This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa File: 34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa (raw, json) Hash identifier: ElvQJHHMZyjhqFtZ4eXubU55AwJuUHlB5VPhchi0zEY= Subject key identifier: 11:AC:77:A9:A2:2D:9D:48:A9:5F:F6:79:BC:6B:C2:76:8B:F3:B7:6E Certificate issuer: /CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Certificate serial: 567F030E666D2A884B22928256BAE82EE4898D7D Authority key identifier: E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa Signing time: Sat 08 Nov 2025 15:11:30 +0000 ROA not before: Sat 08 Nov 2025 15:06:30 +0000 ROA not after: Sat 07 Nov 2026 15:11:30 +0000 asID: 212477 IP address blocks: 45.149.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.mft rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 16:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:7f:03:0e:66:6d:2a:88:4b:22:92:82:56:ba:e8:2e:e4:89:8d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1f3512f51dc42bb9eb12abc0bb529668b2edee4 Validity Not Before: Nov 8 15:06:30 2025 GMT Not After : Nov 7 15:11:30 2026 GMT Subject: CN=11AC77A9A22D9D48A95FF679BC6BC2768BF3B76E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:c3:ce:02:2d:64:32:bf:aa:16:59:f3:c9: 6c:22:3c:72:46:a3:3d:2d:d8:f9:dd:25:b3:5b:dd: dd:e7:db:42:48:5a:c4:56:e6:bb:bd:16:ec:fb:93: 65:d8:b9:ed:6e:43:3e:66:96:38:1a:cc:a6:b5:74: 27:b9:d6:8d:2f:21:2c:82:c8:81:35:eb:60:77:2a: ef:3e:06:42:54:af:ec:5c:e1:de:fe:6b:ba:55:d0: 6c:d3:b3:31:c2:44:ff:6a:df:a0:18:7c:38:15:13: d5:5b:d8:37:0e:ff:1e:21:26:38:2c:24:21:69:83: 56:45:15:c7:08:b1:d7:2a:21:a6:41:6f:2f:79:ca: 58:0c:79:ed:e4:58:3e:34:6a:64:8a:5e:32:78:81: 14:d9:5b:b4:a2:99:07:a5:b7:cd:3d:d5:f6:e7:88: 01:dd:16:52:30:b0:d7:71:50:8e:ba:70:e6:0b:b6: 9c:77:1b:de:a8:af:6a:0b:72:56:ea:b5:c7:3a:c8: 6e:89:39:02:5e:37:ad:0d:76:fe:82:dd:f0:03:d0: 87:10:44:00:be:68:14:eb:21:bc:df:07:7d:9f:09: e3:e9:86:a2:91:bd:67:79:90:7c:6d:d1:ec:fd:c1: 88:3f:6d:eb:5e:d0:8b:3a:07:3a:0b:64:87:b3:bb: c4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AC:77:A9:A2:2D:9D:48:A9:5F:F6:79:BC:6B:C2:76:8B:F3:B7:6E X509v3 Authority Key Identifier: keyid:E1:F3:51:2F:51:DC:42:BB:9E:B1:2A:BC:0B:B5:29:66:8B:2E:DE:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/E1F3512F51DC42BB9EB12ABC0BB529668B2EDEE4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fNRL1HcQruesSq8C7UpZosu3uQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e3cdc648-d203-462a-bd0f-ec1b60d879a7/0/34352e3134392e3135342e302f32342d3234203d3e20323132343737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.154.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:33:5a:df:02:92:1d:cd:72:d0:37:c0:99:51:2e:b3:29:7e: 9a:c9:73:f9:23:74:23:2f:cb:7d:74:c4:89:86:b3:51:47:5c: f6:8c:05:71:54:13:85:ac:3e:ac:60:28:51:e7:aa:8a:7b:13: 19:82:8b:7a:e6:d7:b2:3f:3b:13:9e:2b:09:96:1e:4d:a6:1d: 3e:25:ad:f2:57:27:88:23:e1:0b:70:42:17:4c:7b:a1:10:2d: dd:86:e9:7b:68:75:1b:0f:8b:de:54:ce:69:12:0c:4c:c4:83: 00:48:ce:72:97:c6:7f:c9:1e:dd:46:7a:7a:2c:48:fd:e4:64: d8:e5:0a:c1:4b:fb:44:e7:e8:6f:10:f4:d7:19:46:f8:53:69: a3:32:01:2f:e1:88:06:93:5b:73:b5:a2:09:c0:e1:8d:37:d9: 6a:eb:42:f2:d2:24:d4:15:c1:60:33:11:25:41:40:2a:03:f9: 71:cb:4b:3d:1f:ea:a3:af:8f:03:d8:0b:da:0f:07:ed:c9:d7: 92:8f:6c:0f:d2:6c:c9:67:ff:f9:71:98:e0:94:de:76:3d:2b: c0:bb:42:58:f1:69:ce:3c:6d:88:30:f0:3b:54:60:e9:cb:02: f6:46:22:a4:7e:b3:4d:a8:fd:17:c7:5c:0f:4b:5a:45:0b:22: 44:44:8f:6e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUVn8DDmZtKohLIpKCVrroLuSJjX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZTFmMzUxMmY1MWRjNDJiYjllYjEyYWJjMGJiNTI5NjY4 YjJlZGVlNDAeFw0yNTExMDgxNTA2MzBaFw0yNjExMDcxNTExMzBaMDMxMTAvBgNV BAMTKDExQUM3N0E5QTIyRDlENDhBOTVGRjY3OUJDNkJDMjc2OEJGM0I3NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBMPOAi1kMr+qFlnzyWwiPHJG oz0t2PndJbNb3d3n20JIWsRW5ru9Fuz7k2XYue1uQz5mljgazKa1dCe51o0vISyC yIE162B3Ku8+BkJUr+xc4d7+a7pV0GzTszHCRP9q36AYfDgVE9Vb2DcO/x4hJjgs JCFpg1ZFFccIsdcqIaZBby95ylgMee3kWD40amSKXjJ4gRTZW7SimQelt8091fbn iAHdFlIwsNdxUI66cOYLtpx3G96or2oLclbqtcc6yG6JOQJeN60Ndv6C3fAD0IcQ RAC+aBTrIbzfB32fCePphqKRvWd5kHxt0ez9wYg/bete0Is6BzoLZIezu8Q1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUEax3qaItnUipX/Z5vGvCdovzt24wHwYDVR0j BBgwFoAU4fNRL1HcQruesSq8C7UpZosu3uQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgtZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3 OWE3LzAvRTFGMzUxMkY1MURDNDJCQjlFQjEyQUJDMEJCNTI5NjY4QjJFREVFNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmTlJMMUhjUXJ1ZXNTcThDN1VwWm9z dTN1US5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTNjZGM2NDgt ZDIwMy00NjJhLWJkMGYtZWMxYjYwZDg3OWE3LzAvMzQzNTJlMzEzNDM5MmUzMTM1 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNDM3Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtlZowDQYJKoZIhvcNAQELBQADggEBAHszWt8Ckh3NctA3wJlRLrMpfprJc/kj dCMvy310xImGs1FHXPaMBXFUE4WsPqxgKFHnqop7ExmCi3rm17I/OxOeKwmWHk2m HT4lrfJXJ4gj4QtwQhdMe6EQLd2G6XtodRsPi95UzmkSDEzEgwBIznKXxn/JHt1G enosSP3kZNjlCsFL+0Tn6G8Q9NcZRvhTaaMyAS/hiAaTW3O1ognA4Y032WrrQvLS JNQVwWAzESVBQCoD+XHLSz0f6qOvjwPYC9oPB+3J15KPbA/SbMln//lxmOCU3nY9 K8C7Qljxac48bYgw8DtUYOnLAvZGIqR+s02o/RfHXA9LWkULIkREj24= -----END CERTIFICATE-----Generated at Tue Nov 25 03:20:19 2025 by rpki-client