This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa File: 34352e3134352e3234312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: pPd1T7/n7wSEex84D0bbPA7sw5pSmXLYFj3f9wYPbC0= Subject key identifier: E2:13:37:82:8E:49:9B:8C:81:E3:DD:D7:9D:01:AA:29:34:2C:B5:1D Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: ECAD4263D9BBD8A29CAC14EE9FC24B0722BE0B Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa Signing time: Tue 11 Nov 2025 00:06:02 +0000 ROA not before: Tue 11 Nov 2025 00:01:02 +0000 ROA not after: Tue 10 Nov 2026 00:06:02 +0000 asID: 834 IP address blocks: 45.145.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ec:ad:42:63:d9:bb:d8:a2:9c:ac:14:ee:9f:c2:4b:07:22:be:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Nov 11 00:01:02 2025 GMT Not After : Nov 10 00:06:02 2026 GMT Subject: CN=E21337828E499B8C81E3DDD79D01AA29342CB51D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4e:20:95:21:9f:54:67:27:42:15:9b:7c:46: b7:9d:42:5c:94:64:82:a5:22:44:e5:60:4d:64:e9: 6f:fb:ea:cd:66:ba:05:df:a4:6d:7f:6d:e3:1b:b3: 0c:5a:80:57:20:47:49:74:c8:bc:d6:70:38:f4:f5: 88:21:95:a8:e7:66:af:6b:6a:e3:f3:64:ea:61:82: ad:10:a3:e6:53:d4:8d:d4:2d:1c:36:ac:1d:79:7c: ba:15:0f:73:83:f3:78:06:82:7c:19:89:5e:3a:68: 6a:74:61:31:e9:f5:f4:ec:c9:96:a5:1f:75:0e:d4: 6d:73:4b:22:39:52:64:17:14:23:5b:38:a1:9b:b5: d0:88:f7:e8:28:ed:eb:50:9c:3e:b4:f6:7e:c8:bc: 13:c9:34:5c:5e:8d:c7:98:2b:d4:4e:62:02:a0:1e: c6:b2:ec:0c:d1:8d:39:9f:29:bc:ee:72:3f:e0:25: be:07:45:3b:ff:c5:ac:bb:d0:1f:e2:ab:6d:aa:d0: 33:f9:b6:a8:61:e4:a3:9d:17:52:cd:13:c7:2c:4d: 4b:47:16:84:79:a0:fe:e8:af:33:03:56:32:bd:56: b1:9b:88:f7:47:82:33:21:2d:52:4b:99:be:2c:14: f4:cd:db:53:29:c3:d0:85:c4:90:97:d2:80:e6:3a: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:13:37:82:8E:49:9B:8C:81:E3:DD:D7:9D:01:AA:29:34:2C:B5:1D X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.241.0/24 Signature Algorithm: sha256WithRSAEncryption 90:ca:65:f3:80:d8:f0:fe:a0:42:93:66:8a:95:49:e7:db:47: de:00:65:f7:78:fd:2b:0a:0c:62:56:e0:ea:34:4f:a5:11:84: a7:6a:7e:07:50:05:29:1f:c5:d4:07:76:fa:f2:b8:09:70:ad: 29:68:87:6d:9d:46:ed:e9:34:46:04:b9:64:0a:be:51:9c:77: bd:a1:57:79:10:90:c4:9e:af:92:27:b8:06:66:d9:d2:64:3d: 65:40:12:30:77:29:66:d9:07:d5:de:6f:76:9f:59:01:11:74: 2d:e5:ff:64:c0:d7:5f:0b:49:28:69:a2:d3:37:82:6d:f9:0e: 60:05:0c:c2:36:83:f1:7b:2a:6a:86:f6:8d:8c:e3:56:38:6c: ae:7f:98:b9:13:8e:41:6d:fc:2f:20:f3:1c:ce:18:80:fa:8b: ae:6a:58:27:fb:f4:68:72:41:0c:27:11:e6:84:2e:93:f8:dd: 8c:d3:af:f6:7d:a0:1d:f5:fe:a8:ee:5d:e8:6c:62:10:26:18: e5:86:50:64:3c:16:05:66:b1:cf:e7:98:8b:d1:4e:66:96:01: a4:0a:18:eb:23:df:60:fd:30:e3:54:07:70:29:07:1c:68:b7: f4:4c:bc:dc:f2:ee:c0:88:3b:d1:0a:92:5e:84:86:f4:9c:e3: 09:42:bb:c7 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUAOytQmPZu9iinKwU7p/CSwcivgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTExMTEwMDAxMDJaFw0yNjExMTAwMDA2MDJaMDMxMTAvBgNV BAMTKEUyMTMzNzgyOEU0OTlCOEM4MUUzRERENzlEMDFBQTI5MzQyQ0I1MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTiCVIZ9UZydCFZt8RredQlyU ZIKlIkTlYE1k6W/76s1mugXfpG1/beMbswxagFcgR0l0yLzWcDj09YghlajnZq9r auPzZOphgq0Qo+ZT1I3ULRw2rB15fLoVD3OD83gGgnwZiV46aGp0YTHp9fTsyZal H3UO1G1zSyI5UmQXFCNbOKGbtdCI9+go7etQnD609n7IvBPJNFxejceYK9ROYgKg Hsay7AzRjTmfKbzucj/gJb4HRTv/xay70B/iq22q0DP5tqhh5KOdF1LNE8csTUtH FoR5oP7orzMDVjK9VrGbiPdHgjMhLVJLmb4sFPTN21Mpw9CFxJCX0oDmOjD1AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU4hM3go5Jm4yB493XnQGqKTQstR0wHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDM1MmUzMjM0 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkfEw DQYJKoZIhvcNAQELBQADggEBAJDKZfOA2PD+oEKTZoqVSefbR94AZfd4/SsKDGJW 4Oo0T6URhKdqfgdQBSkfxdQHdvryuAlwrSloh22dRu3pNEYEuWQKvlGcd72hV3kQ kMSer5InuAZm2dJkPWVAEjB3KWbZB9Xeb3afWQERdC3l/2TA118LSShpotM3gm35 DmAFDMI2g/F7KmqG9o2M41Y4bK5/mLkTjkFt/C8g8xzOGID6i65qWCf79GhyQQwn EeaELpP43YzTr/Z9oB31/qjuXehsYhAmGOWGUGQ8FgVmsc/nmIvRTmaWAaQKGOsj 32D9MONUB3ApBxxot/RMvNzy7sCIO9EKkl6EhvSc4wlCu8c= -----END CERTIFICATE-----Generated at Sat Dec 6 13:47:39 2025 by rpki-client