This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e2033323233.roa File: 34352e3133312e3130362e302f32342d3234203d3e2033323233.roa (raw, json) Hash identifier: c53E3e9xWj5c9OLQajrNTEg1ycEPbu5LX8Cojhex+vE= Subject key identifier: 88:96:A0:EF:4F:51:5E:E6:CF:A8:1B:34:04:55:76:4B:04:89:30:95 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 54968AE44BC75CF867B742FAC4A0D202F4A28419 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e2033323233.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 3223 IP address blocks: 45.131.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:96:8a:e4:4b:c7:5c:f8:67:b7:42:fa:c4:a0:d2:02:f4:a2:84:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=8896A0EF4F515EE6CFA81B340455764B04893095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b8:c7:9c:d1:b6:eb:59:ec:ec:4f:cb:c5:00: d2:8f:2d:06:fd:ae:10:05:d6:91:62:65:71:1f:9c: 13:4b:70:fa:cf:60:05:cc:24:8c:dc:85:39:26:76: ff:af:2d:87:da:25:6a:c4:6c:2d:1f:f8:a0:6d:56: c0:b5:6d:0e:ed:fd:f3:1e:f7:91:08:9f:48:eb:be: 03:ce:24:66:dc:1c:bc:72:24:23:5e:8b:cf:c9:bf: 20:ef:bf:9a:88:75:25:e1:2c:58:33:57:83:b9:ab: df:d6:ae:0a:9f:cf:f2:0f:2b:dc:d6:f9:07:9a:d1: 05:3d:3b:6e:24:2e:2c:18:2f:ae:ec:bc:61:b5:24: 0b:ee:4c:69:f3:80:d4:87:77:c8:ed:b6:a4:cb:12: d1:8e:de:61:ef:0c:97:69:23:12:2e:d4:07:40:11: 3d:53:66:f0:0c:d6:f4:35:45:fc:47:cf:a1:17:10: 4a:76:bd:a2:aa:fe:6e:81:cc:8c:df:bd:26:35:24: b9:cd:bc:16:ed:36:1c:ed:fa:8b:d1:43:58:fd:76: 49:3b:84:5b:8b:30:9b:cc:a1:61:d8:d6:64:76:ec: 53:59:58:1b:98:93:e8:eb:ab:50:b1:f7:d5:0b:5c: 26:ed:ce:a1:15:0f:1f:31:44:78:97:20:f5:70:17: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:96:A0:EF:4F:51:5E:E6:CF:A8:1B:34:04:55:76:4B:04:89:30:95 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130362e302f32342d3234203d3e2033323233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.106.0/24 Signature Algorithm: sha256WithRSAEncryption 27:47:52:07:6f:51:1a:94:54:e6:8d:1f:ff:10:41:58:ac:28: 3a:c5:71:ec:21:d8:e2:74:0a:f4:b4:ef:7c:29:5e:95:f1:f8: b4:42:10:b7:01:01:c2:71:6d:7f:71:d0:e0:77:cd:28:ea:bb: 8b:f4:74:c0:40:2d:63:d9:fa:ff:2d:44:91:bc:f2:5e:67:b6: a4:c5:6a:7d:65:eb:58:17:9f:36:09:55:06:c2:1d:c0:3e:ea: 1c:e8:8c:9d:2c:ad:ea:32:08:7b:4e:a3:c4:31:70:10:a1:15: 50:67:b9:fd:f5:0e:c8:74:e7:6c:2b:df:89:db:98:81:cf:b1: e9:ee:0c:b6:f9:7f:da:96:91:ff:f2:bd:41:d8:45:6f:ba:d5: 16:d5:02:38:28:8f:42:c3:53:f3:cc:dd:d5:7e:28:f8:f7:7c: 92:c5:f5:14:b0:e0:70:1c:e1:b9:95:0e:62:a8:d2:5e:d3:07: 93:a9:10:c8:68:1e:e4:b1:51:4c:24:27:52:77:52:e2:3d:30: 48:d6:fd:62:a3:f7:8f:35:a1:ae:52:ef:30:82:db:c9:58:a8: 21:92:32:4d:95:02:5c:bf:cb:1f:7a:7a:17:66:45:21:a7:5d: 4d:48:2a:53:59:2e:4c:3c:ee:65:ce:f7:95:97:47:86:d9:2d: 2f:5c:41:8b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVJaK5EvHXPhnt0L6xKDSAvSihBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDg4OTZBMEVGNEY1MTVFRTZDRkE4MUIzNDA0NTU3NjRCMDQ4OTMwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZuMec0bbrWezsT8vFANKPLQb9 rhAF1pFiZXEfnBNLcPrPYAXMJIzchTkmdv+vLYfaJWrEbC0f+KBtVsC1bQ7t/fMe 95EIn0jrvgPOJGbcHLxyJCNei8/JvyDvv5qIdSXhLFgzV4O5q9/Wrgqfz/IPK9zW +Qea0QU9O24kLiwYL67svGG1JAvuTGnzgNSHd8jttqTLEtGO3mHvDJdpIxIu1AdA ET1TZvAM1vQ1RfxHz6EXEEp2vaKq/m6BzIzfvSY1JLnNvBbtNhzt+ovRQ1j9dkk7 hFuLMJvMoWHY1mR27FNZWBuYk+jrq1Cx99ULXCbtzqEVDx8xRHiXIPVwFwtRAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUiJag709RXubPqBs0BFV2SwSJMJUwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzMxMmUzMTMw MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMyMzIzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2D ajANBgkqhkiG9w0BAQsFAAOCAQEAJ0dSB29RGpRU5o0f/xBBWKwoOsVx7CHY4nQK 9LTvfClelfH4tEIQtwEBwnFtf3HQ4HfNKOq7i/R0wEAtY9n6/y1EkbzyXme2pMVq fWXrWBefNglVBsIdwD7qHOiMnSyt6jIIe06jxDFwEKEVUGe5/fUOyHTnbCvfiduY gc+x6e4Mtvl/2paR//K9QdhFb7rVFtUCOCiPQsNT88zd1X4o+Pd8ksX1FLDgcBzh uZUOYqjSXtMHk6kQyGge5LFRTCQnUndS4j0wSNb9YqP3jzWhrlLvMILbyVioIZIy TZUCXL/LH3p6F2ZFIaddTUgqU1kuTDzuZc73lZdHhtktL1xBiw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:11 2026 by rpki-client