This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135312e302f32342d3234203d3e203136323736.roa File: 3134352e37392e3135312e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: Mx9QagprSZEH5AHYzHNdeF27nwbOlK7oGhHZhOkbe38= Subject key identifier: 59:CB:9F:24:D3:B0:06:FE:6D:9F:65:17:0E:4D:AB:76:B0:31:DC:BF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4DFC9E9179AB94ADE90A3711048A416B2CEA22F2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135312e302f32342d3234203d3e203136323736.roa Signing time: Thu 30 Oct 2025 16:56:58 +0000 ROA not before: Thu 30 Oct 2025 16:51:58 +0000 ROA not after: Thu 29 Oct 2026 16:56:58 +0000 asID: 16276 IP address blocks: 145.79.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 11:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:fc:9e:91:79:ab:94:ad:e9:0a:37:11:04:8a:41:6b:2c:ea:22:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 30 16:51:58 2025 GMT Not After : Oct 29 16:56:58 2026 GMT Subject: CN=59CB9F24D3B006FE6D9F65170E4DAB76B031DCBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3d:e7:e5:92:a3:ab:8c:4a:24:97:1f:83:07: 8f:d5:35:27:39:b0:d3:11:57:0c:18:16:fe:3c:71: ba:a8:61:ad:b5:35:ed:c6:89:b9:6a:41:fc:c3:50: dc:ca:71:38:16:15:fd:5d:a7:5a:79:c2:fa:5f:e9: 66:36:fc:3c:06:2f:c7:74:c0:89:4e:9c:a7:cb:8b: 57:37:c2:83:75:2b:24:fb:d1:a4:ee:19:28:d6:80: 37:18:bd:d8:37:be:1f:ec:b6:e7:1a:06:8d:9f:6b: 85:72:da:ff:33:f8:c5:9c:6c:7c:b5:7c:9f:de:ea: 1c:8f:18:a9:30:2f:79:92:b1:2c:71:25:ee:fa:cd: bc:c5:7d:82:69:5e:79:5e:29:ef:28:37:09:f4:c4: 94:83:5a:d5:c3:ea:d4:d2:fb:7f:5d:53:d6:ab:21: 03:cf:9e:74:ab:10:ec:d4:dd:55:e6:b3:9a:5a:c8: 7d:e3:4d:7c:e4:6b:72:47:91:cb:21:48:f9:07:c5: 6f:bf:70:4f:a1:0b:00:8c:cf:fb:ed:ec:79:ab:e0: 2d:c9:6d:4b:04:29:51:4e:89:3d:3d:59:7b:04:91: 34:9f:45:0f:03:12:33:94:a1:5e:b4:d5:f7:83:75: e3:d0:03:67:47:a6:10:c5:5c:35:26:d7:57:be:da: bb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:9F:24:D3:B0:06:FE:6D:9F:65:17:0E:4D:AB:76:B0:31:DC:BF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3135312e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.79.151.0/24 Signature Algorithm: sha256WithRSAEncryption 54:28:78:7a:b1:b0:2d:e4:b7:19:b5:c7:91:9d:6f:a1:40:75: 0c:02:e8:ab:e6:8b:a1:82:10:f0:92:c6:7d:8e:a8:37:e4:d5: 99:93:7b:00:59:1d:bc:95:9b:bf:0c:23:d3:1c:eb:19:1c:df: 52:cd:bb:82:ba:07:6c:74:31:63:8b:b4:9b:4e:cf:9a:1e:dc: 57:5e:aa:79:36:7e:66:11:8c:d4:45:b9:be:d8:ce:08:7a:01: 7a:c0:c2:64:a4:7d:56:42:67:62:cb:a7:2c:89:8c:fd:52:3f: 91:05:27:56:1a:05:1e:82:32:7d:4f:1b:0e:f0:d6:e9:32:db: a3:7e:5b:a9:1e:24:98:71:44:f0:62:14:9d:20:30:82:ef:75: 0f:36:01:77:50:42:41:4b:e5:b8:0b:77:3c:c4:0f:47:fb:2f: 53:07:7c:c8:12:92:4e:6c:df:89:09:25:01:d6:79:4b:12:55: 21:00:eb:9e:5f:e6:32:4c:71:c7:23:5e:01:5f:eb:49:24:48: d0:b0:c2:45:ef:f6:df:36:eb:5a:6d:f3:c5:9d:54:ca:d7:26: 42:5f:68:8e:e7:a6:8a:4b:2f:d0:c4:a2:0c:b3:a9:e5:15:bb: e8:70:66:e1:db:6a:cb:ae:de:82:7b:68:f3:8e:b1:96:00:7b: 6b:79:cd:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTfyekXmrlK3pCjcRBIpBayzqIvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMzAxNjUxNThaFw0yNjEwMjkxNjU2NThaMDMxMTAvBgNV BAMTKDU5Q0I5RjI0RDNCMDA2RkU2RDlGNjUxNzBFNERBQjc2QjAzMURDQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaPeflkqOrjEoklx+DB4/VNSc5 sNMRVwwYFv48cbqoYa21Ne3GiblqQfzDUNzKcTgWFf1dp1p5wvpf6WY2/DwGL8d0 wIlOnKfLi1c3woN1KyT70aTuGSjWgDcYvdg3vh/stucaBo2fa4Vy2v8z+MWcbHy1 fJ/e6hyPGKkwL3mSsSxxJe76zbzFfYJpXnleKe8oNwn0xJSDWtXD6tTS+39dU9ar IQPPnnSrEOzU3VXms5payH3jTXzka3JHkcshSPkHxW+/cE+hCwCMz/vt7Hmr4C3J bUsEKVFOiT09WXsEkTSfRQ8DEjOUoV601feDdePQA2dHphDFXDUm11e+2rt/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWcufJNOwBv5tn2UXDk2rdrAx3L8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzNDM1MmUzNzM5MmUzMTM1 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA kU+XMA0GCSqGSIb3DQEBCwUAA4IBAQBUKHh6sbAt5LcZtceRnW+hQHUMAuir5ouh ghDwksZ9jqg35NWZk3sAWR28lZu/DCPTHOsZHN9SzbuCugdsdDFji7SbTs+aHtxX Xqp5Nn5mEYzURbm+2M4IegF6wMJkpH1WQmdiy6csiYz9Uj+RBSdWGgUegjJ9TxsO 8NbpMtujflupHiSYcUTwYhSdIDCC73UPNgF3UEJBS+W4C3c8xA9H+y9TB3zIEpJO bN+JCSUB1nlLElUhAOueX+YyTHHHI14BX+tJJEjQsMJF7/bfNutabfPFnVTK1yZC X2iO56aKSy/QxKIMs6nlFbvocGbh22rLrt6Ce2jzjrGWAHtrec1P -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:45 2025 by rpki-client