This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232342e302f32342d3234203d3e2038373038.roa File: 34352e3133352e3232342e302f32342d3234203d3e2038373038.roa (raw, json) Hash identifier: g/hbPZt5qLvoxyXaglv9Gf6Of8hVCiqGqZg/lhQvxNc= Subject key identifier: D5:05:11:3C:2B:73:0B:F0:8F:51:22:A2:7D:B4:D9:97:B6:0D:48:5B Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 2A0AE0E32E42D1A96760C1C31645917D4094FF47 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232342e302f32342d3234203d3e2038373038.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 8708 IP address blocks: 45.135.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0a:e0:e3:2e:42:d1:a9:67:60:c1:c3:16:45:91:7d:40:94:ff:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=D505113C2B730BF08F5122A27DB4D997B60D485B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:03:a7:f5:95:e4:88:9c:13:ec:1d:93:b6:ad: dd:04:6a:c7:ba:dd:e3:a3:22:e0:2f:24:5e:f8:d6: 61:02:69:b1:89:a3:ca:91:3e:ba:61:00:19:d9:de: ae:9d:69:98:66:ad:92:57:09:81:d8:07:5d:7e:48: 71:08:26:d7:97:fa:0e:25:ad:b5:17:42:d7:f5:57: 28:2d:58:82:ce:d4:63:b8:d2:de:d3:0c:e2:a1:c1: f1:ed:54:85:0f:c8:1e:18:e7:2c:0a:7b:62:ba:f9: 52:dc:b7:51:38:7a:1c:f5:7f:f4:d2:1b:b9:e8:fc: 57:49:45:7e:4a:fb:1c:43:72:e4:45:8f:ed:70:d2: be:84:b7:45:96:e3:e9:3e:f8:a2:fc:75:00:31:a3: a5:f4:7c:27:58:d4:93:d7:fe:fd:72:06:72:08:f8: e6:56:bf:dd:6e:80:2f:47:1b:52:25:e2:14:ef:d9: 8b:f1:f7:3f:1b:1a:43:42:33:96:e2:92:58:5a:7b: 83:25:bb:bb:11:41:37:8a:e3:61:46:f9:73:94:6a: af:cf:4d:17:a9:54:f2:65:60:f2:a0:e3:bd:67:af: 45:48:ee:0e:ef:28:af:91:11:1d:58:32:88:b0:20: 03:cf:1e:bb:94:31:6d:b9:b1:90:d1:9c:a4:43:0c: 0f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:05:11:3C:2B:73:0B:F0:8F:51:22:A2:7D:B4:D9:97:B6:0D:48:5B X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232342e302f32342d3234203d3e2038373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.224.0/24 Signature Algorithm: sha256WithRSAEncryption 44:4e:3f:e8:8f:26:7d:d0:30:9e:a7:c2:83:70:88:4c:c8:e9: 8e:84:ca:7c:41:59:d0:92:a4:a5:f7:3b:fc:f5:f5:ea:fb:c8: 30:6a:70:05:ba:46:bd:f2:1d:46:03:71:d9:36:9b:e8:42:46: a9:fe:97:22:28:2e:c4:e3:15:b6:5c:04:b1:98:35:e4:c4:8e: 3d:81:92:ed:70:98:90:71:c8:98:cc:89:84:7d:b5:b3:48:d1: d9:a5:b5:42:97:38:12:36:e4:73:8f:96:56:d7:f3:53:c9:66: b7:5e:f7:a6:f1:b4:26:ee:82:a8:73:1a:19:59:84:d1:f5:dc: 31:d4:38:f2:8c:c4:9c:65:d9:2c:65:46:c9:f4:68:21:14:d7: c0:0f:51:e7:98:3e:07:79:43:75:ac:59:a0:b1:14:02:f7:8c: 14:de:f5:bc:25:a7:76:55:d3:73:69:18:61:ef:7e:61:22:1f: b9:6a:f0:5e:c0:51:1a:8e:3e:3c:f7:90:39:6e:0e:3f:d2:1e: 93:56:88:2c:4c:5d:df:12:20:5c:8a:ba:00:f0:a1:08:3e:d6: a5:c6:04:3c:6f:34:d5:74:35:ab:74:5b:08:19:63:d6:46:7a: df:c8:1b:6c:3a:41:20:d6:90:aa:f0:f1:34:50:54:d8:86:8f: 94:5c:40:32 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKgrg4y5C0alnYMHDFkWRfUCU/0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEQ1MDUxMTNDMkI3MzBCRjA4RjUxMjJBMjdEQjREOTk3QjYwRDQ4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsA6f1leSInBPsHZO2rd0Ease6 3eOjIuAvJF741mECabGJo8qRPrphABnZ3q6daZhmrZJXCYHYB11+SHEIJteX+g4l rbUXQtf1VygtWILO1GO40t7TDOKhwfHtVIUPyB4Y5ywKe2K6+VLct1E4ehz1f/TS G7no/FdJRX5K+xxDcuRFj+1w0r6Et0WW4+k++KL8dQAxo6X0fCdY1JPX/v1yBnII +OZWv91ugC9HG1Il4hTv2Yvx9z8bGkNCM5biklhae4Mlu7sRQTeK42FG+XOUaq/P TRepVPJlYPKg471nr0VI7g7vKK+RER1YMoiwIAPPHruUMW25sZDRnKRDDA/HAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1QURPCtzC/CPUSKifbTZl7YNSFswHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM1MmUzMjMy MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODM3MzAzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2H 4DANBgkqhkiG9w0BAQsFAAOCAQEARE4/6I8mfdAwnqfCg3CITMjpjoTKfEFZ0JKk pfc7/PX16vvIMGpwBbpGvfIdRgNx2Tab6EJGqf6XIiguxOMVtlwEsZg15MSOPYGS 7XCYkHHImMyJhH21s0jR2aW1Qpc4Ejbkc4+WVtfzU8lmt173pvG0Ju6CqHMaGVmE 0fXcMdQ48ozEnGXZLGVGyfRoIRTXwA9R55g+B3lDdaxZoLEUAveMFN71vCWndlXT c2kYYe9+YSIfuWrwXsBRGo4+PPeQOW4OP9Iek1aILExd3xIgXIq6APChCD7WpcYE PG801XQ1q3RbCBlj1kZ638gbbDpBINaQqvDxNFBU2IaPlFxAMg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:14 2026 by rpki-client