This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e20343031383338.roa File: 34352e3133392e36382e302f32332d3234203d3e20343031383338.roa (raw, json) Hash identifier: bmhfIuZ8vjTMetT8hvGsDJp+PtPjzi+lpdk4WHzPCq8= Subject key identifier: A6:55:12:E4:4F:62:0B:27:EF:DD:D5:B6:AD:64:26:17:52:B5:7A:DE Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 21E36B84E1F3C974EC1587B700F7A28E08720329 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e20343031383338.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 401838 IP address blocks: 45.139.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e3:6b:84:e1:f3:c9:74:ec:15:87:b7:00:f7:a2:8e:08:72:03:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=A65512E44F620B27EFDDD5B6AD64261752B57ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:63:fb:f1:97:a8:bd:0b:4a:7e:d2:4f:e0:a6: fa:5b:08:d7:fa:48:82:39:46:8c:e8:24:c3:aa:fc: 12:68:a8:2f:41:63:93:b9:d8:9e:4b:bd:66:0c:88: 2a:de:88:b4:fe:90:e5:7c:1d:fb:08:56:26:9b:2a: ee:31:f7:b1:67:5c:b7:0b:f6:d3:7f:bb:f9:09:fb: 9a:c6:62:47:bb:4e:e0:66:c6:cd:b6:ce:4f:a2:06: d5:5f:aa:b9:5c:79:7e:63:18:df:e7:e7:4e:71:86: 46:30:db:2b:c8:44:b7:41:8d:bb:cb:f4:b9:73:29: 45:12:96:88:37:a5:5f:d4:75:6e:32:71:4b:6f:0e: 0a:c2:25:12:09:48:35:db:10:ee:cf:1c:c5:55:19: cc:d7:fc:38:23:49:c8:d9:ee:ff:99:a6:4b:12:d9: c3:d6:e1:a1:dc:98:69:f7:b0:a9:c7:25:d0:23:19: d0:a9:12:c4:00:53:da:1a:ef:62:d3:5c:57:4e:ab: 75:a7:74:3c:4d:4d:06:ef:28:60:3e:49:ce:53:98: 15:a7:c8:b6:83:1f:5e:20:16:de:22:32:01:07:6b: 32:49:ae:1e:e7:f0:47:9a:f0:55:4e:16:4a:39:03: 54:dc:0a:af:d7:a8:0c:ee:42:0f:ef:de:4b:d8:40: 37:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:55:12:E4:4F:62:0B:27:EF:DD:D5:B6:AD:64:26:17:52:B5:7A:DE X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.68.0/23 Signature Algorithm: sha256WithRSAEncryption d4:9c:97:36:54:07:05:cc:0d:a4:7f:af:c9:ee:69:85:01:67: c3:6c:47:df:53:5c:1f:84:8c:f3:78:96:5e:5d:7c:f6:98:18: b5:d0:45:c3:dc:c0:d3:df:f0:80:63:64:c7:a3:a3:ed:33:3b: 20:02:cc:26:87:fb:66:b0:90:42:f9:c3:20:e9:fd:3f:26:0d: 59:81:f5:e4:a1:a5:be:50:9e:87:08:76:14:6c:6b:53:25:1b: 68:f1:83:74:f9:1b:e1:09:f5:fb:68:dd:e7:7e:72:b2:0d:3b: 65:75:fb:84:11:5d:87:19:7d:dd:a0:7a:74:b7:6b:cd:2a:67: e4:4f:c1:b7:42:27:b4:81:4e:bc:0c:9d:0a:e3:9d:9b:77:b2: dd:32:cc:4f:6e:d7:53:86:d3:53:ba:54:20:08:b9:5c:bf:e9: 7b:f2:06:70:59:0e:7b:56:42:ea:ac:f2:aa:44:c9:35:f8:d2: a3:18:cd:ad:79:26:64:5e:07:af:ad:38:71:b2:20:3f:94:89: 4b:c1:e6:f0:00:de:de:56:80:7c:3c:9f:7e:ed:9d:1c:9d:06: ce:4f:a2:3c:4e:53:eb:44:eb:c0:70:b0:d4:1a:d9:d1:50:90: 00:a7:b0:0d:1b:92:21:4e:71:ed:52:42:8e:c3:06:49:fd:df: ee:be:ef:0f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIeNrhOHzyXTsFYe3APeijghyAykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKEE2NTUxMkU0NEY2MjBCMjdFRkRERDVCNkFENjQyNjE3NTJCNTdBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYY/vxl6i9C0p+0k/gpvpbCNf6 SII5RozoJMOq/BJoqC9BY5O52J5LvWYMiCreiLT+kOV8HfsIViabKu4x97FnXLcL 9tN/u/kJ+5rGYke7TuBmxs22zk+iBtVfqrlceX5jGN/n505xhkYw2yvIRLdBjbvL 9LlzKUUSlog3pV/UdW4ycUtvDgrCJRIJSDXbEO7PHMVVGczX/DgjScjZ7v+ZpksS 2cPW4aHcmGn3sKnHJdAjGdCpEsQAU9oa72LTXFdOq3WndDxNTQbvKGA+Sc5TmBWn yLaDH14gFt4iMgEHazJJrh7n8Eea8FVOFko5A1TcCq/XqAzuQg/v3kvYQDdrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUplUS5E9iCyfv3dW2rWQmF1K1et4wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM5MmUzNjM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzMDMxMzgzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB LYtEMA0GCSqGSIb3DQEBCwUAA4IBAQDUnJc2VAcFzA2kf6/J7mmFAWfDbEffU1wf hIzzeJZeXXz2mBi10EXD3MDT3/CAY2THo6PtMzsgAswmh/tmsJBC+cMg6f0/Jg1Z gfXkoaW+UJ6HCHYUbGtTJRto8YN0+RvhCfX7aN3nfnKyDTtldfuEEV2HGX3doHp0 t2vNKmfkT8G3Qie0gU68DJ0K452bd7LdMsxPbtdThtNTulQgCLlcv+l78gZwWQ57 VkLqrPKqRMk1+NKjGM2teSZkXgevrThxsiA/lIlLwebwAN7eVoB8PJ9+7Z0cnQbO T6I8TlPrROvAcLDUGtnRUJAAp7ANG5IhTnHtUkKOwwZJ/d/uvu8P -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:50 2026 by rpki-client