This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa File: 34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: JiH2aMTm7vGjb3cpvUrCVEMJyCFGsEcWfkvQMCfDwoo= Subject key identifier: E0:61:F8:2F:E1:7A:48:FB:B1:55:7F:01:BB:C0:5D:EB:28:C4:5E:A5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 42A4340182BF70E7A9294B91F0BCE7C6304A60E9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:50:01 +0000 ROA not before: Fri 28 Nov 2025 19:45:01 +0000 ROA not after: Fri 27 Nov 2026 19:50:01 +0000 asID: 136787 IP address blocks: 45.134.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:34:01:82:bf:70:e7:a9:29:4b:91:f0:bc:e7:c6:30:4a:60:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:45:01 2025 GMT Not After : Nov 27 19:50:01 2026 GMT Subject: CN=E061F82FE17A48FBB1557F01BBC05DEB28C45EA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:81:7f:81:00:e8:d5:a6:c7:bc:47:1f:3d:76: 15:57:a0:f5:5d:ca:b3:29:a2:74:5b:c6:84:ce:b8: 0d:7a:5a:93:06:6e:19:07:bc:18:1e:12:d3:d1:aa: 69:e6:30:f8:37:e6:c4:23:26:54:44:f3:c6:7d:ae: 92:e7:3b:5b:77:9d:ab:a6:c1:e0:92:e1:b3:d2:71: 5c:12:08:a4:b2:18:e3:fb:62:df:f1:2a:c7:b9:66: 50:d6:f6:fd:60:b6:50:1f:fb:14:cd:a5:fb:22:42: 78:54:8d:5e:d2:f9:57:41:27:69:f8:10:f0:17:08: f2:36:38:86:ad:8c:22:06:ae:80:97:de:9f:72:83: b3:c9:34:96:8a:9b:84:f1:75:09:3a:9a:75:c4:94: 35:e0:85:a5:a7:24:02:95:7a:a7:9a:5a:04:a5:12: 0e:56:18:f5:2e:c4:ac:c3:f0:1f:6c:5d:11:ee:d6: cf:82:dc:80:c0:2d:b3:cd:6f:ca:b1:6a:37:dd:be: 44:cb:e3:4e:a1:38:ef:bd:fe:e8:9b:9f:3f:81:02: c8:41:5a:0d:f6:11:a0:fd:eb:ce:68:61:62:99:1c: d0:86:28:63:df:2a:c0:25:2f:66:19:9d:dd:f0:97: fd:6b:54:68:16:3e:0b:1b:77:0f:79:88:60:8b:80: 5e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:61:F8:2F:E1:7A:48:FB:B1:55:7F:01:BB:C0:5D:EB:28:C4:5E:A5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3138382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.188.0/24 Signature Algorithm: sha256WithRSAEncryption 95:76:4b:48:ab:46:88:3d:fe:3a:c4:ef:7b:29:4c:f1:bd:5e: 49:2f:04:31:63:33:e7:2b:4a:f6:b9:68:8d:eb:e0:2a:82:d0: f2:1c:ee:45:71:da:de:08:3b:f2:13:2e:fd:18:3f:c1:76:2d: 7f:d9:49:dc:05:c4:31:05:af:8c:d8:67:31:04:4d:45:fc:23: 16:7c:88:29:9d:1b:b4:08:e9:69:c1:c7:73:3f:ae:9b:79:68: b6:d8:c4:b3:1b:a9:12:70:39:f8:e7:1e:b9:45:c3:f3:65:b5: 29:8b:fd:54:88:04:3d:5a:bb:b8:0e:ee:ec:00:b3:94:b4:18: 0f:cd:ba:63:d3:ea:2d:d6:16:34:5c:a9:09:2b:5d:c9:a4:78: 93:18:a8:ab:49:ca:c8:4c:78:98:2e:fc:da:6c:48:e2:af:54: 32:61:dc:19:43:53:87:61:45:6c:ff:ba:0a:e7:e7:bd:99:ee: 24:d2:ed:7b:51:06:e9:16:b6:ad:ad:68:1f:a9:6a:45:f8:65: 7e:4b:ea:40:b2:1b:38:dd:52:3d:62:40:f7:d4:32:6d:57:41: 98:79:94:9a:17:3d:2b:0f:33:19:6a:74:28:e3:56:05:f4:56: 94:5e:31:83:9a:01:28:22:10:6d:9b:3a:66:fe:59:08:63:7e: 07:e4:21:48 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQqQ0AYK/cOepKUuR8LznxjBKYOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ1MDFaFw0yNjExMjcxOTUwMDFaMDMxMTAvBgNV BAMTKEUwNjFGODJGRTE3QTQ4RkJCMTU1N0YwMUJCQzA1REVCMjhDNDVFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgX+BAOjVpse8Rx89dhVXoPVd yrMponRbxoTOuA16WpMGbhkHvBgeEtPRqmnmMPg35sQjJlRE88Z9rpLnO1t3naum weCS4bPScVwSCKSyGOP7Yt/xKse5ZlDW9v1gtlAf+xTNpfsiQnhUjV7S+VdBJ2n4 EPAXCPI2OIatjCIGroCX3p9yg7PJNJaKm4TxdQk6mnXElDXghaWnJAKVeqeaWgSl Eg5WGPUuxKzD8B9sXRHu1s+C3IDALbPNb8qxajfdvkTL406hOO+9/uibnz+BAshB Wg32EaD9685oYWKZHNCGKGPfKsAlL2YZnd3wl/1rVGgWPgsbdw95iGCLgF6FAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4GH4L+F6SPuxVX8Bu8Bd6yjEXqUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM0MmUzMTM4 MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAthrwwDQYJKoZIhvcNAQELBQADggEBAJV2S0irRog9/jrE73spTPG9XkkvBDFj M+crSva5aI3r4CqC0PIc7kVx2t4IO/ITLv0YP8F2LX/ZSdwFxDEFr4zYZzEETUX8 IxZ8iCmdG7QI6WnBx3M/rpt5aLbYxLMbqRJwOfjnHrlFw/NltSmL/VSIBD1au7gO 7uwAs5S0GA/NumPT6i3WFjRcqQkrXcmkeJMYqKtJyshMeJgu/NpsSOKvVDJh3BlD U4dhRWz/ugrn572Z7iTS7XtRBukWtq2taB+pakX4ZX5L6kCyGzjdUj1iQPfUMm1X QZh5lJoXPSsPMxlqdCjjVgX0VpReMYOaASgiEG2bOmb+WQhjfgfkIUg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:31 2025 by rpki-client