This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e203633313939.roa File: 34332e3233302e38342e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: mN7VhJyGfS7zh6TYiLbpihJCInKpBaTwITIrbKnSr78= Subject key identifier: 32:A2:43:5B:8B:90:12:9A:51:C6:8D:42:6B:0A:E8:B4:44:46:37:D8 Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 507E7C4F2C8E3D639000D837C01C394184F873E0 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e203633313939.roa Signing time: Fri 21 Nov 2025 05:54:14 +0000 ROA not before: Fri 21 Nov 2025 05:49:14 +0000 ROA not after: Fri 20 Nov 2026 05:54:14 +0000 asID: 63199 IP address blocks: 43.230.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:7e:7c:4f:2c:8e:3d:63:90:00:d8:37:c0:1c:39:41:84:f8:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 21 05:49:14 2025 GMT Not After : Nov 20 05:54:14 2026 GMT Subject: CN=32A2435B8B90129A51C68D426B0AE8B4444637D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:f2:c9:38:f0:db:75:51:69:ec:53:84:aa: 21:b8:18:6d:cb:7c:c4:c9:f2:6d:63:a4:1f:1d:ec: 4c:81:b9:be:7b:1f:3a:f3:16:b5:e0:36:d5:01:23: 1e:b7:97:15:ab:19:06:a4:64:39:fe:12:69:93:d5: 6c:c8:b0:ad:65:49:90:d4:e2:4b:97:8c:c9:11:57: 49:76:61:d6:a6:de:1c:f2:87:f7:e1:3f:c7:2c:74: 0a:fb:e2:2e:f1:ec:f1:03:15:4d:e4:40:bc:c0:71: 34:6b:0c:50:42:4a:58:5b:ef:5c:33:53:aa:fe:9e: 02:56:a6:a3:08:7b:a5:8a:5a:4a:06:25:55:62:70: 66:46:2b:89:7c:3f:f1:14:b3:07:fd:f4:67:44:b1: 31:dd:f9:4a:5f:bf:60:07:43:d4:c2:16:cc:3d:f7: c5:76:27:a2:af:f3:02:5f:05:ab:07:92:26:12:55: 99:0d:44:50:07:2a:8e:d4:2e:a2:20:b1:2c:5a:d9: 03:c1:a8:c1:61:a2:f2:be:30:fb:35:00:a0:f5:97: a8:01:a0:df:1a:cf:5c:57:06:11:35:e3:00:c0:24: 28:98:9d:b5:34:68:92:10:e8:b5:bc:fb:d7:56:23: 07:66:02:38:bc:f2:ea:61:62:64:f5:60:c7:2a:9b: 35:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A2:43:5B:8B:90:12:9A:51:C6:8D:42:6B:0A:E8:B4:44:46:37:D8 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.84.0/24 Signature Algorithm: sha256WithRSAEncryption 65:30:f5:f4:7e:c2:a3:ae:d7:db:2a:3a:4f:24:54:74:13:cd: ae:74:38:d6:e3:0a:38:72:85:2f:05:f6:88:ea:9a:f3:92:ef: 07:bc:6c:b4:29:9c:68:3d:4f:fb:20:12:22:02:64:39:c4:67: 6d:b6:3e:83:0e:f7:6c:1c:fe:88:c3:12:38:c6:c1:ad:20:9a: ba:96:66:48:45:73:70:f9:eb:4b:2d:47:18:eb:a3:51:9b:89: fb:26:6c:f6:8c:49:2b:bb:94:34:a7:a3:56:91:d2:61:7a:85: d9:bc:18:45:88:78:c2:1c:9a:27:f5:8f:b2:14:3a:e8:0b:8b: a2:23:8b:e3:80:75:47:63:85:95:2d:66:ca:b3:95:e6:3c:74: e0:e5:82:2f:cc:ac:c2:94:41:71:d6:b6:85:3f:84:b2:bf:4f: d3:66:19:04:df:f1:cd:c8:ea:6f:ae:fe:d0:9a:91:55:5f:a6: 42:1a:ec:4d:cd:7c:c5:d7:c1:3f:d8:3b:b5:aa:ba:b3:12:12: 76:1f:65:c0:d4:53:7a:de:c7:91:fe:26:4c:af:5b:80:d6:ec: 44:67:46:9f:a8:d0:ee:d8:fa:d5:78:53:73:b7:0a:2a:dc:47: 1f:71:c9:b3:7b:9a:61:e8:45:76:f0:87:17:c6:92:91:03:02: b0:98:df:5d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUH58TyyOPWOQANg3wBw5QYT4c+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTExMjEwNTQ5MTRaFw0yNjExMjAwNTU0MTRaMDMxMTAvBgNV BAMTKDMyQTI0MzVCOEI5MDEyOUE1MUM2OEQ0MjZCMEFFOEI0NDQ0NjM3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwF/LJOPDbdVFp7FOEqiG4GG3L fMTJ8m1jpB8d7EyBub57HzrzFrXgNtUBIx63lxWrGQakZDn+EmmT1WzIsK1lSZDU 4kuXjMkRV0l2Ydam3hzyh/fhP8csdAr74i7x7PEDFU3kQLzAcTRrDFBCSlhb71wz U6r+ngJWpqMIe6WKWkoGJVVicGZGK4l8P/EUswf99GdEsTHd+Upfv2AHQ9TCFsw9 98V2J6Kv8wJfBasHkiYSVZkNRFAHKo7ULqIgsSxa2QPBqMFhovK+MPs1AKD1l6gB oN8az1xXBhE14wDAJCiYnbU0aJIQ6LW8+9dWIwdmAji88uphYmT1YMcqmzU3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUMqJDW4uQEppRxo1CawrotERGN9gwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzQzMzJlMzIzMzMwMmUzODM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvm VDANBgkqhkiG9w0BAQsFAAOCAQEAZTD19H7Co67X2yo6TyRUdBPNrnQ41uMKOHKF LwX2iOqa85LvB7xstCmcaD1P+yASIgJkOcRnbbY+gw73bBz+iMMSOMbBrSCaupZm SEVzcPnrSy1HGOujUZuJ+yZs9oxJK7uUNKejVpHSYXqF2bwYRYh4whyaJ/WPshQ6 6AuLoiOL44B1R2OFlS1myrOV5jx04OWCL8yswpRBcda2hT+Esr9P02YZBN/xzcjq b67+0JqRVV+mQhrsTc18xdfBP9g7taq6sxISdh9lwNRTet7Hkf4mTK9bgNbsRGdG n6jQ7tj61XhTc7cKKtxHH3HJs3uaYehFdvCHF8aSkQMCsJjfXQ== -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:09 2025 by rpki-client