This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133332e3135322e302f32342d3234203d3e2038373038.roa File: 34352e3133332e3135322e302f32342d3234203d3e2038373038.roa (raw, json) Hash identifier: +1jfuWKb+OiRWRRfWCz2O1EOxOtAKdeqvfWCg+ahnL0= Subject key identifier: CE:CF:6F:ED:81:BB:BF:41:06:F1:FB:BC:7C:2B:E9:45:ED:AE:13:0E Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 36E8B41D288EC722E1403DC3F159E87A9B102E98 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133332e3135322e302f32342d3234203d3e2038373038.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 8708 IP address blocks: 45.133.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:e8:b4:1d:28:8e:c7:22:e1:40:3d:c3:f1:59:e8:7a:9b:10:2e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=CECF6FED81BBBF4106F1FBBC7C2BE945EDAE130E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:7a:c0:dd:9e:28:0f:d1:b5:3f:c2:bb:98: ad:a2:22:b6:cf:ee:13:23:3a:84:e6:28:1a:68:3b: e2:19:d7:91:45:41:93:c8:b1:51:04:24:67:89:46: 79:d0:21:5d:8f:62:39:28:5f:b6:f2:2f:1a:ff:46: 9b:8c:64:b3:b8:ce:80:5a:d8:89:e4:0d:c2:20:26: 4d:9a:48:a6:27:5d:67:0e:66:e6:64:d8:e8:54:99: fa:c8:85:c6:7a:99:21:a5:10:ec:a3:78:35:53:c3: 33:59:60:33:0d:b2:15:30:4b:54:58:8f:6e:86:c0: fc:20:df:bf:7f:11:06:9b:95:c1:d1:d9:02:cc:80: fd:b7:15:0d:6e:a7:fd:e6:da:31:64:a8:33:c1:4c: 11:ca:84:0b:e8:63:21:b3:01:79:bd:54:99:f3:13: e6:9f:58:d9:f9:b7:01:d8:25:33:53:9e:66:d3:4e: ea:cc:20:a1:f7:47:16:f3:56:7f:63:7e:20:39:b0: 4a:b6:61:df:28:dc:84:8c:17:79:c1:28:a7:7e:1e: 78:c8:90:6e:67:30:a0:a1:d5:f9:bf:98:c4:ca:7b: 5a:89:3c:e2:8a:6e:00:06:29:d9:ac:86:9e:c3:d9: b3:e9:31:e9:ca:58:df:73:39:4a:af:3c:12:04:58: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:CF:6F:ED:81:BB:BF:41:06:F1:FB:BC:7C:2B:E9:45:ED:AE:13:0E X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133332e3135322e302f32342d3234203d3e2038373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.152.0/24 Signature Algorithm: sha256WithRSAEncryption 84:b1:ba:b4:d7:d8:bd:cb:2f:9a:86:21:59:a0:7f:40:ec:05: 44:94:7f:38:15:50:3d:87:06:3a:b0:93:5a:da:93:88:0e:d8: d8:1c:94:0a:9f:88:69:ad:2c:d7:89:a2:24:32:80:f9:4e:07: e1:28:7c:f1:61:05:29:7f:55:ff:95:87:dd:82:cf:1d:64:fa: b7:f7:70:d7:2d:bd:a8:f1:b8:10:f2:03:ed:db:2c:1c:61:2d: 3e:9d:26:0d:26:a5:b4:90:6d:54:d7:3f:a6:f1:d3:21:eb:aa: 67:71:b6:f5:32:0d:2b:57:37:56:aa:dd:99:e2:9e:3d:81:70: 8d:90:96:33:52:51:3f:59:38:01:e4:66:73:67:e3:8e:c7:95: d3:ca:02:10:f5:c9:ff:ac:9f:2a:93:69:d9:77:f2:f6:89:81: 0d:01:f1:a9:00:81:b0:55:38:b7:d7:3a:97:dc:7d:f6:17:de: 73:5f:4c:1a:92:e5:21:40:61:f2:66:77:fc:a6:8c:23:e1:e5: 48:a5:dd:08:77:b6:b4:96:fb:af:bd:70:9f:97:35:8f:d1:96: 40:61:0a:0a:92:f7:0c:fe:22:88:df:99:79:32:91:eb:4c:a5: d6:ab:56:bf:9b:3e:67:66:9d:42:64:6a:c7:01:60:58:18:b1: ca:80:e4:1a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNui0HSiOxyLhQD3D8VnoepsQLpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKENFQ0Y2RkVEODFCQkJGNDEwNkYxRkJCQzdDMkJFOTQ1RURBRTEzMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPHrA3Z4oD9G1P8K7mK2iIrbP 7hMjOoTmKBpoO+IZ15FFQZPIsVEEJGeJRnnQIV2PYjkoX7byLxr/RpuMZLO4zoBa 2InkDcIgJk2aSKYnXWcOZuZk2OhUmfrIhcZ6mSGlEOyjeDVTwzNZYDMNshUwS1RY j26GwPwg379/EQablcHR2QLMgP23FQ1up/3m2jFkqDPBTBHKhAvoYyGzAXm9VJnz E+afWNn5twHYJTNTnmbTTurMIKH3RxbzVn9jfiA5sEq2Yd8o3ISMF3nBKKd+HnjI kG5nMKCh1fm/mMTKe1qJPOKKbgAGKdmshp7D2bPpMenKWN9zOUqvPBIEWGArAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUzs9v7YG7v0EG8fu8fCvpRe2uEw4wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzMzMmUzMTM1 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODM3MzAzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2F mDANBgkqhkiG9w0BAQsFAAOCAQEAhLG6tNfYvcsvmoYhWaB/QOwFRJR/OBVQPYcG OrCTWtqTiA7Y2ByUCp+Iaa0s14miJDKA+U4H4Sh88WEFKX9V/5WH3YLPHWT6t/dw 1y29qPG4EPID7dssHGEtPp0mDSaltJBtVNc/pvHTIeuqZ3G29TINK1c3VqrdmeKe PYFwjZCWM1JRP1k4AeRmc2fjjseV08oCEPXJ/6yfKpNp2Xfy9omBDQHxqQCBsFU4 t9c6l9x99hfec19MGpLlIUBh8mZ3/KaMI+HlSKXdCHe2tJb7r71wn5c1j9GWQGEK CpL3DP4iiN+ZeTKR60yl1qtWv5s+Z2adQmRqxwFgWBixyoDkGg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:58 2026 by rpki-client