This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230332e302f32342d3234203d3e203534323532.roa File: 3231322e38372e3230332e302f32342d3234203d3e203534323532.roa (raw, json) Hash identifier: eCcqW5ndnMSblDfe3/RcDzqy1P6+pJ/o0WGjTdmmtek= Subject key identifier: D9:75:C6:8C:9F:BA:8B:DA:77:9C:4F:A7:6C:BC:82:61:DE:35:AA:56 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 206B627EFB583009A3B3CB2A517C2245DDC80434 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230332e302f32342d3234203d3e203534323532.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 54252 IP address blocks: 212.87.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:6b:62:7e:fb:58:30:09:a3:b3:cb:2a:51:7c:22:45:dd:c8:04:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=D975C68C9FBA8BDA779C4FA76CBC8261DE35AA56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:96:72:21:aa:14:cc:2a:d1:37:32:de:b4: fc:5d:04:ed:ec:2e:e1:f3:8b:e7:a7:62:08:78:b4: 82:77:f3:a9:0b:3c:6e:d7:36:c9:ea:ef:2c:d9:5e: 50:c9:7f:ac:26:3a:1f:db:14:e0:69:b8:f5:9b:50: 1d:fb:59:5d:29:17:71:64:86:9c:49:aa:fe:7a:f3: 85:89:18:50:fc:89:43:f9:96:fd:b5:1a:9b:7f:55: db:fe:eb:c2:bc:e7:eb:cb:50:b4:90:d7:9e:f2:47: 69:a5:a5:0f:13:28:7a:22:f6:f0:ce:57:0d:b9:c2: 7e:84:d5:5b:05:c1:15:7e:47:cf:66:d0:40:be:e3: b5:41:de:72:3d:a2:02:01:c5:c1:aa:d2:85:da:3f: 44:f5:42:bd:e7:83:a8:cb:c1:53:43:d1:97:6b:a9: 52:47:6f:5f:f8:88:cd:a0:45:54:d4:b6:ce:ed:28: d8:6a:5e:6b:b6:9b:ce:11:3c:bd:42:9b:81:c1:69: b4:f3:be:8e:a8:a1:7d:f6:55:21:0f:db:f2:1e:a4: 28:0f:d0:a7:98:89:f7:ac:29:98:68:14:3c:7d:21: c5:8b:1d:a4:84:89:f4:7f:58:b1:70:23:a6:dc:87: 9b:60:81:80:65:0c:4c:52:51:02:e7:2a:74:84:4a: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:75:C6:8C:9F:BA:8B:DA:77:9C:4F:A7:6C:BC:82:61:DE:35:AA:56 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/3231322e38372e3230332e302f32342d3234203d3e203534323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.203.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:5e:32:33:6b:60:01:12:c5:4f:0f:29:e9:66:ad:e0:62:35: a6:52:6c:12:48:04:75:e3:c3:a7:d0:79:2d:4e:81:3e:ce:26: 8e:c1:9f:dd:f6:d6:5f:d0:46:48:a6:f0:e4:10:02:5a:5a:db: 16:b8:a1:83:95:e3:bc:fa:4c:00:6a:d4:f1:01:4f:7f:14:ea: c0:00:5f:55:a8:bf:96:30:47:ef:e2:e7:c3:3a:ae:74:d7:82: 40:25:81:3a:90:9e:7f:d7:b0:3a:be:30:6d:ed:c4:9d:4a:b1: a8:0f:dc:dd:5f:05:c2:eb:b6:fd:70:e3:a9:04:3d:b1:d0:17: 48:27:9b:6d:55:5c:75:ca:56:5a:6b:aa:01:92:33:99:ca:1d: 0d:76:63:6b:3d:85:49:84:60:e1:18:c0:86:03:0f:f3:b0:a5: d8:84:a8:42:9c:90:0a:9f:97:f5:57:82:45:0e:14:2a:c0:6a: 95:71:cb:ab:40:29:e5:c3:43:4b:22:34:fe:69:04:17:76:83: a9:72:22:d5:3d:71:85:55:54:82:0b:f5:47:b6:91:19:76:05: fb:79:f7:13:ad:36:72:bc:6f:e3:d3:ef:d4:74:b6:4d:70:12: f9:67:d4:fb:58:07:97:a1:a8:aa:07:69:fb:ec:13:d6:75:bc: f0:52:e3:da -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIGtifvtYMAmjs8sqUXwiRd3IBDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEQ5NzVDNjhDOUZCQThCREE3NzlDNEZBNzZDQkM4MjYxREUzNUFBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl/JZyIaoUzCrRNzLetPxdBO3s LuHzi+enYgh4tIJ386kLPG7XNsnq7yzZXlDJf6wmOh/bFOBpuPWbUB37WV0pF3Fk hpxJqv5684WJGFD8iUP5lv21Gpt/Vdv+68K85+vLULSQ157yR2mlpQ8TKHoi9vDO Vw25wn6E1VsFwRV+R89m0EC+47VB3nI9ogIBxcGq0oXaP0T1Qr3ng6jLwVND0Zdr qVJHb1/4iM2gRVTUts7tKNhqXmu2m84RPL1Cm4HBabTzvo6ooX32VSEP2/IepCgP 0KeYifesKZhoFDx9IcWLHaSEifR/WLFwI6bch5tggYBlDExSUQLnKnSESp4TAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU2XXGjJ+6i9p3nE+nbLyCYd41qlYwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzIzMTMyMmUzODM3MmUzMjMw MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM0MzIzNTMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1FfLMA0GCSqGSIb3DQEBCwUAA4IBAQAcXjIza2ABEsVPDynpZq3gYjWmUmwSSAR1 48On0HktToE+ziaOwZ/d9tZf0EZIpvDkEAJaWtsWuKGDleO8+kwAatTxAU9/FOrA AF9VqL+WMEfv4ufDOq5014JAJYE6kJ5/17A6vjBt7cSdSrGoD9zdXwXC67b9cOOp BD2x0BdIJ5ttVVx1ylZaa6oBkjOZyh0NdmNrPYVJhGDhGMCGAw/zsKXYhKhCnJAK n5f1V4JFDhQqwGqVccurQCnlw0NLIjT+aQQXdoOpciLVPXGFVVSCC/VHtpEZdgX7 efcTrTZyvG/j0+/UdLZNcBL5Z9T7WAeXoaiqB2n77BPWdbzwUuPa -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:43 2026 by rpki-client