This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e203136323736.roa File: 34352e3134392e36302e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: mbyRbXV6qtXX/gc/fRiAchNGyI7vTap6PWbMkBmBIoY= Subject key identifier: A3:83:84:E3:27:98:CF:00:65:41:91:4F:0C:00:01:B0:28:D9:3C:73 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 41C7BEBAF12CFE15B8B2E0FEFC049C10F022DE91 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e203136323736.roa Signing time: Tue 18 Nov 2025 19:01:09 +0000 ROA not before: Tue 18 Nov 2025 18:56:09 +0000 ROA not after: Tue 17 Nov 2026 19:01:09 +0000 asID: 16276 IP address blocks: 45.149.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c7:be:ba:f1:2c:fe:15:b8:b2:e0:fe:fc:04:9c:10:f0:22:de:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:09 2025 GMT Not After : Nov 17 19:01:09 2026 GMT Subject: CN=A38384E32798CF006541914F0C0001B028D93C73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cf:cc:28:03:eb:06:81:79:28:8e:ec:3f:ba: 88:26:05:87:85:c7:0c:a4:d8:fa:c2:e8:47:27:6c: 23:63:9c:98:62:bc:0f:3a:90:36:f1:f9:3b:3f:6a: 04:9d:fe:aa:56:26:6d:76:db:bd:4e:ab:46:e3:92: bb:59:6d:d0:99:dd:dc:69:28:af:ea:88:ef:09:7c: 52:10:24:e4:0e:f3:1e:b7:1c:58:61:e3:22:d3:1e: a8:63:0b:a7:b5:d7:2f:93:e5:29:8d:bb:08:45:91: 2f:05:f2:1a:99:84:a0:e5:fe:a6:f5:2b:2d:22:03: 2a:80:53:82:28:2c:3e:98:fb:c9:dd:48:1f:6a:f4: eb:0f:56:b6:f1:78:11:c0:26:73:12:fd:ec:a9:c2: f0:a8:d7:0a:81:c2:be:ac:28:b3:42:2d:04:db:f1: ae:48:e4:3c:82:c4:ce:e8:80:2b:b2:0f:45:62:4d: 54:ba:4f:ee:31:c4:56:4e:d9:46:e4:ec:85:27:46: 21:40:2d:78:6a:ca:b7:2e:73:56:4f:36:ca:6e:fe: eb:93:b3:90:8c:93:b1:13:d6:ed:f3:2b:37:c0:1d: 88:44:50:d2:da:7d:c9:bf:f7:37:75:d4:0e:9a:c3: 51:e2:54:fd:ce:cb:7f:2f:53:39:f5:6e:b1:02:2d: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:83:84:E3:27:98:CF:00:65:41:91:4F:0C:00:01:B0:28:D9:3C:73 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.60.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:36:6f:3f:91:cb:64:df:1d:7e:69:03:5e:a0:62:b6:1c:01: 78:ef:84:3a:e6:2e:b2:10:55:f5:31:44:ae:39:f1:de:f2:26: d2:17:e1:9c:f6:54:86:5a:cf:b1:c1:f5:56:e3:05:39:5e:8d: 48:b2:86:c7:31:33:63:b0:8d:bc:b7:89:40:94:33:d3:e0:80: 19:ab:d5:c4:e7:d3:75:36:fa:e5:a5:a3:78:9b:7a:68:04:91: f9:34:d7:64:4a:3c:c8:df:55:62:6a:3d:55:a0:d7:bc:93:fd: df:bb:e6:cb:0c:79:e7:c4:01:47:9a:4b:e7:16:8f:9f:17:5a: a2:0c:80:e3:f9:fd:e1:01:ff:8a:27:42:5f:b9:f5:54:49:a0: a0:53:84:b1:e7:11:7a:4e:be:24:54:0f:3a:3d:ff:08:e1:96: b3:56:12:94:9f:85:db:27:49:c4:31:8b:a2:b0:42:b4:0e:00: 18:16:91:ea:04:9c:d3:01:84:bd:27:b9:ca:a2:70:5e:c3:76: 53:25:eb:f4:76:64:fc:da:06:06:93:88:e6:e8:f5:fa:c0:cd: cc:9a:1e:64:09:e4:49:90:24:f0:ad:31:ad:3c:ff:43:04:45: 09:e7:8f:cc:01:48:99:2a:28:04:18:7c:64:06:c1:dd:be:cb: 93:66:8d:a0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQce+uvEs/hW4suD+/AScEPAi3pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDlaFw0yNjExMTcxOTAxMDlaMDMxMTAvBgNV BAMTKEEzODM4NEUzMjc5OENGMDA2NTQxOTE0RjBDMDAwMUIwMjhEOTNDNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmz8woA+sGgXkojuw/uogmBYeF xwyk2PrC6EcnbCNjnJhivA86kDbx+Ts/agSd/qpWJm12271Oq0bjkrtZbdCZ3dxp KK/qiO8JfFIQJOQO8x63HFhh4yLTHqhjC6e11y+T5SmNuwhFkS8F8hqZhKDl/qb1 Ky0iAyqAU4IoLD6Y+8ndSB9q9OsPVrbxeBHAJnMS/eypwvCo1wqBwr6sKLNCLQTb 8a5I5DyCxM7ogCuyD0ViTVS6T+4xxFZO2Ubk7IUnRiFALXhqyrcuc1ZPNspu/uuT s5CMk7ET1u3zKzfAHYhEUNLafcm/9zd11A6aw1HiVP3Oy38vUzn1brECLR9zAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUo4OE4yeYzwBlQZFPDAABsCjZPHMwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2V PDANBgkqhkiG9w0BAQsFAAOCAQEAmzZvP5HLZN8dfmkDXqBithwBeO+EOuYushBV 9TFErjnx3vIm0hfhnPZUhlrPscH1VuMFOV6NSLKGxzEzY7CNvLeJQJQz0+CAGavV xOfTdTb65aWjeJt6aASR+TTXZEo8yN9VYmo9VaDXvJP937vmywx558QBR5pL5xaP nxdaogyA4/n94QH/iidCX7n1VEmgoFOEsecRek6+JFQPOj3/COGWs1YSlJ+F2ydJ xDGLorBCtA4AGBaR6gSc0wGEvSe5yqJwXsN2UyXr9HZk/NoGBpOI5uj1+sDNzJoe ZAnkSZAk8K0xrTz/QwRFCeePzAFImSooBBh8ZAbB3b7Lk2aNoA== -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:35 2025 by rpki-client