This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa File: 3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa (raw, json) Hash identifier: 7Uz0iGXKq5oSbUI44D0T64XUT0jHl47mRLVxjRhD2eU= Subject key identifier: 5F:42:63:3C:E8:66:80:F8:22:5E:BD:E5:A4:ED:F4:BD:C4:02:47:4E Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 6BE5E8550C31E2D4F67A08C26C9F9A3F6B4D7C37 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 137517 IP address blocks: 194.247.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:e5:e8:55:0c:31:e2:d4:f6:7a:08:c2:6c:9f:9a:3f:6b:4d:7c:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=5F42633CE86680F8225EBDE5A4EDF4BDC402474E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:2d:56:13:d8:5f:16:2a:58:93:ee:31:bc: c2:09:4e:df:55:f5:a7:10:99:c0:f6:c1:88:be:3e: 5c:89:27:f0:0e:f1:d7:d8:fe:ad:17:14:76:45:f0: ac:9b:9c:d3:46:a0:62:e5:1d:5b:f5:e2:7a:c9:53: 92:72:a1:d2:cf:cb:78:51:04:4c:6d:02:48:07:27: a9:eb:f2:87:fc:50:71:4a:cd:d3:e3:3c:0a:c7:e5: 58:3f:7c:10:4c:35:d8:68:35:d9:04:c5:30:87:cd: ee:de:05:e5:41:b7:2c:39:75:0b:c4:a4:ed:61:24: d4:54:38:81:d4:62:19:62:8b:41:c8:1f:55:95:ec: 66:3a:b2:3e:dc:87:23:73:c8:51:58:0e:62:25:ca: c7:c1:a1:4e:28:52:f3:89:d6:31:ad:86:63:36:01: 54:68:be:1c:86:3d:f2:ef:e9:c4:f4:2a:0d:ab:95: b7:02:08:42:de:31:cf:6f:8a:f9:7d:44:3d:47:76: 1c:fb:bf:34:b1:66:0d:d4:a4:3f:0b:ef:8f:80:79: c7:15:2b:84:da:ff:b4:b7:4b:c0:33:af:dd:3e:f1: 1b:79:11:e9:df:99:c2:ef:02:29:b9:60:8a:78:65: 52:42:b9:81:e1:45:97:ba:18:0c:8c:3f:b8:c6:49: e9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:42:63:3C:E8:66:80:F8:22:5E:BD:E5:A4:ED:F4:BD:C4:02:47:4E X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/3139342e3234372e34352e302f32342d3234203d3e20313337353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.45.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:17:d4:64:3a:d5:13:49:e9:44:e2:bf:b7:33:2a:d9:22:d2: ed:86:d0:3c:00:05:a3:0f:1a:b6:60:e6:09:60:db:07:c1:c7: 81:70:0c:d0:de:2b:31:19:2d:9a:7f:cc:46:0e:c9:ba:58:f5: 24:6e:68:dd:59:8a:18:54:b6:f5:de:ea:b1:63:9e:5d:b5:56: 0b:9e:ba:50:18:f0:d5:23:c7:49:01:61:1e:67:07:a7:21:af: 41:e1:37:1f:5b:32:47:0d:79:1b:56:d0:bd:39:3c:9d:36:5d: 21:3c:a9:14:29:32:6a:63:4d:da:42:ce:f9:db:b4:ae:83:b4: 76:3a:54:cd:dc:a4:11:0f:15:6a:ae:c4:fc:0c:35:35:c2:ba: 4c:89:f4:c9:25:08:f8:00:da:11:3a:d5:ae:69:d3:85:34:f0: 29:35:51:14:0e:16:e1:4c:65:4b:a6:cc:63:24:37:39:da:26: f1:43:3b:33:60:7b:98:bb:06:31:f6:e0:2b:91:a7:52:e5:4d: 69:25:cf:2b:d3:1f:a9:ac:d1:18:4b:7b:3a:fb:b1:4f:7e:fd: c7:26:d6:74:99:f5:03:2f:05:ce:fe:08:b6:cb:54:8f:08:42: c9:56:7f:3a:15:3f:cd:4f:cb:c7:65:99:83:d9:c0:2a:eb:f8: 8c:85:da:20 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUa+XoVQwx4tT2egjCbJ+aP2tNfDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKDVGNDI2MzNDRTg2NjgwRjgyMjVFQkRFNUE0RURGNEJEQzQwMjQ3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSC1WE9hfFipYk+4xvMIJTt9V 9acQmcD2wYi+PlyJJ/AO8dfY/q0XFHZF8KybnNNGoGLlHVv14nrJU5JyodLPy3hR BExtAkgHJ6nr8of8UHFKzdPjPArH5Vg/fBBMNdhoNdkExTCHze7eBeVBtyw5dQvE pO1hJNRUOIHUYhlii0HIH1WV7GY6sj7chyNzyFFYDmIlysfBoU4oUvOJ1jGthmM2 AVRovhyGPfLv6cT0Kg2rlbcCCELeMc9vivl9RD1Hdhz7vzSxZg3UpD8L74+AeccV K4Ta/7S3S8Azr90+8Rt5EenfmcLvAim5YIp4ZVJCuYHhRZe6GAyMP7jGSenFAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUX0JjPOhmgPgiXr3lpO30vcQCR04wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzEzOTM0MmUzMjM0MzcyZTM0 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczNTMxMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADC9y0wDQYJKoZIhvcNAQELBQADggEBAIoX1GQ61RNJ6UTiv7czKtki0u2G0DwA BaMPGrZg5glg2wfBx4FwDNDeKzEZLZp/zEYOybpY9SRuaN1ZihhUtvXe6rFjnl21 VgueulAY8NUjx0kBYR5nB6chr0HhNx9bMkcNeRtW0L05PJ02XSE8qRQpMmpjTdpC zvnbtK6DtHY6VM3cpBEPFWquxPwMNTXCukyJ9MklCPgA2hE61a5p04U08Ck1URQO FuFMZUumzGMkNznaJvFDOzNge5i7BjH24CuRp1LlTWklzyvTH6ms0RhLezr7sU9+ /ccm1nSZ9QMvBc7+CLbLVI8IQslWfzoVP81Py8dlmYPZwCrr+IyF2iA= -----END CERTIFICATE-----Generated at Sat Nov 22 22:22:04 2025 by rpki-client