This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203631333137.roa File: 34352e36372e3232322e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: lnyCAetF8q7/rr7kG+1jL7I77L1V0gnXvUhdsj2QIhU= Subject key identifier: 34:2C:18:96:DF:FA:E8:7A:9A:D6:6C:2E:21:7A:10:8F:38:39:2C:F9 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 16C66419874CB0B5A4C93077437C9D3D69FEAA62 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203631333137.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 61317 IP address blocks: 45.67.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c6:64:19:87:4c:b0:b5:a4:c9:30:77:43:7c:9d:3d:69:fe:aa:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=342C1896DFFAE87A9AD66C2E217A108F38392CF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fd:de:4c:4f:ba:58:20:92:16:d4:98:96:5d: 94:59:6f:fd:75:79:ae:e4:6d:f7:0e:30:bb:5b:3e: 44:4b:15:ed:38:a8:cd:5f:17:e6:70:2a:80:53:4d: bc:1e:22:a5:b0:e6:26:98:4b:08:30:9f:94:61:70: 8f:b6:26:52:a9:78:c7:95:e3:04:bd:6b:7b:68:71: 10:fa:24:de:5e:0f:5c:a1:b0:03:05:4d:0d:27:dd: 61:2c:1f:58:06:fe:2b:6c:8b:af:b3:f1:7e:2d:1f: b2:ac:f9:20:cb:5c:22:fb:a5:70:9c:e2:49:3c:37: da:9c:65:2f:e4:fd:37:3d:d7:70:30:8c:02:33:00: 81:80:30:c6:dd:94:78:bd:83:51:1b:ab:0e:b2:5e: 8d:b1:0c:43:b2:50:2a:41:65:1b:65:bd:95:af:b6: c4:87:80:2e:e2:12:7b:8e:b8:91:0e:25:0c:3c:38: a3:d7:c7:0d:9a:fc:99:6e:5e:fa:50:88:7a:08:14: d9:4e:8e:1e:e1:49:01:2e:51:78:96:c1:6f:e6:a9: 9f:fe:3f:e1:e4:1f:e7:db:34:7c:77:32:ef:e3:ca: 98:bf:bf:67:31:e9:7a:22:38:97:70:bf:36:bf:9e: 45:ae:7c:fc:92:40:1a:26:d5:87:c2:ed:4a:b4:a1: 36:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2C:18:96:DF:FA:E8:7A:9A:D6:6C:2E:21:7A:10:8F:38:39:2C:F9 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e36372e3232322e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.222.0/24 Signature Algorithm: sha256WithRSAEncryption bc:30:b1:25:b4:c5:e9:51:7a:be:1a:99:11:f1:74:d8:6f:37: df:10:b3:30:41:b7:c9:03:ba:f6:77:73:2f:02:b3:bf:99:19: c3:21:dd:09:09:3e:d7:d7:6f:cb:6b:f7:26:10:9d:1f:8b:79: 26:a5:74:d0:70:44:a6:97:ef:0f:db:82:5d:40:cd:49:8b:4d: 0b:53:b2:48:a7:86:81:66:62:00:6c:62:e1:79:e2:cb:8e:7b: a6:fb:cc:29:66:a2:41:42:02:76:ed:7f:66:f7:0d:5f:3e:17: 16:08:e7:60:95:6d:b3:3c:1d:b6:45:cb:aa:3f:b8:bf:ed:71: 76:70:d5:06:d4:e4:8a:4a:48:43:60:eb:1d:0d:4e:92:d0:38: b1:52:81:ee:cd:9c:3e:86:ea:c7:82:85:ba:d7:53:22:49:69: 06:cc:09:03:99:83:96:d7:65:2b:42:01:a2:fa:dd:7c:12:de: f7:8e:37:cc:10:b5:fd:fd:13:ab:8a:d9:f3:68:f4:6d:85:07: 28:5e:45:a2:aa:76:65:ab:d9:0e:41:d9:63:63:74:fc:e1:76: 15:ee:da:c5:c8:cf:7d:4e:c9:7d:13:d3:f1:67:39:18:c8:14: 82:49:34:11:d1:da:39:50:cb:80:0b:9d:fa:77:07:7d:62:b9: bd:99:2c:01 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUFsZkGYdMsLWkyTB3Q3ydPWn+qmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKDM0MkMxODk2REZGQUU4N0E5QUQ2NkMyRTIxN0ExMDhGMzgzOTJDRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH/d5MT7pYIJIW1JiWXZRZb/11 ea7kbfcOMLtbPkRLFe04qM1fF+ZwKoBTTbweIqWw5iaYSwgwn5RhcI+2JlKpeMeV 4wS9a3tocRD6JN5eD1yhsAMFTQ0n3WEsH1gG/itsi6+z8X4tH7Ks+SDLXCL7pXCc 4kk8N9qcZS/k/Tc913AwjAIzAIGAMMbdlHi9g1Ebqw6yXo2xDEOyUCpBZRtlvZWv tsSHgC7iEnuOuJEOJQw8OKPXxw2a/JluXvpQiHoIFNlOjh7hSQEuUXiWwW/mqZ/+ P+HkH+fbNHx3Mu/jypi/v2cx6XoiOJdwvza/nkWufPySQBom1YfC7Uq0oTYpAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUNCwYlt/66Hqa1mwuIXoQjzg5LPkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzNjM3MmUz MjMyMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALUPeMA0GCSqGSIb3DQEBCwUAA4IBAQC8MLEltMXpUXq+GpkR8XTYbzffELMw QbfJA7r2d3MvArO/mRnDId0JCT7X12/La/cmEJ0fi3kmpXTQcESml+8P24JdQM1J i00LU7JIp4aBZmIAbGLheeLLjnum+8wpZqJBQgJ27X9m9w1fPhcWCOdglW2zPB22 RcuqP7i/7XF2cNUG1OSKSkhDYOsdDU6S0DixUoHuzZw+hurHgoW611MiSWkGzAkD mYOW12UrQgGi+t18Et73jjfMELX9/ROritnzaPRthQcoXkWiqnZlq9kOQdljY3T8 4XYV7trFyM99Tsl9E9PxZzkYyBSCSTQR0do5UMuAC536dwd9Yrm9mSwB -----END CERTIFICATE-----Generated at Fri Dec 19 23:23:52 2025 by rpki-client