This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20333937363330.roa File: 34352e36362e36302e302f32342d3234203d3e20333937363330.roa (raw, json) Hash identifier: k+SYPfDN9LQJECS1UonvNmHDxhpd9538JqlrP15jpdk= Subject key identifier: 4D:F4:BC:C4:40:BC:C9:B8:A0:8A:CB:9C:B1:38:9C:4B:4E:BA:BB:BA Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 3D3513E0287F4B9B74C48560455A15EDA11C063A Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20333937363330.roa Signing time: Fri 19 Dec 2025 12:23:15 +0000 ROA not before: Fri 19 Dec 2025 12:18:15 +0000 ROA not after: Fri 18 Dec 2026 12:23:15 +0000 asID: 397630 IP address blocks: 45.66.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:35:13:e0:28:7f:4b:9b:74:c4:85:60:45:5a:15:ed:a1:1c:06:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 19 12:18:15 2025 GMT Not After : Dec 18 12:23:15 2026 GMT Subject: CN=4DF4BCC440BCC9B8A08ACB9CB1389C4B4EBABBBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:66:80:48:98:88:2b:cc:8a:8a:87:14:89:b6: 4a:a7:c9:ed:71:8d:8d:2d:e7:88:d7:d6:75:89:1b: a4:4f:4f:e9:e3:48:6b:d7:87:02:5c:57:19:fb:cb: 0e:c2:78:04:a9:8e:0a:af:15:ba:d9:7f:0f:ab:d6: e1:97:98:30:cc:2c:86:ab:80:aa:44:c1:d3:2a:e7: 7c:91:04:ef:b7:e7:3f:63:69:66:1c:81:e2:b6:5b: e1:47:0c:50:92:4f:f0:8d:a5:b8:78:d4:f2:09:1e: e2:1d:98:27:62:05:32:8d:6d:a7:b1:42:71:17:61: 75:de:40:53:ab:5c:7c:c5:9c:26:7c:45:13:83:1d: d3:b7:a6:e5:ba:c0:03:31:65:cf:0d:90:2a:8a:0f: e6:c7:4a:1d:c1:34:03:3c:f8:f1:91:0a:41:8b:44: f4:c4:7f:b6:0f:2f:5e:f1:9c:72:74:3c:56:8f:56: 42:21:cd:fd:a9:4e:12:ad:c6:12:92:58:6f:ae:47: 70:5b:15:d3:1c:a9:79:1c:24:83:be:f5:d0:55:0c: 63:3f:c8:de:97:b0:05:30:ac:30:60:7a:b9:5f:c0: b9:00:60:37:72:65:5e:51:22:80:66:c7:c5:86:78: 8c:83:e4:e4:d1:6d:0e:70:fa:b8:b5:75:b3:9a:9b: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F4:BC:C4:40:BC:C9:B8:A0:8A:CB:9C:B1:38:9C:4B:4E:BA:BB:BA X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e20333937363330.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.60.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:a1:89:2c:de:57:9f:4b:2d:06:0a:a7:5a:97:c5:fd:18:45: 50:d4:1b:eb:c6:a7:c2:15:6f:d0:be:a7:4f:09:92:9d:3d:92: 77:b2:68:41:7e:0e:d8:79:ba:92:d2:fb:4d:df:58:27:55:3f: dd:fa:3e:c8:1d:7e:0f:25:97:4e:8b:54:6e:44:dd:14:09:94: 88:ef:e5:b7:30:2e:9e:86:3b:4c:c2:b5:ac:63:b4:ba:26:51: ed:90:c4:13:86:06:44:42:f1:6c:c4:61:db:f6:a2:5f:23:c2: 6a:1a:91:8d:6e:1b:98:0d:3d:15:6c:2b:5b:51:a4:bb:0c:e1: d3:52:f9:8e:bc:d1:49:ea:29:e5:9c:fc:97:a5:20:0d:9c:fd: c8:1b:0d:81:86:09:76:37:8c:a6:0d:e0:26:54:79:cd:ff:6f: 6f:71:33:67:8e:3a:a5:72:c0:c4:92:e6:9f:44:45:dc:8e:dc: 54:68:24:ef:fe:f9:ac:82:a9:b8:a8:fc:b5:e0:ec:a7:4c:9f: d4:b0:ce:52:20:04:ae:90:dd:2d:2f:42:09:3f:04:4e:52:47: e4:48:5f:4d:70:06:35:34:4d:9f:92:ed:20:ed:b4:55:01:93: cb:00:c0:1f:07:1b:df:62:ed:1a:9e:cc:65:5f:3a:6c:10:e4: f1:78:c5:a0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPTUT4Ch/S5t0xIVgRVoV7aEcBjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTkxMjE4MTVaFw0yNjEyMTgxMjIzMTVaMDMxMTAvBgNV BAMTKDRERjRCQ0M0NDBCQ0M5QjhBMDhBQ0I5Q0IxMzg5QzRCNEVCQUJCQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZoBImIgrzIqKhxSJtkqnye1x jY0t54jX1nWJG6RPT+njSGvXhwJcVxn7yw7CeASpjgqvFbrZfw+r1uGXmDDMLIar gKpEwdMq53yRBO+35z9jaWYcgeK2W+FHDFCST/CNpbh41PIJHuIdmCdiBTKNbaex QnEXYXXeQFOrXHzFnCZ8RRODHdO3puW6wAMxZc8NkCqKD+bHSh3BNAM8+PGRCkGL RPTEf7YPL17xnHJ0PFaPVkIhzf2pThKtxhKSWG+uR3BbFdMcqXkcJIO+9dBVDGM/ yN6XsAUwrDBgerlfwLkAYDdyZV5RIoBmx8WGeIyD5OTRbQ5w+ri1dbOam6yLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUTfS8xEC8ybigisucsTicS066u7owHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzkzNzM2MzMzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1C PDANBgkqhkiG9w0BAQsFAAOCAQEAHqGJLN5Xn0stBgqnWpfF/RhFUNQb68anwhVv 0L6nTwmSnT2Sd7JoQX4O2Hm6ktL7Td9YJ1U/3fo+yB1+DyWXTotUbkTdFAmUiO/l tzAunoY7TMK1rGO0uiZR7ZDEE4YGRELxbMRh2/aiXyPCahqRjW4bmA09FWwrW1Gk uwzh01L5jrzRSeop5Zz8l6UgDZz9yBsNgYYJdjeMpg3gJlR5zf9vb3EzZ446pXLA xJLmn0RF3I7cVGgk7/75rIKpuKj8teDsp0yf1LDOUiAErpDdLS9CCT8ETlJH5Ehf TXAGNTRNn5LtIO20VQGTywDAHwcb32LtGp7MZV86bBDk8XjFoA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:41 2025 by rpki-client