This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa File: 34352e3133372e37372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 1GEZ02YBWAxKU8gENNF7h+JE4iFkU2vxqO3gzxxhkb0= Subject key identifier: 70:8A:B8:29:BA:A6:64:89:A1:B1:DC:70:C0:57:A9:30:DA:97:50:FE Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 397BCAD08F425BF4DAC8E3CEA5A8A36C48CCDDA2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:57 +0000 ROA not before: Fri 28 Nov 2025 19:44:57 +0000 ROA not after: Fri 27 Nov 2026 19:49:57 +0000 asID: 136787 IP address blocks: 45.137.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:7b:ca:d0:8f:42:5b:f4:da:c8:e3:ce:a5:a8:a3:6c:48:cc:dd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:57 2025 GMT Not After : Nov 27 19:49:57 2026 GMT Subject: CN=708AB829BAA66489A1B1DC70C057A930DA9750FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:3e:50:c7:fb:92:a2:66:b8:6b:7f:d3:19: e7:71:4c:4d:b6:27:17:4c:5c:85:98:8e:37:1d:d1: 6e:fc:38:f6:77:4f:6c:43:a2:62:32:0d:0c:c6:b8: e5:f0:58:e1:34:bb:2e:90:61:b3:5c:61:7e:0a:8e: d5:9d:11:dd:b6:f6:9f:4a:bb:3d:7e:57:b7:b4:54: 46:9c:ab:85:2a:41:41:25:eb:ab:f7:f6:eb:e5:a7: e1:bf:78:09:cc:47:d1:be:a3:1f:14:de:ac:4c:51: 24:cb:de:6c:58:be:3a:b3:66:ff:a9:a9:78:72:20: 63:f8:41:91:fe:7f:5b:ef:b5:11:16:50:95:b2:88: 5b:7f:8a:9b:e9:09:44:a1:f4:7c:78:e5:09:2f:fe: e2:63:25:87:f7:9e:8d:07:20:1f:00:99:a7:ba:25: cb:07:2d:a9:1d:cd:9d:58:26:e3:ac:ed:af:9a:a0: 04:bb:9d:dd:b7:84:da:de:a0:27:fe:dc:d5:b7:42: 49:5f:67:a2:0a:47:7b:8e:54:ef:0b:f0:d3:7d:cc: 3e:a6:22:30:f6:19:13:40:98:e3:f1:fd:ad:64:4a: 2b:db:0b:92:7b:50:a0:5e:c0:aa:fb:41:68:41:4b: e0:ba:63:ac:5a:97:32:dc:c0:b1:1c:e8:b2:4b:73: fa:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:B8:29:BA:A6:64:89:A1:B1:DC:70:C0:57:A9:30:DA:97:50:FE X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133372e37372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.77.0/24 Signature Algorithm: sha256WithRSAEncryption 88:9f:ce:6f:0b:e6:6b:31:00:45:5d:8c:a6:d6:80:0a:ea:09: 1c:8c:db:f7:f0:b9:3c:7d:12:35:c0:07:a8:b9:7d:8b:a0:79: f9:67:9a:e7:6e:fd:f8:81:ce:28:d7:cf:88:a6:d0:34:cd:bb: 4d:2d:b7:19:a2:28:f3:1a:e3:49:ee:31:b5:5a:be:5b:c0:52: 6d:5d:dd:97:d2:66:e9:e7:cd:6b:15:19:e8:00:c7:cf:d9:ef: b1:5f:6d:76:dc:5a:37:de:e9:eb:9f:43:bb:ed:96:92:9e:0c: d5:dc:7b:bb:11:39:8e:6d:98:91:10:8a:ae:e3:f2:1d:1b:09: 3f:63:01:a6:b7:2c:73:80:e6:db:f5:df:6d:69:4d:d9:0d:e8: 28:5f:7e:c4:ad:60:9b:dc:ee:b2:da:f0:f0:50:e6:43:a2:67: 77:f5:eb:44:ad:44:e8:f3:3e:ff:93:9e:f5:6c:42:f0:97:b4: b2:5f:0c:6f:8e:3a:db:fb:7d:f1:d5:41:c6:e1:dd:4a:b2:42: fe:1c:20:d0:3b:08:0c:47:eb:17:fb:d2:19:cd:be:b8:08:fc: 20:22:d5:88:ff:03:c8:f2:f4:fd:eb:bc:0d:68:d8:9b:76:f6: 99:5d:3d:75:06:c2:c3:c6:1c:a1:a6:dc:92:f8:47:55:dc:d7: 93:07:f2:9f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOXvK0I9CW/TayOPOpaijbEjM3aIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTdaFw0yNjExMjcxOTQ5NTdaMDMxMTAvBgNV BAMTKDcwOEFCODI5QkFBNjY0ODlBMUIxREM3MEMwNTdBOTMwREE5NzUwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL1D5Qx/uSoma4a3/TGedxTE22 JxdMXIWYjjcd0W78OPZ3T2xDomIyDQzGuOXwWOE0uy6QYbNcYX4KjtWdEd229p9K uz1+V7e0VEacq4UqQUEl66v39uvlp+G/eAnMR9G+ox8U3qxMUSTL3mxYvjqzZv+p qXhyIGP4QZH+f1vvtREWUJWyiFt/ipvpCUSh9Hx45Qkv/uJjJYf3no0HIB8Amae6 JcsHLakdzZ1YJuOs7a+aoAS7nd23hNreoCf+3NW3QklfZ6IKR3uOVO8L8NN9zD6m IjD2GRNAmOPx/a1kSivbC5J7UKBewKr7QWhBS+C6Y6xalzLcwLEc6LJLc/otAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcIq4KbqmZImhsdxwwFepMNqXUP4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM3MmUzNzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LYlNMA0GCSqGSIb3DQEBCwUAA4IBAQCIn85vC+ZrMQBFXYym1oAK6gkcjNv38Lk8 fRI1wAeouX2LoHn5Z5rnbv34gc4o18+IptA0zbtNLbcZoijzGuNJ7jG1Wr5bwFJt Xd2X0mbp581rFRnoAMfP2e+xX2123Fo33unrn0O77ZaSngzV3Hu7ETmObZiREIqu 4/IdGwk/YwGmtyxzgObb9d9taU3ZDegoX37ErWCb3O6y2vDwUOZDomd39etErUTo 8z7/k571bELwl7SyXwxvjjrb+33x1UHG4d1KskL+HCDQOwgMR+sX+9IZzb64CPwg ItWI/wPI8vT967wNaNibdvaZXT11BsLDxhyhptyS+EdV3NeTB/Kf -----END CERTIFICATE-----Generated at Fri Dec 5 05:38:50 2025 by rpki-client