This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e2037303138.roa File: 34352e3133392e36382e302f32332d3234203d3e2037303138.roa (raw, json) Hash identifier: errnBMFSTtzW5l1+/I3HarH0lbPEObJmhJwZt8GjJYc= Subject key identifier: A5:CB:0A:9F:63:F9:45:8B:2C:5D:CF:2A:F2:F5:41:62:9A:8C:36:D9 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 36F2CE79178987D772281154580CEEA6FB723A65 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e2037303138.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 7018 IP address blocks: 45.139.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f2:ce:79:17:89:87:d7:72:28:11:54:58:0c:ee:a6:fb:72:3a:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=A5CB0A9F63F9458B2C5DCF2AF2F541629A8C36D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7c:e1:d8:4e:39:a6:8c:03:4d:37:27:8d:39: b7:be:a4:42:b5:6e:c9:c4:22:c2:b8:9d:b3:70:27: 01:eb:f5:10:cd:49:fc:a8:11:f0:9e:5b:8b:ea:2d: 30:39:69:4b:14:84:4e:96:96:e0:3a:90:37:36:1b: 94:ea:6b:ab:0e:00:71:7d:a8:49:2b:bd:4b:cf:9c: 11:cc:0d:2e:94:4f:9d:ad:3d:04:95:d7:00:9b:4a: 20:ca:07:94:9a:d2:ff:6e:02:f0:ff:be:0c:a8:f2: e0:78:02:fe:de:23:58:fa:e5:7e:07:fb:8f:d9:a3: 17:ae:0e:c0:46:ca:49:4d:ce:44:fd:1a:f1:3d:9e: 0e:d2:43:b5:55:ff:b5:02:f3:4c:6d:d5:47:1e:2b: 2a:83:03:3a:f4:3c:e8:64:3b:ee:8e:4c:94:9f:ff: 14:83:35:36:82:f8:9b:b1:bb:79:7f:f0:e3:83:7e: 5f:34:ec:d5:1c:0f:08:21:fb:4f:98:f2:6d:74:f5: ef:94:02:0f:af:d0:e2:e0:c9:73:b9:45:f3:fd:0d: bb:03:bb:6b:73:84:ec:0f:b3:bd:c4:1f:1f:00:19: 76:08:2d:b7:ff:f7:00:36:f1:55:80:b4:c8:6a:ac: a6:ba:ad:e7:8e:c5:f2:e3:6c:5b:0e:7d:dc:53:3a: 4b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:0A:9F:63:F9:45:8B:2C:5D:CF:2A:F2:F5:41:62:9A:8C:36:D9 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e36382e302f32332d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.68.0/23 Signature Algorithm: sha256WithRSAEncryption b2:0f:2f:4a:b2:5d:33:16:5a:a5:95:2d:79:da:e4:bc:fc:40: 52:aa:42:e8:37:e3:fd:6d:1a:c1:e4:ee:2f:05:27:cb:f3:c0: 06:a0:ae:e6:b1:c1:4d:f8:0d:95:b3:cd:7e:9d:f9:a4:0c:e6: 48:72:6b:cf:95:db:b1:3c:5d:bc:1a:ef:a4:a2:08:69:97:22: a3:7c:85:29:36:ca:c7:1a:0d:a1:a8:74:3d:16:1a:d2:3f:29: 75:b9:ec:8b:d0:90:27:a9:77:0c:12:3e:ca:a7:4a:ea:a7:8f: 00:09:2a:95:ad:b7:3e:c5:cf:28:28:cb:58:e4:59:16:52:6d: ec:1e:25:73:6e:05:3b:fc:10:47:33:cf:56:00:33:4d:8b:16: 93:f4:b0:b6:17:b7:79:b0:da:86:b7:45:3b:b8:0a:17:57:fd: 9f:83:1a:de:e9:d4:f0:22:c7:d5:c2:ca:c0:b8:a9:1a:9d:2e: ac:c6:6b:59:15:0a:3b:c7:d2:2a:b0:e3:5f:c2:81:61:50:1b: 64:35:64:0c:39:be:54:d5:fb:50:cf:71:8e:b7:b9:ad:c5:7e: c4:93:ca:5b:fc:4e:b8:f4:98:25:4b:24:e5:2c:8e:9b:df:89: 3e:82:cd:ef:b9:e6:cd:43:56:53:c9:1e:8f:20:0f:36:4a:4d: 3b:ad:e7:f2 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUNvLOeReJh9dyKBFUWAzupvtyOmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEE1Q0IwQTlGNjNGOTQ1OEIyQzVEQ0YyQUYyRjU0MTYyOUE4QzM2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifOHYTjmmjANNNyeNObe+pEK1 bsnEIsK4nbNwJwHr9RDNSfyoEfCeW4vqLTA5aUsUhE6WluA6kDc2G5Tqa6sOAHF9 qEkrvUvPnBHMDS6UT52tPQSV1wCbSiDKB5Sa0v9uAvD/vgyo8uB4Av7eI1j65X4H +4/ZoxeuDsBGyklNzkT9GvE9ng7SQ7VV/7UC80xt1UceKyqDAzr0POhkO+6OTJSf /xSDNTaC+Juxu3l/8OODfl807NUcDwgh+0+Y8m109e+UAg+v0OLgyXO5RfP9DbsD u2tzhOwPs73EHx8AGXYILbf/9wA28VWAtMhqrKa6reeOxfLjbFsOfdxTOkulAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUpcsKn2P5RYssXc8q8vVBYpqMNtkwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM5MmUzNjM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEti0Qw DQYJKoZIhvcNAQELBQADggEBALIPL0qyXTMWWqWVLXna5Lz8QFKqQug34/1tGsHk 7i8FJ8vzwAagruaxwU34DZWzzX6d+aQM5khya8+V27E8Xbwa76SiCGmXIqN8hSk2 yscaDaGodD0WGtI/KXW57IvQkCepdwwSPsqnSuqnjwAJKpWttz7Fzygoy1jkWRZS beweJXNuBTv8EEczz1YAM02LFpP0sLYXt3mw2oa3RTu4ChdX/Z+DGt7p1PAix9XC ysC4qRqdLqzGa1kVCjvH0iqw41/CgWFQG2Q1ZAw5vlTV+1DPcY63ua3FfsSTylv8 Trj0mCVLJOUsjpvfiT6Cze+55s1DVlPJHo8gDzZKTTut5/I= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:20 2026 by rpki-client