This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130342e302f32332d3234203d3e203438393535.roa File: 34352e3133312e3130342e302f32332d3234203d3e203438393535.roa (raw, json) Hash identifier: f56q41YxJRY745gnUaOi6oU6v/1LB7ldvddcorVCliw= Subject key identifier: 95:51:84:98:1D:A1:54:BD:C5:39:C9:8E:40:07:81:5F:9B:93:E2:C4 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 30B4F08E4D7F5D691B3D6B73EEBEC6096FB54C5F Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130342e302f32332d3234203d3e203438393535.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 48955 IP address blocks: 45.131.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b4:f0:8e:4d:7f:5d:69:1b:3d:6b:73:ee:be:c6:09:6f:b5:4c:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=955184981DA154BDC539C98E4007815F9B93E2C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fd:6d:34:56:95:4a:67:47:45:f4:89:06:cc: 1e:da:45:d9:9a:ea:1e:ce:85:fa:5e:98:11:ad:e2: 01:fb:11:41:0d:20:79:c4:7f:10:21:b6:9a:69:fb: ce:2c:c3:56:38:b6:60:01:ac:ca:e7:c6:7d:f0:46: c7:71:38:43:4d:ea:e7:f5:6a:47:31:37:46:9a:bb: 33:96:b5:8d:8c:53:9a:ea:32:e5:1a:a3:2a:6f:fc: 44:d4:6d:53:6b:37:82:e5:69:cf:1f:cc:a6:ba:94: 62:15:04:c5:44:ac:de:94:05:fb:71:38:ec:83:ed: 07:58:ae:56:61:d5:6c:7c:c6:7d:4d:ac:bc:4e:a8: b0:50:0d:dc:06:26:e4:dd:6b:db:66:15:70:80:6e: 48:18:b4:a8:87:ef:ef:fe:66:5b:37:4c:3a:64:36: 11:b1:6f:e8:ea:b1:df:65:9e:96:e8:97:46:57:7e: dc:11:eb:03:c7:fb:2f:66:50:12:b9:25:e0:b6:43: 39:67:a0:0d:c4:82:3b:70:3d:45:65:e7:94:b3:4d: 37:08:97:4a:45:97:54:3d:51:7a:7f:b0:9a:43:9d: 88:89:71:ad:60:64:a4:04:fe:a8:61:c5:e5:22:ef: 19:17:0f:77:c1:be:bf:34:72:64:17:4e:77:53:23: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:84:98:1D:A1:54:BD:C5:39:C9:8E:40:07:81:5F:9B:93:E2:C4 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130342e302f32332d3234203d3e203438393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.104.0/23 Signature Algorithm: sha256WithRSAEncryption 84:c1:af:c9:d0:65:af:5c:4e:40:61:14:ee:55:2b:8e:51:e9: df:bf:ed:47:30:a6:02:f6:e4:14:fd:9e:3a:09:91:90:9e:93: 61:fc:dc:1f:69:03:bf:08:fc:3b:de:55:66:e9:3a:d4:38:ab: 39:1e:38:3b:c2:87:6c:40:5f:8f:42:30:00:8f:8f:9c:5e:94: c8:c9:f2:b3:fa:64:38:51:83:55:2b:9d:c6:42:12:cb:8a:70: 17:08:61:a4:61:ec:18:1a:79:04:6b:51:45:fb:43:6a:ae:4f: 69:c5:59:43:4b:67:3f:7b:e9:e1:7e:af:4a:24:82:25:b5:f7: 0e:01:ee:e2:00:73:74:f5:50:47:c4:0a:de:a3:4b:db:dd:49: f8:3c:4a:26:69:83:45:01:68:44:3a:92:e6:44:87:8f:e2:77: 77:de:a9:5d:21:0f:69:3c:cd:3a:80:83:50:6d:f9:5c:76:ed: e5:33:c2:c9:f1:60:ed:0d:52:18:99:cd:2a:b9:65:55:a3:05: 43:58:c1:38:ce:9e:fa:b9:aa:be:cc:b6:bb:23:65:34:f8:cc: 7a:7e:52:1b:1b:16:fc:19:f8:7f:13:9d:b5:d7:f0:3b:82:c1: 10:c4:e2:5f:32:4f:73:72:3a:ce:d8:4e:39:23:61:43:63:f8: 25:ee:92:94 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMLTwjk1/XWkbPWtz7r7GCW+1TF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDk1NTE4NDk4MURBMTU0QkRDNTM5Qzk4RTQwMDc4MTVGOUI5M0UyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc/W00VpVKZ0dF9IkGzB7aRdma 6h7OhfpemBGt4gH7EUENIHnEfxAhtppp+84sw1Y4tmABrMrnxn3wRsdxOENN6uf1 akcxN0aauzOWtY2MU5rqMuUaoypv/ETUbVNrN4Llac8fzKa6lGIVBMVErN6UBftx OOyD7QdYrlZh1Wx8xn1NrLxOqLBQDdwGJuTda9tmFXCAbkgYtKiH7+/+Zls3TDpk NhGxb+jqsd9lnpbol0ZXftwR6wPH+y9mUBK5JeC2QzlnoA3EgjtwPUVl55SzTTcI l0pFl1Q9UXp/sJpDnYiJca1gZKQE/qhhxeUi7xkXD3fBvr80cmQXTndTI8B7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlVGEmB2hVL3FOcmOQAeBX5uT4sQwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzMxMmUzMTMw MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzkzNTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB LYNoMA0GCSqGSIb3DQEBCwUAA4IBAQCEwa/J0GWvXE5AYRTuVSuOUenfv+1HMKYC 9uQU/Z46CZGQnpNh/NwfaQO/CPw73lVm6TrUOKs5Hjg7wodsQF+PQjAAj4+cXpTI yfKz+mQ4UYNVK53GQhLLinAXCGGkYewYGnkEa1FF+0Nqrk9pxVlDS2c/e+nhfq9K JIIltfcOAe7iAHN09VBHxAreo0vb3Un4PEomaYNFAWhEOpLmRIeP4nd33qldIQ9p PM06gINQbflcdu3lM8LJ8WDtDVIYmc0quWVVowVDWME4zp76uaq+zLa7I2U0+Mx6 flIbGxb8Gfh/E5211/A7gsEQxOJfMk9zcjrO2E45I2FDY/gl7pKU -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:13 2026 by rpki-client