This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa File: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (raw, json) Hash identifier: Z55LDvJNhjuOlIMhPU51UoeT0VK3qlu4pE/EHJdIaDE= Subject key identifier: D5:D3:C1:70:E8:EF:77:22:1C:1C:F9:34:7C:78:06:D4:DF:85:B5:D1 Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 29CD1CC617DD7EF6CAA837710CE5A25C06530A8F Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa Signing time: Thu 04 Dec 2025 13:55:14 +0000 ROA not before: Thu 04 Dec 2025 13:50:14 +0000 ROA not after: Thu 03 Dec 2026 13:55:14 +0000 asID: 212384 IP address blocks: 45.81.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:24:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cd:1c:c6:17:dd:7e:f6:ca:a8:37:71:0c:e5:a2:5c:06:53:0a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Dec 4 13:50:14 2025 GMT Not After : Dec 3 13:55:14 2026 GMT Subject: CN=D5D3C170E8EF77221C1CF9347C7806D4DF85B5D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:43:bd:b1:6f:70:5e:c4:4d:47:94:35:85:00: e6:f8:d2:1b:64:ed:1b:95:4c:43:79:7a:de:d1:d9: 75:43:7c:ee:db:a9:f9:b2:d2:6a:1b:04:94:ce:4e: 65:0d:52:06:16:bc:e8:b6:e3:52:62:93:1c:3f:c0: 4b:91:78:35:74:25:69:e6:6f:fe:46:ae:5f:e7:b3: 12:6b:2f:35:c7:87:69:eb:0f:37:a3:b0:bd:e1:f2: 3b:85:b7:ad:8e:00:ac:3e:dc:c8:05:fa:df:86:ad: b5:31:60:dd:51:36:20:0c:dc:d7:70:65:3d:08:04: b8:cb:76:de:15:71:83:68:56:bf:18:05:15:37:93: 71:0a:eb:74:85:31:5f:90:1b:60:bf:43:a2:e0:e4: bd:a2:d3:68:a5:81:38:e8:e5:08:57:a1:29:6d:60: 31:14:72:6b:e2:3e:b3:b5:62:53:40:b6:39:a9:d7: 6d:70:e1:d4:f0:42:a8:84:ae:e8:c4:45:56:e6:27: ff:c3:cc:24:3a:49:a3:88:f7:c1:1d:cf:f2:57:74: c9:e3:80:72:77:bb:60:8c:ea:94:52:5e:cb:f4:8f: 0b:c9:e7:31:9e:da:1d:71:6b:e5:75:2c:c0:81:c7: b5:b1:71:11:38:8d:f7:58:ee:67:bb:78:d3:11:60: 9a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D3:C1:70:E8:EF:77:22:1C:1C:F9:34:7C:78:06:D4:DF:85:B5:D1 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35392e302f32342d3234203d3e20323132333834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.59.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:1f:56:fa:9a:d9:5f:48:5c:f9:cc:8d:39:28:51:7c:40:ea: 1f:d5:29:a7:52:e6:3b:86:3e:3c:34:6a:c8:b5:08:44:88:ba: 68:31:4c:7f:a6:4e:ef:26:e8:e8:86:9f:b8:38:91:18:e8:5e: fa:17:10:04:eb:0e:cb:c2:fb:c3:6c:06:90:d1:eb:ff:a8:7f: e2:a7:d8:c1:72:cc:a0:7d:63:ab:e4:d3:cf:e7:f1:6f:4d:a1: 93:d9:35:d6:65:34:4f:98:ed:99:16:59:b3:2f:dd:ba:ae:06: 6c:5f:17:5b:20:ca:71:06:34:4a:a3:71:06:cd:db:31:61:b4: 2b:13:ad:eb:95:3d:c5:8a:bd:2e:c7:c8:8a:5c:ab:4b:07:a8: ab:4d:86:d2:8f:4e:c4:63:d8:82:64:e8:da:ee:39:39:b6:32: 80:04:db:31:57:b9:53:b1:e4:44:d3:5c:08:62:54:ad:e2:e9: 3d:de:c4:81:67:43:b4:4d:ad:e9:ce:a2:97:1d:5b:6a:e5:fc: 9a:a5:fd:e9:31:f8:09:c2:2a:4f:7f:bb:da:bf:80:75:85:f4: d1:b5:a0:68:04:ee:fc:8e:12:78:d6:d2:3e:3b:ee:a6:c1:92: eb:ba:b2:2a:75:03:02:d1:ee:90:b3:6f:1d:cc:b5:cd:11:57: e5:2e:35:38 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKc0cxhfdfvbKqDdxDOWiXAZTCo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNTEyMDQxMzUwMTRaFw0yNjEyMDMxMzU1MTRaMDMxMTAvBgNV BAMTKEQ1RDNDMTcwRThFRjc3MjIxQzFDRjkzNDdDNzgwNkQ0REY4NUI1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyQ72xb3BexE1HlDWFAOb40htk 7RuVTEN5et7R2XVDfO7bqfmy0mobBJTOTmUNUgYWvOi241Jikxw/wEuReDV0JWnm b/5Grl/nsxJrLzXHh2nrDzejsL3h8juFt62OAKw+3MgF+t+GrbUxYN1RNiAM3Ndw ZT0IBLjLdt4VcYNoVr8YBRU3k3EK63SFMV+QG2C/Q6Lg5L2i02ilgTjo5QhXoSlt YDEUcmviPrO1YlNAtjmp121w4dTwQqiErujERVbmJ//DzCQ6SaOI98Edz/JXdMnj gHJ3u2CM6pRSXsv0jwvJ5zGe2h1xa+V1LMCBx7WxcRE4jfdY7me7eNMRYJrLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1dPBcOjvdyIcHPk0fHgG1N+FtdEwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMzMzgzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1R OzANBgkqhkiG9w0BAQsFAAOCAQEAfh9W+prZX0hc+cyNOShRfEDqH9Upp1LmO4Y+ PDRqyLUIRIi6aDFMf6ZO7ybo6IafuDiRGOhe+hcQBOsOy8L7w2wGkNHr/6h/4qfY wXLMoH1jq+TTz+fxb02hk9k11mU0T5jtmRZZsy/duq4GbF8XWyDKcQY0SqNxBs3b MWG0KxOt65U9xYq9LsfIilyrSweoq02G0o9OxGPYgmTo2u45ObYygATbMVe5U7Hk RNNcCGJUreLpPd7EgWdDtE2t6c6ilx1bauX8mqX96TH4CcIqT3+72r+AdYX00bWg aATu/I4SeNbSPjvupsGS67qyKnUDAtHukLNvHcy1zRFX5S41OA== -----END CERTIFICATE-----Generated at Mon Dec 8 03:57:07 2025 by rpki-client