This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130372e302f32342d3234203d3e203331323434.roa File: 34352e3133312e3130372e302f32342d3234203d3e203331323434.roa (raw, json) Hash identifier: gqwnskzc3oW4IK4wBF9eZT3A2YvNk6jPLVS1cI5B8Pw= Subject key identifier: 68:2C:25:B4:F5:51:E0:A9:47:5A:FB:74:3A:7D:73:3C:08:19:1B:7E Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 2FA2AF8A3AFDB8922956C7FF6EB6A2D4EC238A37 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130372e302f32342d3234203d3e203331323434.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 31244 IP address blocks: 45.131.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a2:af:8a:3a:fd:b8:92:29:56:c7:ff:6e:b6:a2:d4:ec:23:8a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=682C25B4F551E0A9475AFB743A7D733C08191B7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ff:a7:c1:ce:fe:24:8c:33:26:92:fb:bd:b2: 91:57:07:48:4b:a5:c3:9f:e1:7e:b3:ce:e7:ae:14: 71:f1:92:54:10:2e:c8:81:86:74:46:53:b5:c3:ea: 52:9e:ea:44:ed:50:d5:fb:60:23:ee:c8:07:6e:09: 82:54:a1:df:68:a4:ea:ca:ea:dd:25:de:4f:b5:a3: 2f:6a:a8:e2:10:ee:71:be:35:b6:20:9d:6f:16:11: 0a:39:d8:a1:20:44:b0:65:6d:eb:c5:c4:c8:4e:2e: 19:9c:84:cd:b6:35:43:db:15:c1:67:75:b9:02:d3: eb:9a:56:97:cb:52:84:a5:7b:a1:b1:07:cf:4e:13: c7:a8:fa:2d:9e:6f:24:af:3a:da:c5:84:32:43:2d: 2d:7e:1c:94:71:a9:14:67:3b:d9:b1:60:47:47:c4: 61:6f:91:3e:d5:a2:80:c9:66:66:69:23:b8:3f:02: 9d:39:1f:ea:c5:a1:95:d8:4a:68:23:4a:0f:8a:bd: 27:85:1a:35:19:da:d6:1d:21:26:9b:67:cb:92:c3: 44:65:a8:ed:30:ff:c8:d5:07:56:de:4a:dd:fa:99: cd:97:81:d5:0f:ff:08:be:ca:7f:8d:24:9e:03:7c: bf:06:77:d9:a8:52:29:bb:4f:07:aa:93:71:b1:d5: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2C:25:B4:F5:51:E0:A9:47:5A:FB:74:3A:7D:73:3C:08:19:1B:7E X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133312e3130372e302f32342d3234203d3e203331323434.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.107.0/24 Signature Algorithm: sha256WithRSAEncryption 81:2d:db:07:0e:e8:c0:ec:8d:8a:43:8e:77:29:88:64:3c:dd: 70:74:5e:99:82:d4:df:48:b1:5f:a3:60:a8:4e:b9:94:f9:39: 0a:18:9b:81:8b:41:2c:97:e4:e9:85:bd:0d:df:92:1a:0d:dd: 79:61:60:c4:21:0e:d6:2b:09:50:8c:33:a9:b1:62:97:b4:47: cb:40:c6:b0:38:88:cc:cf:ac:20:ba:52:d9:91:7f:80:37:bd: d0:4e:5b:f1:51:b9:f4:45:06:3b:be:69:9e:85:97:23:ef:67: 3c:e8:c6:b1:0d:df:c1:54:aa:5f:b1:f4:d8:31:69:3d:5f:3f: bf:37:cc:7e:b2:85:1a:52:22:34:d0:64:ad:25:15:02:96:26: 73:a1:2e:5a:76:24:b8:75:45:87:fb:47:ee:1f:7b:78:da:9a: 15:8e:f4:5c:e0:34:d4:58:24:c4:9b:c5:30:02:b2:14:ca:48: 6c:b8:ec:ca:a0:08:b9:21:a7:28:5d:3a:93:c6:52:a7:e6:0d: 64:a1:74:de:b0:dc:46:8d:ab:93:64:ce:30:47:03:83:60:14: b8:7b:81:b9:9c:3d:55:18:c9:4f:01:78:fd:bf:05:32:fb:dd: d5:13:e1:89:f3:21:a7:e7:62:1c:16:2c:23:73:7d:e9:f7:a8: 3b:99:2e:55 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUL6Kvijr9uJIpVsf/brai1OwjijcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDY4MkMyNUI0RjU1MUUwQTk0NzVBRkI3NDNBN0Q3MzNDMDgxOTFCN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY/6fBzv4kjDMmkvu9spFXB0hL pcOf4X6zzueuFHHxklQQLsiBhnRGU7XD6lKe6kTtUNX7YCPuyAduCYJUod9opOrK 6t0l3k+1oy9qqOIQ7nG+NbYgnW8WEQo52KEgRLBlbevFxMhOLhmchM22NUPbFcFn dbkC0+uaVpfLUoSle6GxB89OE8eo+i2ebySvOtrFhDJDLS1+HJRxqRRnO9mxYEdH xGFvkT7VooDJZmZpI7g/Ap05H+rFoZXYSmgjSg+KvSeFGjUZ2tYdISabZ8uSw0Rl qO0w/8jVB1beSt36mc2XgdUP/wi+yn+NJJ4DfL8Gd9moUim7Tweqk3Gx1YazAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUaCwltPVR4KlHWvt0On1zPAgZG34wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzMxMmUzMTMw MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMxMzIzNDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LYNrMA0GCSqGSIb3DQEBCwUAA4IBAQCBLdsHDujA7I2KQ453KYhkPN1wdF6ZgtTf SLFfo2CoTrmU+TkKGJuBi0Esl+Tphb0N35IaDd15YWDEIQ7WKwlQjDOpsWKXtEfL QMawOIjMz6wgulLZkX+AN73QTlvxUbn0RQY7vmmehZcj72c86MaxDd/BVKpfsfTY MWk9Xz+/N8x+soUaUiI00GStJRUCliZzoS5adiS4dUWH+0fuH3t42poVjvRc4DTU WCTEm8UwArIUykhsuOzKoAi5IacoXTqTxlKn5g1koXTesNxGjauTZM4wRwODYBS4 e4G5nD1VGMlPAXj9vwUy+93VE+GJ8yGn52IcFiwjc33p96g7mS5V -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:43 2026 by rpki-client