This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134352e302f32342d3234203d3e203632323430.roa File: 34352e38352e3134352e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: 2RROgvfp/XzDWdJIZ+opnSbridrxmCQFLZ4H18Ow0DI= Subject key identifier: A4:00:33:30:C9:4A:49:6F:C5:3B:F1:20:64:CE:44:30:F8:4C:60:90 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 63F6CF5B5A9B499A5F4DE8B98B0A4F42FE67AFB9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134352e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:25 +0000 ROA not before: Fri 28 Nov 2025 11:44:25 +0000 ROA not after: Fri 27 Nov 2026 11:49:25 +0000 asID: 62240 IP address blocks: 45.85.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:f6:cf:5b:5a:9b:49:9a:5f:4d:e8:b9:8b:0a:4f:42:fe:67:af:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:25 2025 GMT Not After : Nov 27 11:49:25 2026 GMT Subject: CN=A4003330C94A496FC53BF12064CE4430F84C6090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:1d:56:df:cd:99:40:34:a6:0d:0e:c2:af: 82:11:ca:1f:29:76:01:34:ab:6c:ee:c2:c7:5c:85: 8f:ef:43:90:74:9f:8a:61:fc:99:d7:8e:b7:82:65: 45:15:dc:c2:d2:c3:fa:00:7d:ec:04:7a:be:34:9c: 44:9f:e8:a2:16:40:89:98:85:41:53:88:08:36:6f: 70:b3:91:28:ee:c7:2f:09:6b:be:19:76:ee:46:32: ee:e7:df:19:db:c9:8b:8e:a7:a4:59:0d:9a:d0:67: 93:c8:ec:d3:20:a0:0a:50:36:e9:5b:9d:21:24:43: 6d:f1:12:24:31:fd:92:0b:b6:cc:98:c4:05:77:b7: 1c:2f:06:bf:4e:5b:d6:d9:63:b5:80:67:9f:84:50: 2a:42:20:66:f0:3c:22:a6:ec:1a:af:b5:03:96:65: ac:bc:2a:22:7c:53:33:8b:8c:78:96:69:28:e9:11: fe:16:3f:98:94:e4:07:42:3a:e8:73:6a:d2:3d:b7: 8a:d2:46:4a:6e:83:9c:21:4e:6b:53:57:56:8f:7d: 17:0d:b7:f5:29:c0:fe:40:55:a9:20:2d:20:55:4d: 1d:72:85:6a:8f:7e:ae:ee:40:44:89:74:5c:65:7a: bb:3c:d8:b5:bc:4f:88:5c:31:d2:5d:c8:4c:07:d2: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:00:33:30:C9:4A:49:6F:C5:3B:F1:20:64:CE:44:30:F8:4C:60:90 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/34352e38352e3134352e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.145.0/24 Signature Algorithm: sha256WithRSAEncryption 82:4c:ab:64:17:ba:19:9f:fe:94:7b:d5:a0:e2:ef:46:71:5d: 55:d7:84:8f:13:17:d9:d9:fa:5d:31:0d:c8:67:7b:c2:5d:63: 04:96:db:0c:69:4d:a5:3b:9b:9f:22:f8:9d:a5:d7:77:96:45: fb:9f:59:cf:69:66:ee:d8:6e:35:0e:d9:f1:dd:19:11:98:9f: c0:b7:bc:d3:78:11:3d:41:ed:81:c3:3c:a1:a0:dd:89:cd:39: 6b:b8:82:40:cc:bd:8c:4b:af:2b:72:90:dd:70:32:31:84:9c: af:aa:0b:0d:95:07:cd:fe:28:32:e9:21:52:19:58:15:5b:0b: 70:09:d9:c8:96:b1:a9:8a:c8:99:d7:b6:d1:e2:81:01:45:47: aa:bb:c1:9e:64:e5:de:0f:09:fe:70:ef:6f:50:14:24:1b:d6: 1e:d0:d3:10:5a:a5:a3:44:b9:bd:81:4f:c7:2e:b1:63:b5:b0: d3:26:45:e2:4a:0b:b2:79:14:19:92:89:01:a3:2d:ba:60:a3: eb:bd:f8:b6:2f:7d:84:53:b7:1e:63:52:57:fb:14:5a:f5:25: 03:c0:94:17:2f:9c:d8:6d:2d:6c:e3:60:a6:73:e7:d5:57:96: a4:af:e5:9b:78:01:55:32:e0:90:ce:46:14:66:d2:d4:42:96: 24:46:ef:2f -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUY/bPW1qbSZpfTei5iwpPQv5nr7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjVaFw0yNjExMjcxMTQ5MjVaMDMxMTAvBgNV BAMTKEE0MDAzMzMwQzk0QTQ5NkZDNTNCRjEyMDY0Q0U0NDMwRjg0QzYwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQx1W382ZQDSmDQ7Cr4IRyh8p dgE0q2zuwsdchY/vQ5B0n4ph/JnXjreCZUUV3MLSw/oAfewEer40nESf6KIWQImY hUFTiAg2b3CzkSjuxy8Ja74Zdu5GMu7n3xnbyYuOp6RZDZrQZ5PI7NMgoApQNulb nSEkQ23xEiQx/ZILtsyYxAV3txwvBr9OW9bZY7WAZ5+EUCpCIGbwPCKm7BqvtQOW Zay8KiJ8UzOLjHiWaSjpEf4WP5iU5AdCOuhzatI9t4rSRkpug5whTmtTV1aPfRcN t/UpwP5AVakgLSBVTR1yhWqPfq7uQESJdFxlers82LW8T4hcMdJdyEwH0jhhAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUpAAzMMlKSW/FO/EgZM5EMPhMYJAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNDM1MmUzODM1MmUz MTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMyMzIzNDMwLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQALVWRMA0GCSqGSIb3DQEBCwUAA4IBAQCCTKtkF7oZn/6Ue9Wg4u9GcV1V14SP ExfZ2fpdMQ3IZ3vCXWMEltsMaU2lO5ufIvidpdd3lkX7n1nPaWbu2G41Dtnx3RkR mJ/At7zTeBE9Qe2BwzyhoN2JzTlruIJAzL2MS68rcpDdcDIxhJyvqgsNlQfN/igy 6SFSGVgVWwtwCdnIlrGpisiZ17bR4oEBRUequ8GeZOXeDwn+cO9vUBQkG9Ye0NMQ WqWjRLm9gU/HLrFjtbDTJkXiSguyeRQZkokBoy26YKPrvfi2L32EU7ceY1JX+xRa 9SUDwJQXL5zYbS1s42Cmc+fVV5akr+WbeAFVMuCQzkYUZtLUQpYkRu8v -----END CERTIFICATE-----Generated at Fri Dec 19 22:51:22 2025 by rpki-client