This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa File: 34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa (raw, json) Hash identifier: G5FQ1l+cRk3n7sDIEiJiOqD91u3IjodfdNcjTCN0Zms= Subject key identifier: 40:85:F5:C3:25:BE:C6:F7:D3:99:10:39:82:2A:BC:D7:75:AD:62:47 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 73645DCD911ADC0FC5CC352025C8E57FCCA9CE0E Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 212669 IP address blocks: 45.149.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:64:5d:cd:91:1a:dc:0f:c5:cc:35:20:25:c8:e5:7f:cc:a9:ce:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=4085F5C325BEC6F7D3991039822ABCD775AD6247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:47:53:70:3f:85:39:09:c8:43:f7:e1:90: bf:3a:9d:a8:b2:bc:d9:4f:14:35:99:67:30:21:39: c9:c8:98:e4:f7:f0:1d:17:25:b6:9a:6e:9d:d7:e2: c5:cc:3c:f3:bb:22:0c:3d:4b:53:a5:57:26:53:04: 5e:f8:b8:fc:5b:a0:57:26:a0:e9:c4:3b:85:8c:e4: b8:c7:c5:e1:18:91:6c:a1:a3:a3:f5:16:4a:c4:04: 5b:a3:ee:a7:94:66:de:2a:6d:e2:72:37:ad:f4:20: 76:d9:63:f1:2c:df:1b:d1:dc:c3:66:62:4e:ae:30: 6a:cb:58:c4:88:6e:b4:08:27:2c:2d:49:c9:c0:92: 59:c7:05:77:d1:0b:bd:e8:f8:16:4a:61:cc:63:e1: e8:0c:17:fc:2d:42:b7:39:68:c2:0b:e9:2e:48:9a: 8b:01:3c:3c:36:2a:da:f7:09:71:ec:23:88:09:98: aa:2c:c4:c5:13:1c:44:15:bc:29:1c:58:9b:dd:6e: cf:f8:30:75:4e:4c:82:0f:23:2e:26:69:59:56:b0: b6:85:0a:54:00:14:4e:1f:c2:24:a1:07:c6:f1:c7: 9e:f7:6b:c1:5e:a4:c0:95:df:a3:f1:b6:27:b2:d9: 41:96:88:1a:4a:1d:80:bf:4a:65:a6:d4:a4:23:78: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:F5:C3:25:BE:C6:F7:D3:99:10:39:82:2A:BC:D7:75:AD:62:47 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e3136372e302f32342d3234203d3e20323132363639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.167.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d7:ff:26:8c:c1:f1:2b:83:d9:73:92:19:86:36:d5:05:9b: 3e:6b:8a:d7:f3:3e:ff:6d:e7:87:b9:89:b5:56:2f:66:62:25: a7:3f:34:e8:bc:59:39:da:fb:98:47:c3:28:bf:89:26:d2:b3: e2:02:60:88:da:ee:24:e7:44:22:3a:dc:2b:c9:e0:67:bc:ad: 45:a3:12:fa:b0:59:50:47:12:6c:37:13:c5:a0:e2:8b:68:d1: ee:a7:e7:0b:d8:1a:81:92:3c:4c:b7:5d:32:ec:49:a4:8d:8b: c0:d7:40:46:c5:7c:d7:72:4b:88:7f:9d:ae:5f:32:a3:33:14: 39:f4:d3:34:9a:58:36:e3:37:6c:d5:96:5f:17:6d:be:28:6a: a1:1b:15:6a:b2:38:ff:3f:26:fd:0d:24:b5:13:7e:53:4b:6c: 63:cd:4a:62:40:ec:a9:3f:af:61:d4:94:8f:f3:50:3e:34:7d: 22:47:96:24:d0:35:b5:89:5b:6e:8b:10:57:ab:fd:db:5e:fd: fb:e5:40:79:5d:17:2a:72:8f:5e:ee:f3:da:38:e3:e9:cd:8c: e5:f2:e8:7c:4f:7a:f1:42:14:c7:b5:d5:c8:35:80:f3:d8:11: 7d:83:5f:02:f2:58:3c:0d:23:49:43:f6:df:9c:00:27:84:fc: 7d:e2:e7:d3 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUc2RdzZEa3A/FzDUgJcjlf8ypzg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKDQwODVGNUMzMjVCRUM2RjdEMzk5MTAzOTgyMkFCQ0Q3NzVBRDYyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCWUdTcD+FOQnIQ/fhkL86naiy vNlPFDWZZzAhOcnImOT38B0XJbaabp3X4sXMPPO7Igw9S1OlVyZTBF74uPxboFcm oOnEO4WM5LjHxeEYkWyho6P1FkrEBFuj7qeUZt4qbeJyN630IHbZY/Es3xvR3MNm Yk6uMGrLWMSIbrQIJywtScnAklnHBXfRC73o+BZKYcxj4egMF/wtQrc5aMIL6S5I mosBPDw2Ktr3CXHsI4gJmKosxMUTHEQVvCkcWJvdbs/4MHVOTIIPIy4maVlWsLaF ClQAFE4fwiShB8bxx573a8FepMCV36Pxtiey2UGWiBpKHYC/SmWm1KQjeFB3AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUQIX1wyW+xvfTmRA5giq813WtYkcwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzMTM2 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNjM2Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtlacwDQYJKoZIhvcNAQELBQADggEBAFnX/yaMwfErg9lzkhmGNtUFmz5ritfz Pv9t54e5ibVWL2ZiJac/NOi8WTna+5hHwyi/iSbSs+ICYIja7iTnRCI63CvJ4Ge8 rUWjEvqwWVBHEmw3E8Wg4oto0e6n5wvYGoGSPEy3XTLsSaSNi8DXQEbFfNdyS4h/ na5fMqMzFDn00zSaWDbjN2zVll8Xbb4oaqEbFWqyOP8/Jv0NJLUTflNLbGPNSmJA 7Kk/r2HUlI/zUD40fSJHliTQNbWJW26LEFer/dte/fvlQHldFypyj17u89o44+nN jOXy6HxPevFCFMe11cg1gPPYEX2DXwLyWDwNI0lD9t+cACeE/H3i59M= -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:07 2025 by rpki-client