This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e203539343332.roa File: 3134352e37392e3133342e302f32342d3234203d3e203539343332.roa (raw, json) Hash identifier: 3vQ6c1xJNaovRq4gm08iaMYP48ZRPlHwQ96NPd90xbs= Subject key identifier: B5:62:2D:0D:E3:0D:CD:84:B0:14:D1:40:AF:18:BB:E2:10:4F:49:7F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3232BD952AEB5D9DECD457953FA328D4EA6476BA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e203539343332.roa Signing time: Thu 30 Oct 2025 16:55:43 +0000 ROA not before: Thu 30 Oct 2025 16:50:43 +0000 ROA not after: Thu 29 Oct 2026 16:55:43 +0000 asID: 59432 IP address blocks: 145.79.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:32:bd:95:2a:eb:5d:9d:ec:d4:57:95:3f:a3:28:d4:ea:64:76:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 30 16:50:43 2025 GMT Not After : Oct 29 16:55:43 2026 GMT Subject: CN=B5622D0DE30DCD84B014D140AF18BBE2104F497F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:bf:4c:2b:be:ed:91:81:a2:69:6b:75:b6: 22:d6:0e:be:4d:12:d8:b7:6f:23:50:e0:d6:49:7b: 19:c3:fe:79:52:dd:8b:99:3d:10:ca:64:2b:1a:8a: 6c:03:34:9d:53:db:2a:63:51:eb:44:9f:d2:c4:56: 07:d6:ab:e7:ec:88:d2:23:7e:38:ac:d6:c0:96:54: d7:92:da:67:5a:dd:66:0f:60:e3:e4:14:69:ac:33: dc:be:f5:04:25:5f:b9:ab:53:b3:8c:73:a0:35:6c: a2:56:60:6f:17:a5:5a:ce:4e:8a:b9:cb:ce:08:7f: fe:04:94:f5:5c:f7:14:cc:05:cb:07:e7:69:11:cc: 1f:cb:14:a0:50:5d:d7:98:b4:da:4c:9d:a6:be:4a: 3f:b2:11:ae:5d:4a:39:70:9b:ed:29:2a:28:94:52: 7d:6d:ae:7a:67:51:d8:e2:ac:f6:1e:5e:3b:00:e7: f6:4c:69:87:cb:a3:38:b6:d8:c7:7a:ea:a6:cc:6f: 09:89:6f:e5:fc:b0:c6:60:ae:bd:54:d6:f1:1a:b3: 99:51:f9:7e:15:68:84:30:a3:7a:96:e2:e9:ef:67: 68:d5:9b:4a:ae:09:78:c1:22:45:9d:cf:bd:56:53: fd:33:c9:3c:80:02:44:27:d5:ef:ce:ad:f1:2f:2a: 5c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:62:2D:0D:E3:0D:CD:84:B0:14:D1:40:AF:18:BB:E2:10:4F:49:7F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3133342e302f32342d3234203d3e203539343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.134.0/24 Signature Algorithm: sha256WithRSAEncryption 06:95:cb:92:84:50:2f:b8:a8:fa:dd:07:07:18:c1:c8:39:7d: 26:92:72:5f:e2:79:c8:71:8f:a2:0e:7b:4f:2a:17:7b:b0:68: 7b:ce:66:86:ae:19:fc:c9:b7:71:55:cc:49:27:f4:62:59:b6: 7a:2f:fc:5e:9c:de:07:71:72:6f:25:ec:3c:6c:af:d1:ba:b3: 14:4e:f9:8d:d4:45:29:b8:fa:81:f7:7c:49:bd:3b:dd:d9:ee: f6:7e:22:21:f1:ff:42:cb:01:a8:ea:1a:be:c3:14:5d:98:f6: 73:8a:1a:16:6c:a5:93:fb:12:26:33:f8:ec:51:a0:0b:d1:62: 95:54:8e:f8:13:92:2b:83:b2:1a:22:e1:a7:45:e5:ba:df:aa: 7c:14:90:5a:f1:1d:5b:9b:13:54:05:de:66:a7:8f:73:be:2e: bd:8c:29:92:3d:47:9f:4a:ff:27:e0:a0:18:25:c7:11:ea:9f: 2b:04:2c:ef:15:00:5e:a7:26:4f:c6:6d:60:81:69:05:1f:46: c9:9c:1b:d2:8b:f0:b9:1e:5e:33:27:87:86:28:31:25:f5:1d: df:be:39:52:a5:b6:a6:29:f5:ef:93:85:be:47:fe:cc:4d:2f: d0:33:0a:77:6d:ef:dd:3e:32:05:6f:99:40:e0:20:2f:38:b9: e7:58:30:32 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMjK9lSrrXZ3s1FeVP6Mo1OpkdrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMzAxNjUwNDNaFw0yNjEwMjkxNjU1NDNaMDMxMTAvBgNV BAMTKEI1NjIyRDBERTMwRENEODRCMDE0RDE0MEFGMThCQkUyMTA0RjQ5N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGrb9MK77tkYGiaWt1tiLWDr5N Eti3byNQ4NZJexnD/nlS3YuZPRDKZCsaimwDNJ1T2ypjUetEn9LEVgfWq+fsiNIj fjis1sCWVNeS2mda3WYPYOPkFGmsM9y+9QQlX7mrU7OMc6A1bKJWYG8XpVrOToq5 y84If/4ElPVc9xTMBcsH52kRzB/LFKBQXdeYtNpMnaa+Sj+yEa5dSjlwm+0pKiiU Un1trnpnUdjirPYeXjsA5/ZMaYfLozi22Md66qbMbwmJb+X8sMZgrr1U1vEas5lR +X4VaIQwo3qW4unvZ2jVm0quCXjBIkWdz71WU/0zyTyAAkQn1e/OrfEvKlwnAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtWItDeMNzYSwFNFArxi74hBPSX8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTMz MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM5MzQzMzMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA kU+GMA0GCSqGSIb3DQEBCwUAA4IBAQAGlcuShFAvuKj63QcHGMHIOX0mknJf4nnI cY+iDntPKhd7sGh7zmaGrhn8ybdxVcxJJ/RiWbZ6L/xenN4HcXJvJew8bK/RurMU TvmN1EUpuPqB93xJvTvd2e72fiIh8f9CywGo6hq+wxRdmPZzihoWbKWT+xImM/js UaAL0WKVVI74E5Irg7IaIuGnReW636p8FJBa8R1bmxNUBd5mp49zvi69jCmSPUef Sv8n4KAYJccR6p8rBCzvFQBepyZPxm1ggWkFH0bJnBvSi/C5Hl4zJ4eGKDEl9R3f vjlSpbamKfXvk4W+R/7MTS/QMwp3be/dPjIFb5lA4CAvOLnnWDAy -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:32 2025 by rpki-client