This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa File: 34352e3134362e3136302e302f32332d3233203d3e203437343437.roa (raw, json) Hash identifier: 31YTnxmdtZ2cp3Cw9rcOHPD6ZzrVs4b/Az5vMfbmmIM= Subject key identifier: F9:7F:64:A1:2B:29:5D:AD:4E:6C:05:64:6A:3C:AD:64:E0:81:D9:E1 Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 74D845797B7C816D4E20DC454C6907507D46C75C Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa Signing time: Fri 28 Nov 2025 12:55:12 +0000 ROA not before: Fri 28 Nov 2025 12:50:12 +0000 ROA not after: Fri 27 Nov 2026 12:55:12 +0000 asID: 47447 IP address blocks: 45.146.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:d8:45:79:7b:7c:81:6d:4e:20:dc:45:4c:69:07:50:7d:46:c7:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Nov 28 12:50:12 2025 GMT Not After : Nov 27 12:55:12 2026 GMT Subject: CN=F97F64A12B295DAD4E6C05646A3CAD64E081D9E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ea:74:24:db:55:97:1f:e9:24:e1:6c:e5:ee: 4e:36:c5:4c:e7:24:f1:3a:0e:77:10:13:4e:61:4e: 4f:02:20:bb:27:82:7d:88:98:1f:df:30:a3:d7:c8: 57:07:e9:1b:3f:32:16:b4:e2:0b:1f:bd:84:42:95: fe:42:59:61:ea:13:f2:57:8c:25:94:3f:15:be:2b: eb:df:96:92:37:61:84:61:c9:af:b3:67:13:93:89: 8c:e3:04:e5:e1:4e:6b:b2:47:42:93:b6:ea:21:c0: 85:b1:3c:57:d3:c3:0a:88:69:d2:80:5d:fb:2a:bf: 72:22:4b:0f:a1:4e:cd:09:19:bc:73:29:36:e5:4f: db:c9:97:4b:ed:9b:84:8b:6d:65:67:79:ba:ec:be: af:11:64:58:e2:db:45:44:4f:1c:70:54:f7:17:ec: c3:48:e8:fe:02:84:1a:a6:fb:cb:b5:1a:2d:d7:f0: 4b:eb:da:ae:f0:e4:cd:e4:53:54:12:f5:ed:90:17: 45:8d:2a:13:83:c3:dc:71:35:2a:28:0f:8f:e1:1b: 09:1f:8c:83:85:92:1e:dd:89:82:63:c6:ef:8d:72: af:65:82:be:d1:ed:3f:f8:6f:4b:4f:09:1a:90:40: 5e:55:92:e0:b8:8e:77:10:2d:c6:d9:d9:9b:20:a1: 37:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7F:64:A1:2B:29:5D:AD:4E:6C:05:64:6A:3C:AD:64:E0:81:D9:E1 X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136302e302f32332d3233203d3e203437343437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.160.0/23 Signature Algorithm: sha256WithRSAEncryption 68:b9:43:8b:09:62:1f:20:4a:5e:a4:1d:7c:f9:9c:f4:b2:7f: 4f:58:05:ef:4b:2c:03:92:20:91:43:b3:e2:bd:60:74:d0:2b: a8:37:56:84:92:c1:e3:51:73:04:cc:05:aa:56:da:4b:81:ba: 07:f6:b0:58:0f:d5:09:49:2a:e7:1a:51:30:1a:60:d2:2f:97: 14:d0:91:7f:9c:6a:11:66:48:39:9e:2e:9e:7b:31:8f:f0:ed: ee:37:2b:95:cb:76:50:1c:6b:0d:94:fb:d3:c2:27:40:eb:9d: 8e:85:62:a2:aa:cd:fe:da:ef:97:95:91:80:a4:ea:55:bb:15: 23:db:5b:8b:c6:28:8d:d3:b9:e9:c9:21:4d:ae:3c:a2:0e:e2: b8:95:4e:94:2e:11:c4:90:cf:5f:b8:1d:d6:a4:57:53:1b:b2: e6:2a:a9:a8:0d:89:28:c2:c9:5c:9a:22:7b:ce:e6:9b:e0:71: b6:01:5d:50:af:48:43:6a:53:08:2b:ed:9b:e7:d4:de:8e:45: 32:e8:95:9b:41:55:aa:7d:1d:46:f4:d7:f9:fd:8d:dd:12:f5: cf:44:0b:4e:2d:d9:51:0f:b1:bc:c5:b3:16:32:7f:29:64:12: e5:ba:c4:25:13:8c:42:8c:c2:f1:8f:37:e7:94:ae:74:64:3b: 47:6a:cd:70 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdNhFeXt8gW1OINxFTGkHUH1Gx1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNTExMjgxMjUwMTJaFw0yNjExMjcxMjU1MTJaMDMxMTAvBgNV BAMTKEY5N0Y2NEExMkIyOTVEQUQ0RTZDMDU2NDZBM0NBRDY0RTA4MUQ5RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL6nQk21WXH+kk4Wzl7k42xUzn JPE6DncQE05hTk8CILsngn2ImB/fMKPXyFcH6Rs/Mha04gsfvYRClf5CWWHqE/JX jCWUPxW+K+vflpI3YYRhya+zZxOTiYzjBOXhTmuyR0KTtuohwIWxPFfTwwqIadKA Xfsqv3IiSw+hTs0JGbxzKTblT9vJl0vtm4SLbWVnebrsvq8RZFji20VETxxwVPcX 7MNI6P4ChBqm+8u1Gi3X8Evr2q7w5M3kU1QS9e2QF0WNKhODw9xxNSooD4/hGwkf jIOFkh7diYJjxu+Ncq9lgr7R7T/4b0tPCRqQQF5VkuC4jncQLcbZ2ZsgoTdXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU+X9koSspXa1ObAVkajytZOCB2eEwHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZlMmIyN2Et MWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvMzQzNTJlMzEzNDM2MmUzMTM2 MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM3MzQzNDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB LZKgMA0GCSqGSIb3DQEBCwUAA4IBAQBouUOLCWIfIEpepB18+Zz0sn9PWAXvSywD kiCRQ7PivWB00CuoN1aEksHjUXMEzAWqVtpLgboH9rBYD9UJSSrnGlEwGmDSL5cU 0JF/nGoRZkg5ni6eezGP8O3uNyuVy3ZQHGsNlPvTwidA652OhWKiqs3+2u+XlZGA pOpVuxUj21uLxiiN07npySFNrjyiDuK4lU6ULhHEkM9fuB3WpFdTG7LmKqmoDYko wslcmiJ7zuab4HG2AV1Qr0hDalMIK+2b59TejkUy6JWbQVWqfR1G9Nf5/Y3dEvXP RAtOLdlRD7G8xbMWMn8pZBLlusQlE4xCjMLxjzfnlK50ZDtHas1w -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:14 2025 by rpki-client