This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20323132323338.roa File: 34352e39352e3136322e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: BE+XUv/7FPkZ4kYeJxdo99jd/Pjuwo2vyA4wGWyirUY= Subject key identifier: CF:E1:F9:6F:8C:C6:89:19:03:DF:A5:BF:D7:28:9F:E4:AA:22:F2:D0 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 79B1C867CADDD6456AC00DAE6D5040D858B1FFBA Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:40 +0000 ROA not before: Tue 21 Oct 2025 13:17:40 +0000 ROA not after: Tue 20 Oct 2026 13:22:40 +0000 asID: 212238 IP address blocks: 45.95.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:b1:c8:67:ca:dd:d6:45:6a:c0:0d:ae:6d:50:40:d8:58:b1:ff:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:40 2025 GMT Not After : Oct 20 13:22:40 2026 GMT Subject: CN=CFE1F96F8CC6891903DFA5BFD7289FE4AA22F2D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:10:7b:ac:97:4c:a0:59:36:82:5f:39:b9: e9:01:a2:a1:a6:04:e3:0c:3d:e6:1c:40:28:82:54: b9:65:74:13:c0:0b:24:3c:63:cd:4b:74:ed:ba:eb: 86:8e:01:18:a9:d2:65:87:7f:1e:bc:be:e8:f3:a7: 07:f9:19:c7:63:e6:cc:30:a3:d3:59:8c:06:58:5f: 9d:2f:c1:ce:e1:43:cd:ae:6e:39:18:1f:d5:64:2c: 80:a1:33:e0:0c:36:25:e6:3d:a2:e2:8d:3d:d3:b9: 5b:07:33:e7:5f:cd:79:f7:64:02:d5:5f:4a:22:90: aa:33:9a:b5:97:c7:86:41:76:e8:49:a6:1e:7a:1a: f7:25:ce:75:92:39:71:48:92:5a:95:fe:4c:80:2e: 97:41:ae:f3:e9:b2:b6:b8:fa:3b:d5:24:13:24:ff: 2e:0f:c1:f6:a8:dc:af:d2:23:54:8a:26:6d:13:3c: b5:4c:c9:84:d7:74:23:16:43:1c:98:a9:59:05:74: 22:85:21:26:d7:a0:59:ee:37:97:23:ec:32:ef:a0: 88:52:4e:d8:2b:a2:1e:bb:b5:62:b6:06:a1:41:6b: ab:f9:12:fa:21:53:20:b8:a6:2b:5d:d6:02:57:89: 37:9e:b1:72:dc:95:3f:59:3b:1d:28:a6:52:49:e8: ac:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E1:F9:6F:8C:C6:89:19:03:DF:A5:BF:D7:28:9F:E4:AA:22:F2:D0 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e39352e3136322e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.162.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:de:e5:1e:b6:1a:d3:47:a8:95:4a:10:e2:9b:df:b6:70:fc: 38:ef:a7:76:e6:62:20:e1:32:7d:25:2e:43:fe:a4:b8:fc:a2: 1a:bd:b7:7a:91:cb:81:7d:40:ac:21:11:79:e6:20:ea:42:3f: 28:8c:25:8e:48:81:d8:82:4e:8a:ca:7c:f8:cf:bc:38:b4:ed: cc:ee:a4:f2:66:1b:81:ce:67:e1:de:1f:7d:72:bf:f2:d4:28: 0a:37:4e:fd:08:7a:33:98:36:d2:32:d9:8d:ce:63:d1:9d:09: a3:58:da:f3:c8:cd:0a:19:9d:21:32:55:4e:b3:c8:0e:77:67: 91:ef:30:f7:2b:ff:17:d9:22:54:b1:11:9b:4c:9f:e4:91:8e: ac:b9:6d:2d:40:57:38:9e:48:d4:6c:36:2a:d1:88:4b:ed:a6: 9a:54:9b:9c:a6:f1:ed:17:3e:0c:a0:53:c9:ad:eb:bf:5e:42: 1d:e3:6d:90:9b:4e:2d:4a:39:47:84:31:a0:74:04:8e:e5:06: b0:3a:10:ff:e6:04:b3:ee:ff:bd:98:69:66:25:34:fe:9f:fd: 41:1d:8d:62:6a:97:70:73:c4:2c:e8:b4:65:85:0f:4e:5f:d9: d2:c4:b4:d4:34:37:2c:9b:fc:d4:22:77:5d:c2:8d:29:ac:cf: 23:c4:3a:cc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUebHIZ8rd1kVqwA2ubVBA2Fix/7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDBaFw0yNjEwMjAxMzIyNDBaMDMxMTAvBgNV BAMTKENGRTFGOTZGOENDNjg5MTkwM0RGQTVCRkQ3Mjg5RkU0QUEyMkYyRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyExB7rJdMoFk2gl85uekBoqGm BOMMPeYcQCiCVLlldBPACyQ8Y81LdO2664aOARip0mWHfx68vujzpwf5Gcdj5sww o9NZjAZYX50vwc7hQ82ubjkYH9VkLIChM+AMNiXmPaLijT3TuVsHM+dfzXn3ZALV X0oikKozmrWXx4ZBduhJph56GvclznWSOXFIklqV/kyALpdBrvPpsra4+jvVJBMk /y4Pwfao3K/SI1SKJm0TPLVMyYTXdCMWQxyYqVkFdCKFISbXoFnuN5cj7DLvoIhS Ttgroh67tWK2BqFBa6v5EvohUyC4pitd1gJXiTeesXLclT9ZOx0oplJJ6KxfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUz+H5b4zGiRkD36W/1yif5Koi8tAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzkzNTJlMzEzNjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LV+iMA0GCSqGSIb3DQEBCwUAA4IBAQBe3uUethrTR6iVShDim9+2cPw476d25mIg 4TJ9JS5D/qS4/KIavbd6kcuBfUCsIRF55iDqQj8ojCWOSIHYgk6Kynz4z7w4tO3M 7qTyZhuBzmfh3h99cr/y1CgKN079CHozmDbSMtmNzmPRnQmjWNrzyM0KGZ0hMlVO s8gOd2eR7zD3K/8X2SJUsRGbTJ/kkY6suW0tQFc4nkjUbDYq0YhL7aaaVJucpvHt Fz4MoFPJreu/XkId422Qm04tSjlHhDGgdASO5QawOhD/5gSz7v+9mGlmJTT+n/1B HY1iapdwc8Qs6LRlhQ9OX9nSxLTUNDcsm/zUInddwo0prM8jxDrM -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:08 2025 by rpki-client