This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36312e302f32342d3234203d3e20323733323432.roa File: 34352e36362e36312e302f32342d3234203d3e20323733323432.roa (raw, json) Hash identifier: aW1O7EqU7dyDx/rtiMAdVQbK5eQsDxMcZUdjF1F6EUY= Subject key identifier: 18:9E:41:32:4D:C7:E2:1E:16:77:D1:33:1C:82:9B:A0:B7:BE:77:3A Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 33C95BC7EDD20E7EB6476008DF42B9CAB1BBB1FA Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36312e302f32342d3234203d3e20323733323432.roa Signing time: Fri 19 Dec 2025 12:20:30 +0000 ROA not before: Fri 19 Dec 2025 12:15:30 +0000 ROA not after: Fri 18 Dec 2026 12:20:30 +0000 asID: 273242 IP address blocks: 45.66.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c9:5b:c7:ed:d2:0e:7e:b6:47:60:08:df:42:b9:ca:b1:bb:b1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 19 12:15:30 2025 GMT Not After : Dec 18 12:20:30 2026 GMT Subject: CN=189E41324DC7E21E1677D1331C829BA0B7BE773A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:9c:bb:5e:e1:1e:b2:f6:ff:5b:ae:31:15:32: a7:fc:34:d1:f2:e1:10:3b:66:28:94:16:2b:38:c9: 1f:13:be:b3:09:c3:1c:fd:55:0d:9e:a0:47:d2:e0: 53:e3:db:68:78:b3:cf:0d:1e:32:63:c4:6d:e6:3b: 14:52:c2:15:a3:ac:f3:aa:14:6f:e0:2f:32:2f:91: 1f:ab:fc:9c:9c:de:18:2e:33:44:de:d7:b4:16:b8: f9:12:51:9d:2a:5f:e3:a8:68:55:71:97:ac:ba:c7: fe:91:11:c0:02:b3:fe:3f:b3:1c:fb:86:fd:69:0a: dc:05:dd:1f:60:64:63:12:f4:cf:2d:66:52:bc:4b: d4:b1:0b:6f:6d:8e:4a:15:1c:be:85:fe:b7:0a:cf: 9c:28:7c:d8:95:9e:36:c3:78:e1:2f:6f:a0:37:8b: f4:14:b6:5b:64:55:6f:62:6b:70:f5:46:de:08:d2: 10:34:c2:d6:06:6a:11:be:5d:15:4d:4d:ee:76:7e: c6:0e:77:dc:69:58:e9:ad:01:cf:1f:e7:3c:d9:6c: 81:50:ce:33:53:f5:55:d7:28:00:6a:4b:13:24:dd: f9:a6:31:12:13:c9:4e:0f:ce:b8:fa:90:e0:ca:47: ad:10:5c:a9:80:11:8d:ca:4e:7c:0e:70:29:eb:ca: 63:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9E:41:32:4D:C7:E2:1E:16:77:D1:33:1C:82:9B:A0:B7:BE:77:3A X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36312e302f32342d3234203d3e20323733323432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.61.0/24 Signature Algorithm: sha256WithRSAEncryption 51:e5:c4:dd:1e:ec:d0:fe:43:ad:18:34:c6:08:ad:f4:36:df: 2e:32:48:f0:86:60:bd:b3:00:93:fe:d3:de:6f:74:45:5f:b5: a6:62:59:64:3a:6b:0a:a3:c9:09:ce:b7:58:7c:0c:ab:52:14: ce:42:cb:08:21:95:d7:a4:7d:ac:e3:c5:53:49:f6:d2:39:7c: 1a:d9:8f:b5:31:6b:46:0e:33:92:26:00:23:6b:e7:e0:5c:03: 5e:67:52:88:93:3f:5e:21:b0:62:9c:c8:ef:e5:f5:f1:5c:9b: 46:1a:50:72:2f:f3:d1:d5:99:98:fb:84:16:f8:ff:7e:ce:9f: 42:13:7f:fe:70:fc:6a:8c:2f:bc:87:6a:7a:89:8d:24:39:6b: 08:28:36:75:01:3b:ca:dd:d6:05:56:4c:7b:52:7a:91:47:c0: ec:53:ea:a0:2c:a8:34:44:b1:34:89:04:89:a7:c8:ee:9c:c8: 7d:27:91:97:2c:5a:af:f8:5e:5f:85:65:b0:32:a7:76:3a:1e: 82:b2:4d:22:da:3a:8f:6c:28:d5:e9:fa:0f:c7:ba:bc:8f:77: e5:b5:c3:b5:3a:0e:fb:bd:33:71:dc:6a:5b:e1:8c:1b:c6:e8: 96:f2:ef:5c:42:a2:fe:01:01:d3:fd:64:56:95:b4:81:7b:a3: 93:a5:29:b5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUM8lbx+3SDn62R2AI30K5yrG7sfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTkxMjE1MzBaFw0yNjEyMTgxMjIwMzBaMDMxMTAvBgNV BAMTKDE4OUU0MTMyNERDN0UyMUUxNjc3RDEzMzFDODI5QkEwQjdCRTc3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0nLte4R6y9v9brjEVMqf8NNHy 4RA7ZiiUFis4yR8TvrMJwxz9VQ2eoEfS4FPj22h4s88NHjJjxG3mOxRSwhWjrPOq FG/gLzIvkR+r/Jyc3hguM0Te17QWuPkSUZ0qX+OoaFVxl6y6x/6REcACs/4/sxz7 hv1pCtwF3R9gZGMS9M8tZlK8S9SxC29tjkoVHL6F/rcKz5wofNiVnjbDeOEvb6A3 i/QUtltkVW9ia3D1Rt4I0hA0wtYGahG+XRVNTe52fsYOd9xpWOmtAc8f5zzZbIFQ zjNT9VXXKABqSxMk3fmmMRITyU4Pzrj6kODKR60QXKmAEY3KTnwOcCnrymNbAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUGJ5BMk3H4h4Wd9EzHIKboLe+dzowHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMzMyMzQzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1C PTANBgkqhkiG9w0BAQsFAAOCAQEAUeXE3R7s0P5DrRg0xgit9DbfLjJI8IZgvbMA k/7T3m90RV+1pmJZZDprCqPJCc63WHwMq1IUzkLLCCGV16R9rOPFU0n20jl8GtmP tTFrRg4zkiYAI2vn4FwDXmdSiJM/XiGwYpzI7+X18VybRhpQci/z0dWZmPuEFvj/ fs6fQhN//nD8aowvvIdqeomNJDlrCCg2dQE7yt3WBVZMe1J6kUfA7FPqoCyoNESx NIkEiafI7pzIfSeRlyxar/heX4VlsDKndjoegrJNIto6j2wo1en6D8e6vI935bXD tToO+70zcdxqW+GMG8bolvLvXEKi/gEB0/1kVpW0gXujk6UptQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:41 2025 by rpki-client