This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e203232373733.roa File: 34352e3133392e36382e302f32332d3234203d3e203232373733.roa (raw, json) Hash identifier: N1Qrhf7kHixZZGUd23NXza5B98GJr54jYtKzFTkdpeI= Subject key identifier: 42:54:17:37:81:F9:F7:39:5F:A5:BD:BE:16:43:AA:98:77:79:FB:A3 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 4A7AB3D3FDE2D3D27BF1AE2E470C1735AFFF1DDE Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e203232373733.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 22773 IP address blocks: 45.139.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7a:b3:d3:fd:e2:d3:d2:7b:f1:ae:2e:47:0c:17:35:af:ff:1d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=4254173781F9F7395FA5BDBE1643AA987779FBA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4e:c6:a5:cf:1f:54:c3:83:4e:86:93:af:47: ff:8f:ec:f1:b0:d1:7f:79:28:bd:1a:26:24:3d:c7: 63:a2:f4:91:c9:71:1b:fa:97:3b:69:e1:4f:b5:3f: 78:1b:5f:f7:fc:1e:b8:7c:80:ca:7b:6d:8f:51:43: 93:be:5b:d0:dd:09:6e:49:bd:cf:87:4a:f9:ff:d0: 2b:2e:b7:8d:e3:38:f7:63:ee:94:0e:95:33:9a:39: 53:16:1b:e1:b2:00:12:54:b2:b9:3f:46:24:4b:9e: f9:33:49:98:f4:b8:7e:b1:0c:b1:f5:4e:ca:4f:88: 74:9d:5c:a8:0e:d2:fa:64:79:36:53:ea:ed:33:51: 00:0f:68:47:01:d0:9e:9f:72:97:82:4b:b7:c1:2b: 5d:16:84:72:c1:53:8b:06:1c:d6:9d:06:6d:32:30: 2c:92:d0:f7:ca:02:e1:c7:4b:4c:a1:af:9b:91:23: 26:5b:52:d3:bd:d7:7d:f7:9a:93:4c:b1:f5:34:18: 62:15:e9:04:45:5a:43:93:e1:39:48:d6:3a:ac:47: 36:28:21:20:17:ad:f3:20:7c:ad:72:b2:88:db:12: 41:81:d0:f3:08:72:32:13:a2:f4:96:e3:4a:f3:7d: ec:fa:fb:e6:c8:57:68:d3:cc:97:9c:03:30:a4:54: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:54:17:37:81:F9:F7:39:5F:A5:BD:BE:16:43:AA:98:77:79:FB:A3 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e203232373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.68.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:66:be:4a:2e:c0:a8:50:59:42:62:3b:14:c8:68:28:92:ef: 90:94:49:b7:a7:74:a5:3b:1b:2d:7f:25:17:09:4e:56:b5:ec: 9f:ad:e1:c6:1b:c3:d1:aa:f9:54:85:b1:7c:74:13:13:ca:f9: da:58:97:78:78:44:da:ad:b6:52:12:38:21:07:a7:be:60:99: 1c:d0:33:8e:5f:0a:ef:0b:81:75:5b:cd:0a:33:36:ca:81:47: de:66:12:3f:25:17:b5:83:e9:12:1d:20:db:a4:bd:e0:3a:ee: b2:31:75:cf:ea:60:7c:86:63:3b:28:91:9a:98:95:34:e6:6e: b6:02:a8:7e:c4:e5:ad:54:f6:1a:bc:12:b7:35:73:57:69:15: 16:eb:46:45:0f:6c:10:92:fb:6e:23:b5:06:af:9a:08:5e:be: d7:af:27:ca:d6:98:d2:72:e7:88:c7:78:6e:20:42:9c:13:a3: 7d:2d:49:e1:f5:16:21:15:66:66:ff:04:13:11:84:0d:61:51: be:73:25:ee:f3:67:d1:74:cd:2d:2c:68:60:79:a1:b8:1c:2a: f5:94:80:0c:c1:ba:e8:37:87:00:40:31:ae:12:20:39:de:42: 4e:c1:55:72:80:25:5f:09:d1:5b:a5:e4:30:9c:67:e7:10:83: 07:7c:65:b8 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSnqz0/3i09J78a4uRwwXNa//Hd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDQyNTQxNzM3ODFGOUY3Mzk1RkE1QkRCRTE2NDNBQTk4Nzc3OUZCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Tsalzx9Uw4NOhpOvR/+P7PGw 0X95KL0aJiQ9x2Oi9JHJcRv6lztp4U+1P3gbX/f8Hrh8gMp7bY9RQ5O+W9DdCW5J vc+HSvn/0Csut43jOPdj7pQOlTOaOVMWG+GyABJUsrk/RiRLnvkzSZj0uH6xDLH1 TspPiHSdXKgO0vpkeTZT6u0zUQAPaEcB0J6fcpeCS7fBK10WhHLBU4sGHNadBm0y MCyS0PfKAuHHS0yhr5uRIyZbUtO91333mpNMsfU0GGIV6QRFWkOT4TlI1jqsRzYo ISAXrfMgfK1ysojbEkGB0PMIcjITovSW40rzfez6++bIV2jTzJecAzCkVAXXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUQlQXN4H59zlfpb2+FkOqmHd5+6MwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM5MmUzNjM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMjM3MzczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2L RDANBgkqhkiG9w0BAQsFAAOCAQEATWa+Si7AqFBZQmI7FMhoKJLvkJRJt6d0pTsb LX8lFwlOVrXsn63hxhvD0ar5VIWxfHQTE8r52liXeHhE2q22UhI4IQenvmCZHNAz jl8K7wuBdVvNCjM2yoFH3mYSPyUXtYPpEh0g26S94DrusjF1z+pgfIZjOyiRmpiV NOZutgKofsTlrVT2GrwStzVzV2kVFutGRQ9sEJL7biO1Bq+aCF6+168nytaY0nLn iMd4biBCnBOjfS1J4fUWIRVmZv8EExGEDWFRvnMl7vNn0XTNLSxoYHmhuBwq9ZSA DMG66DeHAEAxrhIgOd5CTsFVcoAlXwnRW6XkMJxn5xCDB3xluA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:03 2026 by rpki-client