This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20323038393035.roa File: 34352e38382e31302e302f32342d3234203d3e20323038393035.roa (raw, json) Hash identifier: BHapRYbNju6hwZ6emNPrYuwSQ2OihFm78xu/yDCDgLw= Subject key identifier: 14:0B:4F:FD:5C:87:CD:51:9D:DA:D0:DE:EF:23:3F:1C:54:CE:EC:8F Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Certificate serial: 2F8C5F0B2066A02B6BBB281B5F0F02895C6B4971 Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20323038393035.roa Signing time: Fri 28 Nov 2025 15:33:01 +0000 ROA not before: Fri 28 Nov 2025 15:28:01 +0000 ROA not after: Fri 27 Nov 2026 15:33:01 +0000 asID: 208905 IP address blocks: 45.88.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8c:5f:0b:20:66:a0:2b:6b:bb:28:1b:5f:0f:02:89:5c:6b:49:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Validity Not Before: Nov 28 15:28:01 2025 GMT Not After : Nov 27 15:33:01 2026 GMT Subject: CN=140B4FFD5C87CD519DDAD0DEEF233F1C54CEEC8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ac:c2:41:72:e1:ca:15:d9:62:54:e1:47:e8: 52:5c:ef:04:4e:70:e6:07:16:68:f2:43:a5:95:fd: 58:2b:54:a6:5f:ed:5a:93:54:80:13:dc:13:28:46: 1f:b9:95:06:d5:af:80:a6:79:b8:9d:b5:f9:41:3a: 4d:a9:0b:e6:ef:31:e7:f4:50:28:d8:d1:48:12:15: 58:41:58:ea:9a:b5:ab:f1:b9:d2:e5:24:9a:5b:9f: 89:a3:53:38:99:d8:a5:85:a9:19:6b:a6:dc:61:29: db:8c:21:35:0c:8b:a4:7a:ef:59:1c:92:2a:7c:16: f4:e5:4d:f1:73:3a:e8:4e:22:e8:fa:c2:61:6a:9d: 86:1d:7b:d5:df:fc:08:be:b5:fa:46:d5:35:c6:c9: df:c1:6e:53:2e:a4:64:c3:90:99:94:f1:9a:46:7d: b5:8b:35:e0:12:83:2a:60:27:79:12:aa:de:bc:ec: c6:ee:30:c9:9f:d4:13:01:a9:61:87:30:56:0d:b2: e4:1a:0a:d4:6f:58:82:e0:e2:f4:33:3f:84:c7:b5: 9f:0e:05:8c:8d:32:8b:51:6a:e4:32:92:a7:aa:27: 3e:1b:de:47:16:f7:47:39:68:b2:77:46:7f:ab:4d: 63:de:ca:08:1d:0b:f2:36:ac:e0:57:87:dc:0d:e1: 26:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0B:4F:FD:5C:87:CD:51:9D:DA:D0:DE:EF:23:3F:1C:54:CE:EC:8F X509v3 Authority Key Identifier: keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e31302e302f32342d3234203d3e20323038393035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.10.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:f2:18:3f:e3:1e:ce:e0:30:24:f6:f3:00:7d:55:11:dd:20: f7:07:16:13:a1:92:9e:df:02:7f:24:ab:54:3e:b7:26:a6:c6: c5:8d:27:f4:de:74:87:d7:6b:df:ee:c8:a9:42:ca:6b:ed:ab: 3c:41:d7:6f:3d:93:d9:9b:1c:8e:d4:aa:bc:d1:de:8a:3d:6f: c7:fb:26:fb:92:b6:88:54:ab:be:95:5e:6f:69:a5:b3:ef:90: 44:96:a8:f9:ad:6b:09:3b:fa:75:d2:ef:9a:64:e3:4b:90:81: a3:41:fe:f3:b0:c9:29:45:f2:76:d2:5f:5e:3b:b5:08:de:0d: 88:2d:78:39:0c:24:5c:32:5b:73:82:aa:63:bb:e8:df:38:ea: e1:c7:8a:f3:48:1a:50:0e:17:77:79:10:fa:a6:c1:dc:f4:b5: 5b:0a:04:d4:98:0a:c4:96:b6:57:cb:7d:dc:79:67:75:f2:e3: db:c2:b8:cc:95:13:60:6d:16:39:81:e5:d8:51:0e:88:2f:11: 40:9d:46:8e:1d:72:a6:fd:53:d2:c7:39:0d:fb:7b:be:4d:cd: cd:47:d8:70:8f:f8:34:aa:89:40:fe:51:75:f9:39:a3:bb:d2: 17:57:42:46:13:ca:3f:2f:42:7c:9d:b6:6c:52:af:14:1a:93: 80:1e:48:66 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUL4xfCyBmoCtruygbXw8CiVxrSXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl OTczMjY2ZDAeFw0yNTExMjgxNTI4MDFaFw0yNjExMjcxNTMzMDFaMDMxMTAvBgNV BAMTKDE0MEI0RkZENUM4N0NENTE5RERBRDBERUVGMjMzRjFDNTRDRUVDOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgrMJBcuHKFdliVOFH6FJc7wRO cOYHFmjyQ6WV/VgrVKZf7VqTVIAT3BMoRh+5lQbVr4CmebidtflBOk2pC+bvMef0 UCjY0UgSFVhBWOqatavxudLlJJpbn4mjUziZ2KWFqRlrptxhKduMITUMi6R671kc kip8FvTlTfFzOuhOIuj6wmFqnYYde9Xf/Ai+tfpG1TXGyd/BblMupGTDkJmU8ZpG fbWLNeASgypgJ3kSqt687MbuMMmf1BMBqWGHMFYNsuQaCtRvWILg4vQzP4THtZ8O BYyNMotRauQykqeqJz4b3kcW90c5aLJ3Rn+rTWPeyggdC/I2rOBXh9wN4SZXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUFAtP/VyHzVGd2tDe7yM/HFTO7I8wHwYDVR0j BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4 MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzgzODJlMzEzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODM5MzAzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1Y CjANBgkqhkiG9w0BAQsFAAOCAQEAKvIYP+MezuAwJPbzAH1VEd0g9wcWE6GSnt8C fySrVD63JqbGxY0n9N50h9dr3+7IqULKa+2rPEHXbz2T2ZscjtSqvNHeij1vx/sm +5K2iFSrvpVeb2mls++QRJao+a1rCTv6ddLvmmTjS5CBo0H+87DJKUXydtJfXju1 CN4NiC14OQwkXDJbc4KqY7vo3zjq4ceK80gaUA4Xd3kQ+qbB3PS1WwoE1JgKxJa2 V8t93HlndfLj28K4zJUTYG0WOYHl2FEOiC8RQJ1Gjh1ypv1T0sc5Dft7vk3NzUfY cI/4NKqJQP5Rdfk5o7vSF1dCRhPKPy9CfJ22bFKvFBqTgB5IZg== -----END CERTIFICATE-----Generated at Mon Dec 1 04:25:16 2025 by rpki-client