This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e31332e3137362e302f32332d3234203d3e203438393535.roa File: 34352e31332e3137362e302f32332d3234203d3e203438393535.roa (raw, json) Hash identifier: PU8ibrMYWox/OtmTjsSKqUubQh8vZ+T8KJqILERcVIk= Subject key identifier: A7:9E:63:5C:DF:61:A6:73:64:DB:AF:3A:67:97:73:75:D1:ED:CB:ED Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 1B39DC1A7941378CE747D6069FB6D6F049747CCE Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e31332e3137362e302f32332d3234203d3e203438393535.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 48955 IP address blocks: 45.13.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:39:dc:1a:79:41:37:8c:e7:47:d6:06:9f:b6:d6:f0:49:74:7c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=A79E635CDF61A67364DBAF3A67977375D1EDCBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:04:e1:e8:5d:a8:ca:ae:42:59:02:82:42:98: 5e:a7:d1:97:80:55:ea:b0:75:c0:0f:d1:10:da:01: 18:83:f1:42:5d:5f:01:8e:fb:1b:48:5b:c4:3c:12: 3b:eb:e3:5d:46:f5:06:65:dd:86:01:c9:04:74:2e: 20:0f:68:2c:2b:99:a0:2e:c6:88:43:1e:f8:06:13: 98:f7:81:88:97:e8:9a:3e:27:86:be:09:6a:f4:2e: da:9f:53:a6:b6:0b:a1:6d:85:04:b1:a1:dc:5e:7d: d6:40:c6:f2:c6:d0:d9:ca:61:c5:01:40:c7:4b:c3: 29:f9:4c:ff:d8:9c:29:52:fa:8d:09:66:ff:db:cc: 45:a5:3c:60:d1:0e:91:22:3b:e7:8d:36:72:4a:03: d0:74:ad:75:97:0c:89:f3:c0:59:ac:d2:12:8c:d6: e3:f3:1b:31:12:e4:31:fe:83:ba:70:49:6f:1b:7b: dc:c9:8c:80:ab:c3:4f:c0:4e:e4:d5:ec:0b:53:2a: eb:72:79:0d:d7:36:9d:88:f5:94:7f:93:c0:b0:f9: 1f:06:e9:70:03:ba:56:d1:ee:61:b0:3f:11:bf:23: a4:23:32:e1:ab:2b:11:02:0c:86:a6:e9:9c:6c:50: 73:2d:a8:cb:eb:41:65:9d:ff:75:8f:16:13:00:b4: ed:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9E:63:5C:DF:61:A6:73:64:DB:AF:3A:67:97:73:75:D1:ED:CB:ED X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e31332e3137362e302f32332d3234203d3e203438393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.176.0/23 Signature Algorithm: sha256WithRSAEncryption 06:4b:e4:b8:9b:d6:11:02:6a:6c:00:a0:50:1e:02:9b:15:2a: f8:8a:86:ca:99:21:a4:87:e6:4e:0c:00:da:36:83:c1:7a:a3: 2a:14:e9:de:50:54:93:a6:33:b7:b6:eb:0b:ae:bf:bc:47:5c: 93:dd:e0:d3:f9:48:5b:36:e5:05:6d:65:d1:5a:71:f1:14:26: c2:e9:c7:71:38:0d:4d:d0:0a:d3:f4:9d:77:af:9e:37:32:05: 04:1a:a8:3d:86:02:5d:c2:b1:99:6a:df:fb:f0:2a:2d:64:9b: 07:69:0d:48:94:67:a2:1d:52:97:e1:d1:68:40:4a:06:0a:ba: 44:80:38:27:9f:ee:39:21:e8:47:97:14:33:8c:3e:97:19:d8: 56:ae:df:98:c9:57:a7:c1:e9:aa:73:a3:9b:a7:f3:93:60:b4: fe:15:f5:25:7d:0f:37:ae:d6:88:a0:ff:b6:2e:d3:23:ad:ae: 61:39:2d:d6:8f:f4:c3:e7:47:02:dc:48:ce:a8:f2:3a:2c:a2: e3:3a:0d:31:75:6c:94:ab:45:68:80:97:49:91:21:de:64:d7: 9d:19:4b:65:6a:f5:b5:f5:42:6f:79:1e:d3:f6:b2:cf:55:e0: 4e:7c:fc:6f:58:fb:91:f7:77:ce:9e:9f:47:b9:2f:c7:3b:6e: f2:76:6b:2d -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGzncGnlBN4znR9YGn7bW8El0fM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKEE3OUU2MzVDREY2MUE2NzM2NERCQUYzQTY3OTc3Mzc1RDFFRENCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABOHoXajKrkJZAoJCmF6n0ZeA VeqwdcAP0RDaARiD8UJdXwGO+xtIW8Q8Ejvr411G9QZl3YYByQR0LiAPaCwrmaAu xohDHvgGE5j3gYiX6Jo+J4a+CWr0LtqfU6a2C6FthQSxodxefdZAxvLG0NnKYcUB QMdLwyn5TP/YnClS+o0JZv/bzEWlPGDRDpEiO+eNNnJKA9B0rXWXDInzwFms0hKM 1uPzGzES5DH+g7pwSW8be9zJjICrw0/ATuTV7AtTKutyeQ3XNp2I9ZR/k8Cw+R8G 6XADulbR7mGwPxG/I6QjMuGrKxECDIam6ZxsUHMtqMvrQWWd/3WPFhMAtO0HAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUp55jXN9hpnNk2686Z5dzddHty+0wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzJlMzEzNzM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzODM5MzUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS0N sDANBgkqhkiG9w0BAQsFAAOCAQEABkvkuJvWEQJqbACgUB4CmxUq+IqGypkhpIfm TgwA2jaDwXqjKhTp3lBUk6Yzt7brC66/vEdck93g0/lIWzblBW1l0Vpx8RQmwunH cTgNTdAK0/Sdd6+eNzIFBBqoPYYCXcKxmWrf+/AqLWSbB2kNSJRnoh1Sl+HRaEBK Bgq6RIA4J5/uOSHoR5cUM4w+lxnYVq7fmMlXp8HpqnOjm6fzk2C0/hX1JX0PN67W iKD/ti7TI62uYTkt1o/0w+dHAtxIzqjyOiyi4zoNMXVslKtFaICXSZEh3mTXnRlL ZWr1tfVCb3ke0/ayz1XgTnz8b1j7kfd3zp6fR7kvxztu8nZrLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:23 2026 by rpki-client