This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323131343339.roa File: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (raw, json) Hash identifier: PzQrEpsLL9icV7+wAMJ22TsUek+9+7dTOPFgPD6vtOM= Subject key identifier: 80:FA:82:83:7D:BB:0D:6D:62:FE:17:71:2A:B6:16:8A:58:C0:6A:DC Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 7697909D9AC1E1638A6F169077063B9C147B5CC7 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323131343339.roa Signing time: Wed 26 Nov 2025 15:55:12 +0000 ROA not before: Wed 26 Nov 2025 15:50:12 +0000 ROA not after: Wed 25 Nov 2026 15:55:12 +0000 asID: 211439 IP address blocks: 45.81.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:97:90:9d:9a:c1:e1:63:8a:6f:16:90:77:06:3b:9c:14:7b:5c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Nov 26 15:50:12 2025 GMT Not After : Nov 25 15:55:12 2026 GMT Subject: CN=80FA82837DBB0D6D62FE17712AB6168A58C06ADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:bd:f2:6a:05:94:cf:9f:3e:91:1a:7a:66: 74:4c:f7:af:81:c7:cf:e6:da:26:9f:c8:a9:dc:be: ee:c9:cc:b7:15:b4:4a:04:7e:93:fe:08:93:15:01: ec:5b:83:23:df:e1:6f:bf:0d:f2:ac:1d:23:8b:82: 30:98:15:d1:32:e8:e4:63:26:48:6f:b4:3e:15:0e: f6:3f:a5:4a:8a:0e:1f:ca:ec:02:06:ff:8f:2d:e7: 0e:05:69:62:2e:54:d8:47:43:c0:54:1f:d0:90:fd: 75:9a:f0:24:e1:2d:48:15:28:b6:2f:c0:bb:59:84: 27:77:85:7d:53:60:85:ab:f1:32:ff:de:45:92:03: aa:c8:a9:2c:a3:d4:80:19:85:4f:d6:66:dd:73:a1: a2:49:0e:1f:4b:23:2e:12:0f:b6:34:59:29:78:4f: 7c:b8:1f:8c:bf:68:46:14:85:c4:de:b2:6e:08:2b: d7:35:28:44:8f:9c:4c:94:a6:5e:be:1f:52:95:be: 54:64:2b:b3:00:f5:6e:10:21:1a:7a:11:48:26:56: c3:7a:4a:d5:5d:2b:46:49:4b:30:fc:ef:e6:54:f7: 71:19:ee:b3:74:26:ab:63:09:71:04:ab:e5:90:8e: 96:4d:49:b0:cb:09:34:b9:54:d6:00:26:98:b0:e1: e0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:FA:82:83:7D:BB:0D:6D:62:FE:17:71:2A:B6:16:8A:58:C0:6A:DC X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323131343339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.59.0/24 Signature Algorithm: sha256WithRSAEncryption 61:38:18:ef:b8:7f:01:37:46:de:c7:6c:f5:e3:11:25:58:9b: 2d:3d:8d:dc:81:2e:bb:34:45:b2:68:e1:13:92:f9:d7:c2:4a: 8e:d3:4f:1b:c5:1f:8f:12:6e:0d:90:3a:17:9b:ac:36:31:89: e2:0c:a9:f1:0b:a0:c8:33:94:76:d8:0a:d9:8c:59:bd:61:92: a5:1d:e6:90:c1:ee:ed:a3:68:a1:d6:95:ed:79:d6:e9:ac:0f: 2d:51:d9:60:1c:d1:e6:d9:7b:58:79:31:b8:f3:be:09:24:60: bb:3c:20:15:7c:0f:72:78:40:f7:0d:a2:6f:32:7e:7d:84:91: a2:32:b1:69:a1:14:eb:9d:10:a2:bc:d1:59:dd:f9:ff:d7:3d: 92:84:0d:a2:76:0f:48:6c:14:65:e0:fc:75:2c:65:05:56:3c: 5d:d5:62:80:f9:8d:9f:f6:e1:0e:52:72:af:f9:25:82:5a:47: c2:90:3a:ad:c0:9a:fc:30:c5:42:7c:c0:27:8a:5f:26:c1:d5: 16:88:2b:6e:7c:ee:a8:4e:45:5a:61:42:49:0e:b8:4e:08:14: bc:33:12:68:0f:2e:e0:d5:29:4b:1c:c4:e1:1f:65:65:80:e9: ea:30:9b:93:a4:7c:54:0e:5d:2f:5f:a5:4b:4f:ff:e8:52:01: f2:39:0f:32 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdpeQnZrB4WOKbxaQdwY7nBR7XMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTExMjYxNTUwMTJaFw0yNjExMjUxNTU1MTJaMDMxMTAvBgNV BAMTKDgwRkE4MjgzN0RCQjBENkQ2MkZFMTc3MTJBQjYxNjhBNThDMDZBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNO73yagWUz58+kRp6ZnRM96+B x8/m2iafyKncvu7JzLcVtEoEfpP+CJMVAexbgyPf4W+/DfKsHSOLgjCYFdEy6ORj JkhvtD4VDvY/pUqKDh/K7AIG/48t5w4FaWIuVNhHQ8BUH9CQ/XWa8CThLUgVKLYv wLtZhCd3hX1TYIWr8TL/3kWSA6rIqSyj1IAZhU/WZt1zoaJJDh9LIy4SD7Y0WSl4 T3y4H4y/aEYUhcTesm4IK9c1KESPnEyUpl6+H1KVvlRkK7MA9W4QIRp6EUgmVsN6 StVdK0ZJSzD87+ZU93EZ7rN0JqtjCXEEq+WQjpZNSbDLCTS5VNYAJpiw4eDFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUgPqCg327DW1i/hdxKrYWiljAatwwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM0MzMzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1R OzANBgkqhkiG9w0BAQsFAAOCAQEAYTgY77h/ATdG3sds9eMRJVibLT2N3IEuuzRF smjhE5L518JKjtNPG8UfjxJuDZA6F5usNjGJ4gyp8QugyDOUdtgK2YxZvWGSpR3m kMHu7aNoodaV7XnW6awPLVHZYBzR5tl7WHkxuPO+CSRguzwgFXwPcnhA9w2ibzJ+ fYSRojKxaaEU650QorzRWd35/9c9koQNonYPSGwUZeD8dSxlBVY8XdVigPmNn/bh DlJyr/klglpHwpA6rcCa/DDFQnzAJ4pfJsHVFogrbnzuqE5FWmFCSQ64TggUvDMS aA8u4NUpSxzE4R9lZYDp6jCbk6R8VA5dL1+lS0//6FIB8jkPMg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:38:51 2025 by rpki-client