This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa File: 34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa (raw, json) Hash identifier: xof4y/WucaiGMtyPzgbTPsOcPFlb9obn6jFW42zp3IM= Subject key identifier: 5F:D5:3E:DE:B6:49:6E:45:24:DF:6B:69:9C:A9:7E:D0:13:44:50:72 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 42A5EB521FF54D95AA00753A0FF6296F1744E1D2 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 209043 IP address blocks: 45.149.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a5:eb:52:1f:f5:4d:95:aa:00:75:3a:0f:f6:29:6f:17:44:e1:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=5FD53EDEB6496E4524DF6B699CA97ED013445072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:3c:6d:f2:2f:8a:41:73:d8:85:01:96:ad: e4:a8:79:26:c2:4c:7f:41:e8:da:dd:74:ca:f5:0d: 6b:5e:b4:04:41:1b:2b:a2:f1:08:fc:b2:3b:a1:80: df:c0:2d:e3:e4:9f:f3:cd:8d:09:91:1b:93:79:db: 5a:4a:0b:0a:94:50:10:ce:6c:11:ad:a7:b3:15:a3: 41:1f:d1:a8:5b:b7:17:17:b3:8e:1c:65:60:f5:db: 1e:d9:e0:d5:8c:50:20:2f:51:05:19:f5:3f:a4:87: 5e:d5:a2:80:7d:9b:b4:5b:e2:46:c2:26:37:f6:11: d0:bc:ff:1d:b2:50:82:b1:83:a1:3b:a1:91:51:5f: c6:eb:ba:43:f9:bb:72:3b:a5:df:8c:46:dd:cb:d7: b6:82:02:98:d0:02:ae:8b:41:f7:a1:cf:30:d0:5d: 26:84:79:1e:a3:31:a0:6e:d4:d5:a0:a1:16:38:de: 56:f5:b3:a1:91:49:e9:a5:95:b9:45:ae:3f:b9:bc: 4a:7c:19:e5:0a:43:3c:7c:42:71:7c:a5:4c:70:c2: db:ca:6b:fe:a6:f6:c4:54:ee:47:69:bb:7e:9a:93: 25:13:f9:17:11:11:f0:4d:71:b4:fe:ac:9c:bf:41: 60:2c:60:24:39:04:db:c4:49:fd:15:1a:ec:dd:6b: af:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D5:3E:DE:B6:49:6E:45:24:DF:6B:69:9C:A9:7E:D0:13:44:50:72 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136352e302f32342d3234203d3e20323039303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.165.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:83:f4:bd:26:b9:23:b9:11:22:fb:fe:18:d7:0f:80:69:1b: 91:f8:41:e5:57:80:68:5c:2e:06:3e:09:e0:7d:b1:27:25:6b: 82:4a:fc:0b:90:e6:63:73:72:0f:58:b0:14:80:a9:d5:5c:d1: 11:00:eb:51:39:4e:3e:c2:66:6b:e2:b8:3a:1d:49:23:b9:f0: 4f:e9:d8:f7:78:16:ad:3c:7e:52:45:a0:e7:ab:f2:e1:d2:fd: a6:93:c6:69:a7:bc:67:52:9e:b3:36:73:46:da:49:6f:9d:61: 13:6f:74:bd:fc:2a:2a:5b:5d:b1:da:d0:eb:c8:b2:45:30:09: d5:28:a1:dd:7b:aa:ea:92:9b:74:d0:f3:90:5c:63:6b:b7:b3: 68:b2:88:27:8f:ae:cf:19:33:14:a9:ac:78:8c:98:13:e8:85: 37:25:c8:65:eb:6e:08:1e:4f:4f:0f:75:65:43:08:3c:66:36: 4b:48:29:42:89:e7:c0:f3:88:2d:1b:a0:e1:0f:0d:76:55:e3: 2e:96:74:e7:42:f5:ab:f8:af:69:1a:67:ff:56:e8:e1:53:80: 68:af:bf:e4:73:8a:45:18:b2:3b:46:60:34:6b:a7:37:8f:8c: c1:aa:cb:7e:2d:09:7a:ea:77:c6:be:a8:36:a8:12:c6:6d:b0: 77:eb:59:e0 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQqXrUh/1TZWqAHU6D/YpbxdE4dIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKDVGRDUzRURFQjY0OTZFNDUyNERGNkI2OTlDQTk3RUQwMTM0NDUwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64Dxt8i+KQXPYhQGWreSoeSbC TH9B6NrddMr1DWtetARBGyui8Qj8sjuhgN/ALePkn/PNjQmRG5N521pKCwqUUBDO bBGtp7MVo0Ef0ahbtxcXs44cZWD12x7Z4NWMUCAvUQUZ9T+kh17VooB9m7Rb4kbC Jjf2EdC8/x2yUIKxg6E7oZFRX8brukP5u3I7pd+MRt3L17aCApjQAq6LQfehzzDQ XSaEeR6jMaBu1NWgoRY43lb1s6GRSemllblFrj+5vEp8GeUKQzx8QnF8pUxwwtvK a/6m9sRU7kdpu36akyUT+RcREfBNcbT+rJy/QWAsYCQ5BNvESf0VGuzda68jAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUX9U+3rZJbkUk32tpnKl+0BNEUHIwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzMTM2 MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzMDM0MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtlaUwDQYJKoZIhvcNAQELBQADggEBAC6D9L0muSO5ESL7/hjXD4BpG5H4QeVX gGhcLgY+CeB9sScla4JK/AuQ5mNzcg9YsBSAqdVc0REA61E5Tj7CZmviuDodSSO5 8E/p2Pd4Fq08flJFoOer8uHS/aaTxmmnvGdSnrM2c0baSW+dYRNvdL38KipbXbHa 0OvIskUwCdUood17quqSm3TQ85BcY2u3s2iyiCePrs8ZMxSprHiMmBPohTclyGXr bggeT08PdWVDCDxmNktIKUKJ58DziC0boOEPDXZV4y6WdOdC9av4r2kaZ/9W6OFT gGivv+RzikUYsjtGYDRrpzePjMGqy34tCXrqd8a+qDaoEsZtsHfrWeA= -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:05 2025 by rpki-client