This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203335373731.roa File: 34352e3133352e3232352e302f32342d3234203d3e203335373731.roa (raw, json) Hash identifier: SRPC1nvhDGKWEfT4IjxxZaptcC/nqryjmZNC9psrETs= Subject key identifier: 5F:F0:C8:44:A5:DD:7E:3C:73:3E:7D:45:5F:B4:C1:9A:25:F8:F7:7C Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 02ECDD1267F9E310C7C6C302BB953FED0F71BFD4 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203335373731.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 35771 IP address blocks: 45.135.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ec:dd:12:67:f9:e3:10:c7:c6:c3:02:bb:95:3f:ed:0f:71:bf:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=5FF0C844A5DD7E3C733E7D455FB4C19A25F8F77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:af:29:f7:e4:78:35:18:11:7c:b1:b3:c3: 04:23:63:0a:aa:48:51:d2:6e:e0:e6:ca:59:bc:cc: b9:78:53:e9:f1:50:44:9f:98:2e:50:25:66:c3:29: 30:3f:4e:bf:f6:15:07:24:a6:a1:8b:3c:23:b3:ce: a1:3e:12:31:00:65:8b:99:8d:81:2b:a4:e9:03:76: a7:84:b7:16:9e:e5:c1:28:78:f7:63:d5:4a:43:0b: f2:dc:43:30:f1:84:42:f4:2a:3e:dd:f1:91:c1:50: e3:f6:36:71:c3:25:a7:dc:03:d9:39:62:bf:b5:34: 80:9a:8b:24:5d:b7:61:c9:bf:b0:d2:41:97:44:be: 0e:1d:28:a1:ad:cf:a7:89:8d:5d:63:f8:d1:30:ff: c3:72:38:d5:2b:5d:20:48:07:82:40:7c:5a:12:30: 3d:9a:72:4c:2b:b2:26:18:21:b3:c6:87:bc:37:dc: 24:ba:f0:af:ab:0d:05:51:81:fb:f0:ea:e3:94:b6: cd:0b:01:44:68:56:49:b0:34:f1:8e:ff:b6:38:c0: c1:ef:c8:90:0d:3d:09:27:d9:ba:a7:40:1e:46:bf: 1a:f4:71:48:4d:14:ec:b4:b5:74:ed:ad:b3:7d:d1: ba:2b:96:96:8f:10:f5:35:c9:1e:f5:6d:27:44:32: 64:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F0:C8:44:A5:DD:7E:3C:73:3E:7D:45:5F:B4:C1:9A:25:F8:F7:7C X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232352e302f32342d3234203d3e203335373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.225.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:6f:d1:e1:80:b2:25:42:4f:a4:f9:23:2d:18:54:57:3a:fc: 3d:61:3a:3a:6b:d2:fd:8f:76:02:5c:33:3b:b3:20:b3:b0:66: ff:ac:45:b8:80:ae:83:d4:27:cb:ec:bb:55:c7:ab:a9:50:8b: fb:b4:54:eb:fa:05:1f:42:0a:8d:e1:70:96:2d:4a:67:ea:dc: 50:e5:c6:d2:e8:bd:ea:77:aa:03:39:b4:8f:ec:cc:e4:c2:49: 09:c2:e8:56:cd:05:b4:10:46:92:b3:23:80:5d:d4:b2:53:f5: 5d:83:d2:4f:35:dd:51:af:92:12:6e:ed:d7:f7:34:05:6d:8f: f5:66:8c:66:1a:00:51:c7:e8:28:4a:91:c5:a6:14:c0:02:56: 75:07:41:ef:3d:2b:86:af:27:ab:3d:eb:1a:5b:d7:b0:6a:58: fe:74:be:c2:b1:41:1d:f7:5c:a2:59:7a:fd:88:e1:4d:1a:12: 3f:4c:05:a2:5c:0f:44:ba:f2:3c:1f:b5:74:bf:33:f4:e4:0f: 70:bb:ec:76:0e:c6:03:13:a1:f9:08:74:1d:4b:c2:39:25:83: 6e:14:3b:04:53:df:be:d4:f1:c7:50:f2:53:61:a2:9d:6f:e2: 76:25:2d:0b:a0:9d:0e:a3:6a:9c:4a:5a:04:ae:89:25:7d:54: 8f:00:ff:f5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAuzdEmf54xDHxsMCu5U/7Q9xv9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDVGRjBDODQ0QTVERDdFM0M3MzNFN0Q0NTVGQjRDMTlBMjVGOEY3N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jq8p9+R4NRgRfLGzwwQjYwqq SFHSbuDmylm8zLl4U+nxUESfmC5QJWbDKTA/Tr/2FQckpqGLPCOzzqE+EjEAZYuZ jYErpOkDdqeEtxae5cEoePdj1UpDC/LcQzDxhEL0Kj7d8ZHBUOP2NnHDJafcA9k5 Yr+1NICaiyRdt2HJv7DSQZdEvg4dKKGtz6eJjV1j+NEw/8NyONUrXSBIB4JAfFoS MD2ackwrsiYYIbPGh7w33CS68K+rDQVRgfvw6uOUts0LAURoVkmwNPGO/7Y4wMHv yJANPQkn2bqnQB5Gvxr0cUhNFOy0tXTtrbN90borlpaPEPU1yR71bSdEMmQ7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUX/DIRKXdfjxzPn1FX7TBmiX493wwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM1MmUzMjMy MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM1MzczNzMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LYfhMA0GCSqGSIb3DQEBCwUAA4IBAQAPb9HhgLIlQk+k+SMtGFRXOvw9YTo6a9L9 j3YCXDM7syCzsGb/rEW4gK6D1CfL7LtVx6upUIv7tFTr+gUfQgqN4XCWLUpn6txQ 5cbS6L3qd6oDObSP7MzkwkkJwuhWzQW0EEaSsyOAXdSyU/Vdg9JPNd1Rr5ISbu3X 9zQFbY/1ZoxmGgBRx+goSpHFphTAAlZ1B0HvPSuGryerPesaW9ewalj+dL7CsUEd 91yiWXr9iOFNGhI/TAWiXA9EuvI8H7V0vzP05A9wu+x2DsYDE6H5CHQdS8I5JYNu FDsEU9++1PHHUPJTYaKdb+J2JS0LoJ0Oo2qcSloEroklfVSPAP/1 -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:42 2026 by rpki-client