This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa File: 34352e39352e36362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: FMoD7Lw2WwKLLMJCbTA45RhWGZcomhDdl55vPp/Hgf8= Subject key identifier: 58:65:D8:31:78:4C:06:CC:E5:45:AF:1D:06:D5:E1:C5:61:95:76:55 Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Certificate serial: 7A1EFC9BF12137E736EF7E2391FE8B73C9123FBC Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 08:38:46 +0000 ROA not before: Mon 08 Dec 2025 08:33:46 +0000 ROA not after: Mon 07 Dec 2026 08:38:46 +0000 asID: 834 IP address blocks: 45.95.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 14:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1e:fc:9b:f1:21:37:e7:36:ef:7e:23:91:fe:8b:73:c9:12:3f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Validity Not Before: Dec 8 08:33:46 2025 GMT Not After : Dec 7 08:38:46 2026 GMT Subject: CN=5865D831784C06CCE545AF1D06D5E1C561957655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:78:f5:73:27:9d:f8:41:8e:c0:51:5d:12:63: ac:b4:75:4a:0f:89:c5:4e:2d:9c:f4:98:a5:4f:96: f4:92:61:69:75:90:80:9b:2a:a5:ac:78:44:e6:8b: 0f:66:77:81:f1:1b:41:d8:92:e3:47:17:0f:54:d2: 3b:37:b5:21:c7:48:46:a3:1b:c5:91:a4:0d:0f:c8: b3:81:16:07:fe:3d:40:db:15:65:ab:23:21:2e:14: 38:16:ac:b0:63:5f:60:c5:09:90:30:e7:75:f6:e0: d5:6e:ca:3c:c6:95:4b:d5:43:7d:c0:2a:87:40:cf: b8:90:1e:5a:cd:53:37:30:bf:0f:3c:f5:52:2a:44: 41:9b:26:f5:55:c8:8f:6c:1e:60:f1:35:ab:a0:71: 0a:4a:74:90:88:b5:d1:88:71:51:41:f8:7d:38:57: c5:e1:26:20:4f:35:c8:89:97:c8:2e:22:c1:8a:36: f1:cb:3a:34:9e:93:f7:bc:d1:97:6c:82:f0:10:88: 1b:92:1a:6c:ca:55:c0:9b:58:3b:0d:99:c1:79:97: 2c:7e:c9:de:58:be:c4:05:6c:3a:e1:cb:a5:28:44: 40:76:c4:3b:25:55:84:ae:45:b3:9e:89:0d:6f:e7: 84:6b:e8:01:cc:eb:15:4b:5b:7e:fe:2e:c7:ca:8a: c8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:65:D8:31:78:4C:06:CC:E5:45:AF:1D:06:D5:E1:C5:61:95:76:55 X509v3 Authority Key Identifier: keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.66.0/24 Signature Algorithm: sha256WithRSAEncryption 85:82:29:33:49:d6:21:40:f1:f7:f0:e4:55:a6:0e:89:93:01: 53:29:ee:1e:93:7e:78:f1:ac:f0:98:e6:2e:01:af:0c:e5:b1: f6:14:18:da:41:eb:84:55:81:fa:ce:39:39:7a:28:67:b4:da: 28:ce:01:8c:3c:2b:4d:d3:b9:ec:23:7e:cf:e0:76:ae:c3:30: 18:83:d5:61:a5:7a:7f:85:00:d7:dd:32:fe:e8:01:44:67:2d: 92:07:04:37:d1:f3:45:27:b8:5c:3d:39:53:d0:5b:13:ef:02: d3:e1:76:45:bf:ae:04:7a:c7:f1:a2:41:e3:e8:27:b8:c3:30: a6:fe:cf:d9:78:82:00:87:3a:50:64:b9:cc:e2:b7:31:ba:b1: 7f:c4:49:71:bf:14:58:db:e9:5f:68:65:08:36:fd:ac:be:04: 0e:ac:a4:95:cf:16:31:10:b3:59:80:6f:39:79:a5:74:c1:3c: ad:fb:f5:1f:bf:ff:cf:7d:14:df:66:9f:9b:07:68:0c:8d:86: f1:98:02:ca:e1:da:43:7c:39:b2:83:6e:f7:df:1a:96:4f:65: 9e:0a:10:86:a4:91:14:85:b6:92:59:51:eb:ed:7c:5d:50:56: 77:17:0c:d5:24:cf:e2:dd:09:2e:c8:52:b2:26:6e:ac:e3:08: 98:f6:47:7c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUeh78m/EhN+c2734jkf6Lc8kSP7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl OTczMjY2ZDAeFw0yNTEyMDgwODMzNDZaFw0yNjEyMDcwODM4NDZaMDMxMTAvBgNV BAMTKDU4NjVEODMxNzg0QzA2Q0NFNTQ1QUYxRDA2RDVFMUM1NjE5NTc2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtePVzJ534QY7AUV0SY6y0dUoP icVOLZz0mKVPlvSSYWl1kICbKqWseETmiw9md4HxG0HYkuNHFw9U0js3tSHHSEaj G8WRpA0PyLOBFgf+PUDbFWWrIyEuFDgWrLBjX2DFCZAw53X24NVuyjzGlUvVQ33A KodAz7iQHlrNUzcwvw889VIqREGbJvVVyI9sHmDxNaugcQpKdJCItdGIcVFB+H04 V8XhJiBPNciJl8guIsGKNvHLOjSek/e80ZdsgvAQiBuSGmzKVcCbWDsNmcF5lyx+ yd5YvsQFbDrhy6UoREB2xDslVYSuRbOeiQ1v54Rr6AHM6xVLW37+LsfKisgTAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUWGXYMXhMBszlRa8dBtXhxWGVdlUwHwYDVR0j BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4 MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s ekptMC5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzkzNTJlMzYzNjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1fQjANBgkq hkiG9w0BAQsFAAOCAQEAhYIpM0nWIUDx9/DkVaYOiZMBUynuHpN+ePGs8JjmLgGv DOWx9hQY2kHrhFWB+s45OXooZ7TaKM4BjDwrTdO57CN+z+B2rsMwGIPVYaV6f4UA 190y/ugBRGctkgcEN9HzRSe4XD05U9BbE+8C0+F2Rb+uBHrH8aJB4+gnuMMwpv7P 2XiCAIc6UGS5zOK3Mbqxf8RJcb8UWNvpX2hlCDb9rL4EDqyklc8WMRCzWYBvOXml dME8rfv1H7//z30U32afmwdoDI2G8ZgCyuHaQ3w5soNu998alk9lngoQhqSRFIW2 kllR6+18XVBWdxcM1STP4t0JLshSsiZurOMImPZHfA== -----END CERTIFICATE-----Generated at Thu Dec 11 03:19:53 2025 by rpki-client