 GMT Subject: CN=C1571EE01CBE8B8B94497ADAB3372191CD03C157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b0:97:e2:a0:c7:22:8e:8c:5a:b1:97:fb:40: 11:7e:d0:c4:15:75:8a:78:c5:62:c2:1a:43:73:8d: ce:47:3d:8f:fc:aa:73:67:c2:56:98:a4:ae:b6:75: 85:4d:98:4a:0d:68:b9:1a:ca:4e:76:e7:93:d9:53: 2d:e7:49:a5:2a:f4:8d:4c:d2:64:13:18:7a:ee:7a: cd:7d:95:e8:47:92:33:6f:fa:ca:be:74:2d:97:2e: b4:43:f2:11:e0:6b:1c:fb:50:70:de:f1:e6:37:20: e0:22:f3:51:b0:85:92:73:82:29:74:a9:06:a7:0b: 48:f6:cf:a6:88:7f:1c:df:4f:ee:f4:4e:ca:fc:fa: c3:ba:59:90:04:7e:01:1c:bb:ec:36:1f:db:f8:94: a6:96:e5:8b:31:5d:90:ae:7e:1f:7e:f7:a7:86:18: 81:70:e9:c9:7d:63:63:b3:a2:b3:23:7a:f7:c6:4b: 5a:33:6d:d1:55:6c:d7:e1:3f:9e:ca:b6:78:16:fe: 20:b3:30:9b:e5:eb:73:7a:1a:f7:b0:a4:ee:68:af: 2f:6d:ca:c6:d1:62:43:3c:4e:4d:3a:54:a0:79:82: fe:3d:54:f8:12:80:5b:6a:e6:b4:de:16:51:fe:6e: 87:9d:60:21:83:5d:51:d1:24:da:52:f8:ff:c8:d9: c8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:57:1E:E0:1C:BE:8B:8B:94:49:7A:DA:B3:37:21:91:CD:03:C1:57 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e3133302e3130352e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.105.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:d3:a0:b3:68:f7:96:18:2a:e2:01:3f:8a:1e:a9:6f:39:a5: 93:34:03:46:00:85:51:d2:7a:c2:50:44:9f:97:5a:a9:e8:e5: 4b:63:e5:6f:d1:15:3a:32:37:13:03:da:e5:8f:30:94:64:25: 26:91:95:9a:48:65:96:7e:48:10:27:69:04:30:b4:29:77:9b: c9:86:d3:bf:92:5c:64:04:56:d9:10:2c:8c:d0:ef:c0:71:98: 1c:32:bf:2e:82:fe:98:e2:2a:cb:50:01:36:5a:2a:30:27:d3: 22:40:94:0a:8e:a4:e6:f3:25:15:52:4f:53:9e:ad:fa:43:41: b7:ce:eb:2e:e4:d5:3b:a7:38:32:c7:02:86:c0:40:f4:ae:c5: ee:91:31:5a:67:9d:fc:a9:6c:ba:9b:21:3b:59:f3:2d:91:72: b2:2b:90:ec:d0:27:a2:09:e8:16:5d:c0:b5:b4:37:d1:d5:8b: c8:cf:03:4e:ad:2a:a9:aa:57:69:7f:06:6d:e3:8e:23:e7:57: e9:2c:01:54:1c:db:08:bd:77:47:c0:92:95:4a:b0:c8:4a:48: b4:f0:12:7a:81:6a:d2:86:fd:6d:b4:4d:7a:32:78:82:90:65: 51:f7:f0:21:a1:2c:4d:f9:12:6d:b2:3f:76:46:e0:06:0e:33: 78:e3:b0:2b -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUIsCl75tLWEQNL9qiPzDDbTOOy0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzRaFw0yNjExMjcxMTQ5MzRaMDMxMTAvBgNV BAMTKEMxNTcxRUUwMUNCRThCOEI5NDQ5N0FEQUIzMzcyMTkxQ0QwM0MxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrsJfioMcijoxasZf7QBF+0MQV dYp4xWLCGkNzjc5HPY/8qnNnwlaYpK62dYVNmEoNaLkayk5255PZUy3nSaUq9I1M 0mQTGHrues19lehHkjNv+sq+dC2XLrRD8hHgaxz7UHDe8eY3IOAi81GwhZJzgil0 qQanC0j2z6aIfxzfT+70Tsr8+sO6WZAEfgEcu+w2H9v4lKaW5YsxXZCufh9+96eG GIFw6cl9Y2OzorMjevfGS1ozbdFVbNfhP57KtngW/iCzMJvl63N6GvewpO5ory9t ysbRYkM8Tk06VKB5gv49VPgSgFtq5rTeFlH+boedYCGDXVHRJNpS+P/I2ciXAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUwVce4By+i4uUSXraszchkc0DwVcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzMTMzMzAy ZTMxMzAzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAtgmkwDQYJKoZIhvcNAQELBQADggEBAA3ToLNo95YYKuIBP4oeqW85pZM0 A0YAhVHSesJQRJ+XWqno5Utj5W/RFToyNxMD2uWPMJRkJSaRlZpIZZZ+SBAnaQQw tCl3m8mG07+SXGQEVtkQLIzQ78BxmBwyvy6C/pjiKstQATZaKjAn0yJAlAqOpObz JRVST1OerfpDQbfO6y7k1TunODLHAobAQPSuxe6RMVpnnfypbLqbITtZ8y2RcrIr kOzQJ6IJ6BZdwLW0N9HVi8jPA06tKqmqV2l/Bm3jjiPnV+ksAVQc2wi9d0fAkpVK sMhKSLTwEnqBatKG/W20TXoyeIKQZVH38CGhLE35Em2yP3ZG4AYOM3jjsCs= -----END CERTIFICATE-----Generated at Fri Dec 19 22:51:45 2025 by rpki-client