This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232362e302f32342d3234203d3e20313337323335.roa File: 34352e3133352e3232362e302f32342d3234203d3e20313337323335.roa (raw, json) Hash identifier: kByuyTWxQfbumeo40oz1R2Rn1RoJTS09H3u+Z9dD7wc= Subject key identifier: E5:D8:C3:B4:73:E1:57:F0:F8:9A:E5:05:60:BB:F3:63:78:30:6E:18 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 26FE7A6D38E2BBB754DAE4ACC7DE3806706A7AC7 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232362e302f32342d3234203d3e20313337323335.roa Signing time: Tue 03 Feb 2026 04:28:01 +0000 ROA not before: Tue 03 Feb 2026 04:23:01 +0000 ROA not after: Tue 02 Feb 2027 04:28:01 +0000 asID: 137235 IP address blocks: 45.135.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:fe:7a:6d:38:e2:bb:b7:54:da:e4:ac:c7:de:38:06:70:6a:7a:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Feb 3 04:23:01 2026 GMT Not After : Feb 2 04:28:01 2027 GMT Subject: CN=E5D8C3B473E157F0F89AE50560BBF36378306E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ea:55:71:03:8b:a7:d0:21:ca:87:ea:a9:89: 38:a7:ec:f7:52:d7:ff:2d:6d:a3:22:d8:43:ac:7e: bd:be:94:ca:1a:ac:99:d3:47:4e:d5:79:d1:8e:39: 7d:b7:5d:dc:51:b3:c4:5c:e3:dc:9b:9f:80:3c:a7: a0:69:6c:42:19:3a:db:6b:8a:47:ad:06:2a:ab:84: b3:97:4b:2f:86:fb:de:38:55:b7:73:ee:9e:3e:31: 9a:aa:6a:22:70:0f:aa:b9:e2:2c:d7:6b:f2:7b:ba: 79:20:fc:f1:09:63:3a:4e:ad:6e:b5:fa:c9:50:a4: c6:1c:75:a5:18:fb:bc:97:c0:40:fd:9b:9b:d1:cc: c8:ac:f8:7a:73:75:a6:d6:ae:5d:16:aa:83:a9:11: 75:63:93:8b:01:7f:ff:d2:f3:d5:ec:62:15:78:d6: a6:7b:45:9b:3a:cb:3c:71:22:a6:03:18:02:82:18: f8:9d:2c:e0:d4:f7:45:a0:3b:9a:f3:d1:47:f0:99: a1:48:08:be:65:6d:07:a0:bb:02:dc:19:b9:41:af: ce:e5:e4:40:63:1d:72:4c:75:fa:61:0d:4a:ce:53: 78:3e:d9:0c:22:ab:91:3b:4d:03:e8:ff:a6:0e:3a: 24:c8:c3:9e:40:83:dc:7f:3b:e6:68:5a:c7:3c:57: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D8:C3:B4:73:E1:57:F0:F8:9A:E5:05:60:BB:F3:63:78:30:6E:18 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232362e302f32342d3234203d3e20313337323335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.226.0/24 Signature Algorithm: sha256WithRSAEncryption 16:af:fa:b5:49:43:68:f8:76:b0:d7:3e:bc:88:62:96:c6:05: 90:f9:c5:15:f7:b2:b7:34:34:c2:db:2b:e4:a0:12:9a:b1:ff: cd:72:01:f3:38:6f:10:ed:0b:94:84:bd:97:9b:46:e2:e7:33: 96:90:92:ac:02:4f:16:b0:bc:40:2a:78:10:e4:90:15:c2:c1: 07:fd:a0:12:2b:34:e8:3d:79:8c:93:88:58:ed:20:72:b4:75: 78:55:80:b3:6d:cd:96:5c:e1:96:99:8d:84:d2:2b:13:63:bb: fe:d5:7e:96:b7:6d:dd:45:a8:42:15:23:82:2d:42:7e:15:f2: 6e:e6:7d:df:4d:8e:a1:3a:97:c9:d6:fe:46:cb:4a:d0:e5:19: f8:e4:d7:ab:50:d9:d6:6f:20:dc:7f:48:fd:91:ac:ce:f6:37: 1b:a7:eb:02:a6:26:f2:29:9d:3e:96:a7:e0:5d:f2:f1:8f:a8: e2:04:c3:ec:25:66:61:22:ba:7d:bc:7b:fe:85:c0:9d:f1:88: 2a:33:3d:3f:07:59:78:8e:48:3a:53:a0:03:02:28:82:61:82: 8c:2f:fb:61:7f:84:2c:ed:03:02:30:20:56:5e:71:c0:d5:99: 55:db:66:af:d6:c0:45:6c:65:b4:fe:4c:24:82:43:9a:03:f7: fb:fe:99:f2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJv56bTjiu7dU2uSsx944BnBqescwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAyMDMwNDIzMDFaFw0yNzAyMDIwNDI4MDFaMDMxMTAvBgNV BAMTKEU1RDhDM0I0NzNFMTU3RjBGODlBRTUwNTYwQkJGMzYzNzgzMDZFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq6lVxA4un0CHKh+qpiTin7PdS 1/8tbaMi2EOsfr2+lMoarJnTR07VedGOOX23XdxRs8Rc49ybn4A8p6BpbEIZOttr iketBiqrhLOXSy+G+944Vbdz7p4+MZqqaiJwD6q54izXa/J7unkg/PEJYzpOrW61 +slQpMYcdaUY+7yXwED9m5vRzMis+HpzdabWrl0WqoOpEXVjk4sBf//S89XsYhV4 1qZ7RZs6yzxxIqYDGAKCGPidLODU90WgO5rz0UfwmaFICL5lbQeguwLcGblBr87l 5EBjHXJMdfphDUrOU3g+2Qwiq5E7TQPo/6YOOiTIw55Ag9x/O+ZoWsc8V9GzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU5djDtHPhV/D4muUFYLvzY3gwbhgwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM1MmUzMjMy MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMjMzMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAth+IwDQYJKoZIhvcNAQELBQADggEBABav+rVJQ2j4drDXPryIYpbGBZD5xRX3 src0NMLbK+SgEpqx/81yAfM4bxDtC5SEvZebRuLnM5aQkqwCTxawvEAqeBDkkBXC wQf9oBIrNOg9eYyTiFjtIHK0dXhVgLNtzZZc4ZaZjYTSKxNju/7Vfpa3bd1FqEIV I4ItQn4V8m7mfd9NjqE6l8nW/kbLStDlGfjk16tQ2dZvINx/SP2RrM72Nxun6wKm JvIpnT6Wp+Bd8vGPqOIEw+wlZmEiun28e/6FwJ3xiCozPT8HWXiOSDpToAMCKIJh gowv+2F/hCztAwIwIFZeccDVmVXbZq/WwEVsZbT+TCSCQ5oD9/v+mfI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:35 2026 by rpki-client