This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e2035353131.roa File: 3231322e38372e3230302e302f32342d3234203d3e2035353131.roa (raw, json) Hash identifier: SIkGEeFqdufnxbirYtgHiL35WeK9q4yZk2duvbPo7tQ= Subject key identifier: 90:CE:BF:BD:F7:3C:24:1D:8B:82:B4:E3:4A:3F:61:FD:95:94:FA:33 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 334C76935F89DAAE00D8AB06B51E0D9809060E8F Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e2035353131.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 5511 IP address blocks: 212.87.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4c:76:93:5f:89:da:ae:00:d8:ab:06:b5:1e:0d:98:09:06:0e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=90CEBFBDF73C241D8B82B4E34A3F61FD9594FA33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5d:88:f7:7a:37:fa:1c:7b:61:28:6b:95:71: 4e:6c:93:c4:ab:32:5d:71:ee:56:1b:93:79:08:cb: ad:1a:b4:db:10:84:8b:f2:d0:48:cc:86:85:f5:0e: c1:26:b6:4f:8d:67:5f:bd:9e:f3:68:4f:bf:f7:21: 91:6d:d6:5a:ea:06:00:6c:d6:9e:39:8b:cd:0f:66: 3e:07:17:75:e4:e4:16:03:c7:76:df:6d:46:8d:04: 6e:de:af:77:0b:f9:0c:b9:34:1c:2d:5f:c8:89:4d: ae:c4:f4:ed:ed:28:cf:28:c4:60:b8:46:4c:b7:0e: 7d:54:75:13:c5:e4:b0:9b:e4:bd:bc:29:aa:2b:96: 24:ef:8c:a5:41:ac:a7:dd:64:40:c3:7f:a1:8f:cd: 1b:b0:2b:b1:56:14:c5:39:3e:bd:62:44:b9:ec:d9: a9:fa:16:1b:27:74:12:4f:e4:17:83:08:ca:ba:57: 06:7a:90:33:89:25:9d:e6:e1:d7:36:c8:ad:ff:d4: f9:f0:44:32:aa:e0:2c:f4:03:81:8f:d7:f4:0a:e4: 2b:71:57:e5:26:71:48:dc:f4:12:ad:b0:c9:2c:5f: 99:50:f3:55:1c:45:c9:51:b6:16:18:65:3a:82:e2: d2:b1:64:e9:d0:c2:a3:90:4c:62:42:bb:fe:26:49: f9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CE:BF:BD:F7:3C:24:1D:8B:82:B4:E3:4A:3F:61:FD:95:94:FA:33 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230302e302f32342d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.200.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a4:84:4c:78:16:7a:2b:8f:88:a4:f6:45:c1:a4:0c:b3:5f: 7f:7c:27:ce:91:63:de:59:fb:74:f3:92:86:61:90:e3:02:38: 8c:8e:60:0e:61:fa:2e:f7:6b:e1:4c:45:66:ee:fd:f7:4f:a9: f9:01:a3:45:ea:b9:ff:58:f5:80:6b:a0:87:da:21:ab:61:1c: 98:14:bb:c2:ba:59:60:21:52:57:bf:9c:31:48:0b:68:7a:cf: 67:16:06:a1:33:78:58:5d:d9:b8:7f:d6:21:86:bc:38:bd:40: 8e:65:2c:07:58:7c:00:ac:0d:f6:8f:46:17:f5:3c:25:76:5d: 4a:d7:e7:e9:62:ac:05:67:f4:7b:d4:f3:08:75:8c:f6:df:07: 2a:98:2f:ae:99:70:ad:16:b0:54:95:08:45:17:76:1b:d0:6d: 3e:62:9e:8e:8a:8d:92:a6:af:be:12:f5:f6:a5:9b:a0:8b:79: 29:a7:2b:0f:43:b9:bb:eb:a6:3b:ff:0a:c3:31:d6:36:85:f5: 2f:b7:f7:5e:86:35:c1:aa:e6:1a:09:1c:e7:1a:25:bc:89:0e: 46:a5:85:42:28:9d:b6:56:ae:e8:84:78:94:66:e6:fa:fb:08: 37:19:e8:91:f7:0b:17:38:25:b5:ca:6d:d6:2e:94:3c:a6:9e: 07:e8:49:49 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUM0x2k1+J2q4A2KsGtR4NmAkGDo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDkwQ0VCRkJERjczQzI0MUQ4QjgyQjRFMzRBM0Y2MUZEOTU5NEZBMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQXYj3ejf6HHthKGuVcU5sk8Sr Ml1x7lYbk3kIy60atNsQhIvy0EjMhoX1DsEmtk+NZ1+9nvNoT7/3IZFt1lrqBgBs 1p45i80PZj4HF3Xk5BYDx3bfbUaNBG7er3cL+Qy5NBwtX8iJTa7E9O3tKM8oxGC4 Rky3Dn1UdRPF5LCb5L28KaorliTvjKVBrKfdZEDDf6GPzRuwK7FWFMU5Pr1iRLns 2an6FhsndBJP5BeDCMq6VwZ6kDOJJZ3m4dc2yK3/1PnwRDKq4Cz0A4GP1/QK5Ctx V+UmcUjc9BKtsMksX5lQ81UcRclRthYYZTqC4tKxZOnQwqOQTGJCu/4mSfndAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUkM6/vfc8JB2LgrTjSj9h/ZWU+jMwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzIzMTMyMmUzODM3MmUzMjMw MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRX yDANBgkqhkiG9w0BAQsFAAOCAQEAgqSETHgWeiuPiKT2RcGkDLNff3wnzpFj3ln7 dPOShmGQ4wI4jI5gDmH6Lvdr4UxFZu7990+p+QGjReq5/1j1gGugh9ohq2EcmBS7 wrpZYCFSV7+cMUgLaHrPZxYGoTN4WF3ZuH/WIYa8OL1AjmUsB1h8AKwN9o9GF/U8 JXZdStfn6WKsBWf0e9TzCHWM9t8HKpgvrplwrRawVJUIRRd2G9BtPmKejoqNkqav vhL19qWboIt5KacrD0O5u+umO/8KwzHWNoX1L7f3XoY1warmGgkc5xolvIkORqWF Qiidtlau6IR4lGbm+vsINxnokfcLFzgltcpt1i6UPKaeB+hJSQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:29 2026 by rpki-client