This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36322e302f32342d3234203d3e20323131323237.roa File: 34352e36362e36322e302f32342d3234203d3e20323131323237.roa (raw, json) Hash identifier: dWPUpxtuxXlxf6fr58m1XtSUGtx0xECSVy3vpTHDKS4= Subject key identifier: 3C:AC:84:DB:FB:B3:44:20:9F:6D:BD:C4:B0:8A:E5:C2:33:90:46:32 Certificate issuer: /CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Certificate serial: 3D2A8C4C26D74BAD03117B4D2D2B03AFBEC00D2F Authority key identifier: 7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36322e302f32342d3234203d3e20323131323237.roa Signing time: Fri 19 Dec 2025 12:20:16 +0000 ROA not before: Fri 19 Dec 2025 12:15:16 +0000 ROA not after: Fri 18 Dec 2026 12:20:16 +0000 asID: 211227 IP address blocks: 45.66.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.mft rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:2a:8c:4c:26:d7:4b:ad:03:11:7b:4d:2d:2b:03:af:be:c0:0d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e51cac1ce2afe1958b1fb6a6237717b0b5d4810 Validity Not Before: Dec 19 12:15:16 2025 GMT Not After : Dec 18 12:20:16 2026 GMT Subject: CN=3CAC84DBFBB344209F6DBDC4B08AE5C233904632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1e:a1:cf:1a:b3:a2:2c:a9:66:f3:90:72:06: b2:ca:b0:35:26:9e:7c:4c:59:f4:22:15:ec:3b:08: 6f:16:8e:3a:6d:77:5d:bd:56:67:06:7d:02:35:84: 0e:e8:3f:39:70:df:d2:4e:e2:e2:db:47:96:64:9d: 8a:f3:4c:78:b1:06:75:29:a8:71:16:8a:d5:07:08: eb:05:16:99:17:88:f2:7b:f6:11:47:0c:46:45:33: d2:de:ad:cd:77:60:48:16:44:6a:90:67:0d:13:24: 14:e4:95:dc:19:57:b1:eb:e0:e1:c5:cb:97:6c:83: 5a:19:6c:6c:2a:e6:45:e9:64:89:75:79:eb:14:33: f2:8a:da:63:8f:ab:89:d7:d3:0d:13:b3:f4:99:49: 05:ad:cc:52:2b:eb:12:1a:46:d4:3f:c1:36:a0:bb: 23:24:f5:aa:5e:d3:0a:00:b2:02:ca:46:ff:94:cb: 05:73:82:45:c0:25:a6:ab:72:3a:01:bf:ab:e0:ae: 96:d2:4b:56:2f:3a:b7:3f:2e:1d:80:98:10:d6:99: 7e:cf:15:c2:e7:6a:33:f6:c9:89:a8:9f:7d:a5:1c: d2:1f:21:80:0f:b5:90:5d:15:e4:c0:3d:3f:eb:15: 6c:31:d2:cf:a7:8d:e6:b2:1a:bf:c1:8c:18:f2:bc: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:84:DB:FB:B3:44:20:9F:6D:BD:C4:B0:8A:E5:C2:33:90:46:32 X509v3 Authority Key Identifier: keyid:7E:51:CA:C1:CE:2A:FE:19:58:B1:FB:6A:62:37:71:7B:0B:5D:48:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/7E51CAC1CE2AFE1958B1FB6A6237717B0B5D4810.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flHKwc4q_hlYsftqYjdxewtdSBA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/881b7f08-dd94-4cd0-aa38-8512f152bd32/0/34352e36362e36322e302f32342d3234203d3e20323131323237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.62.0/24 Signature Algorithm: sha256WithRSAEncryption 62:8d:c6:2a:1f:f1:b1:aa:66:71:46:bd:90:86:45:8c:dc:d4: 39:6e:f5:a7:db:47:9c:bb:40:b4:1c:db:00:18:e9:04:e8:b0: 83:a8:2a:c7:e4:c8:71:67:be:05:18:a4:3b:51:4f:a7:36:e5: 8f:31:d5:d1:04:cc:c4:9e:84:c9:4d:47:11:49:74:d7:1f:8c: 93:17:72:41:3d:58:74:e2:64:a6:e6:2c:1e:e9:5c:f7:34:e6: 06:15:39:6c:96:a3:46:12:a0:a1:75:60:d1:54:7d:c9:cf:ef: 0b:ce:6c:f7:bf:15:d6:5d:d7:ac:22:d3:a7:e8:a6:ce:f5:ce: 83:37:2e:9a:b8:5b:1f:d0:f7:b0:02:ed:15:ad:f4:77:64:d8: 67:88:19:19:9a:b8:2f:12:34:df:8d:90:95:cc:b4:79:80:2f: c6:71:51:09:db:cc:5e:48:6a:69:18:e7:4e:32:72:b0:22:97: 55:a6:fd:29:c8:2e:6d:b5:fe:e8:0d:f3:98:3b:81:03:81:39: df:b6:b1:db:b2:0d:75:f4:d5:32:10:f1:c5:76:3b:de:b9:a8: 39:21:56:85:9c:6c:a8:a0:30:eb:74:84:01:11:43:7f:b6:39: b7:77:e9:fe:b3:0c:48:ed:ab:b3:82:b9:5a:c3:5e:34:45:b8: 67:88:01:40 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPSqMTCbXS60DEXtNLSsDr77ADS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2U1MWNhYzFjZTJhZmUxOTU4YjFmYjZhNjIzNzcxN2Iw YjVkNDgxMDAeFw0yNTEyMTkxMjE1MTZaFw0yNjEyMTgxMjIwMTZaMDMxMTAvBgNV BAMTKDNDQUM4NERCRkJCMzQ0MjA5RjZEQkRDNEIwOEFFNUMyMzM5MDQ2MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHqHPGrOiLKlm85ByBrLKsDUm nnxMWfQiFew7CG8Wjjptd129VmcGfQI1hA7oPzlw39JO4uLbR5ZknYrzTHixBnUp qHEWitUHCOsFFpkXiPJ79hFHDEZFM9Lerc13YEgWRGqQZw0TJBTkldwZV7Hr4OHF y5dsg1oZbGwq5kXpZIl1eesUM/KK2mOPq4nX0w0Ts/SZSQWtzFIr6xIaRtQ/wTag uyMk9ape0woAsgLKRv+UywVzgkXAJaarcjoBv6vgrpbSS1YvOrc/Lh2AmBDWmX7P FcLnajP2yYmon32lHNIfIYAPtZBdFeTAPT/rFWwx0s+njeayGr/BjBjyvH3pAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUPKyE2/uzRCCfbb3EsIrlwjOQRjIwHwYDVR0j BBgwFoAUflHKwc4q/hlYsftqYjdxewtdSBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODgxYjdmMDgtZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJi ZDMyLzAvN0U1MUNBQzFDRTJBRkUxOTU4QjFGQjZBNjIzNzcxN0IwQjVENDgxMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZsSEt3YzRxX2hsWXNmdHFZamR4ZXd0 ZFNCQS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODgxYjdmMDgt ZGQ5NC00Y2QwLWFhMzgtODUxMmYxNTJiZDMyLzAvMzQzNTJlMzYzNjJlMzYzMjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTMyMzIzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1C PjANBgkqhkiG9w0BAQsFAAOCAQEAYo3GKh/xsapmcUa9kIZFjNzUOW71p9tHnLtA tBzbABjpBOiwg6gqx+TIcWe+BRikO1FPpzbljzHV0QTMxJ6EyU1HEUl01x+Mkxdy QT1YdOJkpuYsHulc9zTmBhU5bJajRhKgoXVg0VR9yc/vC85s978V1l3XrCLTp+im zvXOgzcumrhbH9D3sALtFa30d2TYZ4gZGZq4LxI0342Qlcy0eYAvxnFRCdvMXkhq aRjnTjJysCKXVab9KcgubbX+6A3zmDuBA4E537ax27INdfTVMhDxxXY73rmoOSFW hZxsqKAw63SEARFDf7Y5t3fp/rMMSO2rs4K5WsNeNEW4Z4gBQA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:42 2025 by rpki-client