This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136312e302f32342d3234203d3e203631333137.roa File: 34352e3134332e3136312e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 8ZjMd6obm3N7HBniZT8uftJQwQbBGvAMihymyaoAi+E= Subject key identifier: 8C:91:DF:3E:C9:DA:2E:B9:55:BC:8F:FE:81:C9:A8:F2:5B:30:F8:B1 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 22ACF68639E4D2B804319A9B6B75A6701E500165 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136312e302f32342d3234203d3e203631333137.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 61317 IP address blocks: 45.143.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:ac:f6:86:39:e4:d2:b8:04:31:9a:9b:6b:75:a6:70:1e:50:01:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=8C91DF3EC9DA2EB955BC8FFE81C9A8F25B30F8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e0:78:3b:39:14:e4:85:d9:38:be:1d:a7:89: 9f:d0:1e:93:48:58:f4:d1:93:55:4f:7c:3f:19:14: 86:ea:b5:ea:0c:b6:c1:78:a9:51:37:d6:f7:ff:bd: 9c:28:5b:7d:b7:0f:ce:1a:c3:1e:ee:5d:8b:0e:80: d0:62:5c:59:73:db:e4:0f:7b:6c:1e:8a:12:c7:13: 1c:d4:62:14:c8:42:e7:67:4e:26:c3:b0:4d:35:16: 21:ed:03:e4:ab:5a:b9:9c:6c:eb:53:a2:ab:e4:8a: 23:b5:68:3f:66:fb:05:fd:6d:d3:74:f7:d1:d4:81: 07:be:de:15:e3:54:14:88:4d:de:a7:91:cf:0f:bd: 28:dd:9c:bc:de:c1:ca:50:13:40:90:4d:cb:a7:22: ea:ab:d4:01:70:ff:f7:09:6e:ff:e9:15:c0:ed:4f: 0f:55:fc:68:82:7e:2a:61:b7:1e:0d:95:32:1e:49: 79:2c:fa:04:b6:26:30:fb:c0:a3:57:90:28:2d:27: 15:35:d8:eb:65:cd:f6:06:26:14:c0:5c:63:d4:dd: 02:05:b3:94:49:52:96:88:09:f6:f2:87:0f:09:30: 5b:fd:50:c9:4c:26:90:18:1a:37:a9:ec:dd:d9:c9: 67:22:ad:aa:d0:fd:d1:40:2c:13:db:04:f3:f1:dc: d0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:91:DF:3E:C9:DA:2E:B9:55:BC:8F:FE:81:C9:A8:F2:5B:30:F8:B1 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136312e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.161.0/24 Signature Algorithm: sha256WithRSAEncryption 64:99:d8:09:d5:e3:c9:6b:36:de:c7:b8:b3:59:2e:d7:fb:e7: 27:05:a5:42:b8:4c:7b:e2:09:0a:2f:ca:3e:1d:f6:5d:ec:ef: ca:28:cc:3e:b6:b0:c1:4f:c8:57:64:31:65:68:52:1b:9b:dd: 4d:65:9a:ec:c9:1a:2e:b2:f1:00:e8:02:3b:d0:fe:13:31:ca: 21:60:a0:cf:39:89:2a:b6:e7:88:de:f2:a6:51:62:6e:46:ca: be:98:cf:4b:9e:c7:88:b9:2e:7a:39:32:25:52:8d:a9:2a:cd: 8b:fa:b9:c5:31:a0:8d:31:31:c5:55:53:d0:98:a1:09:9a:cf: af:99:68:95:60:e1:40:9c:bb:02:8d:03:4c:08:5b:07:b5:22: 5f:79:af:9a:de:85:ea:09:ff:52:46:a5:18:7b:7b:b8:6f:57: 3f:03:86:69:ca:cf:1b:12:e3:6e:10:c4:9f:59:69:a0:77:21: d5:36:bf:25:0b:24:9b:69:dd:ce:47:3a:10:10:78:d7:4b:4a: b8:03:f4:9a:99:ae:b8:0b:ca:3b:03:95:28:76:d5:bb:d5:07: 70:38:9e:a4:85:1f:29:b9:39:d6:cd:e4:15:01:ef:6a:e7:8d: be:1b:a2:a1:fd:27:0f:a9:83:34:7d:7a:4b:44:1d:92:6a:ab: c1:f0:78:73 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIqz2hjnk0rgEMZqba3WmcB5QAWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKDhDOTFERjNFQzlEQTJFQjk1NUJDOEZGRTgxQzlBOEYyNUIzMEY4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4Hg7ORTkhdk4vh2niZ/QHpNI WPTRk1VPfD8ZFIbqteoMtsF4qVE31vf/vZwoW323D84awx7uXYsOgNBiXFlz2+QP e2weihLHExzUYhTIQudnTibDsE01FiHtA+SrWrmcbOtToqvkiiO1aD9m+wX9bdN0 99HUgQe+3hXjVBSITd6nkc8PvSjdnLzewcpQE0CQTcunIuqr1AFw//cJbv/pFcDt Tw9V/GiCfiphtx4NlTIeSXks+gS2JjD7wKNXkCgtJxU12OtlzfYGJhTAXGPU3QIF s5RJUpaICfbyhw8JMFv9UMlMJpAYGjep7N3ZyWcirarQ/dFALBPbBPPx3NBlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUjJHfPsnaLrlVvI/+gcmo8lsw+LEwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDMzMmUzMTM2 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LY+hMA0GCSqGSIb3DQEBCwUAA4IBAQBkmdgJ1ePJazbex7izWS7X++cnBaVCuEx7 4gkKL8o+HfZd7O/KKMw+trDBT8hXZDFlaFIbm91NZZrsyRousvEA6AI70P4TMcoh YKDPOYkqtueI3vKmUWJuRsq+mM9LnseIuS56OTIlUo2pKs2L+rnFMaCNMTHFVVPQ mKEJms+vmWiVYOFAnLsCjQNMCFsHtSJfea+a3oXqCf9SRqUYe3u4b1c/A4Zpys8b EuNuEMSfWWmgdyHVNr8lCySbad3ORzoQEHjXS0q4A/Sama64C8o7A5UodtW71Qdw OJ6khR8puTnWzeQVAe9q542+G6Kh/ScPqYM0fXpLRB2SaqvB8Hhz -----END CERTIFICATE-----Generated at Sat Nov 22 22:23:16 2025 by rpki-client