This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133392e302f32342d3234203d3e203632323430.roa File: 34352e38342e3133392e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: NZn6IY19XH/kPbEYRLGROgDV5z3n4LFl/9MX9cgB/tg= Subject key identifier: 44:D1:CA:57:73:28:FB:93:A2:AC:F6:31:63:30:B8:63:25:5E:D4:88 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 78865AE9BDFAE902544713A53D809FDF0F097B52 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133392e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 62240 IP address blocks: 45.84.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:86:5a:e9:bd:fa:e9:02:54:47:13:a5:3d:80:9f:df:0f:09:7b:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=44D1CA577328FB93A2ACF6316330B863255ED488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:ba:e5:d6:4d:ec:1f:bb:70:e5:f9:04:6b: 28:e9:32:6c:95:8a:c1:bb:13:fe:b3:d6:40:27:e4: 18:07:05:da:8e:e8:e4:63:78:ae:91:6b:0b:c5:b5: f5:df:5f:69:cd:9b:66:2a:ab:29:1c:06:00:e9:2c: 97:ac:d1:05:ac:41:84:5c:e3:4c:b0:cf:5a:e2:8c: 4e:7c:52:c6:4b:cd:f6:a3:b2:67:b6:2b:1b:b6:54: 5e:77:f9:16:4d:38:eb:d0:6b:a3:ef:49:93:85:f7: 6c:a0:ba:a0:95:12:34:1f:c6:5e:0c:48:4b:a5:07: 73:68:33:b5:3e:9e:19:68:1f:5c:13:8b:d7:6a:85: d8:1c:b7:77:4a:c9:b5:00:09:c8:64:9e:40:f6:c0: 44:a3:5e:ad:bd:09:7a:cc:8a:18:8a:46:e8:58:da: e6:95:2f:bb:29:f9:b5:27:cc:a5:39:75:00:f1:95: a6:4e:73:75:05:3d:e2:4e:1b:99:80:e4:3a:ba:ff: 7b:27:64:11:dd:6f:ae:f2:45:dd:d4:c9:32:85:e9: ef:bc:71:64:25:0f:37:4d:28:fc:65:b7:14:cc:1b: ae:b1:98:da:f8:a1:e5:9b:cf:65:a7:76:32:84:0a: 3f:02:f3:71:7a:87:3e:2e:aa:7c:5e:da:97:6e:4f: 29:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D1:CA:57:73:28:FB:93:A2:AC:F6:31:63:30:B8:63:25:5E:D4:88 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38342e3133392e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.139.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:75:7e:72:95:1b:29:db:a9:0f:e6:41:c3:d0:61:85:99:03: 9b:13:ee:15:43:86:64:16:cf:42:30:eb:c7:8b:fd:d4:bc:c9: 21:e9:a5:3c:5e:c6:d5:a2:40:d6:04:c7:25:8c:78:42:4a:9d: 3b:21:ac:c9:71:79:9a:23:92:82:b9:9a:e3:9f:c7:bf:89:0b: b9:30:25:fe:17:56:7b:7a:c7:dd:4f:2e:8f:a1:c2:37:7a:35: c7:95:3e:ab:8a:2d:b5:b0:2c:0f:e8:6b:06:7c:09:8d:c9:d6: 7a:38:74:91:c7:6c:bd:07:94:81:57:7b:5b:b0:77:82:9c:9d: e6:79:99:57:b1:da:35:a9:0e:59:77:8e:a8:21:79:13:15:a5: 07:ba:fb:9a:a7:7e:3b:75:a3:39:9a:c6:0b:15:8e:39:09:c1: 8d:b6:d3:1e:e0:1c:3a:34:59:e1:e6:4e:9c:47:5f:02:b5:44: a2:ed:12:92:3b:91:61:d3:03:6b:e9:c6:07:81:86:31:c7:e5: d8:a3:97:e1:6a:70:7d:a9:1c:25:bd:6c:6f:0d:8f:d8:91:06: 3a:e8:07:97:72:b8:2a:53:bf:a8:1e:d3:24:bc:13:f1:62:99: a4:80:b0:fb:41:12:a1:90:3a:6c:b6:b1:c6:7a:58:17:82:0c: 43:a8:d6:8a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUeIZa6b366QJURxOlPYCf3w8Je1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDQ0RDFDQTU3NzMyOEZCOTNBMkFDRjYzMTYzMzBCODYzMjU1RUQ0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyrrl1k3sH7tw5fkEayjpMmyV isG7E/6z1kAn5BgHBdqO6ORjeK6RawvFtfXfX2nNm2YqqykcBgDpLJes0QWsQYRc 40ywz1rijE58UsZLzfajsme2Kxu2VF53+RZNOOvQa6PvSZOF92yguqCVEjQfxl4M SEulB3NoM7U+nhloH1wTi9dqhdgct3dKybUACchknkD2wESjXq29CXrMihiKRuhY 2uaVL7sp+bUnzKU5dQDxlaZOc3UFPeJOG5mA5Dq6/3snZBHdb67yRd3UyTKF6e+8 cWQlDzdNKPxltxTMG66xmNr4oeWbz2WndjKECj8C83F6hz4uqnxe2pduTynlAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQURNHKV3Mo+5OirPYxYzC4YyVe1IgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM0MmUz MTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzIzNDMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALVSLMA0GCSqGSIb3DQEBCwUAA4IBAQBMdX5ylRsp26kP5kHD0GGFmQObE+4V Q4ZkFs9CMOvHi/3UvMkh6aU8XsbVokDWBMcljHhCSp07IazJcXmaI5KCuZrjn8e/ iQu5MCX+F1Z7esfdTy6PocI3ejXHlT6rii21sCwP6GsGfAmNydZ6OHSRx2y9B5SB V3tbsHeCnJ3meZlXsdo1qQ5Zd46oIXkTFaUHuvuap347daM5msYLFY45CcGNttMe 4Bw6NFnh5k6cR18CtUSi7RKSO5Fh0wNr6cYHgYYxx+XYo5fhanB9qRwlvWxvDY/Y kQY66AeXcrgqU7+oHtMkvBPxYpmkgLD7QRKhkDpstrHGelgXggxDqNaK -----END CERTIFICATE-----Generated at Fri Dec 19 22:51:25 2025 by rpki-client