This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa File: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: ckwThy9Ftd6Jb/nTbj53dd12b3F3RSR9Etp8JSW5svM= Subject key identifier: 9A:62:55:C1:E8:F7:AD:83:29:7D:F1:AD:D4:F9:5B:04:C9:06:25:8D Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 7CE6C3001865C766DA2844CF9E78F74B1CD637F4 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa Signing time: Fri 14 Nov 2025 10:55:11 +0000 ROA not before: Fri 14 Nov 2025 10:50:11 +0000 ROA not after: Fri 13 Nov 2026 10:55:11 +0000 asID: 9009 IP address blocks: 46.183.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 03:27:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e6:c3:00:18:65:c7:66:da:28:44:cf:9e:78:f7:4b:1c:d6:37:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Nov 14 10:50:11 2025 GMT Not After : Nov 13 10:55:11 2026 GMT Subject: CN=9A6255C1E8F7AD83297DF1ADD4F95B04C906258D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:5d:72:af:2e:b1:2a:dd:3c:45:18:00:a7: 7b:91:1a:af:5e:6b:e4:dd:c6:d6:7e:d2:68:6a:6a: 61:0f:a7:96:e6:ec:1b:46:5a:58:cb:1c:85:04:7f: f6:c3:d2:8c:fa:33:56:b5:78:0a:d7:dd:29:d5:da: 55:19:5c:de:c5:10:b9:e3:89:71:20:d1:97:47:35: 19:3d:6b:1e:62:89:10:a5:4c:54:71:d5:2f:ae:4f: 66:a7:82:5c:1f:9a:22:df:96:5e:63:c6:12:ee:5a: fa:5a:f8:61:66:06:1e:82:8e:86:6b:47:04:e0:5e: 91:11:e7:77:a9:44:43:34:1e:8d:2a:6c:91:97:9f: e1:4f:3c:85:5f:53:f9:50:64:5a:29:76:c8:9c:c8: 31:99:2b:a2:20:db:66:0b:61:b7:d6:b0:cc:43:2f: 46:93:60:74:eb:d9:bb:53:e1:11:0d:58:2a:13:27: 75:40:7d:e2:34:6b:ea:81:43:fd:68:bc:54:61:b1: 98:7c:c1:6b:fc:77:71:38:db:bb:b3:c9:aa:64:dc: a8:31:0a:b7:b3:a2:d0:43:28:27:de:e0:80:92:01: 67:7e:3d:d4:48:59:36:26:ed:0e:55:60:5f:33:40: 5f:4b:c4:41:a0:21:66:00:94:d2:fe:64:a2:fe:d8: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:62:55:C1:E8:F7:AD:83:29:7D:F1:AD:D4:F9:5B:04:C9:06:25:8D X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32362e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.26.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:00:49:f0:46:51:5f:bb:46:73:21:34:82:7a:b4:6e:a1:7d: fc:ea:34:7b:ec:e4:54:19:85:81:11:b3:b5:f5:20:a4:c1:ae: 97:f6:b4:d4:7f:c8:b4:6a:14:46:e8:2b:15:49:21:9f:3e:ca: 1e:a1:32:1e:1a:c5:ef:7e:af:0e:d2:37:20:94:7b:6a:c1:55: d1:af:98:53:9c:c9:a4:aa:63:d6:15:68:92:68:9d:d4:c1:db: f9:fa:69:f2:56:12:6a:5c:5f:66:0d:65:3d:a9:da:a0:cc:22: 20:fc:0c:0c:3a:59:52:b9:e8:db:61:04:51:76:1c:2e:8b:12: 68:25:da:f3:b0:59:70:0c:c4:31:cf:94:2b:00:f8:ff:d2:77: 1c:88:03:ae:4c:9a:f6:47:cf:30:a9:93:e2:8f:68:14:4f:f3: 84:bd:30:55:73:ab:80:7f:ef:58:d0:f8:94:48:45:31:f3:30: c5:4e:ce:ca:70:01:26:37:8b:1a:dd:b9:61:e5:d6:9b:e3:a3: 46:4d:18:04:49:49:6a:15:99:96:8a:3c:db:8c:63:ac:f1:9b: ca:10:53:ea:30:d3:b4:5c:36:ac:f2:46:21:1f:e1:3c:c2:8f: 2a:5b:04:b1:38:7d:d1:42:f0:33:1d:83:16:af:93:1d:67:ef: 76:ca:85:19 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUfObDABhlx2baKETPnnj3SxzWN/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNTExMTQxMDUwMTFaFw0yNjExMTMxMDU1MTFaMDMxMTAvBgNV BAMTKDlBNjI1NUMxRThGN0FEODMyOTdERjFBREQ0Rjk1QjA0QzkwNjI1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAjF1yry6xKt08RRgAp3uRGq9e a+TdxtZ+0mhqamEPp5bm7BtGWljLHIUEf/bD0oz6M1a1eArX3SnV2lUZXN7FELnj iXEg0ZdHNRk9ax5iiRClTFRx1S+uT2anglwfmiLfll5jxhLuWvpa+GFmBh6CjoZr RwTgXpER53epREM0Ho0qbJGXn+FPPIVfU/lQZFopdsicyDGZK6Ig22YLYbfWsMxD L0aTYHTr2btT4RENWCoTJ3VAfeI0a+qBQ/1ovFRhsZh8wWv8d3E427uzyapk3Kgx CrezotBDKCfe4ICSAWd+PdRIWTYm7Q5VYF8zQF9LxEGgIWYAlNL+ZKL+2DsTAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUmmJVwej3rYMpffGt1PlbBMkGJY0wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAutxow DQYJKoZIhvcNAQELBQADggEBAJ8ASfBGUV+7RnMhNIJ6tG6hffzqNHvs5FQZhYER s7X1IKTBrpf2tNR/yLRqFEboKxVJIZ8+yh6hMh4axe9+rw7SNyCUe2rBVdGvmFOc yaSqY9YVaJJondTB2/n6afJWEmpcX2YNZT2p2qDMIiD8DAw6WVK56NthBFF2HC6L Emgl2vOwWXAMxDHPlCsA+P/SdxyIA65MmvZHzzCpk+KPaBRP84S9MFVzq4B/71jQ +JRIRTHzMMVOzspwASY3ixrduWHl1pvjo0ZNGARJSWoVmZaKPNuMY6zxm8oQU+ow 07RcNqzyRiEf4TzCjypbBLE4fdFC8DMdgxavkx1n73bKhRk= -----END CERTIFICATE-----Generated at Tue Dec 9 20:23:52 2025 by rpki-client