This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203235313938.roa File: 34352e3134392e36322e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: atvOKN/I6kZ9ZCn2ROjeKb1sdRXFzq1nj70sdrwEypw= Subject key identifier: 12:67:A0:F2:21:CE:98:FD:8F:3E:1F:8A:94:B9:DF:35:9B:3C:C0:15 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 6DB75BA97E6C1B66EA5E9CB2D5B7DF1241B44560 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203235313938.roa Signing time: Tue 23 Dec 2025 11:12:27 +0000 ROA not before: Tue 23 Dec 2025 11:07:27 +0000 ROA not after: Tue 22 Dec 2026 11:12:27 +0000 asID: 25198 IP address blocks: 45.149.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b7:5b:a9:7e:6c:1b:66:ea:5e:9c:b2:d5:b7:df:12:41:b4:45:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Dec 23 11:07:27 2025 GMT Not After : Dec 22 11:12:27 2026 GMT Subject: CN=1267A0F221CE98FD8F3E1F8A94B9DF359B3CC015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:27:ec:88:f0:c5:31:a9:0b:50:a3:cd:12:15: fd:d0:5e:19:47:0f:52:20:00:34:56:b1:0d:fc:48: 44:0e:c5:21:84:84:6d:eb:c1:b6:80:81:b2:0e:c5: fa:09:9f:89:84:b7:57:d0:63:5f:5f:ca:a5:17:1d: ca:20:6b:6c:76:98:96:1a:33:98:6d:46:d6:a0:29: 49:cf:17:bd:b0:ec:87:37:9a:19:e0:9d:1f:fa:d1: 61:cd:17:7c:61:25:86:f9:a8:09:0e:a8:42:4c:bd: ca:2e:fd:11:5f:03:b6:27:23:fe:69:12:3c:0f:a0: e8:b2:94:53:b4:01:c2:1a:42:f2:51:be:56:2e:2c: 5b:ef:f0:26:a9:db:6a:42:6e:07:67:12:6f:e5:a5: 8f:8a:c4:2a:b0:45:e1:cc:5a:d3:16:ce:a4:c8:cb: b4:8d:6d:b2:ce:30:d3:5d:10:d4:11:4a:11:d0:54: d4:c2:3f:5e:c7:a7:67:d1:36:b2:85:7c:02:83:eb: 6c:b8:a8:93:d6:a3:4c:3d:52:00:c4:74:d0:dd:46: f3:13:6c:27:d8:e6:71:d5:aa:b2:7c:84:b5:19:6e: 29:56:cf:f7:86:1b:63:08:96:6e:e3:74:24:2b:4c: d1:3e:c8:df:d3:72:0e:07:38:80:9f:9f:b9:cf:62: 55:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:67:A0:F2:21:CE:98:FD:8F:3E:1F:8A:94:B9:DF:35:9B:3C:C0:15 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.62.0/24 Signature Algorithm: sha256WithRSAEncryption 66:df:58:26:12:5b:17:f3:86:a3:86:af:e7:97:4d:9f:d6:53: a5:03:8a:54:e0:0a:f9:ee:62:4b:d6:0d:13:29:0c:0e:15:ab: a5:72:e5:4d:b4:24:ac:03:d9:7c:44:92:9a:2d:4f:79:fe:45: 6f:38:24:67:c4:f2:f2:8e:03:aa:2a:9d:b1:b6:d0:c7:63:c0: a0:94:f9:05:f1:7c:88:b5:7b:0f:a4:f0:29:ca:5c:ed:69:6e: c5:6b:20:d0:9c:44:3f:37:26:bf:f2:ed:05:1c:73:12:ef:30: fd:7a:bc:86:80:f8:f6:4d:6f:94:4d:3f:cc:56:d2:48:7c:23: b7:d3:e4:26:04:e3:ee:9d:48:fa:dd:95:b5:62:67:e3:42:e4: a2:a6:77:3f:f5:d8:71:79:0b:c4:44:5d:f2:ce:01:d5:9f:02: da:ff:5a:8c:8d:ee:91:38:1f:1a:c2:87:a3:5f:44:f7:23:2f: f9:a5:b7:da:bb:a0:f0:1b:61:00:b3:4f:6b:87:67:91:24:5b: d1:47:8a:ef:8a:18:f8:f9:b3:eb:43:f1:ea:84:95:76:83:f7: 5b:90:36:90:61:08:0f:13:4f:35:1d:36:46:95:38:a5:30:a9: 95:21:3c:ec:82:00:05:58:7c:f0:df:82:9b:d0:cf:3a:fd:10: 27:f9:f2:88 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbbdbqX5sG2bqXpyy1bffEkG0RWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTEyMjMxMTA3MjdaFw0yNjEyMjIxMTEyMjdaMDMxMTAvBgNV BAMTKDEyNjdBMEYyMjFDRTk4RkQ4RjNFMUY4QTk0QjlERjM1OUIzQ0MwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJ+yI8MUxqQtQo80SFf3QXhlH D1IgADRWsQ38SEQOxSGEhG3rwbaAgbIOxfoJn4mEt1fQY19fyqUXHcoga2x2mJYa M5htRtagKUnPF72w7Ic3mhngnR/60WHNF3xhJYb5qAkOqEJMvcou/RFfA7YnI/5p EjwPoOiylFO0AcIaQvJRvlYuLFvv8Cap22pCbgdnEm/lpY+KxCqwReHMWtMWzqTI y7SNbbLOMNNdENQRShHQVNTCP17Hp2fRNrKFfAKD62y4qJPWo0w9UgDEdNDdRvMT bCfY5nHVqrJ8hLUZbilWz/eGG2MIlm7jdCQrTNE+yN/Tcg4HOICfn7nPYlVDAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEmeg8iHOmP2PPh+KlLnfNZs8wBUwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2V PjANBgkqhkiG9w0BAQsFAAOCAQEAZt9YJhJbF/OGo4av55dNn9ZTpQOKVOAK+e5i S9YNEykMDhWrpXLlTbQkrAPZfESSmi1Pef5FbzgkZ8Ty8o4DqiqdsbbQx2PAoJT5 BfF8iLV7D6TwKcpc7WluxWsg0JxEPzcmv/LtBRxzEu8w/Xq8hoD49k1vlE0/zFbS SHwjt9PkJgTj7p1I+t2VtWJn40LkoqZ3P/XYcXkLxERd8s4B1Z8C2v9ajI3ukTgf GsKHo19E9yMv+aW32rug8BthALNPa4dnkSRb0UeK74oY+Pmz60Px6oSVdoP3W5A2 kGEIDxNPNR02RpU4pTCplSE87IIABVh88N+Cm9DPOv0QJ/nyiA== -----END CERTIFICATE-----Generated at Fri Jan 9 12:52:51 2026 by rpki-client