This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134332e302f32342d3234203d3e20323035353438.roa
File: 3134352e37392e3134332e302f32342d3234203d3e20323035353438.roa (raw, json)
Hash identifier: OJ93kmcY7qPaY8+plxPJyisutdYYrICSOTIpnE9YfOg=
Subject key identifier: 60:23:24:44:32:BE:6D:64:89:35:E8:20:CB:66:78:64:53:9B:C5:1C
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 13C65A2242CCF45A3DE3F50AF18C9CBCE0F7024F
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134332e302f32342d3234203d3e20323035353438.roa
Signing time: Thu 30 Oct 2025 16:56:15 +0000
ROA not before: Thu 30 Oct 2025 16:51:15 +0000
ROA not after: Thu 29 Oct 2026 16:56:15 +0000
asID: 205548
IP address blocks: 145.79.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 21:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c6:5a:22:42:cc:f4:5a:3d:e3:f5:0a:f1:8c:9c:bc:e0:f7:02:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Oct 30 16:51:15 2025 GMT
Not After : Oct 29 16:56:15 2026 GMT
Subject: CN=6023244432BE6D648935E820CB667864539BC51C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:4e:d2:94:2f:c6:9b:47:0b:d8:4c:5a:e8:
21:2b:a2:35:3d:f0:c7:b9:e6:9b:30:ab:ce:97:70:
20:d6:5e:86:39:08:bf:82:7a:d1:ae:0a:ca:19:f7:
6d:51:8c:8f:68:53:41:a4:32:d3:46:1b:ee:69:60:
92:68:1e:a6:ac:c0:cf:34:7f:2a:7d:a2:ce:7c:bf:
35:2a:4b:fc:b6:85:16:91:12:13:a5:b1:92:5c:a1:
fe:f5:13:e3:8a:06:71:ab:e0:b9:7f:d2:a3:31:87:
1e:53:c6:bf:6d:10:37:b7:ba:ae:61:e3:3a:9c:fe:
cb:e2:f4:d0:e6:57:7a:30:67:3d:50:fc:d4:4e:cb:
27:dc:f5:2e:45:dd:de:0f:72:3c:b9:7a:c0:77:cc:
ec:12:8c:ad:d9:2a:de:4b:79:71:a0:cd:3c:49:f0:
1c:49:d0:40:57:12:7c:73:d8:8e:47:46:d6:fd:95:
94:b8:72:e2:06:52:52:64:be:aa:76:da:ca:7f:7b:
2f:04:e0:2d:c3:00:20:c6:ea:d3:43:3b:60:9a:30:
ac:b2:45:45:96:47:89:7f:d9:c5:4c:db:e9:b8:49:
a4:5e:41:5f:f4:48:17:77:90:d8:b7:98:cb:e9:3c:
60:51:10:60:2c:d4:b5:bd:80:81:3b:fd:2d:df:7a:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:23:24:44:32:BE:6D:64:89:35:E8:20:CB:66:78:64:53:9B:C5:1C
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3134332e302f32342d3234203d3e20323035353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.143.0/24
Signature Algorithm: sha256WithRSAEncryption
42:20:8f:56:e9:95:4e:a7:58:1d:85:f7:b5:6b:b8:41:16:0f:
48:92:8f:2b:fb:d4:35:2e:1c:2d:4c:6f:e4:3f:83:28:e5:83:
0a:92:b5:37:aa:0a:46:98:57:76:d7:5e:a9:a4:81:59:fc:d2:
df:8c:da:f8:c3:82:6f:d0:16:cb:78:34:bc:0a:09:29:18:e9:
dd:47:23:17:be:2c:0f:5e:03:fa:d2:5d:aa:cf:f7:38:f4:11:
65:39:02:6b:c7:81:9e:74:d6:c1:b8:a0:a0:e6:4d:de:c7:ef:
43:52:b7:3a:26:87:5a:c5:56:bd:50:e4:98:03:21:28:50:e7:
1f:6f:3a:b7:8e:68:3f:bb:06:1a:1d:bb:05:72:7e:19:f6:fa:
99:3f:7f:1c:c2:cb:5c:af:29:ec:6f:64:91:43:e8:76:bf:3d:
02:66:c1:65:22:9a:66:a7:a8:b1:2f:e3:f5:66:4d:a6:4c:ce:
29:c7:29:06:45:21:b6:ea:81:08:48:46:4a:b9:2c:0e:e0:b5:
8c:ce:bc:b2:b5:01:76:32:17:37:0c:2e:4a:03:7d:4d:42:cd:
a0:a1:4e:3a:63:64:17:7d:2f:e6:1f:23:f7:13:25:9d:fb:44:
ec:19:57:6e:86:f0:18:27:d3:68:89:35:0c:c5:ad:8f:a0:94:
10:64:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:36:31 2025 by rpki-client