This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e203534323532.roa File: 34352e36362e36302e302f32342d3234203d3e203534323532.roa (raw, json) Hash identifier: DXKAJcDCz4lMHo7tc9y0QWfG/7N7gsmn4pCFO3+VuBw= Subject key identifier: 7B:BF:92:FA:A3:40:D1:1C:3D:F4:79:E6:D4:25:03:D4:D2:BB:8D:56 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 629148A7DFEADB0E814046CD44ECB85B58753FA7 Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e203534323532.roa Signing time: Fri 19 Dec 2025 12:23:00 +0000 ROA not before: Fri 19 Dec 2025 12:18:00 +0000 ROA not after: Fri 18 Dec 2026 12:23:00 +0000 asID: 54252 IP address blocks: 45.66.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:91:48:a7:df:ea:db:0e:81:40:46:cd:44:ec:b8:5b:58:75:3f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 19 12:18:00 2025 GMT Not After : Dec 18 12:23:00 2026 GMT Subject: CN=7BBF92FAA340D11C3DF479E6D42503D4D2BB8D56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c9:c0:fd:66:12:2f:b0:3b:87:26:32:0f:b4: 31:f2:9c:18:cb:fe:8b:51:fb:77:7b:c3:2f:55:f1: 1a:12:da:4d:74:c4:4f:8e:b2:31:0b:fc:2a:13:67: b1:50:55:b3:04:7a:19:87:16:bc:50:e0:c1:ac:0a: ab:f1:96:2b:4d:7e:55:21:4b:ad:e8:fc:e7:02:41: 38:33:b4:7d:b0:bd:ca:45:56:dc:3b:49:ac:e1:e9: 80:3f:44:22:73:08:10:a3:e2:21:e4:49:a1:15:d4: ee:b3:43:05:08:17:f6:10:e9:04:99:9d:a7:51:69: 7c:89:d9:88:2c:3b:b7:a4:ab:65:ca:4a:36:71:cf: 1b:96:d7:b8:84:3b:e4:f0:25:d1:5d:d2:b5:4c:60: b8:b2:ee:b2:db:b7:49:53:cb:ba:ad:b9:66:9c:d7: 23:4a:05:4a:c2:0e:cb:aa:45:32:65:c2:ef:55:60: ac:c6:16:cd:74:ff:32:52:15:f7:03:3f:95:f3:b3: 7e:5e:4c:3b:80:c4:2c:f9:60:59:5e:c6:6d:51:6f: 21:0f:10:16:96:46:63:2d:90:e5:37:d6:97:c2:42: bb:c6:b2:8e:bb:e8:f9:55:92:50:c6:ce:84:c6:65: f3:9d:12:8c:2e:c1:94:2c:5d:31:1f:98:bc:96:3d: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:BF:92:FA:A3:40:D1:1C:3D:F4:79:E6:D4:25:03:D4:D2:BB:8D:56 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e203534323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.60.0/24 Signature Algorithm: sha256WithRSAEncryption 20:08:98:b1:c6:eb:64:2f:7f:9b:27:98:ed:92:81:b9:e3:e3: fd:97:64:54:91:4d:ff:b5:05:40:f1:3a:d3:4a:b3:53:91:54: f5:1e:36:46:de:65:75:44:bf:52:aa:df:04:56:66:bb:fb:01: 24:cf:66:67:a5:2d:8a:0d:3c:d8:22:12:c1:ac:c0:b5:fd:e1: c3:10:e1:83:70:09:d6:13:0b:af:d8:d2:f0:99:34:a0:5c:66: 05:05:4b:d8:66:2f:2f:59:7b:ae:41:a4:75:3a:4d:7c:43:0b: 19:83:6b:1b:da:0d:e9:d4:d2:c9:90:de:14:42:5f:fa:7d:db: 24:d9:3b:29:45:c1:d6:2a:7f:d4:72:ed:e0:a7:9e:ea:d4:8f: c8:bb:ae:e5:77:99:f1:2f:6c:7f:a5:1a:60:f2:b8:c9:08:95: af:f4:26:42:b0:3a:de:bf:26:53:6c:a7:9c:1a:95:5c:00:6c: be:d6:cd:64:5f:a8:c9:2b:51:6c:c3:4f:aa:4e:32:7a:97:96: 9a:dd:d8:5a:94:3a:9d:fd:b0:38:36:a1:49:a1:30:0d:5f:49: 01:3d:03:62:86:a2:ff:1f:0a:c3:28:86:6d:07:b4:27:3e:70: 74:d7:fe:3f:78:4f:37:64:7d:28:bd:8d:3c:07:a2:c2:cb:72: df:6e:08:22 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYpFIp9/q2w6BQEbNROy4W1h1P6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTkxMjE4MDBaFw0yNjEyMTgxMjIzMDBaMDMxMTAvBgNV BAMTKDdCQkY5MkZBQTM0MEQxMUMzREY0NzlFNkQ0MjUwM0Q0RDJCQjhENTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClycD9ZhIvsDuHJjIPtDHynBjL /otR+3d7wy9V8RoS2k10xE+OsjEL/CoTZ7FQVbMEehmHFrxQ4MGsCqvxlitNflUh S63o/OcCQTgztH2wvcpFVtw7Sazh6YA/RCJzCBCj4iHkSaEV1O6zQwUIF/YQ6QSZ nadRaXyJ2YgsO7ekq2XKSjZxzxuW17iEO+TwJdFd0rVMYLiy7rLbt0lTy7qtuWac 1yNKBUrCDsuqRTJlwu9VYKzGFs10/zJSFfcDP5Xzs35eTDuAxCz5YFlexm1RbyEP EBaWRmMtkOU31pfCQrvGso676PlVklDGzoTGZfOdEowuwZQsXTEfmLyWPe41AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUe7+S+qNA0Rw99Hnm1CUD1NK7jVYwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzQzMjM1MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQjww DQYJKoZIhvcNAQELBQADggEBACAImLHG62Qvf5snmO2Sgbnj4/2XZFSRTf+1BUDx OtNKs1ORVPUeNkbeZXVEv1Kq3wRWZrv7ASTPZmelLYoNPNgiEsGswLX94cMQ4YNw CdYTC6/Y0vCZNKBcZgUFS9hmLy9Ze65BpHU6TXxDCxmDaxvaDenU0smQ3hRCX/p9 2yTZOylFwdYqf9Ry7eCnnurUj8i7ruV3mfEvbH+lGmDyuMkIla/0JkKwOt6/JlNs p5walVwAbL7WzWRfqMkrUWzDT6pOMnqXlprd2FqUOp39sDg2oUmhMA1fSQE9A2KG ov8fCsMohm0HtCc+cHTX/j94TzdkfSi9jTwHosLLct9uCCI= -----END CERTIFICATE-----Generated at Fri Dec 19 17:40:25 2025 by rpki-client