This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/34352e31312e3234382e302f32322d3234203d3e203538323939.roa File: 34352e31312e3234382e302f32322d3234203d3e203538323939.roa (raw, json) Hash identifier: O743btv2VPrOrOHtFh7YgIpYcyBB9rY+g/nhh9nhNM8= Subject key identifier: 17:FB:B6:25:E0:F5:9D:4C:EF:2C:1B:EC:C8:0A:6E:21:A9:E4:D6:49 Certificate issuer: /CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Certificate serial: 1BE2B35D4B23C321D32E203800A327AB884D7E1C Authority key identifier: FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/34352e31312e3234382e302f32322d3234203d3e203538323939.roa Signing time: Thu 11 Dec 2025 01:38:07 +0000 ROA not before: Thu 11 Dec 2025 01:33:07 +0000 ROA not after: Thu 10 Dec 2026 01:38:07 +0000 asID: 58299 IP address blocks: 45.11.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.mft rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:e2:b3:5d:4b:23:c3:21:d3:2e:20:38:00:a3:27:ab:88:4d:7e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fac4708d7e265db1044f9bb0ee8728587f48b484 Validity Not Before: Dec 11 01:33:07 2025 GMT Not After : Dec 10 01:38:07 2026 GMT Subject: CN=17FBB625E0F59D4CEF2C1BECC80A6E21A9E4D649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:07:e4:5d:f7:0e:92:45:b8:cf:cc:6c:01: 06:11:74:fb:88:6b:2f:76:98:0c:62:dc:eb:61:9b: a0:d3:a7:2a:ca:88:ba:3d:eb:c6:08:2b:9e:24:21: df:27:2d:0f:88:3b:d3:41:63:24:2a:0c:09:0e:d7: 05:5a:b2:41:f8:92:d1:1f:6d:5b:13:ac:55:2f:6d: e0:f6:22:69:6a:99:82:85:b5:b2:08:42:26:39:1d: 22:5e:f6:2c:ef:2f:19:42:ab:de:80:e8:ba:a8:ee: 03:6f:51:c3:3a:80:c7:9c:25:e5:d9:b5:68:3e:58: 53:18:8f:f6:35:03:7a:39:6d:76:2e:ad:4b:76:54: 16:63:aa:b5:38:25:12:8c:4a:75:f6:c3:8a:e8:20: 74:06:13:4d:0a:93:af:e6:0f:78:65:c1:b3:5b:ae: 59:65:ca:a6:68:b7:65:e2:8a:f8:4a:34:3e:b4:30: 87:e6:d9:4a:0a:3f:c8:92:6e:1c:ec:26:a1:c7:9a: 80:da:b7:67:e3:f8:99:67:84:b5:67:42:a0:3f:98: 53:f8:f9:a3:98:1c:6c:f5:b7:77:a6:67:78:2b:e3: b2:ab:6c:bd:da:ac:71:3f:da:1d:db:d5:d1:3b:44: 1b:46:1e:e7:49:79:bd:4a:81:5c:67:c7:f4:d9:2f: de:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FB:B6:25:E0:F5:9D:4C:EF:2C:1B:EC:C8:0A:6E:21:A9:E4:D6:49 X509v3 Authority Key Identifier: keyid:FA:C4:70:8D:7E:26:5D:B1:04:4F:9B:B0:EE:87:28:58:7F:48:B4:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/FAC4708D7E265DB1044F9BB0EE8728587F48B484.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sRwjX4mXbEET5uw7ocoWH9ItIQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5b58e646-e7a2-465c-87c5-43c359ad9369/0/34352e31312e3234382e302f32322d3234203d3e203538323939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.11.248.0/22 Signature Algorithm: sha256WithRSAEncryption 74:da:29:54:f2:67:8f:67:2a:14:1e:5e:0c:f2:c3:27:a7:80: 04:d1:ff:bf:f8:88:19:59:41:c5:88:64:cd:6b:d8:4d:13:3f: ca:ea:d2:b3:2f:70:75:91:85:e6:85:69:16:a2:d6:76:54:fc: 11:72:fd:31:41:e5:31:5f:20:73:c5:a1:5d:76:bd:e0:20:95: 94:03:4b:26:8b:4f:9b:cb:0d:e5:5c:a3:c2:9e:56:ec:cc:9f: d1:2b:e0:d0:a5:d7:d0:a9:fb:43:92:9e:bd:67:f9:43:1d:80: 0f:ab:4f:4e:a8:5f:01:ea:b9:a7:52:9b:2f:33:43:29:f3:5e: e5:7d:47:df:f3:09:d6:56:f2:96:09:a2:44:f3:5a:67:b3:cd: a3:de:31:44:be:bd:55:42:f8:de:24:35:ae:48:59:74:b8:b8: 00:5a:fb:ca:7f:88:4f:e5:1d:c2:21:76:d1:c5:db:db:eb:bd: d2:5e:bb:ee:2a:f7:b8:7a:71:63:ba:6d:36:dd:51:11:a9:bd: f6:df:32:22:1f:5c:d7:46:20:e0:58:ac:04:4e:95:26:c5:c4: 21:8a:5e:1e:a2:df:93:50:be:5e:ca:54:df:de:d0:fe:0e:8a: eb:4f:3d:9b:55:03:4a:f2:4c:dc:ae:ea:36:b2:d5:74:4d:e5: 7f:ab:8f:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+KzXUsjwyHTLiA4AKMnq4hNfhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZmFjNDcwOGQ3ZTI2NWRiMTA0NGY5YmIwZWU4NzI4NTg3 ZjQ4YjQ4NDAeFw0yNTEyMTEwMTMzMDdaFw0yNjEyMTAwMTM4MDdaMDMxMTAvBgNV BAMTKDE3RkJCNjI1RTBGNTlENENFRjJDMUJFQ0M4MEE2RTIxQTlFNEQ2NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClWAfkXfcOkkW4z8xsAQYRdPuI ay92mAxi3Othm6DTpyrKiLo968YIK54kId8nLQ+IO9NBYyQqDAkO1wVaskH4ktEf bVsTrFUvbeD2ImlqmYKFtbIIQiY5HSJe9izvLxlCq96A6Lqo7gNvUcM6gMecJeXZ tWg+WFMYj/Y1A3o5bXYurUt2VBZjqrU4JRKMSnX2w4roIHQGE00Kk6/mD3hlwbNb rlllyqZot2XiivhKND60MIfm2UoKP8iSbhzsJqHHmoDat2fj+JlnhLVnQqA/mFP4 +aOYHGz1t3emZ3gr47KrbL3arHE/2h3b1dE7RBtGHudJeb1KgVxnx/TZL97VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF/u2JeD1nUzvLBvsyApuIank1kkwHwYDVR0j BBgwFoAU+sRwjX4mXbEET5uw7ocoWH9ItIQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNWI1OGU2NDYtZTdhMi00NjVjLTg3YzUtNDNjMzU5YWQ5 MzY5LzAvRkFDNDcwOEQ3RTI2NURCMTA0NEY5QkIwRUU4NzI4NTg3RjQ4QjQ4NC5j cmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEtc1J3alg0bVhiRUVUNXV3N29jb1dI OUl0SVEuY2VyMIGrBggrBgEFBQcBCwSBnjCBmzCBmAYIKwYBBQUHMAuGgYtyc3lu YzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzViNThlNjQ2 LWU3YTItNDY1Yy04N2M1LTQzYzM1OWFkOTM2OS8wLzM0MzUyZTMxMzEyZTMyMzQz ODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1MzgzMjM5Mzkucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIt C/gwDQYJKoZIhvcNAQELBQADggEBAHTaKVTyZ49nKhQeXgzywyengATR/7/4iBlZ QcWIZM1r2E0TP8rq0rMvcHWRheaFaRai1nZU/BFy/TFB5TFfIHPFoV12veAglZQD SyaLT5vLDeVco8KeVuzMn9Er4NCl19Cp+0OSnr1n+UMdgA+rT06oXwHquadSmy8z QynzXuV9R9/zCdZW8pYJokTzWmezzaPeMUS+vVVC+N4kNa5IWXS4uABa+8p/iE/l HcIhdtHF29vrvdJeu+4q97h6cWO6bTbdURGpvfbfMiIfXNdGIOBYrAROlSbFxCGK Xh6i35NQvl7KVN/e0P4OiutPPZtVA0ryTNyu6jay1XRN5X+rjyo= -----END CERTIFICATE-----Generated at Fri Dec 12 14:33:31 2025 by rpki-client