This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e20393834.roa File: 3134352e37392e3134302e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: yDD8nzBoDo9Qf7oxLYPiid1L0f/9DiNMQ7tWpNnmU1g= Subject key identifier: 4B:0C:9B:A4:6B:E0:A1:78:1C:1C:2C:CF:6F:9B:A3:75:3C:88:E2:B1 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4E0D30E2765E6ACF81C1B4F9366C700A37CBC152 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e20393834.roa Signing time: Wed 05 Nov 2025 12:30:42 +0000 ROA not before: Wed 05 Nov 2025 12:25:42 +0000 ROA not after: Wed 04 Nov 2026 12:30:42 +0000 asID: 984 IP address blocks: 145.79.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:0d:30:e2:76:5e:6a:cf:81:c1:b4:f9:36:6c:70:0a:37:cb:c1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 5 12:25:42 2025 GMT Not After : Nov 4 12:30:42 2026 GMT Subject: CN=4B0C9BA46BE0A1781C1C2CCF6F9BA3753C88E2B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c6:c7:26:0a:20:8b:0c:47:8d:47:30:0a:07: c5:81:2b:40:d1:e9:58:91:b7:39:19:79:27:ab:b7: 83:d9:59:3b:99:b7:57:e6:04:19:b0:ad:c3:05:87: 11:e7:ac:03:d7:1c:fa:2a:07:6e:62:c9:6b:63:9b: b5:cc:91:e7:f5:67:be:52:55:af:44:1c:19:48:87: d7:8d:2e:1c:93:49:72:40:1f:15:85:a7:9d:6e:28: 99:65:c1:b2:77:9c:d5:f3:c7:0e:d0:68:00:31:fb: 7e:0f:14:25:90:01:3e:f6:91:7d:f4:30:e4:69:6b: cf:99:df:27:b3:17:ef:50:81:b3:19:b3:a3:5f:60: 32:ea:e5:02:39:ba:f7:f3:ad:0f:6a:93:78:15:1d: f2:ed:fd:16:17:dc:40:7b:d7:59:9b:b4:b6:81:a8: 06:f8:9d:b8:c7:71:2a:be:26:2c:b7:3d:01:79:c0: 43:f2:c1:80:de:77:55:33:f4:84:2f:4a:a9:fd:4f: e1:fe:7b:aa:4e:42:51:7c:72:29:84:70:f2:20:de: 4f:5a:c0:5d:20:47:f2:d3:6e:2c:60:62:ea:d2:59: 81:65:3b:35:1e:65:7e:7a:10:0f:89:8b:ff:1f:96: 77:73:9a:49:a3:39:16:18:09:7f:11:6d:68:58:e7: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:0C:9B:A4:6B:E0:A1:78:1C:1C:2C:CF:6F:9B:A3:75:3C:88:E2:B1 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134302e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.140.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:49:17:32:4a:f8:9e:db:04:cb:b1:e7:a9:69:8a:c2:4a:34: 7e:ae:5b:48:d9:ff:f8:94:d2:8c:fd:3a:dc:bc:12:44:9c:6a: 42:0a:00:55:61:0a:de:7d:dd:f0:49:91:f8:41:59:b3:01:4c: ab:db:d5:1a:52:6d:c8:70:73:10:f8:64:e9:9f:85:4d:60:8a: 4e:32:6b:da:79:66:8c:4d:3f:1e:01:b3:31:05:31:76:67:d0: 70:f6:3f:5c:24:36:6f:fd:e6:6e:4e:10:23:b2:51:0f:88:15: 9d:e2:36:8b:d6:61:0d:55:d4:d1:63:3d:a9:6f:ec:81:43:c1: 7b:13:c9:dd:4a:c3:07:d1:24:31:3c:77:18:63:1c:bd:8a:4d: 8a:f3:ce:36:64:96:dd:29:03:12:33:37:43:8c:44:a8:42:85: f5:91:c1:e2:77:9e:9a:b5:d6:5c:fb:85:ff:b2:f4:95:b7:d1: 62:bc:74:13:15:ee:b6:90:98:3a:c1:a1:0c:3c:00:f3:39:80: 2b:ed:91:a0:f7:35:76:6e:0c:b9:29:1e:b6:4e:5b:46:02:93: 2a:4f:a4:bd:77:bc:14:2f:4e:19:45:1a:f6:ed:ee:94:df:e9: 17:2e:34:78:2f:74:7f:45:26:0e:3b:d0:7d:a7:d9:9d:e4:3a: 17:34:5e:d7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTg0w4nZeas+BwbT5NmxwCjfLwVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDUxMjI1NDJaFw0yNjExMDQxMjMwNDJaMDMxMTAvBgNV BAMTKDRCMEM5QkE0NkJFMEExNzgxQzFDMkNDRjZGOUJBMzc1M0M4OEUyQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxxscmCiCLDEeNRzAKB8WBK0DR 6ViRtzkZeSert4PZWTuZt1fmBBmwrcMFhxHnrAPXHPoqB25iyWtjm7XMkef1Z75S Va9EHBlIh9eNLhyTSXJAHxWFp51uKJllwbJ3nNXzxw7QaAAx+34PFCWQAT72kX30 MORpa8+Z3yezF+9QgbMZs6NfYDLq5QI5uvfzrQ9qk3gVHfLt/RYX3EB711mbtLaB qAb4nbjHcSq+Jiy3PQF5wEPywYDed1Uz9IQvSqn9T+H+e6pOQlF8cimEcPIg3k9a wF0gR/LTbixgYurSWYFlOzUeZX56EA+Ji/8flndzmkmjORYYCX8RbWhY55Z3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUSwybpGvgoXgcHCzPb5ujdTyI4rEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT4ww DQYJKoZIhvcNAQELBQADggEBAH5JFzJK+J7bBMux56lpisJKNH6uW0jZ//iU0oz9 Oty8EkScakIKAFVhCt593fBJkfhBWbMBTKvb1RpSbchwcxD4ZOmfhU1gik4ya9p5 ZoxNPx4BszEFMXZn0HD2P1wkNm/95m5OECOyUQ+IFZ3iNovWYQ1V1NFjPalv7IFD wXsTyd1KwwfRJDE8dxhjHL2KTYrzzjZklt0pAxIzN0OMRKhChfWRweJ3npq11lz7 hf+y9JW30WK8dBMV7raQmDrBoQw8APM5gCvtkaD3NXZuDLkpHrZOW0YCkypPpL13 vBQvThlFGvbt7pTf6RcuNHgvdH9FJg470H2n2Z3kOhc0Xtc= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:36 2025 by rpki-client