This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232372e302f32342d3234203d3e20323033303736.roa File: 34352e3133352e3232372e302f32342d3234203d3e20323033303736.roa (raw, json) Hash identifier: gjNlHxmoquEFeGiCSihbAcCSbINw1Biw9y1LjiLSwwk= Subject key identifier: 28:44:8F:84:D9:E1:54:7C:D3:9B:D8:31:CE:DA:7B:9C:63:C6:39:14 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 20E5EFB86990B976DB16A4AA1076FEF0B4D740B7 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232372e302f32342d3234203d3e20323033303736.roa Signing time: Tue 03 Feb 2026 05:51:33 +0000 ROA not before: Tue 03 Feb 2026 05:46:33 +0000 ROA not after: Tue 02 Feb 2027 05:51:33 +0000 asID: 203076 IP address blocks: 45.135.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:e5:ef:b8:69:90:b9:76:db:16:a4:aa:10:76:fe:f0:b4:d7:40:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Feb 3 05:46:33 2026 GMT Not After : Feb 2 05:51:33 2027 GMT Subject: CN=28448F84D9E1547CD39BD831CEDA7B9C63C63914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b0:64:b9:e3:b1:c4:2b:26:15:fd:e0:0f:c6: a5:11:35:ee:d8:88:dd:dc:6d:0f:64:eb:e1:1d:79: 05:4e:9b:80:c7:8f:8a:24:b5:3a:7a:ed:f2:3e:c7: 36:fa:fd:11:39:67:a4:55:38:9f:50:54:b6:a1:f5: 88:94:5f:74:02:ea:ce:f6:fa:19:68:f6:68:7f:c5: c4:15:4d:58:d5:f9:b5:04:79:b7:cb:e8:38:75:33: 82:aa:4b:da:d9:c8:69:cd:63:73:42:5d:71:3d:e1: 00:80:5e:51:95:e6:f1:ef:d8:3c:74:30:11:8d:13: 2e:3a:10:75:0e:6c:b0:9f:42:85:33:26:2f:54:8a: aa:38:1e:30:1d:a8:90:a7:71:b9:c3:be:49:a3:d8: fa:61:7e:b0:51:e3:d2:21:ef:9b:39:21:b7:23:b2: 4f:48:62:65:b9:2c:2f:ef:98:52:cf:02:74:72:3a: 47:90:cf:1b:a2:51:b5:a8:9c:f7:d0:9f:20:8f:7f: eb:ae:f0:64:a8:ec:aa:56:0c:52:c5:67:1c:e8:e2: de:32:4c:62:ca:05:fd:65:6e:b6:2a:ee:02:ba:d6: 72:ee:21:cd:68:14:0c:4c:b2:1e:7b:5b:37:c9:ad: 62:79:d0:30:27:84:cb:a3:40:c9:57:de:1d:b0:09: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:8F:84:D9:E1:54:7C:D3:9B:D8:31:CE:DA:7B:9C:63:C6:39:14 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133352e3232372e302f32342d3234203d3e20323033303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.227.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:0c:4d:40:5a:12:20:10:66:3d:f2:79:7b:c2:98:c3:0c:b0: aa:57:96:a6:0a:60:7b:9b:9e:dc:0f:c7:13:2e:b0:53:d2:ac: 8d:8f:6c:80:4b:13:87:c6:0d:70:5f:5d:fc:04:9b:36:82:11: 1f:31:3b:fd:5e:1b:7e:ec:ac:16:8f:e1:b4:ad:77:6d:a1:82: b0:9b:b0:17:d6:81:cc:4c:64:53:c8:9c:10:1b:46:29:37:1f: 3d:59:ef:c0:6f:28:0d:b1:79:5f:39:28:59:2b:6e:a0:85:80: 8d:31:81:25:4b:67:e0:cd:c1:f9:5e:fd:d3:1b:e5:e8:27:ef: 86:51:c2:f4:74:ca:4c:48:5d:46:9a:a8:2d:b8:00:d2:71:d1: 3a:23:7d:57:72:52:39:10:ea:bf:2e:30:e1:3a:96:11:8b:6b: d5:9a:7c:8b:1d:ac:ee:41:ec:6b:5a:bc:b4:76:bb:39:9e:e7: 1d:6e:21:de:43:15:53:76:e7:2e:78:85:01:c1:d1:c4:5d:ea: f3:18:67:f6:c9:d2:a8:8b:95:92:ef:de:6e:75:36:99:10:cb: 4a:d9:b5:31:a7:58:a4:80:3d:fd:71:25:4e:61:3b:53:88:82: c4:2d:f1:1a:cf:0b:fe:ae:d7:70:43:46:be:d6:db:83:91:5a: 45:12:4e:5e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIOXvuGmQuXbbFqSqEHb+8LTXQLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAyMDMwNTQ2MzNaFw0yNzAyMDIwNTUxMzNaMDMxMTAvBgNV BAMTKDI4NDQ4Rjg0RDlFMTU0N0NEMzlCRDgzMUNFREE3QjlDNjNDNjM5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sGS547HEKyYV/eAPxqURNe7Y iN3cbQ9k6+EdeQVOm4DHj4oktTp67fI+xzb6/RE5Z6RVOJ9QVLah9YiUX3QC6s72 +hlo9mh/xcQVTVjV+bUEebfL6Dh1M4KqS9rZyGnNY3NCXXE94QCAXlGV5vHv2Dx0 MBGNEy46EHUObLCfQoUzJi9Uiqo4HjAdqJCncbnDvkmj2PphfrBR49Ih75s5Ibcj sk9IYmW5LC/vmFLPAnRyOkeQzxuiUbWonPfQnyCPf+uu8GSo7KpWDFLFZxzo4t4y TGLKBf1lbrYq7gK61nLuIc1oFAxMsh57WzfJrWJ50DAnhMujQMlX3h2wCZlJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUKESPhNnhVHzTm9gxztp7nGPGORQwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM1MmUzMjMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzMzMDM3MzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAth+MwDQYJKoZIhvcNAQELBQADggEBAI0MTUBaEiAQZj3yeXvCmMMMsKpXlqYK YHubntwPxxMusFPSrI2PbIBLE4fGDXBfXfwEmzaCER8xO/1eG37srBaP4bStd22h grCbsBfWgcxMZFPInBAbRik3Hz1Z78BvKA2xeV85KFkrbqCFgI0xgSVLZ+DNwfle /dMb5egn74ZRwvR0ykxIXUaaqC24ANJx0TojfVdyUjkQ6r8uMOE6lhGLa9WafIsd rO5B7GtavLR2uzme5x1uId5DFVN25y54hQHB0cRd6vMYZ/bJ0qiLlZLv3m51NpkQ y0rZtTGnWKSAPf1xJU5hO1OIgsQt8RrPC/6u13BDRr7W24ORWkUSTl4= -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:19 2026 by rpki-client