This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa File: 34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: S27qcMdyrncwU1O4jlJEB+4xvWjonbWOgs5z3yT6nCA= Subject key identifier: F9:F4:14:9B:DA:23:2C:93:AB:2B:E8:0B:1E:2B:8A:CD:25:D6:BC:84 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 71AB154A31D632D8C9984BD633BC758BB2B2F933 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:58 +0000 ROA not before: Fri 28 Nov 2025 19:44:58 +0000 ROA not after: Fri 27 Nov 2026 19:49:58 +0000 asID: 136787 IP address blocks: 45.134.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ab:15:4a:31:d6:32:d8:c9:98:4b:d6:33:bc:75:8b:b2:b2:f9:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:58 2025 GMT Not After : Nov 27 19:49:58 2026 GMT Subject: CN=F9F4149BDA232C93AB2BE80B1E2B8ACD25D6BC84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:21:8e:78:7d:39:98:d9:ea:06:86:48:31:c2: df:8f:f8:d4:76:d9:55:17:99:bb:34:d6:06:fd:1a: b9:b6:80:54:32:bb:72:b4:93:14:20:45:e8:16:d2: ab:73:c7:0b:ea:bc:dc:c1:67:38:c6:f5:81:9a:8b: 6d:1b:1b:1e:d3:92:a5:81:e1:1d:16:d2:96:90:d8: d4:df:51:9a:53:a4:1c:e6:55:06:12:47:b1:ab:3c: a5:e2:27:2c:b3:80:2c:67:2c:b6:5d:93:6f:d5:05: d2:69:cc:db:ba:a2:c5:4a:92:4e:89:51:17:76:b6: 38:15:7f:5f:a4:32:06:61:af:1f:28:3c:8a:1c:6e: 3b:5c:e7:3f:a2:0e:8e:9a:f7:a2:01:5d:34:53:67: 1c:ce:42:01:c5:b9:82:f0:a1:28:f4:9a:ac:40:b2: 03:e0:a6:63:9a:37:06:eb:94:fd:ea:3f:52:04:4b: 2e:e2:9d:06:c6:7b:36:14:4c:7d:4f:32:5c:a4:a8: 4e:ad:e0:21:f4:73:f5:21:28:f1:3a:cd:54:82:bd: e3:22:1f:ad:c8:2a:03:55:86:c1:22:f1:f8:b5:4b: 91:e1:06:46:b8:52:21:8e:5b:11:ca:ea:d8:08:ca: a0:4e:a7:19:44:4a:76:e9:16:1c:2a:8f:b4:c4:58: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:14:9B:DA:23:2C:93:AB:2B:E8:0B:1E:2B:8A:CD:25:D6:BC:84 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e3133342e3139312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.191.0/24 Signature Algorithm: sha256WithRSAEncryption 64:8c:e6:0f:83:97:3e:4b:c7:18:b0:e2:c7:62:73:93:38:ab: 78:d9:e1:3d:0e:36:f8:b8:09:63:1f:6c:f1:b8:43:2b:01:05: 4b:78:f9:d8:5c:9d:01:30:dc:64:a0:b1:42:c3:87:03:0e:7c: a2:6b:75:18:77:00:56:61:c9:b4:13:3b:02:92:aa:6f:2c:86: 6c:e7:85:2c:cc:85:58:0f:38:8f:b2:ce:a4:97:8c:71:4f:83: 07:d3:ff:ae:73:4c:48:4d:2a:95:35:25:04:2a:93:1e:72:ed: 04:c4:22:82:0e:c2:e7:e2:f7:3e:33:ae:96:9a:5c:77:0c:7a: 61:cd:dd:6a:08:bd:5b:38:0f:30:14:d1:9c:38:84:d1:a7:d4: af:01:21:d0:ad:3a:34:22:ce:40:e8:22:10:38:1a:1c:30:7c: 11:d3:16:db:53:35:46:3e:e7:28:2b:4a:0e:30:f0:84:11:04: b8:97:64:13:80:31:0e:c3:92:66:de:34:b1:4f:5a:7f:33:81: f4:de:87:19:89:60:3f:d8:68:bf:85:ed:fa:a8:26:b6:cd:8b: 6b:dc:44:8d:c1:12:88:86:96:cc:91:a0:de:4a:f6:05:c6:7c: f0:06:1a:8d:45:94:3b:83:d9:87:aa:b8:29:40:12:c8:dd:b8: ff:39:1a:0d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUcasVSjHWMtjJmEvWM7x1i7Ky+TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NThaFw0yNjExMjcxOTQ5NThaMDMxMTAvBgNV BAMTKEY5RjQxNDlCREEyMzJDOTNBQjJCRTgwQjFFMkI4QUNEMjVENkJDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIY54fTmY2eoGhkgxwt+P+NR2 2VUXmbs01gb9Grm2gFQyu3K0kxQgRegW0qtzxwvqvNzBZzjG9YGai20bGx7TkqWB 4R0W0paQ2NTfUZpTpBzmVQYSR7GrPKXiJyyzgCxnLLZdk2/VBdJpzNu6osVKkk6J URd2tjgVf1+kMgZhrx8oPIocbjtc5z+iDo6a96IBXTRTZxzOQgHFuYLwoSj0mqxA sgPgpmOaNwbrlP3qP1IESy7inQbGezYUTH1PMlykqE6t4CH0c/UhKPE6zVSCveMi H63IKgNVhsEi8fi1S5HhBka4UiGOWxHK6tgIyqBOpxlESnbpFhwqj7TEWO3/AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU+fQUm9ojLJOrK+gLHiuKzSXWvIQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzEzMzM0MmUzMTM5 MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAthr8wDQYJKoZIhvcNAQELBQADggEBAGSM5g+Dlz5Lxxiw4sdic5M4q3jZ4T0O Nvi4CWMfbPG4QysBBUt4+dhcnQEw3GSgsULDhwMOfKJrdRh3AFZhybQTOwKSqm8s hmznhSzMhVgPOI+yzqSXjHFPgwfT/65zTEhNKpU1JQQqkx5y7QTEIoIOwufi9z4z rpaaXHcMemHN3WoIvVs4DzAU0Zw4hNGn1K8BIdCtOjQizkDoIhA4GhwwfBHTFttT NUY+5ygrSg4w8IQRBLiXZBOAMQ7DkmbeNLFPWn8zgfTehxmJYD/YaL+F7fqoJrbN i2vcRI3BEoiGlsyRoN5K9gXGfPAGGo1FlDuD2YequClAEsjduP85Gg0= -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:58 2025 by rpki-client