This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136302e302f32342d3234203d3e203232313638.roa File: 34352e3134332e3136302e302f32342d3234203d3e203232313638.roa (raw, json) Hash identifier: R01FRlBDr9pZoq05BG3LRHuNkIAJs+FNxUn/NkK9at8= Subject key identifier: 50:4F:6C:6D:10:D5:9B:C4:47:65:80:23:76:53:2A:FB:9E:34:5E:46 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 3FBB9C9E805229CB499260BF8B297EA1FB927FA2 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136302e302f32342d3234203d3e203232313638.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 22168 IP address blocks: 45.143.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:bb:9c:9e:80:52:29:cb:49:92:60:bf:8b:29:7e:a1:fb:92:7f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=504F6C6D10D59BC44765802376532AFB9E345E46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:64:1b:f6:1a:66:80:e9:3e:77:98:ed:c2:5a: e6:52:4c:2e:2e:53:b9:18:83:68:3a:42:f2:c3:8b: 4c:41:96:04:a8:68:3b:a8:69:6c:9a:c1:65:56:cf: 6c:5e:9d:e5:3b:6d:70:d2:85:0b:b0:24:1b:0b:c6: 28:22:2a:5d:a0:60:5e:26:de:90:0f:5e:e9:79:f6: 35:54:fc:0d:32:f1:d7:5a:48:a0:15:1b:94:0a:de: eb:77:9c:a2:d0:89:76:f7:ea:24:84:09:06:26:92: 53:5d:6c:45:e1:f9:d7:f8:aa:1a:8d:74:ac:d2:17: 97:1a:83:47:18:bf:c3:a2:1a:97:ec:33:f3:d0:87: a1:66:59:6e:73:6b:03:01:31:c6:5d:44:0d:d8:68: c8:8c:40:c5:e8:38:b9:a0:e4:f8:1f:50:1a:08:db: 70:cf:92:55:15:88:ab:c7:8b:b3:0b:cb:b8:93:9d: ca:cf:3d:39:7d:e7:fc:b1:0b:1c:c6:b4:62:96:51: 8c:e0:c0:6b:fb:e1:b8:35:80:29:85:1b:6d:53:d8: 95:ae:2d:5f:c9:1c:19:c5:d5:68:fa:6a:69:04:91: 44:c4:70:77:c3:be:7e:cd:a1:7b:81:d2:f4:db:1e: a0:91:5e:ef:81:ad:b3:93:d3:2c:1c:78:68:68:4d: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4F:6C:6D:10:D5:9B:C4:47:65:80:23:76:53:2A:FB:9E:34:5E:46 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136302e302f32342d3234203d3e203232313638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.160.0/24 Signature Algorithm: sha256WithRSAEncryption a0:e1:88:c7:b0:29:4e:6b:e3:74:93:d1:85:63:72:43:96:a4: 3e:b3:fc:fe:8d:3a:fb:00:94:6b:6d:76:db:5e:4e:3d:26:c7: a7:b4:20:38:7e:06:08:70:cb:54:7d:67:95:93:0d:67:84:01: 1c:0a:61:b2:30:f9:56:77:79:e1:a4:54:0b:6e:e2:c0:55:90: 40:cd:15:2d:3a:e3:ba:ca:82:46:63:2d:a7:29:01:2f:6a:09: 0a:9d:38:42:98:2d:18:f2:00:54:ba:a7:a0:09:f3:51:fc:51: b0:2c:17:ae:12:53:f9:cd:97:2d:09:05:68:cb:6c:c0:05:10: 86:b8:1d:a0:66:15:74:7a:69:03:79:50:8f:04:35:65:74:89: fd:69:98:57:cc:b9:40:76:a1:38:c2:4d:c2:8b:d4:dd:af:dc: 11:2f:d2:bb:86:c3:a7:3e:32:0c:e9:76:c3:52:31:bd:10:b6: 29:f0:04:d2:6a:bb:3b:5a:8c:f5:49:f4:0c:ec:5b:a0:7a:2f: ed:9e:de:be:0e:fd:0e:3e:c9:40:f3:e2:3d:8f:e3:84:bb:a6: 73:20:61:96:0c:72:6e:5b:0f:a2:44:71:b5:59:5a:65:7c:08: ed:8c:f3:90:b6:5c:93:42:68:91:2c:55:7c:27:c6:6d:f1:a6: 19:fd:50:c3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUP7ucnoBSKctJkmC/iyl+ofuSf6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKDUwNEY2QzZEMTBENTlCQzQ0NzY1ODAyMzc2NTMyQUZCOUUzNDVFNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZBv2GmaA6T53mO3CWuZSTC4u U7kYg2g6QvLDi0xBlgSoaDuoaWyawWVWz2xeneU7bXDShQuwJBsLxigiKl2gYF4m 3pAPXul59jVU/A0y8ddaSKAVG5QK3ut3nKLQiXb36iSECQYmklNdbEXh+df4qhqN dKzSF5cag0cYv8OiGpfsM/PQh6FmWW5zawMBMcZdRA3YaMiMQMXoOLmg5PgfUBoI 23DPklUViKvHi7MLy7iTncrPPTl95/yxCxzGtGKWUYzgwGv74bg1gCmFG21T2JWu LV/JHBnF1Wj6amkEkUTEcHfDvn7NoXuB0vTbHqCRXu+BrbOT0ywceGhoTe0pAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUUE9sbRDVm8RHZYAjdlMq+540XkYwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDMzMmUzMTM2 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMyMzEzNjM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LY+gMA0GCSqGSIb3DQEBCwUAA4IBAQCg4YjHsClOa+N0k9GFY3JDlqQ+s/z+jTr7 AJRrbXbbXk49JsentCA4fgYIcMtUfWeVkw1nhAEcCmGyMPlWd3nhpFQLbuLAVZBA zRUtOuO6yoJGYy2nKQEvagkKnThCmC0Y8gBUuqegCfNR/FGwLBeuElP5zZctCQVo y2zABRCGuB2gZhV0emkDeVCPBDVldIn9aZhXzLlAdqE4wk3Ci9Tdr9wRL9K7hsOn PjIM6XbDUjG9ELYp8ATSars7Woz1SfQM7Fugei/tnt6+Dv0OPslA8+I9j+OEu6Zz IGGWDHJuWw+iRHG1WVplfAjtjPOQtlyTQmiRLFV8J8Zt8aYZ/VDD -----END CERTIFICATE-----Generated at Sat Nov 22 22:23:17 2025 by rpki-client