This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203633313939.roa File: 34352e3134392e36322e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: vZtUK+cyWn9HqZW47BPiCvcZESw+S9eULE1Gd8jVpHQ= Subject key identifier: BF:5D:D7:6C:FC:49:4E:96:C5:E5:9D:4B:48:3A:EE:28:80:B2:DD:5B Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 7BBFF86CB9E43708E4B14D1BF2B64CF725C5AB5F Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203633313939.roa Signing time: Tue 18 Nov 2025 19:01:08 +0000 ROA not before: Tue 18 Nov 2025 18:56:08 +0000 ROA not after: Tue 17 Nov 2026 19:01:08 +0000 asID: 63199 IP address blocks: 45.149.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:bf:f8:6c:b9:e4:37:08:e4:b1:4d:1b:f2:b6:4c:f7:25:c5:ab:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 18 18:56:08 2025 GMT Not After : Nov 17 19:01:08 2026 GMT Subject: CN=BF5DD76CFC494E96C5E59D4B483AEE2880B2DD5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:68:57:bf:1b:75:f9:7d:f5:f4:01:5c:90:e6: eb:22:fd:18:50:ed:48:39:e8:46:98:96:5c:79:8b: a2:13:c2:4d:bd:85:68:40:fa:24:93:b8:e5:0d:8f: 05:f1:4a:9f:3c:1f:a0:f9:95:4f:d0:08:57:21:55: f7:05:c9:a3:90:3d:d4:f8:b6:3a:f9:20:0d:fc:56: 93:2e:21:7f:7e:99:e3:08:0b:ba:8b:10:80:8d:de: c2:41:31:f8:0e:a1:c4:e7:06:ff:13:f0:00:a2:87: ec:ea:89:e5:a5:20:3b:ac:80:fe:1c:d0:cc:ef:4c: e5:7f:ae:0a:1a:26:2c:70:2e:f3:51:08:c5:39:23: 82:87:27:ab:db:a0:b9:c7:51:b6:71:3e:f4:6f:78: 62:b1:39:58:a1:d4:e3:61:7c:64:92:ff:81:7b:9d: 73:b4:db:d6:84:5a:8b:87:b0:b1:a6:af:0c:c3:29: 80:78:ba:76:62:e5:1e:02:2a:a6:43:8c:3f:cf:ec: cb:0b:ea:4c:f7:3e:89:c7:14:04:ed:6e:43:7f:16: 23:2b:cb:8b:a7:74:05:24:71:3b:3d:e0:15:69:63: 46:5f:a8:8a:81:cc:e6:82:e3:e8:67:47:2f:24:9b: 49:8d:8b:aa:7c:59:d5:94:11:8c:86:ca:2d:9e:4e: b8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:5D:D7:6C:FC:49:4E:96:C5:E5:9D:4B:48:3A:EE:28:80:B2:DD:5B X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.62.0/24 Signature Algorithm: sha256WithRSAEncryption 22:15:5c:4d:b4:4b:69:ee:49:da:b1:7a:c8:a1:7e:a8:3a:a0: f5:59:1c:49:91:7b:4f:23:5d:7a:3f:8a:17:4d:83:3a:fe:bb: 7e:ba:bb:b1:b3:d4:d0:54:95:26:26:d7:49:72:2e:96:19:02: 89:d8:f7:04:46:0f:08:8b:f5:86:db:3f:47:28:37:29:f6:70: 1c:75:8d:5d:c5:9e:04:bf:b1:9d:43:12:4a:fc:8b:5e:4f:a9: 43:d3:ef:1c:f4:8c:83:a4:a4:dc:6e:d5:e3:e3:18:ac:52:ef: 49:7d:10:29:00:75:1d:78:1b:7c:13:f1:86:43:a5:49:ab:9a: 39:47:ff:8b:f3:7b:01:74:55:df:09:4b:2e:c5:18:4f:9f:36: e0:8a:82:45:9c:c3:08:1e:c8:69:5e:ff:b1:20:11:c3:c5:7d: 69:e1:6b:85:ae:01:5e:e1:bb:35:25:40:f4:8a:13:06:18:2f: 9e:ba:27:5c:aa:7b:22:6a:7d:0b:57:f8:18:f2:49:3e:91:06: a3:eb:3d:25:35:c1:69:95:39:00:48:00:59:ed:e5:8b:c6:89: 63:38:17:0a:49:d7:02:67:38:ae:51:0d:9d:fd:d0:d8:be:f7: c3:83:84:ad:90:12:1f:93:78:e6:ef:d9:22:a7:d9:a1:d1:24: 46:63:f5:b8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUe7/4bLnkNwjksU0b8rZM9yXFq18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMTgxODU2MDhaFw0yNjExMTcxOTAxMDhaMDMxMTAvBgNV BAMTKEJGNURENzZDRkM0OTRFOTZDNUU1OUQ0QjQ4M0FFRTI4ODBCMkRENUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoaFe/G3X5ffX0AVyQ5usi/RhQ 7Ug56EaYllx5i6ITwk29hWhA+iSTuOUNjwXxSp88H6D5lU/QCFchVfcFyaOQPdT4 tjr5IA38VpMuIX9+meMIC7qLEICN3sJBMfgOocTnBv8T8ACih+zqieWlIDusgP4c 0MzvTOV/rgoaJixwLvNRCMU5I4KHJ6vboLnHUbZxPvRveGKxOVih1ONhfGSS/4F7 nXO029aEWouHsLGmrwzDKYB4unZi5R4CKqZDjD/P7MsL6kz3PonHFATtbkN/FiMr y4undAUkcTs94BVpY0ZfqIqBzOaC4+hnRy8km0mNi6p8WdWUEYyGyi2eTrhXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUv13XbPxJTpbF5Z1LSDruKICy3VswHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2V PjANBgkqhkiG9w0BAQsFAAOCAQEAIhVcTbRLae5J2rF6yKF+qDqg9VkcSZF7TyNd ej+KF02DOv67frq7sbPU0FSVJibXSXIulhkCidj3BEYPCIv1hts/Ryg3KfZwHHWN XcWeBL+xnUMSSvyLXk+pQ9PvHPSMg6Sk3G7V4+MYrFLvSX0QKQB1HXgbfBPxhkOl SauaOUf/i/N7AXRV3wlLLsUYT5824IqCRZzDCB7IaV7/sSARw8V9aeFrha4BXuG7 NSVA9IoTBhgvnronXKp7Imp9C1f4GPJJPpEGo+s9JTXBaZU5AEgAWe3li8aJYzgX CknXAmc4rlENnf3Q2L73w4OErZASH5N45u/ZIqfZodEkRmP1uA== -----END CERTIFICATE-----Generated at Sat Nov 22 22:22:04 2025 by rpki-client