This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323039353534.roa File: 34352e39352e3231322e302f32342d3234203d3e20323039353534.roa (raw, json) Hash identifier: 9IsmuufWVjFLEbYLLcJg7Yp7+j5DqB4kK41/uY19nMQ= Subject key identifier: EA:E9:EF:D7:BB:45:95:58:57:CB:A1:31:1C:1E:8F:BF:F8:4A:F6:7D Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 7B41D3CDF5F3501B5686800CD0449F7EED724D95 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323039353534.roa Signing time: Tue 25 Nov 2025 04:55:12 +0000 ROA not before: Tue 25 Nov 2025 04:50:12 +0000 ROA not after: Tue 24 Nov 2026 04:55:12 +0000 asID: 209554 IP address blocks: 45.95.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:41:d3:cd:f5:f3:50:1b:56:86:80:0c:d0:44:9f:7e:ed:72:4d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Nov 25 04:50:12 2025 GMT Not After : Nov 24 04:55:12 2026 GMT Subject: CN=EAE9EFD7BB45955857CBA1311C1E8FBFF84AF67D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:74:ed:b6:8c:ab:f2:6d:ba:8e:5b:16:cf: f0:c9:aa:72:40:6f:1d:30:5c:09:58:ee:15:fe:1d: 2a:f2:c2:26:53:f6:97:53:a3:d9:94:4d:48:02:4b: 54:a6:da:5a:b6:26:55:2d:ff:66:7e:da:d0:0a:69: 09:1c:7b:af:80:bf:61:11:99:20:de:ea:52:a8:03: fc:7a:10:76:98:b9:0b:c0:60:88:90:f5:22:bc:c3: a4:de:68:59:5e:9e:1f:52:d5:b8:57:78:bb:09:47: f6:0b:79:88:9c:ed:de:fa:70:ea:0b:48:70:73:0e: 4a:2f:7e:d0:4b:89:38:6c:c3:55:81:cd:42:e0:ea: 81:ed:13:65:80:c4:51:f3:a2:80:05:f0:5d:57:fc: 53:1e:29:6d:d7:63:79:f7:3a:4d:85:1d:cf:cd:d8: fa:f0:9c:32:5c:9e:22:ca:f8:81:b6:c5:ac:44:6e: 7d:b2:08:15:cb:1c:7f:df:5d:91:e9:9a:b4:d8:44: 01:7c:7d:6d:17:7d:55:eb:af:30:41:c4:0c:54:03: 59:b7:ec:b2:fa:9f:73:bc:79:c4:b5:1a:89:f0:c4: cd:7f:3e:e5:8c:e7:39:6c:e5:42:28:6b:3e:c3:e1: 3c:b2:50:5a:8f:67:bb:e4:7f:16:04:74:78:ed:ec: e3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E9:EF:D7:BB:45:95:58:57:CB:A1:31:1C:1E:8F:BF:F8:4A:F6:7D X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231322e302f32342d3234203d3e20323039353534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.212.0/24 Signature Algorithm: sha256WithRSAEncryption 25:63:ff:20:cc:62:5f:22:f5:46:56:e2:7e:f7:8f:4d:e6:f5: 11:15:57:77:c9:51:63:cd:24:71:5a:8b:cb:08:f1:e5:d4:e6: 11:49:35:f2:e5:a4:9e:c7:77:ed:c0:ca:1f:c8:9f:7e:20:25: b0:90:d4:7e:90:b7:03:a8:3b:aa:b1:4a:6b:f4:95:5e:86:b5: 12:84:aa:27:9a:74:ea:98:1b:93:df:26:0d:94:8f:6b:3f:ea: fb:76:c8:91:2e:0e:02:b8:94:39:1f:b9:74:94:5b:16:92:4a: 03:ee:62:b7:10:5c:fe:11:71:cf:99:2a:0d:86:26:56:9b:3f: f4:b1:44:33:ce:47:a5:6d:b6:8b:ae:7f:6c:cb:44:da:64:cc: 29:a8:ad:60:1f:53:60:fa:10:84:da:70:49:ff:f7:50:c7:ca: 58:02:5f:9b:19:68:f7:c6:b3:ce:3f:ab:da:f9:f6:93:0e:0a: 0c:b3:7d:6d:05:7e:b3:10:f6:8c:55:ed:f5:49:44:b4:b7:4e: ec:95:ee:43:7f:68:bd:d5:28:3b:ef:7a:d0:6a:cd:c2:89:db: 8b:e5:13:9d:d6:48:51:20:c4:f6:2d:1a:3d:9d:28:64:f2:8c: d8:3a:79:58:b3:da:b9:3b:30:56:95:5a:7f:cf:ff:d5:c9:fa: 1e:31:87:b4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUe0HTzfXzUBtWhoAM0ESffu1yTZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTExMjUwNDUwMTJaFw0yNjExMjQwNDU1MTJaMDMxMTAvBgNV BAMTKEVBRTlFRkQ3QkI0NTk1NTg1N0NCQTEzMTFDMUU4RkJGRjg0QUY2N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChqHTttoyr8m26jlsWz/DJqnJA bx0wXAlY7hX+HSrywiZT9pdTo9mUTUgCS1Sm2lq2JlUt/2Z+2tAKaQkce6+Av2ER mSDe6lKoA/x6EHaYuQvAYIiQ9SK8w6TeaFlenh9S1bhXeLsJR/YLeYic7d76cOoL SHBzDkovftBLiThsw1WBzULg6oHtE2WAxFHzooAF8F1X/FMeKW3XY3n3Ok2FHc/N 2PrwnDJcniLK+IG2xaxEbn2yCBXLHH/fXZHpmrTYRAF8fW0XfVXrrzBBxAxUA1m3 7LL6n3O8ecS1GonwxM1/PuWM5zls5UIoaz7D4TyyUFqPZ7vkfxYEdHjt7OPzAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6unv17tFlVhXy6ExHB6Pv/hK9n0wHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzQzNTJlMzkzNTJlMzIzMTMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM5MzUzNTM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LV/UMA0GCSqGSIb3DQEBCwUAA4IBAQAlY/8gzGJfIvVGVuJ+949N5vURFVd3yVFj zSRxWovLCPHl1OYRSTXy5aSex3ftwMofyJ9+ICWwkNR+kLcDqDuqsUpr9JVehrUS hKonmnTqmBuT3yYNlI9rP+r7dsiRLg4CuJQ5H7l0lFsWkkoD7mK3EFz+EXHPmSoN hiZWmz/0sUQzzkelbbaLrn9sy0TaZMwpqK1gH1Ng+hCE2nBJ//dQx8pYAl+bGWj3 xrPOP6va+faTDgoMs31tBX6zEPaMVe31SUS0t07sle5Df2i91Sg773rQas3CiduL 5ROd1khRIMT2LRo9nShk8ozYOnlYs9q5OzBWlVp/z//VyfoeMYe0 -----END CERTIFICATE-----Generated at Sat Dec 6 15:18:42 2025 by rpki-client