This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e203438363738.roa
File: 34352e3135352e3135392e302f32342d3234203d3e203438363738.roa (raw, json)
Hash identifier: u1WBAghFeZR2xUdqMEiqWOz/pelKlX54cSNJdRoIvTc=
Subject key identifier: 1B:6D:54:4C:CC:C9:13:41:43:93:CA:79:1D:4E:AF:0F:47:BA:7C:26
Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Certificate serial: 49EE1F92AED9F1974668D16F000A67ADBA799AE9
Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e203438363738.roa
Signing time: Fri 07 Nov 2025 16:55:11 +0000
ROA not before: Fri 07 Nov 2025 16:50:11 +0000
ROA not after: Fri 06 Nov 2026 16:55:11 +0000
asID: 48678
IP address blocks: 45.155.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft
rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 09:33:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ee:1f:92:ae:d9:f1:97:46:68:d1:6f:00:0a:67:ad:ba:79:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d
Validity
Not Before: Nov 7 16:50:11 2025 GMT
Not After : Nov 6 16:55:11 2026 GMT
Subject: CN=1B6D544CCCC913414393CA791D4EAF0F47BA7C26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:f9:ad:80:77:cd:1c:d3:5b:55:65:66:ac:
e7:bc:b2:fb:f8:06:c2:59:f4:6a:da:d5:7a:94:f5:
17:8a:18:79:17:e8:33:b0:5f:65:f4:13:11:52:2b:
f5:5a:fe:4e:91:e0:cb:34:09:20:06:0e:d0:85:52:
bc:8a:11:68:4c:5a:59:94:39:45:d5:71:39:7d:c5:
6d:a1:f1:ae:82:e0:eb:70:71:06:75:a5:c3:ab:61:
e8:e9:f5:e0:b8:57:dc:eb:e1:f5:d3:cd:9e:cf:c6:
b4:c2:72:32:f9:af:0c:81:29:8d:77:d6:66:47:a6:
7a:da:b0:a6:d2:04:41:a9:32:dc:e7:13:6d:53:1d:
a7:a7:af:65:6e:bd:5c:9c:71:1f:09:09:df:31:b9:
4f:af:9b:58:af:db:51:fc:dd:8b:21:c2:d7:62:ad:
7e:f5:26:df:69:d5:4a:3f:e3:3c:33:ab:f8:42:9a:
4d:b3:cc:ca:ed:63:7e:55:3b:25:1a:b9:5c:b2:b1:
7f:4e:94:d2:7c:19:4a:10:fe:c4:57:8b:e8:86:2d:
fc:a7:de:01:e0:75:45:69:b5:f7:87:7b:4a:ec:5d:
a3:64:f7:81:c4:43:8c:e6:ae:77:9b:e2:51:42:fa:
4f:5e:63:b8:0d:7f:1a:0b:8a:a9:ab:ef:49:d7:14:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6D:54:4C:CC:C9:13:41:43:93:CA:79:1D:4E:AF:0F:47:BA:7C:26
X509v3 Authority Key Identifier:
keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e3135352e3135392e302f32342d3234203d3e203438363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.159.0/24
Signature Algorithm: sha256WithRSAEncryption
da:01:bb:78:51:8d:09:05:d2:f6:89:fe:2b:cd:cb:5d:29:be:
d2:52:07:ef:5a:da:78:dd:7d:f1:99:81:0e:36:a2:b6:ea:95:
2c:92:b2:cd:92:e8:84:97:32:ef:27:73:37:17:9e:aa:64:7a:
c2:cb:3a:b5:4f:68:1c:63:15:09:a1:36:dc:dd:2c:67:5e:58:
b9:aa:0e:b9:49:8e:aa:19:fd:98:8c:34:98:3b:0d:2a:1b:72:
ed:84:f9:26:f2:78:39:35:7b:fd:81:2c:8d:06:59:72:e0:92:
85:85:4c:55:09:8d:10:30:82:91:bd:c8:2e:c6:4b:81:d0:bd:
15:f9:87:aa:46:e9:4d:95:74:6c:95:27:0f:54:42:be:23:ec:
59:df:f6:c3:6b:7b:73:67:ab:42:08:91:90:64:1c:fb:4e:80:
89:62:ae:44:32:75:38:24:44:6f:af:6d:a2:8b:17:3b:14:57:
4f:9a:7e:4e:a0:16:94:74:ee:7b:d5:35:df:a4:ae:46:05:49:
42:c3:ee:9f:ff:90:15:b4:ac:f7:7e:c1:83:e5:57:7a:ea:0d:
e9:a7:a5:de:77:46:5b:b5:9c:7a:1c:fc:7a:f2:77:0e:08:e1:
fb:00:ed:c1:2c:8b:2e:a8:49:b1:4e:57:6e:64:64:4c:70:58:
36:e0:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:09:14 2025 by rpki-client