This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e203634323637.roa File: 34352e36362e36302e302f32342d3234203d3e203634323637.roa (raw, json) Hash identifier: cbfpOHzPblb2WASq0wU52hsvllNVr9+yj+txEB6RkPc= Subject key identifier: F2:8F:22:05:20:4F:3F:48:43:AF:93:31:9F:EA:F4:B6:D2:95:02:72 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 13411320D2528F570F07986727FB7BA1FDC4063B Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e203634323637.roa Signing time: Fri 19 Dec 2025 12:20:00 +0000 ROA not before: Fri 19 Dec 2025 12:15:00 +0000 ROA not after: Fri 18 Dec 2026 12:20:00 +0000 asID: 64267 IP address blocks: 45.66.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:41:13:20:d2:52:8f:57:0f:07:98:67:27:fb:7b:a1:fd:c4:06:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 19 12:15:00 2025 GMT Not After : Dec 18 12:20:00 2026 GMT Subject: CN=F28F2205204F3F4843AF93319FEAF4B6D2950272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:c5:94:9e:fd:80:fa:10:b2:b7:8b:07:bf: f4:e7:ee:b8:5e:86:5f:f5:89:70:99:63:4f:0f:23: 9c:3e:a1:cd:05:9d:41:0e:9c:d6:1d:f0:1a:c9:32: cf:f8:6a:da:e2:7d:0e:33:0e:d4:84:81:5c:fc:43: 6d:07:96:3a:87:f1:80:66:66:2b:bf:62:c8:9f:27: a1:62:79:e0:63:64:9f:24:a7:ea:c7:8d:b7:2b:e6: 37:6b:5d:7a:a9:4e:8a:b4:f0:5a:4f:72:4e:ea:34: 30:b7:80:27:54:20:85:18:ad:fd:83:e7:ab:cc:f1: f2:94:2d:43:6e:25:45:52:d3:a3:1f:50:2a:b9:6d: fb:d4:c4:34:91:59:cd:37:b3:87:ac:c2:86:75:6d: 78:5e:9f:71:fc:d3:ca:9c:29:85:74:aa:0e:e5:c8: cb:93:23:ec:90:b6:33:87:be:ea:30:4d:da:84:f9: 91:2d:d1:f6:ee:30:48:63:04:c7:ed:7c:e6:ff:a5: f6:85:e6:d1:6b:fd:88:b3:76:a9:38:f8:68:b6:d5: 1b:c1:ce:d4:8d:51:c3:7e:17:25:a6:6f:63:cf:7a: 05:e2:0a:ea:0c:d5:98:c5:78:62:80:6c:4b:8d:14: 56:f5:aa:d8:04:33:16:cd:5f:af:0d:cc:8a:12:a6: 9c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:8F:22:05:20:4F:3F:48:43:AF:93:31:9F:EA:F4:B6:D2:95:02:72 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36302e302f32342d3234203d3e203634323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.60.0/24 Signature Algorithm: sha256WithRSAEncryption a5:b2:cb:e2:90:eb:9b:87:97:2f:73:ef:e9:70:26:51:07:93: c9:36:84:a0:d7:2e:7f:f9:0d:3f:8e:ac:fd:d9:a7:d6:d3:63: 31:1f:b2:73:27:7d:f7:25:4d:9f:be:56:9e:43:6f:df:65:77: 28:54:60:39:1b:fd:83:38:e8:7c:36:67:0b:22:03:d1:ea:07: 46:7b:75:2c:33:ed:d3:ca:9b:4d:98:d3:55:7d:c7:26:a0:8c: e6:0a:be:08:f9:d8:5d:d0:69:55:78:1e:18:5a:65:c0:a8:a1: d2:2a:03:36:ce:28:7c:03:e6:8e:a6:d3:ea:e1:51:09:f0:06: 10:7a:17:d8:28:4d:a1:49:ba:b2:b8:cf:1e:20:bf:72:91:74: 20:ec:d0:da:d6:18:ca:d0:01:81:70:05:5a:a5:8d:b5:db:96: f2:de:a7:8f:4c:90:fc:c3:7e:d9:2a:cb:7f:e4:21:6c:3e:46: 3b:5e:ef:02:65:d3:05:79:6b:0e:65:f3:9e:68:7d:86:4d:e0: 39:4a:4b:da:03:d1:0b:a0:91:65:40:97:56:6a:ec:04:fe:f5: 03:9e:84:6a:85:59:07:68:68:bd:4f:0d:53:3c:67:45:a8:62: 1a:94:6d:ac:67:dd:ad:de:05:96:d8:23:3a:20:40:29:6d:ba: 87:8f:de:63 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUE0ETINJSj1cPB5hnJ/t7of3EBjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTkxMjE1MDBaFw0yNjEyMTgxMjIwMDBaMDMxMTAvBgNV BAMTKEYyOEYyMjA1MjA0RjNGNDg0M0FGOTMzMTlGRUFGNEI2RDI5NTAyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn+8WUnv2A+hCyt4sHv/Tn7rhe hl/1iXCZY08PI5w+oc0FnUEOnNYd8BrJMs/4atrifQ4zDtSEgVz8Q20HljqH8YBm Ziu/YsifJ6FieeBjZJ8kp+rHjbcr5jdrXXqpToq08FpPck7qNDC3gCdUIIUYrf2D 56vM8fKULUNuJUVS06MfUCq5bfvUxDSRWc03s4eswoZ1bXhen3H808qcKYV0qg7l yMuTI+yQtjOHvuowTdqE+ZEt0fbuMEhjBMftfOb/pfaF5tFr/Yizdqk4+Gi21RvB ztSNUcN+FyWmb2PPegXiCuoM1ZjFeGKAbEuNFFb1qtgEMxbNX68NzIoSppxNAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU8o8iBSBPP0hDr5Mxn+r0ttKVAnIwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtQjww DQYJKoZIhvcNAQELBQADggEBAKWyy+KQ65uHly9z7+lwJlEHk8k2hKDXLn/5DT+O rP3Zp9bTYzEfsnMnffclTZ++Vp5Db99ldyhUYDkb/YM46Hw2ZwsiA9HqB0Z7dSwz 7dPKm02Y01V9xyagjOYKvgj52F3QaVV4HhhaZcCoodIqAzbOKHwD5o6m0+rhUQnw BhB6F9goTaFJurK4zx4gv3KRdCDs0NrWGMrQAYFwBVqljbXblvLep49MkPzDftkq y3/kIWw+Rjte7wJl0wV5aw5l855ofYZN4DlKS9oD0QugkWVAl1Zq7AT+9QOehGqF WQdoaL1PDVM8Z0WoYhqUbaxn3a3eBZbYIzogQCltuoeP3mM= -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:41 2025 by rpki-client