This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa File: 34352e3134392e36302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: HuEEuRf4Jr4z3JTWzq3FSu67ML5pTmz1yPEl7HwtSVY= Subject key identifier: 5B:5D:79:0E:E8:37:F0:F6:83:0E:A0:A7:EE:B5:34:97:EF:9F:05:FF Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 628D56BD6A525FDB65A2854D23DDB7FCC8B822B1 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa Signing time: Thu 27 Nov 2025 07:20:51 +0000 ROA not before: Thu 27 Nov 2025 07:15:51 +0000 ROA not after: Thu 26 Nov 2026 07:20:51 +0000 asID: 834 IP address blocks: 45.149.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:8d:56:bd:6a:52:5f:db:65:a2:85:4d:23:dd:b7:fc:c8:b8:22:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Nov 27 07:15:51 2025 GMT Not After : Nov 26 07:20:51 2026 GMT Subject: CN=5B5D790EE837F0F6830EA0A7EEB53497EF9F05FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:fb:e5:e5:bc:81:6d:7d:22:3f:d4:0c:ec: 4d:f7:2d:a8:8a:52:4b:5f:23:ef:1c:a8:bb:24:6e: dc:99:62:86:85:ec:1c:0a:99:7f:fb:bf:89:4c:cb: d5:2a:d7:80:3a:df:96:2d:bf:b9:d5:03:49:4f:1a: ff:73:26:a5:70:2e:18:44:99:09:6e:e2:d9:1a:f9: 3a:cc:6c:c8:38:0b:61:27:70:dc:f0:ef:43:8c:98: 44:99:ee:7a:cd:80:2c:e6:c8:5c:83:7e:1a:c1:6a: ed:2f:42:07:42:78:2e:d8:37:37:99:47:6a:ad:b3: eb:92:ac:63:5c:b5:5c:a4:fa:b4:28:49:87:8c:a1: 97:ef:fc:c5:b0:86:a7:db:57:33:69:b9:ce:33:f8: 36:33:e2:2b:10:fa:66:4a:33:99:18:9d:2f:66:e2: a2:fc:6d:b4:53:30:81:a9:f4:2c:8a:8b:1c:f3:7e: 5e:bf:98:40:92:ce:0a:22:a8:3b:66:20:fc:37:43: 2f:db:f5:21:18:6c:72:16:4b:95:11:d7:ac:e6:b4: ef:e7:aa:57:d0:18:ea:08:b6:bf:24:92:2c:fe:67: c9:83:38:8f:ff:e8:5b:09:8e:6b:3b:07:f1:7e:d7: d9:98:c3:f3:ad:16:77:c8:90:45:3e:7b:b8:8a:74: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5D:79:0E:E8:37:F0:F6:83:0E:A0:A7:EE:B5:34:97:EF:9F:05:FF X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.60.0/24 Signature Algorithm: sha256WithRSAEncryption 31:29:22:aa:c1:2d:75:63:f8:b7:8e:f7:78:de:95:7d:dc:e1: 16:22:8b:fd:94:ea:d2:0b:48:a4:d5:cc:32:2e:e8:0f:80:98: 2b:30:13:58:79:8d:e4:53:54:4c:18:89:f2:ef:a7:c7:9d:88: 65:27:bb:6e:1e:55:b4:33:b3:fe:77:cd:86:f3:3e:80:59:f9: db:25:76:ee:72:16:02:07:81:04:9d:22:b9:5f:f4:05:1a:d1: 00:d2:65:84:5f:09:0e:0c:c4:c5:cb:8b:fc:4a:d7:36:c0:1d: 79:bb:b6:98:77:33:0b:4b:84:b5:83:fb:71:da:52:e3:bf:f0: 93:51:4f:6f:d6:1e:32:58:d4:d9:02:ba:e6:af:af:75:8b:2e: df:1d:f2:18:df:69:6c:68:6d:83:4b:4e:ab:7f:07:4b:e5:89: 43:3c:5f:c7:f5:aa:77:66:7c:da:ce:7c:90:90:2f:b2:a8:94: 97:97:2f:92:9c:9d:83:93:18:36:09:d2:bb:eb:0a:94:3c:d8: 04:b2:ec:cc:11:8b:a4:85:9d:a6:c9:67:30:00:0c:d2:24:98: 50:b4:8a:df:d4:e7:3b:00:d4:78:53:33:20:84:00:77:03:33: eb:7b:12:aa:dc:44:88:8a:1b:fb:53:1a:31:4a:df:a2:bb:3e: f1:87:6b:0a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUYo1WvWpSX9tlooVNI923/Mi4IrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNTExMjcwNzE1NTFaFw0yNjExMjYwNzIwNTFaMDMxMTAvBgNV BAMTKDVCNUQ3OTBFRTgzN0YwRjY4MzBFQTBBN0VFQjUzNDk3RUY5RjA1RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwPvl5byBbX0iP9QM7E33LaiK UktfI+8cqLskbtyZYoaF7BwKmX/7v4lMy9Uq14A635Ytv7nVA0lPGv9zJqVwLhhE mQlu4tka+TrMbMg4C2EncNzw70OMmESZ7nrNgCzmyFyDfhrBau0vQgdCeC7YNzeZ R2qts+uSrGNctVyk+rQoSYeMoZfv/MWwhqfbVzNpuc4z+DYz4isQ+mZKM5kYnS9m 4qL8bbRTMIGp9CyKixzzfl6/mECSzgoiqDtmIPw3Qy/b9SEYbHIWS5UR16zmtO/n qlfQGOoItr8kkiz+Z8mDOI//6FsJjms7B/F+19mYw/OtFnfIkEU+e7iKdGqjAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUW115Dug38PaDDqCn7rU0l++fBf8wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU8MA0G CSqGSIb3DQEBCwUAA4IBAQAxKSKqwS11Y/i3jvd43pV93OEWIov9lOrSC0ik1cwy LugPgJgrMBNYeY3kU1RMGIny76fHnYhlJ7tuHlW0M7P+d82G8z6AWfnbJXbuchYC B4EEnSK5X/QFGtEA0mWEXwkODMTFy4v8Stc2wB15u7aYdzMLS4S1g/tx2lLjv/CT UU9v1h4yWNTZArrmr691iy7fHfIY32lsaG2DS06rfwdL5YlDPF/H9ap3ZnzaznyQ kC+yqJSXly+SnJ2Dkxg2CdK76wqUPNgEsuzMEYukhZ2myWcwAAzSJJhQtIrf1Oc7 ANR4UzMghAB3AzPrexKq3ESIihv7UxoxSt+iuz7xh2sK -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:52 2025 by rpki-client