This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa File: 34352e382e3133342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: kzV+uUESR3FPEUZ2tIcknnxKs64VLPXOU6sKCor1BLs= Subject key identifier: AE:16:E0:8C:4F:FF:B9:25:25:8E:D4:3D:86:B6:1D:55:F4:FC:04:8D Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 7F615647399C0A0D9318AD44FEE57922480463D2 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa Signing time: Tue 02 Dec 2025 15:40:46 +0000 ROA not before: Tue 02 Dec 2025 15:35:46 +0000 ROA not after: Tue 01 Dec 2026 15:40:46 +0000 asID: 834 IP address blocks: 45.8.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:61:56:47:39:9c:0a:0d:93:18:ad:44:fe:e5:79:22:48:04:63:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 2 15:35:46 2025 GMT Not After : Dec 1 15:40:46 2026 GMT Subject: CN=AE16E08C4FFFB925258ED43D86B61D55F4FC048D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c1:6c:74:d3:40:a0:be:55:7d:c2:81:33:05: d5:8f:3a:7a:6b:06:d7:05:81:99:ed:48:cb:6d:2f: 77:6b:8b:fd:70:21:8f:65:6d:f0:bd:24:09:62:4f: 07:71:fb:67:c8:56:87:fe:a9:45:ef:bd:0a:95:c3: 8f:d7:e6:0d:6c:37:d2:f4:26:16:49:53:7c:6b:31: 52:73:a9:e8:d8:64:d1:ea:c8:8e:ad:4a:8a:a9:a2: 4c:c2:dc:91:90:0f:9d:d8:5e:20:87:50:ef:31:af: 11:93:e2:7b:4b:84:81:79:3d:65:90:18:ec:08:a2: 9f:a9:e5:72:a1:70:ce:70:a4:8b:a7:1b:48:fd:e8: 01:22:bb:7d:f9:ba:de:86:03:ec:e5:ad:ee:fa:5f: 55:d6:b4:3f:9c:cf:19:fa:79:6c:f1:8c:c8:41:9c: 40:21:20:8c:75:d0:cd:d5:f4:e5:39:fc:36:42:8e: a7:9b:08:c1:dc:1f:1b:90:4d:dc:b9:73:bf:96:cb: c1:5e:3e:8e:73:f8:bf:1a:44:2f:f4:55:86:7c:e3: b4:59:9c:f8:fa:60:28:fa:b1:67:75:a2:a0:f7:e1: 89:fc:05:11:f6:62:96:84:cb:3f:aa:d1:ab:97:15: 13:04:cd:0b:43:cc:97:98:58:23:fe:24:c0:b0:b5: 2c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:16:E0:8C:4F:FF:B9:25:25:8E:D4:3D:86:B6:1D:55:F4:FC:04:8D X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.134.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:27:22:de:8e:dc:f7:be:93:33:c2:73:66:ac:7b:9e:92:88: 76:66:8e:c8:16:66:ad:c2:69:3e:93:93:ae:8f:1a:4e:e6:23: bb:74:f1:cf:33:a1:bf:6d:13:d6:30:81:ef:35:31:a4:25:9e: dd:4e:34:b6:75:99:1f:b9:61:d8:dc:36:f1:ac:50:49:20:d9: be:88:19:f2:cf:34:63:fb:e7:59:9b:72:0a:8c:6f:cc:8f:80: 6c:7b:b7:37:16:64:f1:51:42:22:62:0f:58:2a:96:c6:e7:1e: f0:b1:14:18:da:92:16:cc:ed:48:6b:6c:b4:dd:b6:4f:12:ea: 60:79:f9:69:49:52:96:32:d5:5a:07:58:d8:c2:66:36:1c:9a: 82:78:10:f2:4b:3c:4c:1c:06:89:1d:e1:16:bd:21:b3:7b:40: db:2c:5f:44:ee:6a:4e:2c:c0:82:69:03:78:20:64:26:7b:3f: 96:15:13:f5:1b:51:6f:ca:56:96:97:c6:7c:93:ac:6f:c3:36: 22:9e:01:1c:41:44:f6:07:ca:ef:48:4c:05:2b:47:19:6b:38: c9:e3:99:59:9c:b3:ef:d8:a9:c6:9c:cc:a7:38:ff:35:95:ea: 38:7a:98:fc:e5:43:6b:e6:f9:ff:2c:60:b0:ed:1e:e1:fc:74: 5d:db:6b:18 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUf2FWRzmcCg2TGK1E/uV5IkgEY9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMDIxNTM1NDZaFw0yNjEyMDExNTQwNDZaMDMxMTAvBgNV BAMTKEFFMTZFMDhDNEZGRkI5MjUyNThFRDQzRDg2QjYxRDU1RjRGQzA0OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnwWx000CgvlV9woEzBdWPOnpr BtcFgZntSMttL3dri/1wIY9lbfC9JAliTwdx+2fIVof+qUXvvQqVw4/X5g1sN9L0 JhZJU3xrMVJzqejYZNHqyI6tSoqpokzC3JGQD53YXiCHUO8xrxGT4ntLhIF5PWWQ GOwIop+p5XKhcM5wpIunG0j96AEiu335ut6GA+zlre76X1XWtD+czxn6eWzxjMhB nEAhIIx10M3V9OU5/DZCjqebCMHcHxuQTdy5c7+Wy8FePo5z+L8aRC/0VYZ847RZ nPj6YCj6sWd1oqD34Yn8BRH2YpaEyz+q0auXFRMEzQtDzJeYWCP+JMCwtSxJAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUrhbgjE//uSUljtQ9hrYdVfT8BI0wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzgyZTMxMzMzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0IhjANBgkq hkiG9w0BAQsFAAOCAQEAeyci3o7c976TM8JzZqx7npKIdmaOyBZmrcJpPpOTro8a TuYju3TxzzOhv20T1jCB7zUxpCWe3U40tnWZH7lh2Nw28axQSSDZvogZ8s80Y/vn WZtyCoxvzI+AbHu3NxZk8VFCImIPWCqWxuce8LEUGNqSFsztSGtstN22TxLqYHn5 aUlSljLVWgdY2MJmNhyagngQ8ks8TBwGiR3hFr0hs3tA2yxfRO5qTizAgmkDeCBk Jns/lhUT9RtRb8pWlpfGfJOsb8M2Ip4BHEFE9gfK70hMBStHGWs4yeOZWZyz79ip xpzMpzj/NZXqOHqY/OVDa+b5/yxgsO0e4fx0XdtrGA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:08:36 2025 by rpki-client