This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134333035.roa File: 34352e38372e3137342e302f32342d3234203d3e20323134333035.roa (raw, json) Hash identifier: 5Xrn2evt71mVckcpwm1umq2LODlZiy91thq0TWDD0sc= Subject key identifier: 59:65:06:8D:99:4D:65:41:D4:43:3E:3D:AB:06:BF:38:72:27:30:E4 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 7B716B91C519C21450865842F130387BEDE37623 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134333035.roa Signing time: Fri 14 Nov 2025 10:55:11 +0000 ROA not before: Fri 14 Nov 2025 10:50:11 +0000 ROA not after: Fri 13 Nov 2026 10:55:11 +0000 asID: 214305 IP address blocks: 45.87.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:71:6b:91:c5:19:c2:14:50:86:58:42:f1:30:38:7b:ed:e3:76:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 14 10:50:11 2025 GMT Not After : Nov 13 10:55:11 2026 GMT Subject: CN=5965068D994D6541D4433E3DAB06BF38722730E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:7c:13:bf:20:04:89:8a:ae:f8:cf:c0:4e: 61:b9:2c:2c:9b:5f:34:1a:94:49:18:07:12:25:97: b3:98:7f:23:fd:78:c0:4f:d3:c2:e1:e4:ed:8c:11: 66:7c:37:7a:cc:76:aa:ef:bc:7d:f6:15:d3:b6:a9: ee:bc:e3:8d:8c:ec:f7:5a:bf:2e:95:58:2c:73:33: 7b:5d:82:6f:37:8f:a8:90:a6:7a:2a:f9:d9:06:22: ef:fe:ef:c3:23:98:24:25:f7:49:01:0b:02:67:41: e4:cc:4a:4f:bb:ae:62:93:22:59:4d:79:68:11:e9: 8c:21:f2:06:d6:9d:b2:88:48:4a:f2:a1:d2:78:91: 20:ae:fa:2c:ca:ab:98:7a:78:82:6d:64:61:2b:e1: 4d:33:03:69:14:62:6a:7e:06:4f:cf:35:52:bc:07: 70:71:09:46:5b:bc:98:c2:29:eb:47:7d:b5:20:84: 21:f3:0a:bc:b2:3e:59:56:bf:0c:c8:7b:93:aa:44: ac:56:87:58:9a:32:1c:33:77:70:6e:f2:b6:ea:34: 7a:49:99:b8:fb:ef:40:d5:9c:b4:c5:aa:82:2e:a8: ed:32:24:f4:34:13:71:64:8d:21:95:75:c8:a4:e5: 08:d3:96:de:fa:d6:78:dd:b8:c3:3d:f1:13:14:ea: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:06:8D:99:4D:65:41:D4:43:3E:3D:AB:06:BF:38:72:27:30:E4 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e38372e3137342e302f32342d3234203d3e20323134333035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.174.0/24 Signature Algorithm: sha256WithRSAEncryption 11:87:06:0d:8e:76:87:bc:1d:9f:52:09:8e:76:83:04:1b:05: 22:a2:96:2b:49:02:d3:f9:63:bd:f6:82:9a:57:68:5f:74:2b: 07:38:f2:07:c5:06:eb:82:29:05:ec:0c:f9:35:a5:ee:10:ed: d0:60:84:aa:09:41:fe:60:f0:c4:6d:e7:79:68:a4:d7:6f:7b: 6c:41:45:8e:80:5f:84:0a:2f:38:10:70:69:86:0a:69:b5:be: 8e:87:87:da:c5:29:41:9f:54:48:7c:8a:d1:0a:be:47:a8:98: a6:4e:dc:64:dc:cc:b8:f4:62:62:2c:51:02:07:70:6d:ae:c2: e1:39:0d:d1:94:85:95:32:8b:38:1e:74:33:56:7c:3a:d3:e2: 24:00:d0:bc:d7:fc:bb:90:1b:9a:20:00:8c:2e:c3:89:b7:74: 18:08:4c:e6:48:c8:9c:b4:47:f0:60:40:7f:05:d1:10:69:39: 9a:8d:67:d2:43:7b:42:bc:9d:f6:2b:9f:d0:50:ad:5a:e1:b2: f7:fe:b9:d3:4e:b0:d6:96:e2:7e:33:84:28:a9:0f:3c:4a:38: 6d:99:4a:96:0b:40:7f:9b:07:fb:6c:e2:ef:a4:7b:45:62:0e: 67:31:6e:44:b1:32:0f:58:8c:7b:0d:af:7d:c9:03:2e:0f:b4: 6f:c9:2b:e6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUe3FrkcUZwhRQhlhC8TA4e+3jdiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMTQxMDUwMTFaFw0yNjExMTMxMDU1MTFaMDMxMTAvBgNV BAMTKDU5NjUwNjhEOTk0RDY1NDFENDQzM0UzREFCMDZCRjM4NzIyNzMwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFXHwTvyAEiYqu+M/ATmG5LCyb XzQalEkYBxIll7OYfyP9eMBP08Lh5O2MEWZ8N3rMdqrvvH32FdO2qe68442M7Pda vy6VWCxzM3tdgm83j6iQpnoq+dkGIu/+78MjmCQl90kBCwJnQeTMSk+7rmKTIllN eWgR6Ywh8gbWnbKISEryodJ4kSCu+izKq5h6eIJtZGEr4U0zA2kUYmp+Bk/PNVK8 B3BxCUZbvJjCKetHfbUghCHzCryyPllWvwzIe5OqRKxWh1iaMhwzd3Bu8rbqNHpJ mbj770DVnLTFqoIuqO0yJPQ0E3FkjSGVdcik5QjTlt761njduMM98RMU6q3PAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWWUGjZlNZUHUQz49qwa/OHInMOQwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzgzNzJlMzEzNzM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzMzMDM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LVeuMA0GCSqGSIb3DQEBCwUAA4IBAQARhwYNjnaHvB2fUgmOdoMEGwUiopYrSQLT +WO99oKaV2hfdCsHOPIHxQbrgikF7Az5NaXuEO3QYISqCUH+YPDEbed5aKTXb3ts QUWOgF+ECi84EHBphgpptb6Oh4faxSlBn1RIfIrRCr5HqJimTtxk3My49GJiLFEC B3BtrsLhOQ3RlIWVMos4HnQzVnw60+IkANC81/y7kBuaIACMLsOJt3QYCEzmSMic tEfwYEB/BdEQaTmajWfSQ3tCvJ32K5/QUK1a4bL3/rnTTrDWluJ+M4QoqQ88Sjht mUqWC0B/mwf7bOLvpHtFYg5nMW5EsTIPWIx7Da99yQMuD7RvySvm -----END CERTIFICATE-----Generated at Sun Dec 7 00:00:41 2025 by rpki-client