This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230322e302f32332d3234203d3e2035353131.roa File: 3231322e38372e3230322e302f32332d3234203d3e2035353131.roa (raw, json) Hash identifier: U9OMTqETvgNjXmw6iKowc/hv6FwwN6ky53q3foWCIIU= Subject key identifier: 56:60:07:05:88:7D:CB:43:0C:F2:7A:9B:A7:75:3D:95:33:57:ED:CB Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 1CC07D444A9955D633A000E327D845A3716439B5 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230322e302f32332d3234203d3e2035353131.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 5511 IP address blocks: 212.87.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c0:7d:44:4a:99:55:d6:33:a0:00:e3:27:d8:45:a3:71:64:39:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=56600705887DCB430CF27A9BA7753D953357EDCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f6:5a:30:86:ff:95:39:3c:b9:17:e8:78:ef: 9e:ec:f1:b1:39:d1:ec:84:71:3c:97:66:9c:8a:2f: ef:dd:e7:57:cc:d0:cb:68:ef:33:e5:bb:39:d2:62: 59:c5:27:a1:7a:71:e7:a6:23:2b:b3:a4:0a:09:dc: 2e:97:58:54:5c:d2:b0:f4:1d:e1:1f:90:96:d8:57: de:4d:1b:25:b9:2f:59:93:42:44:d9:a8:d4:52:a9: e1:36:dd:98:79:8b:90:a3:0d:66:c0:d7:12:89:5d: 37:4b:29:e2:2c:5b:20:45:b1:ca:2a:d9:90:26:38: 0f:db:ff:53:0e:9e:7c:bf:7c:f8:15:09:36:cc:19: f0:aa:e6:47:f2:69:2f:2c:21:e4:8d:5b:c1:d5:13: b3:92:d9:e8:19:1a:de:c6:8d:0e:d4:f5:9a:36:9b: e0:81:9f:78:af:6e:ed:1b:78:51:52:41:7a:8a:b8: 6c:eb:93:49:37:8d:31:87:30:c9:d9:7e:3a:c8:d5: 90:06:fb:9d:99:f1:15:24:07:af:76:87:82:e3:64: dd:c9:5c:47:4f:52:79:82:84:16:6d:62:30:ac:4b: b6:93:e8:a8:e7:6c:82:33:21:31:e9:9b:d1:f1:57: 78:32:be:d2:4c:eb:21:4b:e8:69:46:00:01:4c:4e: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:60:07:05:88:7D:CB:43:0C:F2:7A:9B:A7:75:3D:95:33:57:ED:CB X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230322e302f32332d3234203d3e2035353131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.202.0/23 Signature Algorithm: sha256WithRSAEncryption 69:b6:9b:7a:cf:db:48:6b:7f:74:93:ae:3b:00:96:77:24:1d: 36:bc:28:d2:58:a8:49:30:03:86:c0:5c:29:f3:6a:85:58:29: 44:05:92:72:54:f6:83:88:62:e8:1f:42:47:ae:fa:1d:68:6a: 1e:1b:80:23:e6:a6:99:a6:79:fc:27:08:4c:dc:24:51:2d:90: 52:78:e0:26:a3:20:0f:ee:01:30:66:86:e5:7a:d7:bb:41:31: e9:9b:e3:e8:a1:a0:9c:92:cc:56:9f:d5:9a:d4:07:58:9d:6a: 54:a3:9b:3b:bc:d4:cd:8f:8f:3d:c7:e6:2f:25:4b:12:8b:44: 84:64:d8:61:e2:31:90:28:95:be:7f:55:f9:dd:45:e8:5b:56: 4b:a4:21:37:18:c9:59:c3:4f:05:ed:b8:9a:36:f2:98:fd:7f: 4f:f7:e5:59:45:3b:50:7f:74:ad:d6:ba:1e:60:27:3f:93:31: 27:99:50:4b:47:48:ae:8c:bd:94:4a:dc:7d:c2:e2:04:33:b2: 64:3e:65:8c:af:a9:ac:3a:ec:0c:53:c2:c2:2f:8d:12:f9:ac: 49:51:96:63:e1:64:e7:36:79:6f:f8:a5:a5:b9:de:4c:50:eb: 5e:f6:37:d9:dc:39:54:07:90:b2:d5:2a:24:4d:f2:bb:d0:af: 35:80:97:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHMB9REqZVdYzoADjJ9hFo3FkObUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDU2NjAwNzA1ODg3RENCNDMwQ0YyN0E5QkE3NzUzRDk1MzM1N0VEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9lowhv+VOTy5F+h4757s8bE5 0eyEcTyXZpyKL+/d51fM0Mto7zPluznSYlnFJ6F6ceemIyuzpAoJ3C6XWFRc0rD0 HeEfkJbYV95NGyW5L1mTQkTZqNRSqeE23Zh5i5CjDWbA1xKJXTdLKeIsWyBFscoq 2ZAmOA/b/1MOnny/fPgVCTbMGfCq5kfyaS8sIeSNW8HVE7OS2egZGt7GjQ7U9Zo2 m+CBn3ivbu0beFFSQXqKuGzrk0k3jTGHMMnZfjrI1ZAG+52Z8RUkB692h4LjZN3J XEdPUnmChBZtYjCsS7aT6KjnbIIzITHpm9HxV3gyvtJM6yFL6GlGAAFMTvtNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUVmAHBYh9y0MM8nqbp3U9lTNX7cswHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzIzMTMyMmUzODM3MmUzMjMw MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNTM1MzEzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAdRX yjANBgkqhkiG9w0BAQsFAAOCAQEAababes/bSGt/dJOuOwCWdyQdNrwo0lioSTAD hsBcKfNqhVgpRAWSclT2g4hi6B9CR676HWhqHhuAI+ammaZ5/CcITNwkUS2QUnjg JqMgD+4BMGaG5XrXu0Ex6Zvj6KGgnJLMVp/VmtQHWJ1qVKObO7zUzY+PPcfmLyVL EotEhGTYYeIxkCiVvn9V+d1F6FtWS6QhNxjJWcNPBe24mjbymP1/T/flWUU7UH90 rda6HmAnP5MxJ5lQS0dIroy9lErcfcLiBDOyZD5ljK+prDrsDFPCwi+NEvmsSVGW Y+Fk5zZ5b/ilpbneTFDrXvY32dw5VAeQstUqJE3yu9CvNYCXJA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:00 2026 by rpki-client