This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e203439353831.roa File: 34352e3133372e39382e302f32342d3234203d3e203439353831.roa (raw, json) Hash identifier: 2gH/52ENRw9A8DEeWlc6NadKJyzr/3QGbwDMj4qZGb4= Subject key identifier: 49:C2:09:FB:0F:6A:F7:5E:DF:DB:5F:83:12:2F:43:E3:C6:B7:96:0C Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 6BCB934DA93BC68B590A67246EC582367B223A86 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e203439353831.roa Signing time: Fri 12 Dec 2025 11:55:32 +0000 ROA not before: Fri 12 Dec 2025 11:50:32 +0000 ROA not after: Fri 11 Dec 2026 11:55:32 +0000 asID: 49581 IP address blocks: 45.137.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:cb:93:4d:a9:3b:c6:8b:59:0a:67:24:6e:c5:82:36:7b:22:3a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 12 11:50:32 2025 GMT Not After : Dec 11 11:55:32 2026 GMT Subject: CN=49C209FB0F6AF75EDFDB5F83122F43E3C6B7960C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:f8:85:45:16:67:ce:43:c9:8f:2d:9f:6f: 92:1e:3a:8e:d0:32:7e:98:12:d5:02:5a:9a:21:a0: a3:ff:d5:ff:b2:e0:e2:b2:80:02:5a:b6:d4:e7:8f: 4b:d0:b9:d5:6e:17:60:36:da:1e:da:05:b3:89:9e: e8:cf:90:7b:00:28:26:87:c8:2f:f2:1e:03:86:7f: 62:49:96:ea:98:7a:67:69:73:45:97:71:a5:b9:21: 90:c8:b7:58:69:c4:cb:ce:ca:38:c6:c5:3a:77:11: d1:b8:85:ac:d6:a1:35:6d:ed:15:8f:12:79:36:49: 51:43:02:60:33:7b:4d:bb:ff:e5:32:11:07:8a:d3: 3c:36:39:d2:ac:ff:aa:83:a7:1c:79:2b:a6:6e:5e: 43:09:94:ec:fa:b6:b3:a9:54:a9:6c:64:f3:50:ea: 09:f6:9f:e3:4a:54:16:f4:8e:bd:e2:1a:9c:bc:49: 55:59:6f:37:11:96:d3:c1:3d:6a:74:9f:a1:ab:ed: e5:1c:94:58:9c:24:7c:09:72:69:20:d6:05:14:71: 10:65:93:78:e2:19:d9:8a:5f:1e:0a:b4:c1:5f:e9: 5e:19:87:39:56:36:08:76:45:dd:2d:39:be:c2:85: c9:b7:91:72:37:18:02:87:5d:00:56:61:ce:d2:13: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C2:09:FB:0F:6A:F7:5E:DF:DB:5F:83:12:2F:43:E3:C6:B7:96:0C X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e3133372e39382e302f32342d3234203d3e203439353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.98.0/24 Signature Algorithm: sha256WithRSAEncryption 18:7f:28:5d:80:fe:64:5d:79:86:a1:35:88:d2:12:7f:02:ae: dc:ad:31:60:ed:34:fd:0b:65:34:3b:73:68:1b:ed:80:af:7a: 2d:fe:68:b2:25:60:88:e5:50:2a:90:75:0f:d9:a3:5c:36:59: 43:45:cb:73:2a:cd:a2:b3:4e:d2:d5:9c:ab:ec:5a:a8:ae:30: 02:29:58:89:b5:0b:63:ad:07:c1:2c:8f:18:e5:15:89:ff:49: 65:19:70:17:8b:61:1c:16:ca:17:89:8b:a7:8e:15:de:25:b1: 4f:46:a2:c9:f4:ba:5c:1b:20:29:0e:fc:69:fa:13:b6:ea:c2: 88:08:40:78:13:85:c5:0a:f9:f8:54:9c:f7:9d:77:5c:52:c4: 95:b4:58:77:eb:b1:9d:cd:a3:f4:a0:74:47:6d:a4:7e:36:a6: 09:b2:f8:b5:21:e0:91:08:7e:05:c6:f8:50:b8:65:ef:53:4b: eb:76:e9:96:70:a5:17:d7:7e:64:be:fa:96:5c:c4:5d:85:90: 5b:06:cd:0a:a1:70:a7:b3:db:af:d8:d0:d5:8a:14:70:07:5b: 42:5a:76:7d:c4:60:33:63:fd:bd:46:c0:58:0c:03:f9:55:6a: 39:6b:7a:4c:c0:b5:b0:54:07:10:2f:6e:1e:d0:4c:74:00:dc: 72:40:ac:d6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUa8uTTak7xotZCmckbsWCNnsiOoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMTIxMTUwMzJaFw0yNjEyMTExMTU1MzJaMDMxMTAvBgNV BAMTKDQ5QzIwOUZCMEY2QUY3NUVERkRCNUY4MzEyMkY0M0UzQzZCNzk2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0fPiFRRZnzkPJjy2fb5IeOo7Q Mn6YEtUCWpohoKP/1f+y4OKygAJattTnj0vQudVuF2A22h7aBbOJnujPkHsAKCaH yC/yHgOGf2JJluqYemdpc0WXcaW5IZDIt1hpxMvOyjjGxTp3EdG4hazWoTVt7RWP Enk2SVFDAmAze027/+UyEQeK0zw2OdKs/6qDpxx5K6ZuXkMJlOz6trOpVKlsZPNQ 6gn2n+NKVBb0jr3iGpy8SVVZbzcRltPBPWp0n6Gr7eUclFicJHwJcmkg1gUUcRBl k3jiGdmKXx4KtMFf6V4ZhzlWNgh2Rd0tOb7Chcm3kXI3GAKHXQBWYc7SE5s7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUScIJ+w9q917f21+DEi9D48a3lgwwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzEzMzM3MmUzOTM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzOTM1MzgzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2J YjANBgkqhkiG9w0BAQsFAAOCAQEAGH8oXYD+ZF15hqE1iNISfwKu3K0xYO00/Qtl NDtzaBvtgK96Lf5osiVgiOVQKpB1D9mjXDZZQ0XLcyrNorNO0tWcq+xaqK4wAilY ibULY60HwSyPGOUVif9JZRlwF4thHBbKF4mLp44V3iWxT0aiyfS6XBsgKQ78afoT turCiAhAeBOFxQr5+FSc9513XFLElbRYd+uxnc2j9KB0R22kfjamCbL4tSHgkQh+ Bcb4ULhl71NL63bplnClF9d+ZL76llzEXYWQWwbNCqFwp7Pbr9jQ1YoUcAdbQlp2 fcRgM2P9vUbAWAwD+VVqOWt6TMC1sFQHEC9uHtBMdADcckCs1g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:57:11 2025 by rpki-client