This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3133312e38302e302f32322d3234203d3e20323030393038.roa File: 34352e3133312e38302e302f32322d3234203d3e20323030393038.roa (raw, json) Hash identifier: Y0Nc6PnpqDH9wExjAH0EkSmYh/LCT4ufmOEnhmW600g= Subject key identifier: 1B:5D:FC:76:BF:EE:09:27:B8:EA:77:8E:B9:7D:39:3F:9E:F5:E6:8E Certificate issuer: /CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Certificate serial: 78E58FEB10E47973C8123A9110699FDF04D69501 Authority key identifier: B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3133312e38302e302f32322d3234203d3e20323030393038.roa Signing time: Fri 19 Dec 2025 11:10:36 +0000 ROA not before: Fri 19 Dec 2025 11:05:36 +0000 ROA not after: Fri 18 Dec 2026 11:10:36 +0000 asID: 200908 IP address blocks: 45.131.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.mft rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:e5:8f:eb:10:e4:79:73:c8:12:3a:91:10:69:9f:df:04:d6:95:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0170abdc955aa176be2af26299678f2f7c9aca0 Validity Not Before: Dec 19 11:05:36 2025 GMT Not After : Dec 18 11:10:36 2026 GMT Subject: CN=1B5DFC76BFEE0927B8EA778EB97D393F9EF5E68E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:53:19:6b:9e:be:8c:b7:3a:92:83:15:60: 86:6b:11:65:46:06:87:7f:4e:41:a5:9c:4e:fc:5b: 21:7a:34:29:45:70:93:42:70:e8:cf:88:04:cf:e5: f5:d1:90:9a:8a:57:7b:8b:e3:89:3d:fa:9f:61:d0: b4:38:bd:8f:41:ac:bb:06:68:7f:89:42:85:0b:91: 46:33:d6:3c:b6:51:1c:02:d2:4b:f8:6b:ae:3b:93: c8:5e:47:88:e1:e8:f7:fb:9e:13:c8:bd:52:85:ac: a4:51:d4:03:6c:54:bd:01:24:69:db:13:e7:e4:3f: ac:b8:fd:90:14:53:18:42:a4:8f:28:64:ab:e1:c3: 74:bb:6c:6b:ec:63:53:56:da:b8:3e:e0:6f:32:82: 25:bf:25:08:3f:7a:8a:a3:74:a6:66:64:0c:c9:60: 08:8e:f4:6d:26:3a:70:fd:53:e9:28:ca:fb:52:2d: 2a:1d:44:a7:31:b6:69:8e:bf:64:f2:0c:e9:42:c4: 7f:4c:c0:b5:70:9e:c3:f3:e8:e6:4e:7a:bc:92:73: c2:b1:e3:cb:a6:01:fd:b8:e9:a6:c1:eb:8b:5a:d9: a2:96:0b:10:06:96:81:17:d7:fa:85:b9:fd:f5:c4: 43:6e:70:49:78:e5:5e:ce:c1:d5:26:b8:c3:d8:51: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:5D:FC:76:BF:EE:09:27:B8:EA:77:8E:B9:7D:39:3F:9E:F5:E6:8E X509v3 Authority Key Identifier: keyid:B0:17:0A:BD:C9:55:AA:17:6B:E2:AF:26:29:96:78:F2:F7:C9:AC:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/B0170ABDC955AA176BE2AF26299678F2F7C9ACA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sBcKvclVqhdr4q8mKZZ48vfJrKA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7a789e87-f484-423d-a1d7-2c2d5860d2ec/0/34352e3133312e38302e302f32322d3234203d3e20323030393038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.80.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:75:14:8f:c5:d3:93:61:ae:19:27:d5:d7:f9:10:aa:76:6a: b9:aa:70:90:10:66:5e:99:90:7b:45:18:bf:59:ff:56:52:d7: 23:58:cb:f9:73:12:b5:b0:f7:1a:fc:f0:a9:29:96:5a:6d:3e: bc:07:77:04:f3:83:a3:09:e9:0b:01:fb:9f:91:5f:e5:ce:d5: 36:f4:ca:9f:7e:2d:08:7b:f7:29:1b:9e:03:54:06:ac:3f:fe: 11:02:07:96:2e:46:99:68:ee:2e:42:a6:ae:42:22:0c:30:6e: 62:5a:bd:3d:7b:3c:1e:fa:da:6a:a4:2b:4e:85:98:3a:87:3d: 5f:72:68:75:f8:af:24:d3:50:2b:d4:4a:43:3f:06:e7:61:ca: ab:f9:d6:d2:95:2a:f3:5a:f7:23:47:3a:c7:25:db:d7:b9:27: 25:9d:58:1e:20:da:0d:73:c7:b1:48:d3:74:70:a2:76:f3:f8: 2b:90:19:33:ce:c7:3d:7f:99:7a:84:e4:fb:77:7c:34:26:59: 3f:c8:2d:b3:fe:d2:2e:d4:14:37:19:01:cb:1a:06:83:8e:06: 44:33:9c:a2:3c:f4:9f:b1:41:3a:52:48:0e:cf:cb:84:4a:ef: 53:ba:b6:ec:55:73:f6:88:df:88:8f:69:7d:16:b3:43:71:15: 60:ca:96:8c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUeOWP6xDkeXPIEjqREGmf3wTWlQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjAxNzBhYmRjOTU1YWExNzZiZTJhZjI2Mjk5Njc4ZjJm N2M5YWNhMDAeFw0yNTEyMTkxMTA1MzZaFw0yNjEyMTgxMTEwMzZaMDMxMTAvBgNV BAMTKDFCNURGQzc2QkZFRTA5MjdCOEVBNzc4RUI5N0QzOTNGOUVGNUU2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuY1MZa56+jLc6koMVYIZrEWVG Bod/TkGlnE78WyF6NClFcJNCcOjPiATP5fXRkJqKV3uL44k9+p9h0LQ4vY9BrLsG aH+JQoULkUYz1jy2URwC0kv4a647k8heR4jh6Pf7nhPIvVKFrKRR1ANsVL0BJGnb E+fkP6y4/ZAUUxhCpI8oZKvhw3S7bGvsY1NW2rg+4G8ygiW/JQg/eoqjdKZmZAzJ YAiO9G0mOnD9U+koyvtSLSodRKcxtmmOv2TyDOlCxH9MwLVwnsPz6OZOerySc8Kx 48umAf246abB64ta2aKWCxAGloEX1/qFuf31xENucEl45V7OwdUmuMPYUdRfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUG138dr/uCSe46neOuX05P5715o4wHwYDVR0j BBgwFoAUsBcKvclVqhdr4q8mKZZ48vfJrKAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2E3ODllODctZjQ4NC00MjNkLWExZDctMmMyZDU4NjBk MmVjLzAvQjAxNzBBQkRDOTU1QUExNzZCRTJBRjI2Mjk5Njc4RjJGN0M5QUNBMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3NCY0t2Y2xWcWhkcjRxOG1LWlo0OHZm SnJLQS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvN2E3ODllODct ZjQ4NC00MjNkLWExZDctMmMyZDU4NjBkMmVjLzAvMzQzNTJlMzEzMzMxMmUzODMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMwMzkzMDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC LYNQMA0GCSqGSIb3DQEBCwUAA4IBAQB/dRSPxdOTYa4ZJ9XX+RCqdmq5qnCQEGZe mZB7RRi/Wf9WUtcjWMv5cxK1sPca/PCpKZZabT68B3cE84OjCekLAfufkV/lztU2 9Mqffi0Ie/cpG54DVAasP/4RAgeWLkaZaO4uQqauQiIMMG5iWr09ezwe+tpqpCtO hZg6hz1fcmh1+K8k01Ar1EpDPwbnYcqr+dbSlSrzWvcjRzrHJdvXuSclnVgeINoN c8exSNN0cKJ28/grkBkzzsc9f5l6hOT7d3w0Jlk/yC2z/tIu1BQ3GQHLGgaDjgZE M5yiPPSfsUE6UkgOz8uESu9TurbsVXP2iN+Ij2l9FrNDcRVgypaM -----END CERTIFICATE-----Generated at Sat Dec 20 00:49:51 2025 by rpki-client