This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138352e302f32342d3234203d3e2039303039.roa
File: 34352e39332e3138352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: YsgVKvqjDSfl5cY3VgnMOM/cSxhu5cHJw+NQE7V5wtA=
Subject key identifier: 61:7E:34:52:D7:51:59:4D:C2:57:16:9A:E3:00:42:8B:55:74:11:2D
Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Certificate serial: 4B66EE1749C6FE6D0695ABA4774C311A8DFF0D1A
Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138352e302f32342d3234203d3e2039303039.roa
Signing time: Fri 28 Nov 2025 16:26:31 +0000
ROA not before: Fri 28 Nov 2025 16:21:31 +0000
ROA not after: Fri 27 Nov 2026 16:26:31 +0000
asID: 9009
IP address blocks: 45.93.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Dec 2025 05:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:66:ee:17:49:c6:fe:6d:06:95:ab:a4:77:4c:31:1a:8d:ff:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce
Validity
Not Before: Nov 28 16:21:31 2025 GMT
Not After : Nov 27 16:26:31 2026 GMT
Subject: CN=617E3452D751594DC257169AE300428B5574112D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:04:61:e8:26:3a:3e:d2:92:c3:45:2c:a9:
36:6e:b4:93:89:44:d1:06:26:28:ba:3b:d2:c1:f5:
55:07:9b:e5:6e:db:04:44:67:73:67:14:3f:08:8c:
aa:fe:0a:94:a8:15:a4:1b:42:d6:5d:23:a2:0a:7d:
33:3a:e4:07:c1:f4:a3:d5:31:f9:f0:5e:34:ae:a1:
91:71:0d:7c:86:df:ab:9b:18:e6:c0:94:06:c2:4f:
6a:0e:08:6d:2f:54:ac:2a:92:d9:df:50:e3:cb:bc:
5b:92:a4:fd:41:d6:73:d9:91:68:b8:83:e3:ff:79:
a5:82:db:50:d8:04:7b:f2:4e:e8:73:c2:26:7e:66:
3c:2f:8c:8f:47:0f:fe:98:77:70:f4:e7:29:b8:bc:
8e:43:09:00:6e:63:a6:4d:d3:c1:e8:a6:ce:52:0e:
df:7a:ef:2f:32:86:0f:4a:24:33:b7:83:6d:a8:d8:
f4:9a:5d:2d:6a:b2:44:82:22:78:6a:3e:71:8c:dd:
ea:78:0b:23:8d:63:5e:49:44:05:80:e1:24:f2:db:
b7:f8:e2:4a:3c:8c:5b:52:d4:22:a1:32:e9:fd:49:
2c:5f:9a:d0:c2:bd:90:ab:bd:5c:49:f5:d0:ee:0b:
2f:b2:8f:cd:90:c1:c2:f7:28:09:66:18:b8:83:52:
79:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7E:34:52:D7:51:59:4D:C2:57:16:9A:E3:00:42:8B:55:74:11:2D
X509v3 Authority Key Identifier:
keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e39332e3138352e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.185.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c8:f8:0c:fc:1a:b9:81:14:cb:61:7e:d8:44:4b:aa:ea:8e:
84:ec:c5:1f:77:65:4e:ad:e1:7b:06:47:b4:50:27:39:f0:5e:
27:da:8f:19:28:68:b6:29:10:ad:65:02:6d:03:eb:5f:4b:95:
48:22:ba:25:5b:43:69:10:3d:6f:57:cd:9a:ff:6d:3b:c4:42:
28:e7:4a:82:b9:24:73:14:5e:71:04:7a:bd:7b:0a:14:ce:73:
e2:ad:95:8d:2d:2d:99:c5:42:f2:6b:b6:52:69:96:8d:95:5c:
b9:71:06:1a:97:e4:ac:1d:29:f3:9d:7e:97:ea:99:50:5f:50:
21:23:5f:d4:42:cc:ff:43:d9:ae:bb:8e:71:cd:85:7e:1a:0c:
de:a9:72:e4:59:ea:e7:b9:b5:eb:e0:c0:c3:78:9a:1f:88:0b:
97:1a:7c:d9:7a:c8:11:fc:28:81:98:47:89:b6:0a:7d:0c:99:
38:ab:6d:09:12:8f:97:bd:c9:15:51:b5:b0:f3:30:8d:0f:51:
f5:2e:7f:23:c6:81:38:3e:03:a0:d8:19:9e:8f:2f:25:fd:d2:
97:4e:cf:78:ff:e6:b1:80:13:2f:aa:c6:81:0e:a6:f4:c9:27:
0d:54:6f:cd:48:de:2e:0c:8f:40:ff:68:2d:8d:07:72:13:59:
7e:32:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:46:09 2025 by rpki-client