This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa
File: 3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: 1GJTU5EArzFWHVhhiUmpDWG2fOgSiR08omiyywpB5h0=
Subject key identifier: 8C:C8:A9:3C:73:64:A1:5F:6D:5C:12:65:CF:76:5E:50:53:DE:F1:12
Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Certificate serial: 69ECDB46AACB345597EBE4694954B7F252BA6C4C
Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa
Signing time: Thu 13 Nov 2025 18:06:57 +0000
ROA not before: Thu 13 Nov 2025 18:01:57 +0000
ROA not after: Thu 12 Nov 2026 18:06:57 +0000
asID: 205886
IP address blocks: 145.79.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Dec 2025 21:22:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ec:db:46:aa:cb:34:55:97:eb:e4:69:49:54:b7:f2:52:ba:6c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c
Validity
Not Before: Nov 13 18:01:57 2025 GMT
Not After : Nov 12 18:06:57 2026 GMT
Subject: CN=8CC8A93C7364A15F6D5C1265CF765E5053DEF112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:76:77:63:30:e1:04:e5:1c:94:1a:ec:08:6c:
f8:65:32:5a:c9:25:d4:d0:29:db:66:ea:30:a4:82:
59:60:2d:27:2e:8c:2b:6f:08:30:f4:01:81:09:ae:
0e:1c:6c:e4:33:cd:89:c0:19:8c:f1:79:3b:ae:61:
6c:36:95:1f:71:b8:07:18:67:ff:09:9b:0a:a7:3e:
85:bb:4b:47:b3:33:85:68:9e:3e:91:e7:21:f4:f0:
4d:dd:49:6d:29:7f:db:e7:e2:ae:12:1b:58:6f:02:
0a:0a:62:58:e7:82:5d:97:75:d3:0f:89:f0:a3:94:
f3:38:5b:ae:74:dc:4d:69:a4:f0:75:20:4a:8f:2d:
a9:6b:0b:4f:d2:aa:b0:a6:b5:d0:c7:f0:77:39:44:
f9:8d:6b:c5:90:de:e4:30:7c:57:14:d8:19:75:7f:
2c:d8:b9:40:57:1a:d7:f9:1b:02:c2:7f:cd:ca:59:
a2:69:83:84:3a:8c:2a:c5:d0:2d:04:ac:53:bd:c7:
c8:13:47:ea:31:76:e5:a0:2e:75:d5:91:5f:48:67:
be:e5:f7:ba:3a:39:68:5e:21:7a:c7:64:1a:e5:c3:
b9:ed:6b:c5:cf:96:d7:4d:9b:51:85:db:d0:43:93:
c4:dc:10:5a:0c:c3:1a:70:dd:97:a0:c5:ff:46:56:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:A9:3C:73:64:A1:5F:6D:5C:12:65:CF:76:5E:50:53:DE:F1:12
X509v3 Authority Key Identifier:
keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3134352e37392e3137302e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.79.170.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:d2:45:58:b8:cd:47:2c:90:53:7c:ed:9f:a9:71:80:05:f9:
cf:ab:30:d2:ff:25:aa:4d:90:d7:cd:46:cc:5c:03:f2:f7:ff:
a4:bf:97:d7:ba:b8:59:9d:9a:92:1c:4d:b5:06:d8:bd:bd:5f:
55:81:50:53:77:78:4d:8f:18:44:d8:6f:92:7a:26:b2:e4:5e:
fd:f7:72:87:d2:0a:6f:62:ce:db:a1:fb:1b:f8:86:76:1d:4d:
da:0f:14:bb:77:77:5c:19:f3:2f:d5:d2:91:a9:49:75:9c:7b:
21:6d:ce:f1:66:7d:cb:e0:f9:f6:22:35:e6:d9:d9:07:28:d4:
5b:94:68:49:a7:db:59:a3:82:b2:7f:18:60:6d:94:8b:42:f0:
0c:c6:72:97:47:f9:99:33:e7:0b:4f:3c:98:09:80:7f:95:6a:
c2:20:96:90:b2:67:f1:c5:40:29:cb:6b:21:cc:b3:cd:57:82:
7a:fd:b3:d4:21:2d:02:76:df:4a:f0:af:b0:07:45:cd:15:fa:
18:e9:f3:31:3e:f2:fc:cd:22:d0:36:33:44:13:13:2c:c8:ee:
ac:13:6e:cc:e3:bc:28:ce:e4:44:04:6c:81:85:a9:46:ee:87:
df:8c:57:39:f7:51:79:99:40:c6:4a:21:ca:aa:0a:2c:c9:da:
bd:76:f3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 05:36:28 2025 by rpki-client