This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137332e302f32342d3234203d3e20323130353338.roa File: 34352e38372e3137332e302f32342d3234203d3e20323130353338.roa (raw, json) Hash identifier: yZm4Zvr51K7dP6yiV4JPvzr0kvkWiTR0g1eDgWiFnLs= Subject key identifier: 78:F8:40:C8:C7:46:74:21:15:37:B5:32:DB:79:54:AC:EE:90:31:A2 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 43FBFC7E11F2AF1D5BE38A98674A4EB9AD22C6B5 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137332e302f32342d3234203d3e20323130353338.roa Signing time: Wed 24 Dec 2025 19:55:32 +0000 ROA not before: Wed 24 Dec 2025 19:50:32 +0000 ROA not after: Wed 23 Dec 2026 19:55:32 +0000 asID: 210538 IP address blocks: 45.87.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:04:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fb:fc:7e:11:f2:af:1d:5b:e3:8a:98:67:4a:4e:b9:ad:22:c6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 24 19:50:32 2025 GMT Not After : Dec 23 19:55:32 2026 GMT Subject: CN=78F840C8C74674211537B532DB7954ACEE9031A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4c:cd:0b:93:45:24:14:2b:fd:61:d1:94:5f: 57:2a:a3:63:cd:f0:50:12:34:16:10:fe:23:67:df: 65:4e:6a:90:ed:b8:e2:c5:cf:c4:fe:42:5a:20:4b: 71:72:a1:c9:eb:9c:44:35:dd:5c:1f:f8:e4:1a:84: 3c:6d:c3:81:46:c6:75:3b:71:a7:a8:40:cf:ef:20: bf:87:62:2a:87:5d:56:f6:a3:d2:46:37:4d:35:34: 19:1b:d7:4b:dd:bc:f2:5b:e0:bf:bb:fb:e0:20:0e: 2c:8c:2f:d2:12:0e:18:07:9b:b0:0e:66:69:9c:d3: 9a:ce:bf:18:49:fd:3d:ff:e1:75:7e:9e:c3:b4:ef: d4:51:e8:48:4a:58:36:6d:eb:30:bb:1f:8f:0b:c1: 11:05:6d:eb:58:e2:e9:39:4a:b5:8a:ed:98:e7:f0: e1:6e:60:9b:da:54:8d:bd:e7:80:98:ff:f9:a1:54: e4:c0:f9:54:7d:45:ff:60:45:21:7f:6e:65:9a:a7: 37:34:29:9b:17:ed:1d:89:c3:61:81:b1:11:60:7c: ef:de:53:4c:15:1f:e1:59:a2:0a:df:c0:58:59:f5: b3:8d:08:43:e2:9a:6f:f0:f4:bd:13:76:ea:ab:92: 66:49:07:7d:fb:f8:3c:db:4b:b1:00:ed:a3:94:ed: c4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F8:40:C8:C7:46:74:21:15:37:B5:32:DB:79:54:AC:EE:90:31:A2 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137332e302f32342d3234203d3e20323130353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.173.0/24 Signature Algorithm: sha256WithRSAEncryption 99:42:fe:bc:d5:74:72:5e:d5:e1:ae:d9:c2:c7:95:82:6a:1a: d4:29:99:3e:30:0b:6d:15:71:5e:f3:83:5e:dd:d2:f1:71:39: d0:bd:bf:d6:2e:8d:75:ac:19:65:ac:5a:26:de:60:55:e3:ee: 65:35:ca:19:43:16:76:83:a2:d8:05:f3:67:2c:38:b6:94:dc: 08:9f:83:e2:73:b1:4a:92:e4:6c:7e:81:4f:c8:75:e3:c1:3c: f7:7e:4b:86:46:9e:5f:0a:de:8b:b0:9d:4a:8e:9c:78:e7:31: 13:be:fb:cc:4d:c2:fb:0c:7d:11:f8:0f:19:90:75:b6:7c:90: cb:a0:7a:25:d3:99:e2:36:53:4b:1c:a0:05:3a:45:cb:09:e7: 8a:bf:e0:5c:58:43:54:93:a8:9e:a3:1a:bb:ce:b0:f1:f4:06: d0:45:03:88:6d:1f:ce:6e:30:40:fe:e6:22:ab:34:65:3c:aa: 78:90:17:6d:4e:f7:84:88:8f:bf:74:a4:3f:62:24:0e:6b:c7: d7:df:1f:c1:94:9a:60:a2:43:4e:98:14:26:dd:26:cb:6d:36: 1b:11:a8:35:2b:48:53:10:c8:17:bc:81:3a:cc:b6:57:6f:a2: 21:ee:43:a4:78:b8:0b:de:55:d3:8c:9c:bf:7b:d2:46:8f:c5: 51:b3:87:a4 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQ/v8fhHyrx1b44qYZ0pOua0ixrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMjQxOTUwMzJaFw0yNjEyMjMxOTU1MzJaMDMxMTAvBgNV BAMTKDc4Rjg0MEM4Qzc0Njc0MjExNTM3QjUzMkRCNzk1NEFDRUU5MDMxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCTM0Lk0UkFCv9YdGUX1cqo2PN 8FASNBYQ/iNn32VOapDtuOLFz8T+QlogS3FyocnrnEQ13Vwf+OQahDxtw4FGxnU7 caeoQM/vIL+HYiqHXVb2o9JGN001NBkb10vdvPJb4L+7++AgDiyML9ISDhgHm7AO Zmmc05rOvxhJ/T3/4XV+nsO079RR6EhKWDZt6zC7H48LwREFbetY4uk5SrWK7Zjn 8OFuYJvaVI2954CY//mhVOTA+VR9Rf9gRSF/bmWapzc0KZsX7R2Jw2GBsRFgfO/e U0wVH+FZogrfwFhZ9bONCEPimm/w9L0TduqrkmZJB337+DzbS7EA7aOU7cS/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUePhAyMdGdCEVN7Uy23lUrO6QMaIwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzgzNzJlMzEzNzMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMwMzUzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LVetMA0GCSqGSIb3DQEBCwUAA4IBAQCZQv681XRyXtXhrtnCx5WCahrUKZk+MAtt FXFe84Ne3dLxcTnQvb/WLo11rBllrFom3mBV4+5lNcoZQxZ2g6LYBfNnLDi2lNwI n4Pic7FKkuRsfoFPyHXjwTz3fkuGRp5fCt6LsJ1Kjpx45zETvvvMTcL7DH0R+A8Z kHW2fJDLoHol05niNlNLHKAFOkXLCeeKv+BcWENUk6ieoxq7zrDx9AbQRQOIbR/O bjBA/uYiqzRlPKp4kBdtTveEiI+/dKQ/YiQOa8fX3x/BlJpgokNOmBQm3SbLbTYb Eag1K0hTEMgXvIE6zLZXb6Ih7kOkeLgL3lXTjJy/e9JGj8VRs4ek -----END CERTIFICATE-----Generated at Sun Jan 25 14:44:20 2026 by rpki-client