This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e37302e302f32342d3234203d3e203132333032.roa File: 34352e3133392e37302e302f32342d3234203d3e203132333032.roa (raw, json) Hash identifier: 92ycdxHyX5V4406fYGRdaoPV9kvksRq2UrLEmgb4stE= Subject key identifier: D6:ED:4C:73:38:DB:E5:46:98:18:B5:1F:AA:91:37:92:4F:52:C4:05 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 4E3E57434D1BFB873AC35ACB05FD15BF2E2893B4 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e37302e302f32342d3234203d3e203132333032.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 12302 IP address blocks: 45.139.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3e:57:43:4d:1b:fb:87:3a:c3:5a:cb:05:fd:15:bf:2e:28:93:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=D6ED4C7338DBE5469818B51FAA9137924F52C405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:9b:c1:2b:83:b8:12:3e:af:64:a5:6f:72: 65:25:7c:5c:39:3f:60:6a:8b:cc:69:5f:75:ce:ae: f0:30:64:ec:2f:b9:1b:cd:ec:06:43:f3:c4:dc:28: 92:9f:4a:0e:1a:77:42:98:3a:ac:69:2f:e3:02:fd: 78:95:b1:61:22:8c:17:38:6b:2b:f9:99:98:3b:26: 7b:e2:a6:91:82:06:7f:33:ac:00:bb:23:19:f0:9b: 0a:6a:9d:92:8d:77:c0:f6:51:ac:fb:dd:52:ac:3b: ef:ab:98:0f:17:fa:0c:80:97:80:ad:12:d3:9e:56: df:76:ac:ba:12:1d:6a:d2:c5:02:35:35:4f:a8:33: 5e:e7:e5:69:7f:3c:c8:19:04:8c:a2:90:b4:25:15: 30:4e:c4:8a:e2:8e:e4:ec:3f:d3:ba:0f:15:8e:28: 54:b9:c0:49:57:ce:f8:1e:a4:f1:4d:a2:e4:61:51: 50:bf:8d:4a:bb:95:4b:54:d3:c8:b0:d1:75:cf:04: ee:42:6c:57:eb:57:78:1e:38:49:03:e1:37:af:c7: a4:cf:7b:3c:65:44:d2:bb:06:fc:8b:f3:7c:e0:8b: 98:12:e8:e4:68:47:47:61:d5:2d:de:4e:a9:7a:41: 21:29:40:75:b7:68:19:37:0b:bc:5c:40:50:95:81: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:ED:4C:73:38:DB:E5:46:98:18:B5:1F:AA:91:37:92:4F:52:C4:05 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3133392e37302e302f32342d3234203d3e203132333032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.70.0/24 Signature Algorithm: sha256WithRSAEncryption ae:8d:1b:e6:84:15:f1:92:25:9a:e6:b0:ac:29:00:7f:0c:bf: 67:b9:36:df:c1:14:b6:bf:9e:45:df:df:40:12:84:4c:b2:ac: f4:e9:7d:73:54:39:bb:2f:9f:a9:22:5f:7e:35:03:eb:9b:f8: 86:3e:69:bd:cf:7d:93:c9:55:64:4d:9d:91:81:a8:62:83:e7: 84:e1:d5:a6:b1:f1:97:26:b1:c1:d4:72:91:62:8b:b6:18:b4: a3:9e:ad:1e:15:a1:a2:cc:1d:6e:10:73:6e:7c:51:19:48:a0: 8a:db:81:54:b3:c6:c1:06:2c:c5:1c:49:c0:ab:17:b7:e4:d0: a5:04:f0:09:ea:f3:c4:0b:b7:c0:b8:34:6b:17:b7:a8:79:d2: 74:1b:60:6f:c1:7f:3d:e6:26:ca:fc:28:aa:fd:2d:83:27:57: 58:2c:23:64:f3:21:54:fa:37:a8:b8:46:b8:4d:ee:9a:12:df: 2f:7b:5a:d2:97:f5:80:f6:3d:24:94:ae:e8:de:28:d1:ec:60: e0:cc:5a:20:cf:37:18:ee:ba:f7:fc:89:99:59:53:65:e8:fc: e1:cc:f4:0e:8e:92:ca:56:81:2f:b4:ca:bd:a7:b3:a5:71:40: 17:4b:dd:60:d9:bd:ce:3d:f1:32:9f:f1:87:c5:1a:95:55:fb: cd:f2:c3:83 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTj5XQ00b+4c6w1rLBf0Vvy4ok7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEQ2RUQ0QzczMzhEQkU1NDY5ODE4QjUxRkFBOTEzNzkyNEY1MkM0MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3ZvBK4O4Ej6vZKVvcmUlfFw5 P2Bqi8xpX3XOrvAwZOwvuRvN7AZD88TcKJKfSg4ad0KYOqxpL+MC/XiVsWEijBc4 ayv5mZg7JnvippGCBn8zrAC7IxnwmwpqnZKNd8D2Uaz73VKsO++rmA8X+gyAl4Ct EtOeVt92rLoSHWrSxQI1NU+oM17n5Wl/PMgZBIyikLQlFTBOxIrijuTsP9O6DxWO KFS5wElXzvgepPFNouRhUVC/jUq7lUtU08iw0XXPBO5CbFfrV3geOEkD4Tevx6TP ezxlRNK7BvyL83zgi5gS6ORoR0dh1S3eTql6QSEpQHW3aBk3C7xcQFCVgSvJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1u1Mczjb5UaYGLUfqpE3kk9SxAUwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzMzM5MmUzNzMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMjMzMzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2L RjANBgkqhkiG9w0BAQsFAAOCAQEAro0b5oQV8ZIlmuawrCkAfwy/Z7k238EUtr+e Rd/fQBKETLKs9Ol9c1Q5uy+fqSJffjUD65v4hj5pvc99k8lVZE2dkYGoYoPnhOHV prHxlyaxwdRykWKLthi0o56tHhWhoswdbhBzbnxRGUigituBVLPGwQYsxRxJwKsX t+TQpQTwCerzxAu3wLg0axe3qHnSdBtgb8F/PeYmyvwoqv0tgydXWCwjZPMhVPo3 qLhGuE3umhLfL3ta0pf1gPY9JJSu6N4o0exg4MxaIM83GO669/yJmVlTZej84cz0 Do6SylaBL7TKvaezpXFAF0vdYNm9zj3xMp/xh8UalVX7zfLDgw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:02 2026 by rpki-client