This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20393834.roa File: 3134352e37392e3134312e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: fyHOzjMp94+vczl9Pn2BzSaVJvS05QOEypsWXRSLzmM= Subject key identifier: 4E:67:F2:C0:C9:74:62:AB:DB:BE:11:F6:1B:2C:59:11:DC:11:E6:E3 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 05A1A33568554CD33809684FCA3C9B3EA8205826 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20393834.roa Signing time: Wed 05 Nov 2025 12:30:55 +0000 ROA not before: Wed 05 Nov 2025 12:25:55 +0000 ROA not after: Wed 04 Nov 2026 12:30:55 +0000 asID: 984 IP address blocks: 145.79.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 15:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a1:a3:35:68:55:4c:d3:38:09:68:4f:ca:3c:9b:3e:a8:20:58:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 5 12:25:55 2025 GMT Not After : Nov 4 12:30:55 2026 GMT Subject: CN=4E67F2C0C97462ABDBBE11F61B2C5911DC11E6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fd:1c:f4:73:f2:46:82:8e:e2:92:60:ff:4b: 14:ee:17:6d:94:1a:b3:86:61:41:42:e1:df:01:f5: df:2d:51:24:f4:72:c9:e3:76:13:14:b4:5a:a9:e5: f3:3d:78:fe:9e:1f:c1:f4:bc:9e:52:85:30:93:23: f5:bf:fa:cf:0c:0b:37:9b:8a:df:71:51:52:72:29: 62:f6:b1:90:5a:65:67:68:d7:00:e5:cb:47:24:d7: 26:88:50:61:b3:de:71:7e:4f:19:cb:ed:ac:e9:4c: 2a:1a:35:b0:7e:d9:8f:4e:f1:f3:1e:a5:1e:31:6d: c1:56:ba:20:02:c9:a5:84:c8:27:93:98:9e:68:ce: a1:7f:54:2c:83:b6:02:a8:fd:0c:82:ef:d9:2d:1a: da:fc:f4:e7:dd:d5:d6:30:d6:12:a2:18:ac:28:3c: 79:0e:a5:93:cc:63:aa:19:79:3b:aa:e9:da:39:e0: fd:03:cd:77:bf:b1:ca:d7:37:1b:fd:00:65:96:44: 28:5a:a1:8a:46:d6:1d:c5:a5:60:80:a4:e5:65:f0: 85:09:8f:3e:43:93:c9:80:e6:1c:be:13:a9:00:ef: a3:2b:56:04:fb:22:4f:b2:aa:fc:3c:d7:6f:a5:ef: b5:d2:ba:15:e6:39:2d:ba:d4:50:db:53:b3:9b:3c: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:67:F2:C0:C9:74:62:AB:DB:BE:11:F6:1B:2C:59:11:DC:11:E6:E3 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134312e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.141.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:bd:52:1f:37:4d:1c:b3:91:ae:58:80:89:fa:f5:66:5a:d9: 63:57:78:f3:76:c9:36:f8:72:74:7b:3a:d7:0a:86:86:12:71: fb:34:83:b5:94:b0:2e:fc:ea:c4:98:49:5b:2d:3e:49:9a:a2: e9:67:d1:de:11:50:e1:d6:70:96:62:0e:c0:61:2c:9a:ee:30: 60:2c:86:2c:ab:2a:4c:44:ee:d2:76:be:d0:06:cb:80:bf:53: 57:b9:2b:6b:ee:b7:81:e9:d0:ec:f2:10:42:37:ab:c4:69:65: ef:05:f2:a0:6e:e4:72:81:f0:8e:92:99:4f:08:85:8c:1d:25: 94:10:a9:b8:8d:b7:13:85:82:55:e8:5a:c2:2f:40:ef:9e:b1: 02:06:37:cd:5d:90:01:0d:0a:c6:c0:18:ad:03:a0:63:ff:24: 5d:dc:9b:d1:80:b3:82:4a:ad:4a:6b:6c:61:17:9c:21:08:00: 3a:19:7f:f5:59:af:11:52:a8:c0:45:d5:46:22:4f:af:01:43: fa:13:51:e9:92:c5:c7:f4:db:a4:bf:ae:6c:d0:ed:38:b1:b8: c8:45:c2:14:34:05:c0:6b:e6:b8:68:04:4f:d3:3c:7e:a1:42: 3e:e3:1c:c2:1e:29:16:76:00:73:25:30:3c:87:ba:7a:b1:fd: a5:52:59:eb -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUBaGjNWhVTNM4CWhPyjybPqggWCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMDUxMjI1NTVaFw0yNjExMDQxMjMwNTVaMDMxMTAvBgNV BAMTKDRFNjdGMkMwQzk3NDYyQUJEQkJFMTFGNjFCMkM1OTExREMxMUU2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm/Rz0c/JGgo7ikmD/SxTuF22U GrOGYUFC4d8B9d8tUST0csnjdhMUtFqp5fM9eP6eH8H0vJ5ShTCTI/W/+s8MCzeb it9xUVJyKWL2sZBaZWdo1wDly0ck1yaIUGGz3nF+TxnL7azpTCoaNbB+2Y9O8fMe pR4xbcFWuiACyaWEyCeTmJ5ozqF/VCyDtgKo/QyC79ktGtr89Ofd1dYw1hKiGKwo PHkOpZPMY6oZeTuq6do54P0DzXe/scrXNxv9AGWWRChaoYpG1h3FpWCApOVl8IUJ jz5Dk8mA5hy+E6kA76MrVgT7Ik+yqvw812+l77XSuhXmOS261FDbU7ObPGztAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUTmfywMl0YqvbvhH2GyxZEdwR5uMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM0 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACRT40w DQYJKoZIhvcNAQELBQADggEBAJ29Uh83TRyzka5YgIn69WZa2WNXePN2yTb4cnR7 OtcKhoYScfs0g7WUsC786sSYSVstPkmaouln0d4RUOHWcJZiDsBhLJruMGAshiyr KkxE7tJ2vtAGy4C/U1e5K2vut4Hp0OzyEEI3q8RpZe8F8qBu5HKB8I6SmU8IhYwd JZQQqbiNtxOFglXoWsIvQO+esQIGN81dkAENCsbAGK0DoGP/JF3cm9GAs4JKrUpr bGEXnCEIADoZf/VZrxFSqMBF1UYiT68BQ/oTUemSxcf026S/rmzQ7TixuMhFwhQ0 BcBr5rhoBE/TPH6hQj7jHMIeKRZ2AHMlMDyHunqx/aVSWes= -----END CERTIFICATE-----Generated at Wed Dec 3 16:39:36 2025 by rpki-client