This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36312e302f32342d3234203d3e20313335333931.roa File: 34352e3134392e36312e302f32342d3234203d3e20313335333931.roa (raw, json) Hash identifier: CjBHEb6e8KCFokD4ry4Ct4NNWk9/i3N//pYJT3Rzvpg= Subject key identifier: 37:C8:84:08:91:87:DC:F9:E3:5F:10:4C:B3:B1:DD:74:69:06:7D:E8 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 7BF2F03DD93CD751E4C543678F40687A2795714A Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36312e302f32342d3234203d3e20313335333931.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 135391 IP address blocks: 45.149.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f2:f0:3d:d9:3c:d7:51:e4:c5:43:67:8f:40:68:7a:27:95:71:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=37C884089187DCF9E35F104CB3B1DD7469067DE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6d:21:62:ee:46:04:c2:80:37:2c:ab:f9:a2: 85:c2:08:01:a6:e0:d5:c5:67:5b:15:85:64:63:c7: ac:12:08:1c:b8:57:55:5b:89:2a:96:ad:c6:28:8f: c0:e5:11:b2:7b:8e:30:97:0d:fa:18:89:43:f9:79: 3b:62:94:ea:42:77:3f:95:1a:35:7b:3d:41:80:77: 42:3c:7a:e6:e6:67:1b:12:d7:5a:99:70:fa:e0:24: c0:b8:f8:69:f3:f4:21:cb:fe:58:84:26:53:bd:62: 0e:bf:26:57:94:f2:9c:67:f9:0e:20:71:4c:e9:26: 84:26:c7:40:a8:bd:40:7b:f0:45:82:c0:f1:63:63: bf:b4:d2:18:dd:93:b6:b4:85:ad:4b:75:48:7b:6c: 9d:76:b2:9d:e6:a8:d3:e8:fd:05:90:b8:e7:46:a3: ab:b0:62:bb:ac:9c:9e:9b:10:7b:be:14:2d:13:bc: 22:fe:97:33:e0:de:5e:62:35:6a:f5:50:a8:c6:25: 1b:2e:03:3b:90:4a:61:78:a3:f6:a6:3f:64:44:9d: 51:b4:96:40:56:67:b1:2f:18:49:fa:a8:a0:41:4d: e6:fb:c4:ae:11:59:25:09:2b:ff:bb:22:9a:ba:fb: c9:5c:ce:3b:ec:c2:9a:8d:32:af:f1:b0:48:ab:a9: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C8:84:08:91:87:DC:F9:E3:5F:10:4C:B3:B1:DD:74:69:06:7D:E8 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36312e302f32342d3234203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.61.0/24 Signature Algorithm: sha256WithRSAEncryption ad:e0:8a:05:be:48:98:e9:c2:f2:39:2b:8d:80:b0:4d:7a:94: 50:a3:44:f3:bc:06:53:31:12:8d:08:42:0b:0e:02:5f:ab:a2: b6:74:4e:4c:f1:ad:c8:4e:f0:76:c9:bd:86:bb:fe:9d:f8:67: b2:0f:f6:f4:82:fa:ce:3d:0d:a8:ef:09:2b:19:ba:f6:96:63: b8:9b:12:c7:77:a1:44:41:0c:90:58:7e:7c:5c:91:15:0f:b8: ee:f7:8a:1d:c7:44:0b:81:8d:4a:63:8c:d7:3e:a5:b3:98:f6: 0d:f5:2b:36:19:23:25:46:92:e0:54:09:1e:76:a7:35:8a:fd: 9d:17:63:ae:23:8c:65:30:56:60:dd:d3:45:07:27:7b:f5:c2: 87:18:ef:05:2a:04:e2:0a:4d:14:08:59:a7:83:3e:92:ad:b9: 39:b2:61:62:a5:ec:7d:8a:d1:9c:75:6d:b6:0b:86:dc:3d:e2: 44:ff:5c:88:d9:e1:3b:41:6e:a4:17:1c:96:49:2f:7b:d1:48: a5:5b:15:1a:39:9a:e7:4e:65:f8:fd:38:f5:0e:a1:99:41:78: 4f:c9:21:b1:6a:45:80:66:6b:ac:4e:9b:73:5b:ee:59:73:d6: 4e:d2:d1:93:53:d1:7a:f4:d4:93:2f:be:56:34:e1:0d:ff:e5: 52:65:9b:ff -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUe/LwPdk811HkxUNnj0BoeieVcUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKDM3Qzg4NDA4OTE4N0RDRjlFMzVGMTA0Q0IzQjFERDc0NjkwNjdERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bSFi7kYEwoA3LKv5ooXCCAGm 4NXFZ1sVhWRjx6wSCBy4V1VbiSqWrcYoj8DlEbJ7jjCXDfoYiUP5eTtilOpCdz+V GjV7PUGAd0I8eubmZxsS11qZcPrgJMC4+Gnz9CHL/liEJlO9Yg6/JleU8pxn+Q4g cUzpJoQmx0CovUB78EWCwPFjY7+00hjdk7a0ha1LdUh7bJ12sp3mqNPo/QWQuOdG o6uwYrusnJ6bEHu+FC0TvCL+lzPg3l5iNWr1UKjGJRsuAzuQSmF4o/amP2REnVG0 lkBWZ7EvGEn6qKBBTeb7xK4RWSUJK/+7Ipq6+8lczjvswpqNMq/xsEirqS9pAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUN8iECJGH3PnjXxBMs7HddGkGfegwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM1MzMzOTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZU9MA0GCSqGSIb3DQEBCwUAA4IBAQCt4IoFvkiY6cLyOSuNgLBNepRQo0TzvAZT MRKNCEILDgJfq6K2dE5M8a3ITvB2yb2Gu/6d+GeyD/b0gvrOPQ2o7wkrGbr2lmO4 mxLHd6FEQQyQWH58XJEVD7ju94odx0QLgY1KY4zXPqWzmPYN9Ss2GSMlRpLgVAke dqc1iv2dF2OuI4xlMFZg3dNFByd79cKHGO8FKgTiCk0UCFmngz6Srbk5smFipex9 itGcdW22C4bcPeJE/1yI2eE7QW6kFxyWSS970UilWxUaOZrnTmX4/Tj1DqGZQXhP ySGxakWAZmusTptzW+5Zc9ZO0tGTU9F69NSTL75WNOEN/+VSZZv/ -----END CERTIFICATE-----Generated at Sat Nov 22 22:21:33 2025 by rpki-client