This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136332e302f32342d3234203d3e203139343337.roa File: 34352e3134332e3136332e302f32342d3234203d3e203139343337.roa (raw, json) Hash identifier: M8Y5TaWjTiVOLanqncdwCCTpjaAInXMAJmIU/gVIuL8= Subject key identifier: FA:7C:D8:A9:D6:4B:B7:D0:19:AC:32:F0:35:4D:6D:48:B9:5C:02:B9 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 4FC79254C94502A5A42B87D2B98CCB835B207583 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136332e302f32342d3234203d3e203139343337.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 19437 IP address blocks: 45.143.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c7:92:54:c9:45:02:a5:a4:2b:87:d2:b9:8c:cb:83:5b:20:75:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=FA7CD8A9D64BB7D019AC32F0354D6D48B95C02B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:b8:08:fa:55:11:da:69:2f:f4:60:66:68: ac:2c:f7:11:62:5c:05:c9:99:05:ed:7c:90:29:91: d4:a5:a4:dc:b4:14:6d:4b:a9:f2:43:a6:cd:20:9c: e7:5f:43:21:74:7f:ac:66:2e:11:8f:24:4f:e9:7c: 77:14:7d:b5:8c:4e:59:f7:a2:71:31:00:87:51:fb: 5a:db:e0:59:7c:2a:2b:06:04:99:54:cd:99:d6:96: 44:87:93:3f:8f:95:ce:f5:3a:c2:65:9c:0e:27:65: 2b:e6:2c:2b:66:1c:96:f5:75:8c:f1:97:2e:1e:7a: 18:05:d2:a3:be:38:1b:49:e0:60:15:4a:ca:6a:e8: e8:bc:8d:33:c1:8d:a5:e3:03:4c:cb:70:8c:56:53: 6b:1a:3c:a4:da:04:74:f5:2d:3f:8f:3a:19:6e:80: b3:9c:dd:03:43:5b:28:29:75:6a:78:79:2e:4c:8b: 44:7a:a3:60:db:e5:aa:3f:ac:a2:92:e9:84:4c:82: 7c:08:ee:f8:61:83:42:6e:98:52:da:3b:e3:ec:4e: 0b:89:6a:8b:7d:52:74:60:d6:ee:7d:87:e4:6a:44: 5e:5a:d6:d0:40:8c:5c:10:e7:46:1e:a8:07:8f:88: 8e:ea:a8:06:29:dd:69:d1:54:7d:73:b8:18:92:59: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7C:D8:A9:D6:4B:B7:D0:19:AC:32:F0:35:4D:6D:48:B9:5C:02:B9 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134332e3136332e302f32342d3234203d3e203139343337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.163.0/24 Signature Algorithm: sha256WithRSAEncryption 16:77:63:07:5c:be:58:86:df:42:71:81:39:40:1a:e0:8d:7e: df:1f:1d:c1:2c:bd:61:7f:28:1b:34:17:5c:8e:2e:24:04:f0: a7:43:d5:7c:4c:e8:db:27:7a:71:fd:8b:1e:6d:8e:d4:d7:3b: d6:ba:02:54:5a:d9:c8:37:95:52:42:db:86:fe:3d:03:e6:d9: e0:1b:db:c2:d7:50:a3:93:30:dc:01:db:b6:91:04:2a:4c:ba: 9e:a1:54:45:ae:86:93:65:4b:8d:04:cd:95:c6:f9:c4:da:83: e1:58:04:50:e3:23:d2:82:31:46:e6:ef:7c:5e:60:aa:e4:66: 97:58:e0:1c:72:bb:e0:0f:c8:29:eb:bf:de:b4:04:06:ea:b3: 2d:0b:dc:cf:85:46:45:19:4a:b5:e2:9f:8d:d2:ff:47:12:bd: 4d:2b:0d:20:dc:00:55:8a:a4:7a:82:82:b4:c5:91:04:8b:37: b6:b8:4d:bc:8d:a6:ca:97:c1:18:dd:a3:4a:8a:57:01:83:7e: e8:0c:1f:51:0c:fa:c4:7d:6e:74:8b:f5:2b:0a:61:d7:0c:ff: 24:8e:98:97:c9:51:a5:e6:05:e1:c0:45:c4:ff:86:23:5f:13: 1d:8c:82:47:48:52:4e:e2:ab:c6:35:49:4c:ad:27:ea:d0:45: 8a:81:34:39 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUT8eSVMlFAqWkK4fSuYzLg1sgdYMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEZBN0NEOEE5RDY0QkI3RDAxOUFDMzJGMDM1NEQ2RDQ4Qjk1QzAyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKp7gI+lUR2mkv9GBmaKws9xFi XAXJmQXtfJApkdSlpNy0FG1LqfJDps0gnOdfQyF0f6xmLhGPJE/pfHcUfbWMTln3 onExAIdR+1rb4Fl8KisGBJlUzZnWlkSHkz+Plc71OsJlnA4nZSvmLCtmHJb1dYzx ly4eehgF0qO+OBtJ4GAVSspq6Oi8jTPBjaXjA0zLcIxWU2saPKTaBHT1LT+POhlu gLOc3QNDWygpdWp4eS5Mi0R6o2Db5ao/rKKS6YRMgnwI7vhhg0JumFLaO+PsTguJ aot9UnRg1u59h+RqRF5a1tBAjFwQ50YeqAePiI7qqAYp3WnRVH1zuBiSWYVBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU+nzYqdZLt9AZrDLwNU1tSLlcArkwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDMzMmUzMTM2 MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM5MzQzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LY+jMA0GCSqGSIb3DQEBCwUAA4IBAQAWd2MHXL5Yht9CcYE5QBrgjX7fHx3BLL1h fygbNBdcji4kBPCnQ9V8TOjbJ3px/YsebY7U1zvWugJUWtnIN5VSQtuG/j0D5tng G9vC11CjkzDcAdu2kQQqTLqeoVRFroaTZUuNBM2VxvnE2oPhWARQ4yPSgjFG5u98 XmCq5GaXWOAccrvgD8gp67/etAQG6rMtC9zPhUZFGUq14p+N0v9HEr1NKw0g3ABV iqR6goK0xZEEize2uE28jabKl8EY3aNKilcBg37oDB9RDPrEfW50i/UrCmHXDP8k jpiXyVGl5gXhwEXE/4YjXxMdjIJHSFJO4qvGNUlMrSfq0EWKgTQ5 -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:02 2025 by rpki-client