This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e31332e3137382e302f32342d3234203d3e203438393535.roa File: 34352e31332e3137382e302f32342d3234203d3e203438393535.roa (raw, json) Hash identifier: 41f3uHs1Z/YRWLBw2iTN4TJE86L9iJk9ZOWRlzyriZg= Subject key identifier: A4:4C:BE:A5:38:BB:FC:8A:2E:A3:42:FE:58:EF:43:28:3A:36:E7:4B Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 17C89CE71E200472934D0EE52A8E29BD91747E54 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e31332e3137382e302f32342d3234203d3e203438393535.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 48955 IP address blocks: 45.13.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c8:9c:e7:1e:20:04:72:93:4d:0e:e5:2a:8e:29:bd:91:74:7e:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=A44CBEA538BBFC8A2EA342FE58EF43283A36E74B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3d:d0:2e:33:e5:19:5f:ff:8e:b9:a9:12:37: e1:65:e7:43:04:b9:51:82:45:c2:5c:f9:51:e5:87: fc:6e:a5:f5:1e:46:e8:e4:91:dd:f1:5d:ed:4a:7d: 0d:14:f2:07:1c:36:cc:90:7e:7c:14:e6:3c:fb:94: 19:5f:c8:9a:6c:40:94:0d:16:8f:55:96:17:7f:33: 23:6e:f1:18:d6:29:7b:73:3a:e9:21:be:af:56:56: 4e:7d:20:84:e9:6a:cb:ae:6e:16:7e:92:c7:e8:60: 4c:9f:a8:97:17:fa:1b:fa:b7:c2:df:2a:03:90:85: c2:1d:4f:5e:df:6f:0d:90:75:18:10:b4:cc:91:96: 78:d8:bc:4a:14:51:45:c9:a7:c1:91:32:a3:e0:be: 2e:30:7b:26:fa:3c:74:5c:78:ab:de:5e:67:bf:c1: 18:d0:a7:cc:8f:d8:05:a3:7a:7c:21:bb:55:f2:db: c9:e9:d0:83:99:ec:af:6e:ad:48:0d:07:a6:1f:bb: 2a:b0:2a:49:3e:b5:01:b5:2a:40:c9:aa:06:37:19: 39:fb:45:38:1d:7f:f1:22:54:cd:17:3d:6c:9f:6e: d5:41:95:a0:77:c0:92:45:ac:17:68:e1:06:2e:d7: 18:28:c6:0f:5b:a4:52:b6:8c:a0:a0:fb:0d:14:ff: a8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:BE:A5:38:BB:FC:8A:2E:A3:42:FE:58:EF:43:28:3A:36:E7:4B X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e31332e3137382e302f32342d3234203d3e203438393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.178.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:f8:11:cf:b8:02:5f:7f:73:56:98:b5:56:9a:13:27:d9:e8: f3:b6:af:f5:c6:e4:e1:e1:46:c2:95:d4:6e:92:bd:66:ae:e4: 0a:e6:20:64:d7:18:bc:0e:91:0c:9d:aa:0e:68:8b:5e:a3:7f: 37:62:84:d3:db:19:3c:a8:06:fc:89:2a:d3:c9:64:d5:99:0a: 69:e8:51:af:47:9f:15:7e:14:eb:98:6b:8c:d3:8e:0c:6d:93: ab:db:42:c2:a3:27:75:4c:6c:e0:c8:29:a9:77:ea:f3:49:62: 61:ac:7c:2c:ec:ee:4a:f3:8b:54:e6:83:9c:82:f9:40:2e:08: 5b:40:45:ec:f7:e8:cd:b2:4b:e5:61:98:a2:19:dc:80:03:61: 72:51:f7:ab:9b:c8:42:33:c8:e3:0c:fe:cf:30:be:69:ee:fe: 76:7c:57:df:a4:c3:73:13:a3:ff:5c:6e:68:ab:94:b6:ba:45: 26:0e:56:3c:8a:cf:87:3f:53:8c:29:9d:7f:fa:f3:11:93:c3: 2f:8e:48:b0:ac:a0:68:da:3d:f9:8b:64:e8:e7:5e:81:df:f8: 38:e1:6e:92:03:51:0e:4b:dc:9b:d3:c3:8c:d9:1f:d7:3a:0b: 29:a1:6d:7b:28:42:2a:ce:04:d7:dd:67:93:53:70:ab:b3:93: 7a:d9:6a:38 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUF8ic5x4gBHKTTQ7lKo4pvZF0flQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKEE0NENCRUE1MzhCQkZDOEEyRUEzNDJGRTU4RUY0MzI4M0EzNkU3NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdPdAuM+UZX/+OuakSN+Fl50ME uVGCRcJc+VHlh/xupfUeRujkkd3xXe1KfQ0U8gccNsyQfnwU5jz7lBlfyJpsQJQN Fo9Vlhd/MyNu8RjWKXtzOukhvq9WVk59IITpasuubhZ+ksfoYEyfqJcX+hv6t8Lf KgOQhcIdT17fbw2QdRgQtMyRlnjYvEoUUUXJp8GRMqPgvi4weyb6PHRceKveXme/ wRjQp8yP2AWjenwhu1Xy28np0IOZ7K9urUgNB6YfuyqwKkk+tQG1KkDJqgY3GTn7 RTgdf/EiVM0XPWyfbtVBlaB3wJJFrBdo4QYu1xgoxg9bpFK2jKCg+w0U/6gBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUpEy+pTi7/Iouo0L+WO9DKDo250swHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzJlMzEzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM5MzUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0N sjANBgkqhkiG9w0BAQsFAAOCAQEADPgRz7gCX39zVpi1VpoTJ9no87av9cbk4eFG wpXUbpK9Zq7kCuYgZNcYvA6RDJ2qDmiLXqN/N2KE09sZPKgG/Ikq08lk1ZkKaehR r0efFX4U65hrjNOODG2Tq9tCwqMndUxs4MgpqXfq80liYax8LOzuSvOLVOaDnIL5 QC4IW0BF7PfozbJL5WGYohncgANhclH3q5vIQjPI4wz+zzC+ae7+dnxX36TDcxOj /1xuaKuUtrpFJg5WPIrPhz9TjCmdf/rzEZPDL45IsKygaNo9+Ytk6Odegd/4OOFu kgNRDkvcm9PDjNkf1zoLKaFteyhCKs4E191nk1Nwq7OTetlqOA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:41 2026 by rpki-client