This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20383334.roa File: 34352e38392e3134382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: Au9oQ3qTWYtfxThFmWtVA/8gugCQhBrqps9xbTZiqo0= Subject key identifier: C3:5C:01:62:20:0C:D0:7A:C9:62:59:69:55:46:F4:A5:4C:01:5A:B8 Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 1DDF4424F2837C5984F254983D39183887238F7D Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20383334.roa Signing time: Mon 15 Dec 2025 19:19:15 +0000 ROA not before: Mon 15 Dec 2025 19:14:15 +0000 ROA not after: Mon 14 Dec 2026 19:19:15 +0000 asID: 834 IP address blocks: 45.89.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:df:44:24:f2:83:7c:59:84:f2:54:98:3d:39:18:38:87:23:8f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Dec 15 19:14:15 2025 GMT Not After : Dec 14 19:19:15 2026 GMT Subject: CN=C35C0162200CD07AC96259695546F4A54C015AB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:05:d5:af:8e:78:9a:db:6f:86:27:8e:2d:11: 05:3e:d4:a6:2c:1a:18:d9:87:39:8b:da:b9:d7:1b: d8:dc:e6:ca:0c:d7:97:42:05:16:96:72:1a:a4:1e: 42:2a:bc:a3:37:15:d5:65:f6:6b:60:02:25:35:93: 69:42:e7:fc:30:07:f3:88:fc:c7:65:18:89:6e:cf: 1d:57:11:27:20:5a:b1:ff:8c:09:1a:b6:e1:43:cd: 9a:eb:ce:eb:f7:0f:c8:9a:97:5e:fb:eb:1c:14:d1: d3:e8:af:b1:0e:d7:79:ec:de:e9:e6:d4:81:7a:f7: ff:6b:c9:60:89:29:ce:48:3a:8f:b1:10:81:28:80: 7e:8b:c1:fa:b4:97:51:67:ec:0b:8a:97:d8:f4:3f: f6:db:31:72:ea:d5:c0:9a:d1:bd:bd:d3:16:b7:e6: 34:50:b5:c5:a1:32:92:59:e4:32:91:ac:03:d3:1d: d3:e0:2e:e7:6a:7f:c1:03:2d:7e:a3:f4:7c:e7:d4: a2:8d:a2:a5:8d:c6:7c:e3:aa:1a:f7:9e:cf:08:28: 13:5f:b3:54:0b:b3:ec:5a:4b:fc:15:67:1d:b6:39: a6:92:46:03:60:1c:f1:a8:94:9e:77:24:75:d9:91: 09:fc:17:49:5e:01:0b:b0:06:c1:93:de:78:d2:ea: 4d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5C:01:62:20:0C:D0:7A:C9:62:59:69:55:46:F4:A5:4C:01:5A:B8 X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.148.0/23 Signature Algorithm: sha256WithRSAEncryption 01:fc:f0:d1:df:b4:85:86:d4:5d:97:3f:ae:05:77:fe:0e:58: 0d:dd:37:6e:39:db:c8:b9:9c:b7:cf:a4:9e:af:9b:cb:f9:8d: 1d:75:62:d7:10:7f:8c:7c:bf:20:7b:44:fb:84:aa:0a:51:04: fa:2f:c1:fc:25:cf:1c:33:c8:28:47:0e:27:55:2f:83:bb:ac: fb:a7:a1:69:85:a4:be:56:f0:6b:8c:c6:f0:d4:4b:60:9f:0e: 57:48:52:24:4f:60:e6:51:e5:ea:87:88:23:b0:10:47:da:21: 7c:5b:0e:77:37:40:37:a1:0b:fc:9c:5b:70:86:e0:57:f6:e7: 11:79:87:9d:d6:6d:58:51:61:c1:75:0f:25:de:d1:46:64:2b: 68:4b:0c:26:62:8f:33:f0:5a:f4:1f:81:9f:94:7f:0e:71:66: 45:08:f4:ec:f7:a8:6a:f4:31:7a:ce:7a:2e:f8:6a:d0:63:c0: c4:db:89:6d:da:63:4f:c6:8f:69:f3:f1:bc:ef:c7:29:5d:d2: 67:b8:30:37:bb:39:bf:a8:bc:1d:7f:1a:30:08:8f:70:c9:e8: aa:c1:d5:35:be:68:67:98:96:f1:21:dd:f9:ae:e3:3c:86:26: d0:5f:d7:89:1d:9f:33:bf:d2:c5:ab:04:4d:03:a4:f9:06:7f: 0d:9c:8d:69 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUHd9EJPKDfFmE8lSYPTkYOIcjj30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNTEyMTUxOTE0MTVaFw0yNjEyMTQxOTE5MTVaMDMxMTAvBgNV BAMTKEMzNUMwMTYyMjAwQ0QwN0FDOTYyNTk2OTU1NDZGNEE1NEMwMTVBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BdWvjnia22+GJ44tEQU+1KYs GhjZhzmL2rnXG9jc5soM15dCBRaWchqkHkIqvKM3FdVl9mtgAiU1k2lC5/wwB/OI /MdlGIluzx1XEScgWrH/jAkatuFDzZrrzuv3D8ial1776xwU0dPor7EO13ns3unm 1IF69/9ryWCJKc5IOo+xEIEogH6Lwfq0l1Fn7AuKl9j0P/bbMXLq1cCa0b290xa3 5jRQtcWhMpJZ5DKRrAPTHdPgLudqf8EDLX6j9Hzn1KKNoqWNxnzjqhr3ns8IKBNf s1QLs+xaS/wVZx22OaaSRgNgHPGolJ53JHXZkQn8F0leAQuwBsGT3njS6k0xAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUw1wBYiAM0HrJYllpVUb0pUwBWrgwHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzgzOTJlMzEzNDM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVmUMA0G CSqGSIb3DQEBCwUAA4IBAQAB/PDR37SFhtRdlz+uBXf+DlgN3TduOdvIuZy3z6Se r5vL+Y0ddWLXEH+MfL8ge0T7hKoKUQT6L8H8Jc8cM8goRw4nVS+Du6z7p6FphaS+ VvBrjMbw1Etgnw5XSFIkT2DmUeXqh4gjsBBH2iF8Ww53N0A3oQv8nFtwhuBX9ucR eYed1m1YUWHBdQ8l3tFGZCtoSwwmYo8z8Fr0H4GflH8OcWZFCPTs96hq9DF6znou +GrQY8DE24lt2mNPxo9p8/G878cpXdJnuDA3uzm/qLwdfxowCI9wyeiqwdU1vmhn mJbxId35ruM8hibQX9eJHZ8zv9LFqwRNA6T5Bn8NnI1p -----END CERTIFICATE-----Generated at Sat Dec 20 11:11:07 2025 by rpki-client