This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa File: 34352e39352e36352e302f32342d3234203d3e20323135373130.roa (raw, json) Hash identifier: dF0q35w2KA0neeMPOaebLzzr7a28F6uxnXDW3p12DWE= Subject key identifier: FC:65:AE:CB:FD:4A:53:DF:1D:B1:9D:64:59:A3:50:D8:89:BF:3C:A2 Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Certificate serial: 1BE2B66E30C7918D891ED78B521DA0888BA01637 Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa Signing time: Mon 15 Dec 2025 12:55:32 +0000 ROA not before: Mon 15 Dec 2025 12:50:32 +0000 ROA not after: Mon 14 Dec 2026 12:55:32 +0000 asID: 215710 IP address blocks: 45.95.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:36:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e2:b6:6e:30:c7:91:8d:89:1e:d7:8b:52:1d:a0:88:8b:a0:16:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Validity Not Before: Dec 15 12:50:32 2025 GMT Not After : Dec 14 12:55:32 2026 GMT Subject: CN=FC65AECBFD4A53DF1DB19D6459A350D889BF3CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:79:0f:d2:a1:4e:b9:b0:7e:29:b0:8d:d2: 7f:e6:32:84:2b:bb:3e:d2:0e:85:03:55:3e:99:03: 8a:a1:0d:a7:a7:65:ea:46:25:40:68:f7:4f:36:d7: bc:52:fe:72:15:cb:3b:4c:29:f1:10:df:cb:09:34: ff:ac:22:25:d6:a9:ce:f9:ec:d8:a2:8c:15:76:f7: b1:94:f6:47:db:76:f7:9f:0e:2d:63:ea:ee:78:8f: e4:6c:05:e2:33:b3:32:2d:f6:77:1f:56:2b:d4:1f: 94:31:9c:20:1a:32:8b:dc:bf:19:13:74:29:33:40: 37:58:a9:5f:5e:64:f8:92:fc:31:27:88:e7:c2:44: 63:7e:25:72:f2:24:63:96:48:81:cf:10:6c:ee:44: ad:27:6a:45:99:0d:48:96:79:9b:f8:47:fe:48:70: e3:b9:1e:31:3a:7b:ad:da:aa:82:22:79:d4:73:9f: 68:c0:35:78:e1:21:ee:46:58:a5:0f:5a:3e:07:09: 54:1d:16:c5:38:51:53:b2:c1:2c:7c:fd:19:88:d9: c7:24:2f:1c:35:21:52:6c:cd:97:59:fe:90:93:50: 1f:ff:9d:a2:6c:90:b4:ac:39:2e:3c:eb:fc:dc:b4: 75:67:25:d5:d9:b1:c6:22:28:21:16:48:83:2f:77: 09:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:65:AE:CB:FD:4A:53:DF:1D:B1:9D:64:59:A3:50:D8:89:BF:3C:A2 X509v3 Authority Key Identifier: keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323135373130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.65.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:78:e5:93:9a:19:10:49:eb:97:16:bf:76:69:87:bc:f8:8e: f6:38:fc:6b:c7:9c:ac:9d:48:f6:2f:fc:f8:e6:d8:91:21:b1: 66:f9:b9:0a:c8:22:e3:c2:38:8d:1f:eb:07:0c:36:62:44:89: 3a:70:c2:19:c7:ec:7b:2b:78:57:a5:21:e3:d1:4f:7f:ff:73: 1f:41:00:eb:62:90:ac:9a:f1:0a:69:7d:6c:ac:b1:c8:8d:d2: 47:76:60:bc:23:2a:3a:2c:13:e1:9e:86:d9:08:31:b2:d6:ff: 51:d4:f6:93:9b:d6:8c:3e:e2:68:98:64:90:5b:18:4d:ae:50: a6:f8:4b:fc:23:e2:bf:b9:0e:7e:99:18:78:3b:b6:b9:19:6a: 06:88:36:00:d5:71:78:73:8e:88:d9:e4:80:7a:36:90:ac:b0: 6c:a6:7e:2f:64:56:ea:1b:de:17:ad:66:58:74:17:66:12:8e: 17:e0:c5:80:45:ba:3b:33:72:fa:4f:57:ed:a8:85:55:bb:18: 35:7a:ad:de:d8:a3:3c:a3:35:9b:34:c7:0b:44:9d:c1:b3:a6: 33:c0:27:19:1d:45:b2:d2:2a:57:16:8f:e1:59:a3:4f:e7:7e: 55:59:f8:06:e9:eb:85:62:e7:3b:02:06:73:e7:45:18:4f:91: 61:32:a5:63 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUG+K2bjDHkY2JHteLUh2giIugFjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl OTczMjY2ZDAeFw0yNTEyMTUxMjUwMzJaFw0yNjEyMTQxMjU1MzJaMDMxMTAvBgNV BAMTKEZDNjVBRUNCRkQ0QTUzREYxREIxOUQ2NDU5QTM1MEQ4ODlCRjNDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCte3kP0qFOubB+KbCN0n/mMoQr uz7SDoUDVT6ZA4qhDaenZepGJUBo908217xS/nIVyztMKfEQ38sJNP+sIiXWqc75 7NiijBV297GU9kfbdvefDi1j6u54j+RsBeIzszIt9ncfVivUH5QxnCAaMovcvxkT dCkzQDdYqV9eZPiS/DEniOfCRGN+JXLyJGOWSIHPEGzuRK0nakWZDUiWeZv4R/5I cOO5HjE6e63aqoIiedRzn2jANXjhIe5GWKUPWj4HCVQdFsU4UVOywSx8/RmI2cck Lxw1IVJszZdZ/pCTUB//naJskLSsOS486/zctHVnJdXZscYiKCEWSIMvdwljAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU/GWuy/1KU98dsZ1kWaNQ2Im/PKIwHwYDVR0j BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4 MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzkzNTJlMzYzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNTM3MzEzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1f QTANBgkqhkiG9w0BAQsFAAOCAQEAi3jlk5oZEEnrlxa/dmmHvPiO9jj8a8ecrJ1I 9i/8+ObYkSGxZvm5Csgi48I4jR/rBww2YkSJOnDCGcfseyt4V6Uh49FPf/9zH0EA 62KQrJrxCml9bKyxyI3SR3ZgvCMqOiwT4Z6G2Qgxstb/UdT2k5vWjD7iaJhkkFsY Ta5QpvhL/CPiv7kOfpkYeDu2uRlqBog2ANVxeHOOiNnkgHo2kKywbKZ+L2RW6hve F61mWHQXZhKOF+DFgEW6OzNy+k9X7aiFVbsYNXqt3tijPKM1mzTHC0SdwbOmM8An GR1FstIqVxaP4VmjT+d+VVn4BunrhWLnOwIGc+dFGE+RYTKlYw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:25:08 2025 by rpki-client