This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136342e302f32342d3234203d3e203235333639.roa File: 34352e3134392e3136342e302f32342d3234203d3e203235333639.roa (raw, json) Hash identifier: a0LqwFPI6pwa1fZnOKWJVr+UvNzZLlo/pfpnRlcnUlw= Subject key identifier: 8B:D1:A8:0C:D0:C7:48:55:DA:3E:CD:E6:11:30:39:FF:BF:8E:A0:12 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 375EC9FE449CD347ADDAFC8650ED67BA4FDA3A0D Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136342e302f32342d3234203d3e203235333639.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 25369 IP address blocks: 45.149.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:5e:c9:fe:44:9c:d3:47:ad:da:fc:86:50:ed:67:ba:4f:da:3a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=8BD1A80CD0C74855DA3ECDE6113039FFBF8EA012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d6:1e:e7:68:14:49:e0:97:dd:06:74:b8:56: bc:89:7e:76:0d:89:80:2a:5a:e7:a1:e6:6d:f6:02: 0e:f4:b9:9e:ad:89:ac:06:fc:99:81:27:17:84:a2: bf:5c:f7:3f:d5:d6:3e:6f:3c:a7:0a:3d:6b:5b:84: cc:90:da:0a:16:5a:62:bb:34:53:38:02:b0:1d:e3: 10:e7:80:bc:f6:c2:56:1d:f0:90:db:e7:81:0c:35: 85:5d:f5:45:b6:d6:6a:cb:85:3e:4a:c1:87:d9:7c: 12:23:1b:e1:b6:61:45:80:43:1f:c0:e8:af:92:f0: 9e:4c:9e:a7:a1:69:73:bf:df:27:f6:e2:76:ba:97: db:1f:c3:a1:11:61:8c:31:da:95:4d:6e:40:f1:05: 8b:f0:3f:95:d1:d0:a4:e0:0d:02:f4:42:49:30:05: bc:8a:63:f4:b2:ba:09:45:db:bf:85:7e:13:43:36: 3c:ef:b2:9e:4c:5e:80:7d:6f:8f:97:d3:23:2b:34: 3e:27:32:03:8b:07:b2:37:8c:5a:4c:b1:e9:be:ff: b3:18:0b:35:5b:5d:f8:4d:78:65:92:5c:5d:50:28: ee:3a:45:00:df:2b:de:70:89:6b:67:83:bd:9b:56: b3:e9:80:d6:31:16:c1:4c:09:4b:f8:a4:19:27:40: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:A8:0C:D0:C7:48:55:DA:3E:CD:E6:11:30:39:FF:BF:8E:A0:12 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136342e302f32342d3234203d3e203235333639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.164.0/24 Signature Algorithm: sha256WithRSAEncryption 85:2c:c0:cf:cd:53:b1:a0:a2:5d:cb:45:35:5f:0c:e9:97:9e: 40:66:38:dc:55:a4:50:29:d0:00:dc:8d:3a:e8:74:03:f4:07: 70:7e:db:df:d1:dd:8d:c3:61:e5:32:04:92:87:e2:03:8e:cc: 2a:ce:6b:da:f3:6f:d7:17:38:55:2f:c7:ec:20:4f:c6:e0:bf: 0a:80:f8:ff:28:a2:cf:7a:ce:1e:ae:9b:6b:5c:b9:c3:92:41: 5c:35:0a:44:5b:99:2f:9d:91:a8:ee:e6:30:d8:f7:bc:ac:28: 02:5d:ac:f1:70:50:71:4b:76:9d:d3:d5:01:aa:72:59:4d:c9: e0:0e:9a:e6:d6:d3:63:6e:d6:bc:d0:b3:c3:c0:63:c1:14:e5: 20:9e:8b:ab:0e:08:c5:05:67:b3:46:01:46:42:9d:da:c4:ce: 20:6a:d0:31:ac:6b:d9:03:58:1c:18:6b:d8:3a:50:d5:5e:37: a1:62:a4:51:3c:29:e8:5d:c8:d0:97:12:8d:8d:89:66:e2:9a: ec:48:46:8e:07:62:16:60:00:0d:5f:2b:37:2e:69:a0:be:17: 7b:29:a6:da:b8:07:2a:c3:11:9b:81:81:1e:2d:f2:80:8e:e8: 59:04:3f:d7:10:f2:7b:ca:3d:5e:26:f5:a1:dd:5d:1a:da:e6: 24:75:83:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUN17J/kSc00et2vyGUO1nuk/aOg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKDhCRDFBODBDRDBDNzQ4NTVEQTNFQ0RFNjExMzAzOUZGQkY4RUEwMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG1h7naBRJ4JfdBnS4VryJfnYN iYAqWueh5m32Ag70uZ6tiawG/JmBJxeEor9c9z/V1j5vPKcKPWtbhMyQ2goWWmK7 NFM4ArAd4xDngLz2wlYd8JDb54EMNYVd9UW21mrLhT5KwYfZfBIjG+G2YUWAQx/A 6K+S8J5MnqehaXO/3yf24na6l9sfw6ERYYwx2pVNbkDxBYvwP5XR0KTgDQL0Qkkw BbyKY/SyuglF27+FfhNDNjzvsp5MXoB9b4+X0yMrND4nMgOLB7I3jFpMsem+/7MY CzVbXfhNeGWSXF1QKO46RQDfK95wiWtng72bVrPpgNYxFsFMCUv4pBknQDj3AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUi9GoDNDHSFXaPs3mETA5/7+OoBIwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzMTM2 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzMzNjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZWkMA0GCSqGSIb3DQEBCwUAA4IBAQCFLMDPzVOxoKJdy0U1Xwzpl55AZjjcVaRQ KdAA3I066HQD9Adwftvf0d2Nw2HlMgSSh+IDjswqzmva82/XFzhVL8fsIE/G4L8K gPj/KKLPes4erptrXLnDkkFcNQpEW5kvnZGo7uYw2Pe8rCgCXazxcFBxS3ad09UB qnJZTcngDprm1tNjbta80LPDwGPBFOUgnourDgjFBWezRgFGQp3axM4gatAxrGvZ A1gcGGvYOlDVXjehYqRRPCnoXcjQlxKNjYlm4prsSEaOB2IWYAANXys3Lmmgvhd7 KabauAcqwxGbgYEeLfKAjuhZBD/XEPJ7yj1eJvWh3V0a2uYkdYPS -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:06 2025 by rpki-client