This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20313336373837.roa File: 34352e39352e3136322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: JUvWs7joLftDYqtl6oqeaQb+as23RQS5z8nwzeaLb7A= Subject key identifier: EC:55:98:F8:42:34:AE:D5:C8:97:A1:93:FC:FB:A2:89:58:40:4A:E1 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1F670DB53D311ADE9C8E2DDA3FE0ADEEB8782EF8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:56 +0000 ROA not before: Fri 28 Nov 2025 19:44:56 +0000 ROA not after: Fri 27 Nov 2026 19:49:56 +0000 asID: 136787 IP address blocks: 45.95.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:67:0d:b5:3d:31:1a:de:9c:8e:2d:da:3f:e0:ad:ee:b8:78:2e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:56 2025 GMT Not After : Nov 27 19:49:56 2026 GMT Subject: CN=EC5598F84234AED5C897A193FCFBA28958404AE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:71:62:c5:fc:68:6a:f0:6b:85:37:e7:8c: 6b:92:85:88:70:83:c4:7f:a0:e1:68:a6:07:96:09: 26:a1:d1:84:97:a7:7d:f1:c1:7e:38:8f:02:4f:c0: 3f:c8:eb:2e:76:d8:45:73:eb:a4:9b:7f:70:57:bf: 8d:8f:9a:7d:ea:1a:71:a9:00:2a:6a:e2:4b:50:03: 02:1c:c9:fa:39:42:fa:db:63:c9:41:8f:ef:4e:65: fe:34:e5:d5:00:f1:fd:50:d0:16:2f:23:1d:3f:c4: 31:98:78:87:da:a9:79:d1:3c:fd:58:40:b8:f8:14: 91:74:d0:17:a3:a4:d4:7a:a5:d6:13:c0:9a:0f:8c: 8a:05:7b:95:06:14:14:05:e3:2c:9f:a4:a7:9a:c4: 62:e7:97:ba:e4:b0:06:f7:e5:b5:78:31:8b:b8:38: 16:49:b6:77:59:06:dc:e6:e7:36:52:8a:c4:76:c5: 2a:6a:98:e4:7b:f0:f4:0d:33:a4:b5:5e:7f:bb:ca: 5a:3c:68:8a:2a:50:15:bb:be:76:d3:78:1d:02:c1: 74:17:4c:c6:73:23:50:66:4a:25:dd:54:74:a7:27: ae:98:e6:e3:1e:42:2f:a9:16:9e:9a:8e:f2:aa:52: cc:b6:60:cd:06:ff:da:6d:7f:50:e1:13:94:94:55: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:55:98:F8:42:34:AE:D5:C8:97:A1:93:FC:FB:A2:89:58:40:4A:E1 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.162.0/24 Signature Algorithm: sha256WithRSAEncryption 03:80:d9:7a:66:be:cd:c1:ab:0f:c2:04:35:14:cc:86:e5:1a: ab:5c:df:45:4e:18:d9:9b:40:2d:bd:43:06:6c:f5:23:2f:9e: 02:46:a8:55:9a:1b:42:c5:d5:31:02:c3:fc:fa:6d:6f:2d:e7: 95:6a:a8:f6:dc:07:ee:3a:dd:79:2f:4e:7d:a6:b9:aa:5b:7d: 12:10:ff:2c:e1:64:64:11:fc:4b:15:77:b2:01:fe:0e:13:e8: 83:4d:22:18:31:63:f5:01:0c:a9:cd:c4:5d:fe:12:6e:c2:b2: 73:81:80:b4:f0:5a:fc:67:6b:f7:a1:56:d4:8f:7a:67:ce:61: 22:df:f5:93:25:5a:89:de:a7:dd:65:d8:6b:40:ab:0d:aa:8c: 58:e2:f1:d6:86:41:32:27:ed:8f:5f:e4:a1:76:64:9c:bd:91: f9:34:8a:bf:f6:73:10:4a:fc:d6:5d:d6:f0:d0:57:c1:d0:35: 53:36:d8:a1:15:fa:36:1d:ff:be:60:61:92:62:b9:e5:91:3f: 7e:84:98:69:67:6e:9b:62:c6:ef:57:20:0b:9b:da:e4:1c:3b: 3c:f6:81:61:69:50:27:cb:4c:16:cf:d0:ac:95:b7:cd:fb:73: 51:4b:92:8c:00:f1:c3:61:fc:31:a8:f4:a6:c4:46:57:f3:c5: 8a:5a:41:20 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUH2cNtT0xGt6cji3aP+Ct7rh4LvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTZaFw0yNjExMjcxOTQ5NTZaMDMxMTAvBgNV BAMTKEVDNTU5OEY4NDIzNEFFRDVDODk3QTE5M0ZDRkJBMjg5NTg0MDRBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19XFixfxoavBrhTfnjGuShYhw g8R/oOFopgeWCSah0YSXp33xwX44jwJPwD/I6y522EVz66Sbf3BXv42Pmn3qGnGp ACpq4ktQAwIcyfo5QvrbY8lBj+9OZf405dUA8f1Q0BYvIx0/xDGYeIfaqXnRPP1Y QLj4FJF00BejpNR6pdYTwJoPjIoFe5UGFBQF4yyfpKeaxGLnl7rksAb35bV4MYu4 OBZJtndZBtzm5zZSisR2xSpqmOR78PQNM6S1Xn+7ylo8aIoqUBW7vnbTeB0CwXQX TMZzI1BmSiXdVHSnJ66Y5uMeQi+pFp6ajvKqUsy2YM0G/9ptf1DhE5SUVf2dAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7FWY+EI0rtXIl6GT/PuiiVhASuEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzNTJlMzEzNjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LV+iMA0GCSqGSIb3DQEBCwUAA4IBAQADgNl6Zr7NwasPwgQ1FMyG5RqrXN9FThjZ m0AtvUMGbPUjL54CRqhVmhtCxdUxAsP8+m1vLeeVaqj23AfuOt15L059prmqW30S EP8s4WRkEfxLFXeyAf4OE+iDTSIYMWP1AQypzcRd/hJuwrJzgYC08Fr8Z2v3oVbU j3pnzmEi3/WTJVqJ3qfdZdhrQKsNqoxY4vHWhkEyJ+2PX+ShdmScvZH5NIq/9nMQ SvzWXdbw0FfB0DVTNtihFfo2Hf++YGGSYrnlkT9+hJhpZ26bYsbvVyALm9rkHDs8 9oFhaVAny0wWz9CslbfN+3NRS5KMAPHDYfwxqPSmxEZX88WKWkEg -----END CERTIFICATE-----Generated at Fri Dec 5 05:41:45 2025 by rpki-client