This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa File: 34352e3134362e3130362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: v5XhSdy4UUfAAs1GGlb/+ayGx683Zez6WI0oVBE3Urs= Subject key identifier: E4:EA:82:41:62:D0:DA:76:B6:37:E9:2C:7B:70:DB:6E:8C:D8:8D:51 Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 1BDF754232868F61538C7DAA45D42E55EE86379D Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa Signing time: Wed 17 Dec 2025 07:27:57 +0000 ROA not before: Wed 17 Dec 2025 07:22:57 +0000 ROA not after: Wed 16 Dec 2026 07:27:57 +0000 asID: 834 IP address blocks: 45.146.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:df:75:42:32:86:8f:61:53:8c:7d:aa:45:d4:2e:55:ee:86:37:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Dec 17 07:22:57 2025 GMT Not After : Dec 16 07:27:57 2026 GMT Subject: CN=E4EA824162D0DA76B637E92C7B70DB6E8CD88D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:2b:10:56:27:14:72:29:8d:b1:c4:ae:88: 4e:33:22:26:9b:5d:4f:10:e9:e5:3e:24:a8:41:a8: 37:f9:14:51:48:e5:29:5e:8b:6e:80:30:d4:e0:59: ab:61:32:c7:6e:a5:e0:20:f1:ae:3e:c3:a9:2c:d1: 90:6a:0b:d5:5c:6b:f3:b6:70:45:f6:58:f4:43:a3: 40:b2:9f:6d:c5:dc:90:4f:5d:bc:21:d9:df:af:2f: 23:9d:67:fb:2c:40:00:54:55:83:72:75:30:fd:41: 18:fb:95:8c:1c:ae:19:e7:bf:d3:6d:b0:dc:15:2a: d7:be:a1:0b:4e:a2:ef:0f:01:4d:83:c3:5e:38:63: c7:d3:24:80:da:86:a3:75:f9:80:4d:fe:29:4f:6f: 7e:32:c6:5a:45:70:cc:04:13:13:40:95:e5:c9:41: b4:b3:14:42:bd:f8:b5:32:32:fc:8b:68:82:ee:15: 0e:78:8b:3b:78:96:b7:dc:0e:83:12:13:f1:fe:fe: 92:7e:84:d9:00:db:f0:7c:50:9b:70:55:26:2f:57: 79:ea:ee:85:8b:2b:f4:30:c0:d5:3e:0e:57:78:7f: db:7b:26:d3:db:e1:05:ac:85:4a:38:f7:5d:0c:7b: 89:18:ab:da:91:15:3c:57:81:d2:a6:7f:d7:4f:cc: e5:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:EA:82:41:62:D0:DA:76:B6:37:E9:2C:7B:70:DB:6E:8C:D8:8D:51 X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.106.0/24 Signature Algorithm: sha256WithRSAEncryption c1:14:62:21:03:4b:9d:79:f0:79:7e:77:7e:52:09:cb:41:8d: 65:d2:e7:6a:1a:17:99:42:09:57:95:44:42:a8:a7:86:d1:c9: 21:46:17:9a:5c:d2:4e:4a:ae:c5:74:27:4f:b0:65:f1:07:ef: 38:44:3f:8d:66:78:01:53:f9:a5:bd:0b:74:4d:43:40:fc:5e: 57:4a:a8:5e:f3:e6:96:ef:dc:a4:91:ad:23:36:ba:7b:83:e4: 9c:05:25:5a:be:d5:19:fc:45:6b:46:15:bc:35:54:55:5e:56: 0e:91:9b:2b:e5:65:06:26:ed:2a:66:8b:8d:e6:b6:9c:92:0d: 87:85:fe:61:a3:7f:bb:f2:1c:79:c1:da:c2:f5:42:b5:98:b7: f0:b2:1f:af:90:3f:6b:fc:1c:38:77:c6:15:81:18:19:27:a3: 08:b1:5c:d0:9a:68:fd:80:a5:b0:10:43:71:19:c6:43:ae:02: 66:2d:ea:15:91:0d:b3:09:de:7c:c9:03:41:01:59:80:6c:5b: 05:16:2a:d8:a8:ae:91:d8:f4:d3:5e:cb:f6:17:7b:42:20:55: 01:05:d7:d3:99:d6:bd:4c:f2:dc:69:71:40:89:5e:41:8c:a7: 45:c8:29:cb:25:c1:53:71:9e:d2:4d:54:b7:bc:79:7d:d8:1b: c0:4b:a2:b6 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUG991QjKGj2FTjH2qRdQuVe6GN50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNTEyMTcwNzIyNTdaFw0yNjEyMTYwNzI3NTdaMDMxMTAvBgNV BAMTKEU0RUE4MjQxNjJEMERBNzZCNjM3RTkyQzdCNzBEQjZFOENEODhENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkSsQVicUcimNscSuiE4zIiab XU8Q6eU+JKhBqDf5FFFI5Slei26AMNTgWathMsdupeAg8a4+w6ks0ZBqC9Vca/O2 cEX2WPRDo0Cyn23F3JBPXbwh2d+vLyOdZ/ssQABUVYNydTD9QRj7lYwcrhnnv9Nt sNwVKte+oQtOou8PAU2Dw144Y8fTJIDahqN1+YBN/ilPb34yxlpFcMwEExNAleXJ QbSzFEK9+LUyMvyLaILuFQ54izt4lrfcDoMSE/H+/pJ+hNkA2/B8UJtwVSYvV3nq 7oWLK/QwwNU+Dld4f9t7JtPb4QWshUo4910Me4kYq9qRFTxXgdKmf9dPzOUPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU5OqCQWLQ2na2N+kse3DbbozYjVEwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkmow DQYJKoZIhvcNAQELBQADggEBAMEUYiEDS5158Hl+d35SCctBjWXS52oaF5lCCVeV REKop4bRySFGF5pc0k5KrsV0J0+wZfEH7zhEP41meAFT+aW9C3RNQ0D8XldKqF7z 5pbv3KSRrSM2unuD5JwFJVq+1Rn8RWtGFbw1VFVeVg6RmyvlZQYm7Spmi43mtpyS DYeF/mGjf7vyHHnB2sL1QrWYt/CyH6+QP2v8HDh3xhWBGBknowixXNCaaP2ApbAQ Q3EZxkOuAmYt6hWRDbMJ3nzJA0EBWYBsWwUWKtiorpHY9NNey/YXe0IgVQEF19OZ 1r1M8txpcUCJXkGMp0XIKcslwVNxntJNVLe8eX3YG8BLorY= -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:16 2025 by rpki-client