This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e2039333034.roa File: 3134312e39382e34332e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: EUrjF0PmxgD6k8/uJk6czg5XM/CvfFtfbWFt5avYo9A= Subject key identifier: 1C:5B:75:58:23:01:DA:37:94:E5:6E:77:DE:9F:E5:E8:88:ED:18:90 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 1E9762DF0A390709B4CD78FDDAD334974FEDFA51 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:35:01 +0000 ROA not before: Mon 08 Dec 2025 11:30:01 +0000 ROA not after: Mon 07 Dec 2026 11:35:01 +0000 asID: 9304 IP address blocks: 141.98.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:97:62:df:0a:39:07:09:b4:cd:78:fd:da:d3:34:97:4f:ed:fa:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 8 11:30:01 2025 GMT Not After : Dec 7 11:35:01 2026 GMT Subject: CN=1C5B75582301DA3794E56E77DE9FE5E888ED1890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:9b:00:17:d5:66:37:81:82:0a:c7:3d:58: f0:66:34:3b:c4:bc:dc:fb:d0:c2:8a:85:1f:70:e9: 5f:ee:d0:f3:b6:0d:90:c6:3d:1d:57:fb:8a:c2:d8: 47:e9:26:ee:d5:ae:49:74:10:7f:62:e2:6b:40:58: 3e:0d:5f:ff:52:52:3e:c1:ea:08:96:1e:3d:f0:59: f4:ad:3e:6b:30:34:af:46:f2:6a:22:8d:fb:0b:97: 9e:a0:88:e4:87:18:63:f4:3a:3e:52:44:f5:5b:4d: 54:7b:97:ea:75:48:b6:f2:55:7f:f9:42:c5:4a:de: 6b:04:c9:a4:d9:12:a1:01:5f:32:3c:11:32:00:dd: 38:ec:36:ef:e0:80:17:85:eb:1f:ef:b0:2a:4f:e5: 54:81:6f:e9:04:c1:ad:18:90:24:3a:b8:09:fe:35: ea:90:67:90:53:bd:77:87:15:36:bc:3a:2e:b6:ec: 92:08:5a:0a:c6:de:d1:2b:b0:51:fe:7f:0c:84:56: 95:6a:30:46:10:38:6f:9a:ef:c6:f8:b4:88:9d:0c: a9:51:44:d0:80:ef:f1:d3:09:b1:07:b1:63:68:9c: 80:a6:45:1e:c0:14:dc:45:2a:12:2c:f3:bc:24:f2: aa:fa:60:cc:0d:f8:32:c2:30:57:f6:3d:01:e2:60: 69:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5B:75:58:23:01:DA:37:94:E5:6E:77:DE:9F:E5:E8:88:ED:18:90 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/3134312e39382e34332e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.43.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:17:c2:3f:86:28:d6:8a:ce:15:be:4d:ea:76:7e:ac:10:cd: f8:95:62:b5:97:dc:02:76:e1:b1:9b:8d:f3:38:da:a7:1f:37: 56:54:6e:34:da:40:de:0f:f9:4a:8d:9e:1e:2a:2a:85:74:af: 7a:00:b1:d1:36:43:72:8f:7a:25:f8:31:39:cb:e6:14:b2:ec: 76:f5:da:91:02:ae:ab:e0:0e:b0:16:00:95:f6:10:d4:8a:d5: 10:b7:1c:13:b4:84:d0:1a:e0:30:5a:a7:c3:18:b4:e0:31:e7: c5:b5:96:de:f2:04:ee:b2:0d:b7:b6:bf:7c:26:cf:ae:10:e7: d6:da:8f:d6:10:bf:a3:2c:f7:70:1f:d0:43:f9:bd:c2:a9:a4: 98:e1:13:12:64:f8:c7:3b:5c:43:45:d1:69:ae:05:6e:dc:8c: 4a:da:e7:cc:63:d6:e3:ec:34:07:3a:eb:69:a0:c2:ba:db:85: 0c:38:ce:f1:17:b5:f7:f3:c7:0f:b0:31:3e:72:57:da:a8:01: f3:70:54:28:33:6f:43:b2:f4:06:e5:2e:1a:58:b9:95:30:8f: 7d:42:c2:bc:66:10:ae:0e:57:24:40:9c:ce:a9:0c:ba:6c:d2: ee:fa:f8:9c:25:e4:17:92:3f:f7:b8:86:2e:bf:14:c1:7e:f1: 59:1a:83:12 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHpdi3wo5Bwm0zXj92tM0l0/t+lEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMDgxMTMwMDFaFw0yNjEyMDcxMTM1MDFaMDMxMTAvBgNV BAMTKDFDNUI3NTU4MjMwMURBMzc5NEU1NkU3N0RFOUZFNUU4ODhFRDE4OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxpsAF9VmN4GCCsc9WPBmNDvE vNz70MKKhR9w6V/u0PO2DZDGPR1X+4rC2EfpJu7Vrkl0EH9i4mtAWD4NX/9SUj7B 6giWHj3wWfStPmswNK9G8moijfsLl56giOSHGGP0Oj5SRPVbTVR7l+p1SLbyVX/5 QsVK3msEyaTZEqEBXzI8ETIA3TjsNu/ggBeF6x/vsCpP5VSBb+kEwa0YkCQ6uAn+ NeqQZ5BTvXeHFTa8Oi627JIIWgrG3tErsFH+fwyEVpVqMEYQOG+a78b4tIidDKlR RNCA7/HTCbEHsWNonICmRR7AFNxFKhIs87wk8qr6YMwN+DLCMFf2PQHiYGmrAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUHFt1WCMB2jeU5W533p/l6IjtGJAwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzEzNDMxMmUzOTM4MmUzNDMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACNYisw DQYJKoZIhvcNAQELBQADggEBAH8Xwj+GKNaKzhW+Tep2fqwQzfiVYrWX3AJ24bGb jfM42qcfN1ZUbjTaQN4P+UqNnh4qKoV0r3oAsdE2Q3KPeiX4MTnL5hSy7Hb12pEC rqvgDrAWAJX2ENSK1RC3HBO0hNAa4DBap8MYtOAx58W1lt7yBO6yDbe2v3wmz64Q 59baj9YQv6Ms93Af0EP5vcKppJjhExJk+Mc7XENF0WmuBW7cjEra58xj1uPsNAc6 62mgwrrbhQw4zvEXtffzxw+wMT5yV9qoAfNwVCgzb0Oy9AblLhpYuZUwj31Cwrxm EK4OVyRAnM6pDLps0u76+Jwl5BeSP/e4hi6/FMF+8VkagxI= -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:42 2025 by rpki-client