This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa File: 34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa (raw, json) Hash identifier: oGRqBKIGwkwo89Qzo8J8QE2XhyVF3R37X5VJTJkYTLY= Subject key identifier: 82:BF:5D:EA:8A:09:8B:DB:A0:64:BC:65:17:43:A1:F7:A9:38:87:A2 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 0AAB77DB261EA12CCEC266216E0098BF0D667180 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 212384 IP address blocks: 45.149.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ab:77:db:26:1e:a1:2c:ce:c2:66:21:6e:00:98:bf:0d:66:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=82BF5DEA8A098BDBA064BC651743A1F7A93887A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:64:38:e7:85:d2:82:54:64:c4:d1:98:86: ca:24:04:39:ac:43:89:39:25:41:37:dd:cf:59:cd: 12:c7:55:c6:d9:1c:31:d8:83:51:a7:ed:fb:57:d0: b8:d1:2d:e5:49:4f:72:04:ac:b6:34:46:93:7b:bd: f0:40:fe:c2:8c:ef:50:e8:6d:ab:eb:44:aa:81:2d: f4:54:34:06:06:23:a8:85:e1:55:71:1f:35:26:c6: 2c:dc:9a:71:4e:9f:af:3a:f8:d1:e2:49:c2:ab:3f: e2:36:c5:61:80:40:a8:fb:64:11:e5:9e:88:79:c6: 44:a5:e0:c6:15:48:35:27:74:cd:98:40:12:da:1d: 3c:07:c7:b3:fc:bc:75:23:6c:73:8d:6f:6b:d8:83: dc:c3:3c:32:5e:24:43:22:4c:07:47:99:fb:e0:7b: b6:2b:35:b3:e2:b1:cc:09:d7:bc:05:9b:81:f4:86: ce:db:9d:4f:72:70:7d:8f:2d:52:ca:af:af:ec:cb: 35:68:d7:b6:8b:e5:f2:b0:56:04:fb:83:45:e9:c6: f7:92:27:34:5c:ba:7d:da:82:55:59:27:d2:c2:6b: 13:ec:f4:99:cf:6e:77:55:f6:50:78:45:7c:2a:ac: 3e:47:54:74:5f:e5:d9:af:22:c7:15:99:77:c0:46: f1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BF:5D:EA:8A:09:8B:DB:A0:64:BC:65:17:43:A1:F7:A9:38:87:A2 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136362e302f32342d3234203d3e20323132333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.166.0/24 Signature Algorithm: sha256WithRSAEncryption 72:28:d6:98:ca:eb:13:93:2f:f5:47:97:b1:f8:f6:f5:be:eb: 5a:c6:a6:54:b8:83:df:45:39:01:6b:86:16:08:b9:c1:c8:26: 52:e0:ee:11:39:dc:a3:16:3b:ac:e5:bf:79:2d:8b:9d:9c:57: aa:ce:0c:fe:9f:83:00:1f:ec:b9:ce:ef:31:3b:0b:24:f2:fd: e0:c2:fd:d9:fe:6b:fb:f5:1a:14:a1:09:3f:c5:6a:2d:07:5c: 40:01:bb:ee:28:58:12:80:f8:a6:b5:5d:94:82:46:6d:1e:4e: d6:c5:c8:4f:ab:06:41:ef:7e:e1:a5:4c:bb:f6:9e:37:c3:66: 37:f9:af:56:fb:66:12:05:0c:42:b3:6f:14:b6:fb:76:d8:37: 91:96:6b:8f:c3:36:7f:fc:ad:64:21:4e:d2:54:de:0d:13:32: 6c:fb:ba:3a:66:81:44:7c:b0:d0:e6:95:bc:c3:6f:d1:a6:ec: fc:76:d5:23:9c:3b:2b:88:9a:e6:bb:c2:90:c0:98:1a:9a:57: 90:af:8e:a5:53:f3:22:02:ad:07:24:3a:5a:e1:f3:8c:c7:78: 86:c8:e0:3c:5e:a6:75:c5:a9:ea:f2:2b:c0:f6:1a:55:bc:1f: 0d:7d:7c:f6:a1:a0:ef:c9:1b:ee:15:22:a8:94:59:2c:13:b1: f0:ec:60:01 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUCqt32yYeoSzOwmYhbgCYvw1mcYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKDgyQkY1REVBOEEwOThCREJBMDY0QkM2NTE3NDNBMUY3QTkzODg3QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk5GQ454XSglRkxNGYhsokBDms Q4k5JUE33c9ZzRLHVcbZHDHYg1Gn7ftX0LjRLeVJT3IErLY0RpN7vfBA/sKM71Do bavrRKqBLfRUNAYGI6iF4VVxHzUmxizcmnFOn686+NHiScKrP+I2xWGAQKj7ZBHl noh5xkSl4MYVSDUndM2YQBLaHTwHx7P8vHUjbHONb2vYg9zDPDJeJEMiTAdHmfvg e7YrNbPiscwJ17wFm4H0hs7bnU9ycH2PLVLKr6/syzVo17aL5fKwVgT7g0XpxveS JzRcun3aglVZJ9LCaxPs9JnPbndV9lB4RXwqrD5HVHRf5dmvIscVmXfARvF/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUgr9d6ooJi9ugZLxlF0Oh96k4h6IwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzMTM2 MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzMzM4MzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtlaYwDQYJKoZIhvcNAQELBQADggEBAHIo1pjK6xOTL/VHl7H49vW+61rGplS4 g99FOQFrhhYIucHIJlLg7hE53KMWO6zlv3kti52cV6rODP6fgwAf7LnO7zE7CyTy /eDC/dn+a/v1GhShCT/Fai0HXEABu+4oWBKA+Ka1XZSCRm0eTtbFyE+rBkHvfuGl TLv2njfDZjf5r1b7ZhIFDEKzbxS2+3bYN5GWa4/DNn/8rWQhTtJU3g0TMmz7ujpm gUR8sNDmlbzDb9Gm7Px21SOcOyuImua7wpDAmBqaV5CvjqVT8yICrQckOlrh84zH eIbI4DxepnXFqeryK8D2GlW8Hw19fPahoO/JG+4VIqiUWSwTsfDsYAE= -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:06 2025 by rpki-client