This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa File: 34352e3133322e3231382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: pbWgbf3Z9k/Vp5McQhjO5BRe+dobiN8M8hutoOHnDIA= Subject key identifier: 4E:52:72:10:0D:EE:94:4C:9C:2B:19:19:0C:32:B5:C2:4B:D3:A4:E4 Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 5C10CBBE5DFEAA94ADABA408D43DE873BBEF31AD Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa Signing time: Sun 30 Nov 2025 00:01:00 +0000 ROA not before: Sat 29 Nov 2025 23:56:00 +0000 ROA not after: Sun 29 Nov 2026 00:01:00 +0000 asID: 834 IP address blocks: 45.132.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:10:cb:be:5d:fe:aa:94:ad:ab:a4:08:d4:3d:e8:73:bb:ef:31:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Nov 29 23:56:00 2025 GMT Not After : Nov 29 00:01:00 2026 GMT Subject: CN=4E5272100DEE944C9C2B19190C32B5C24BD3A4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:db:b2:e3:a0:a0:c7:c4:9f:24:6a:14:8e:e3: 9b:00:7d:64:77:6a:bb:3a:ac:1a:86:16:1f:e4:69: a8:9c:09:a8:78:cb:f8:45:43:a2:cd:07:31:88:ba: 38:b0:a0:96:c0:9d:0c:94:6e:7e:06:22:84:ea:d1: 83:19:a3:b8:08:ad:a7:77:b6:50:96:54:00:bf:31: da:ba:80:81:dc:f5:9a:c1:7c:1f:de:a9:f6:c0:92: 5e:71:42:fa:fc:a3:39:9f:67:f8:63:9d:27:2f:3b: 03:34:dc:fe:f3:d0:1f:3b:71:b5:d9:35:11:50:32: f1:ac:40:ca:c4:a1:d4:72:f6:2f:f0:5d:98:5d:95: 73:79:05:1e:9a:3d:ff:bd:3b:7d:07:b6:db:b3:69: 58:ff:46:46:b1:fe:08:cd:92:ff:85:4f:ac:0c:de: 76:04:44:c0:bc:bd:00:a0:94:ba:69:81:8d:1b:6e: d9:de:f5:ea:da:4d:3c:ef:29:2c:dc:66:10:27:62: 92:ad:87:84:69:35:9d:26:86:b4:1a:16:41:4f:d5: 23:03:9b:65:f9:46:35:06:37:6e:c4:48:53:d0:18: 85:dd:32:c0:4f:68:43:6a:77:22:b8:e3:f2:dc:91: a9:8a:58:76:66:7d:73:3a:d7:9d:cc:58:9b:84:d9: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:52:72:10:0D:EE:94:4C:9C:2B:19:19:0C:32:B5:C2:4B:D3:A4:E4 X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3133322e3231382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.218.0/24 Signature Algorithm: sha256WithRSAEncryption 14:36:52:a0:d6:e8:89:44:4c:0e:d9:a8:3c:d7:93:31:9e:d9: a9:22:1b:3e:89:81:b0:b4:b5:ef:70:88:44:c4:b2:59:63:41: c4:fb:d4:d8:87:41:d5:ef:04:21:91:25:d5:02:9e:85:66:5c: 77:29:f2:16:cb:b2:63:8f:a7:ed:8c:76:99:11:75:5b:8e:a9: f6:87:57:75:88:f3:41:26:fc:e7:cb:65:eb:4c:c9:f2:99:c2: 95:27:1d:4b:a2:cf:67:1c:6f:56:c6:d6:c4:ec:2d:c3:17:f0: 90:bf:a4:0c:9b:e2:a6:1e:4a:87:28:da:fb:7b:62:5d:c4:c2: 0a:72:34:57:51:07:21:c8:9b:0c:a8:9f:92:11:02:a9:8d:5f: 56:a2:e9:55:92:8d:42:eb:81:d1:6c:69:fe:8d:32:98:c8:bd: a9:05:51:ce:22:4c:77:95:5c:d7:82:e2:3c:6a:46:f3:d1:3c: 34:7a:18:a4:51:46:2d:83:ed:d2:01:c7:4b:e5:b0:e1:45:72: 58:5e:ff:79:c1:97:9d:0d:e9:d4:0b:df:4a:8f:71:8b:04:5c: 23:81:33:27:70:d9:05:bb:57:9f:dc:e8:c2:4a:11:e9:c0:5f: 36:58:27:0a:6e:66:96:03:61:c1:97:4a:6d:9d:e4:d5:5b:c6: ed:b1:18:ba -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUXBDLvl3+qpStq6QI1D3oc7vvMa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTExMjkyMzU2MDBaFw0yNjExMjkwMDAxMDBaMDMxMTAvBgNV BAMTKDRFNTI3MjEwMERFRTk0NEM5QzJCMTkxOTBDMzJCNUMyNEJEM0E0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY27LjoKDHxJ8kahSO45sAfWR3 ars6rBqGFh/kaaicCah4y/hFQ6LNBzGIujiwoJbAnQyUbn4GIoTq0YMZo7gIrad3 tlCWVAC/Mdq6gIHc9ZrBfB/eqfbAkl5xQvr8ozmfZ/hjnScvOwM03P7z0B87cbXZ NRFQMvGsQMrEodRy9i/wXZhdlXN5BR6aPf+9O30HttuzaVj/Rkax/gjNkv+FT6wM 3nYERMC8vQCglLppgY0bbtne9eraTTzvKSzcZhAnYpKth4RpNZ0mhrQaFkFP1SMD m2X5RjUGN27ESFPQGIXdMsBPaENqdyK44/LckamKWHZmfXM6153MWJuE2ZJdAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUTlJyEA3ulEycKxkZDDK1wkvTpOQwHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzMzMyMmUzMjMx MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAthNow DQYJKoZIhvcNAQELBQADggEBABQ2UqDW6IlETA7ZqDzXkzGe2akiGz6JgbC0te9w iETEslljQcT71NiHQdXvBCGRJdUCnoVmXHcp8hbLsmOPp+2MdpkRdVuOqfaHV3WI 80Em/OfLZetMyfKZwpUnHUuiz2ccb1bG1sTsLcMX8JC/pAyb4qYeSoco2vt7Yl3E wgpyNFdRByHImwyon5IRAqmNX1ai6VWSjULrgdFsaf6NMpjIvakFUc4iTHeVXNeC 4jxqRvPRPDR6GKRRRi2D7dIBx0vlsOFFclhe/3nBl50N6dQL30qPcYsEXCOBMydw 2QW7V5/c6MJKEenAXzZYJwpuZpYDYcGXSm2d5NVbxu2xGLo= -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:40 2025 by rpki-client