This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323132363639.roa File: 34332e3233302e38352e302f32342d3234203d3e20323132363639.roa (raw, json) Hash identifier: vgObUGnSREXD+ZGKD48TBidzsDD4bb41p0YUFbXX2ak= Subject key identifier: 3E:49:58:F2:D5:86:FA:5A:EF:04:F8:74:13:D1:FB:1D:18:4C:0F:17 Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Certificate serial: 3A5FBCC4B927F05193BD677EF5C3661921BEC231 Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323132363639.roa Signing time: Wed 05 Nov 2025 14:29:34 +0000 ROA not before: Wed 05 Nov 2025 14:24:34 +0000 ROA not after: Wed 04 Nov 2026 14:29:34 +0000 asID: 212669 IP address blocks: 43.230.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:5f:bc:c4:b9:27:f0:51:93:bd:67:7e:f5:c3:66:19:21:be:c2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d Validity Not Before: Nov 5 14:24:34 2025 GMT Not After : Nov 4 14:29:34 2026 GMT Subject: CN=3E4958F2D586FA5AEF04F87413D1FB1D184C0F17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:e1:d4:c3:5e:71:56:b2:1c:d4:0b:b5:89: ef:31:b8:0d:d9:a1:3a:c3:f6:c0:ba:3b:b8:62:1b: 4b:32:7e:fd:9d:c9:81:8e:54:ad:ca:ed:30:c9:83: 7f:47:37:55:75:80:9c:46:16:41:e4:8a:b9:17:bb: ee:29:70:3c:b5:93:e5:f7:e6:43:66:e3:c1:74:44: 28:91:ab:e5:25:98:e2:f0:c1:64:e9:a6:a9:e7:95: 1e:7f:ef:79:2a:93:09:93:7a:b6:9b:00:5f:23:64: 5e:0f:26:d2:1f:ed:52:9e:b8:10:41:e9:c0:06:96: 94:43:23:f5:7f:0e:0d:f3:05:1c:b1:e2:fe:a1:c5: fb:9c:c7:7e:23:f7:1e:42:cb:0a:61:db:51:6a:76: b7:a5:57:1a:1e:b4:52:08:c1:dc:a9:47:57:f3:63: 48:fb:9e:3d:c6:ee:01:99:aa:63:e9:09:2c:8b:0f: f6:bd:b9:7c:ef:23:a6:f9:64:dd:85:94:57:a2:0d: ef:f4:50:20:b8:25:c5:23:30:c7:cd:24:f0:98:ea: a6:cd:e2:f8:d8:d9:0c:90:f8:54:47:4e:64:9c:5d: b7:a6:a6:96:0c:4c:21:f3:cb:aa:78:2c:28:0b:5f: bb:89:17:1a:dc:c0:06:27:6d:a7:53:81:a7:ef:4f: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:49:58:F2:D5:86:FA:5A:EF:04:F8:74:13:D1:FB:1D:18:4C:0F:17 X509v3 Authority Key Identifier: keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38352e302f32342d3234203d3e20323132363639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.85.0/24 Signature Algorithm: sha256WithRSAEncryption 60:63:a7:8d:c6:55:6e:f9:8a:21:ee:34:16:fd:d0:0d:e8:a5: 53:3c:dc:22:fc:97:c3:f3:74:74:ec:f5:d6:69:5a:05:ad:44: b3:7b:15:b8:8d:dd:f4:ab:48:f5:2c:8c:a3:3f:42:cc:75:76: ff:b9:53:ad:f0:65:1a:9a:46:5a:38:67:f5:b1:5e:49:14:74: 82:01:10:86:a0:82:8e:95:f4:4d:0a:50:db:15:02:eb:46:5e: 84:81:0f:af:72:f2:a7:16:5f:2d:bf:c8:1e:6c:11:cb:12:6f: 7f:47:4b:0d:03:4e:21:34:59:91:6b:2d:84:a1:4a:21:85:ec: 0f:84:22:e3:b3:e8:0f:16:31:20:e2:63:ed:c9:de:0f:b8:77: a3:93:33:91:98:f0:b5:c5:a7:f0:86:56:cf:6d:94:f3:f7:62: 6e:4b:b9:d4:99:4e:d1:7c:62:16:e3:f7:8e:71:16:aa:ec:b7: 07:9d:ba:b6:d4:19:43:b9:02:5e:0d:da:db:bd:c1:ca:21:01: 62:f1:e4:f7:0e:e7:8a:49:50:10:80:c0:57:e9:54:1d:b8:70: ec:3b:fe:cc:3c:ba:97:69:72:aa:cf:c4:36:a8:15:64:ad:cd: e0:bf:8e:df:2b:06:57:ca:bc:d4:cb:6f:30:19:98:e1:79:a2: d0:e1:df:61 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOl+8xLkn8FGTvWd+9cNmGSG+wjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw YWVhYjI5ZDAeFw0yNTExMDUxNDI0MzRaFw0yNjExMDQxNDI5MzRaMDMxMTAvBgNV BAMTKDNFNDk1OEYyRDU4NkZBNUFFRjA0Rjg3NDEzRDFGQjFEMTg0QzBGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0OHUw15xVrIc1Au1ie8xuA3Z oTrD9sC6O7hiG0syfv2dyYGOVK3K7TDJg39HN1V1gJxGFkHkirkXu+4pcDy1k+X3 5kNm48F0RCiRq+UlmOLwwWTppqnnlR5/73kqkwmTerabAF8jZF4PJtIf7VKeuBBB 6cAGlpRDI/V/Dg3zBRyx4v6hxfucx34j9x5Cywph21FqdrelVxoetFIIwdypR1fz Y0j7nj3G7gGZqmPpCSyLD/a9uXzvI6b5ZN2FlFeiDe/0UCC4JcUjMMfNJPCY6qbN 4vjY2QyQ+FRHTmScXbemppYMTCHzy6p4LCgLX7uJFxrcwAYnbadTgafvTzSlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUPklY8tWG+lrvBPh0E9H7HRhMDxcwHwYDVR0j BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2 NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy cXNwMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzQzMzJlMzIzMzMwMmUzODM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzYzNjM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA K+ZVMA0GCSqGSIb3DQEBCwUAA4IBAQBgY6eNxlVu+Yoh7jQW/dAN6KVTPNwi/JfD 83R07PXWaVoFrUSzexW4jd30q0j1LIyjP0LMdXb/uVOt8GUamkZaOGf1sV5JFHSC ARCGoIKOlfRNClDbFQLrRl6EgQ+vcvKnFl8tv8gebBHLEm9/R0sNA04hNFmRay2E oUohhewPhCLjs+gPFjEg4mPtyd4PuHejkzORmPC1xafwhlbPbZTz92JuS7nUmU7R fGIW4/eOcRaq7LcHnbq21BlDuQJeDdrbvcHKIQFi8eT3DueKSVAQgMBX6VQduHDs O/7MPLqXaXKqz8Q2qBVkrc3gv47fKwZXyrzUy28wGZjheaLQ4d9h -----END CERTIFICATE-----Generated at Fri Dec 5 17:30:26 2025 by rpki-client