This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136322e302f32342d3234203d3e203233343730.roa File: 34352e3134332e3136322e302f32342d3234203d3e203233343730.roa (raw, json) Hash identifier: OcZ6EMgc6x8+IMfJh9quglLv9DVchqMI90FMfGysZqA= Subject key identifier: C9:67:F3:B4:53:15:0A:3A:EA:C2:1D:51:EF:80:72:56:28:A7:12:E1 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 6C13D0E175E3C37237889739D237AA25C4152537 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136322e302f32342d3234203d3e203233343730.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 23470 IP address blocks: 45.143.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:13:d0:e1:75:e3:c3:72:37:88:97:39:d2:37:aa:25:c4:15:25:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=C967F3B453150A3AEAC21D51EF80725628A712E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:91:12:57:6f:7b:b3:8f:62:6f:48:7b:0e:6c: b9:01:15:60:53:6f:65:48:73:9c:12:ad:cd:35:40: 19:89:21:5e:ef:0c:0a:98:39:56:92:fd:f1:5d:56: 61:95:51:d7:cd:a1:d1:a3:b9:02:3a:51:0d:49:0a: 62:af:b1:2e:8a:cf:ea:a2:eb:48:f8:30:99:5e:d7: d4:15:96:4a:d2:61:cb:37:89:7b:96:0b:ac:a2:71: 50:84:08:77:76:59:47:01:7c:d5:3c:09:b1:35:d7: 4a:e2:f8:f7:7a:f7:f4:61:a9:b2:c4:b3:71:50:68: 26:b1:72:c2:3a:f5:98:10:9e:7d:be:5e:21:25:0e: 08:0c:d1:e7:1e:1e:30:7b:5d:6b:2d:32:62:dd:c6: 8d:09:2a:45:98:56:79:19:2b:d8:94:d5:c5:58:58: d3:24:3b:f2:7a:f9:1d:aa:d7:2f:0c:c2:fd:ca:d7: 9a:89:52:59:68:d5:5f:d1:c9:93:d0:c6:db:8c:ed: c9:17:a8:17:19:14:64:17:16:ec:e1:35:d7:4e:08: 25:bd:85:3a:88:d4:a3:60:d4:54:57:c2:c8:c6:b4: 2c:71:ef:66:7a:b7:21:59:8a:ef:28:b5:c0:3a:f8: 3a:23:a4:39:ea:9f:31:1f:b2:6b:a4:34:49:75:15: 1b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:F3:B4:53:15:0A:3A:EA:C2:1D:51:EF:80:72:56:28:A7:12:E1 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136322e302f32342d3234203d3e203233343730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.162.0/24 Signature Algorithm: sha256WithRSAEncryption 48:01:de:b5:7f:b4:d7:6a:82:cc:fd:ab:48:fe:85:bb:7b:d0: 78:d1:4e:0d:ba:50:a7:e2:78:3c:1a:34:ec:17:13:ce:e9:8f: dc:fd:73:f5:aa:61:ad:64:4c:2d:c5:24:2a:e1:7e:72:54:14: 64:75:d3:4b:54:98:26:a9:3c:2e:40:6a:7d:9f:8f:88:a6:f1: bb:f6:4b:c6:04:cd:d1:18:cf:26:f1:3f:03:a1:6c:cf:fb:d9: 6d:ea:b4:15:e4:89:4f:e6:9c:c9:a1:65:27:de:a4:84:87:d5: 06:e9:dd:0c:bf:65:3c:06:d1:ea:a3:d5:9d:19:6f:c3:7b:fe: e1:8d:0b:31:50:2b:1d:52:7a:e0:cc:d9:ba:16:9d:73:9b:84: 9a:79:b8:1c:88:35:36:55:b3:12:85:5f:30:2f:58:bd:03:fc: 52:d1:53:e9:64:6f:65:57:86:be:07:36:9b:3e:03:9e:89:bd: 2d:90:c5:7b:08:3f:32:ef:aa:ab:41:f4:2f:41:22:57:62:87: cf:c7:bf:d7:fc:d7:7e:ad:63:6d:e8:cd:09:cd:0b:ee:a3:c3: 7e:3c:3f:ef:33:c8:d1:74:91:4c:ab:dd:d7:79:6c:bc:52:02: be:42:9c:08:63:3a:cd:be:21:e7:c5:17:60:7b:ba:97:f3:3f: 79:87:2e:49 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbBPQ4XXjw3I3iJc50jeqJcQVJTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEM5NjdGM0I0NTMxNTBBM0FFQUMyMUQ1MUVGODA3MjU2MjhBNzEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkRJXb3uzj2JvSHsObLkBFWBT b2VIc5wSrc01QBmJIV7vDAqYOVaS/fFdVmGVUdfNodGjuQI6UQ1JCmKvsS6Kz+qi 60j4MJle19QVlkrSYcs3iXuWC6yicVCECHd2WUcBfNU8CbE110ri+Pd69/RhqbLE s3FQaCaxcsI69ZgQnn2+XiElDggM0eceHjB7XWstMmLdxo0JKkWYVnkZK9iU1cVY WNMkO/J6+R2q1y8Mwv3K15qJUllo1V/RyZPQxtuM7ckXqBcZFGQXFuzhNddOCCW9 hTqI1KNg1FRXwsjGtCxx72Z6tyFZiu8otcA6+DojpDnqnzEfsmukNEl1FRtTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUyWfztFMVCjrqwh1R74ByViinEuEwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDMzMmUzMTM2 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LY+iMA0GCSqGSIb3DQEBCwUAA4IBAQBIAd61f7TXaoLM/atI/oW7e9B40U4NulCn 4ng8GjTsFxPO6Y/c/XP1qmGtZEwtxSQq4X5yVBRkddNLVJgmqTwuQGp9n4+IpvG7 9kvGBM3RGM8m8T8DoWzP+9lt6rQV5IlP5pzJoWUn3qSEh9UG6d0Mv2U8BtHqo9Wd GW/De/7hjQsxUCsdUnrgzNm6Fp1zm4SaebgciDU2VbMShV8wL1i9A/xS0VPpZG9l V4a+BzabPgOeib0tkMV7CD8y76qrQfQvQSJXYofPx7/X/Nd+rWNt6M0JzQvuo8N+ PD/vM8jRdJFMq93XeWy8UgK+QpwIYzrNviHnxRdge7qX8z95hy5J -----END CERTIFICATE-----Generated at Sat Nov 22 22:08:49 2025 by rpki-client