This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3134352e31372e302f32342d3234203d3e2036303739.roa File: 34352e3134352e31372e302f32342d3234203d3e2036303739.roa (raw, json) Hash identifier: JcHkbjpimAQRzYpfzZps578J3k6m/KKpL9U558Uq0EY= Subject key identifier: FB:AD:E2:56:67:69:53:BF:28:EA:CC:4E:AA:89:1E:0C:6E:39:BB:51 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 09CB8C9BD133EDA741A57199D933E9BCE2FCCA27 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3134352e31372e302f32342d3234203d3e2036303739.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 6079 IP address blocks: 45.145.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:cb:8c:9b:d1:33:ed:a7:41:a5:71:99:d9:33:e9:bc:e2:fc:ca:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=FBADE256676953BF28EACC4EAA891E0C6E39BB51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e3:2f:5f:41:dd:d5:f9:85:2c:d5:0d:73:58: bd:85:9a:4c:8f:c9:bf:87:24:55:08:60:5f:fa:e2: 6d:da:41:ef:a9:7e:f6:37:43:9d:e0:10:0c:24:61: 84:1a:7c:69:61:82:a5:3e:97:b0:a2:07:ff:ed:98: dd:be:9b:09:2c:f6:f2:51:73:36:c4:7c:13:4a:4f: 11:05:fd:45:08:c4:2c:5d:bf:92:7d:7a:af:8b:f3: 0e:53:cc:a2:c3:b3:30:fa:70:0d:a3:b2:03:60:a1: 6a:13:91:1f:56:f7:64:38:1c:21:e7:87:db:33:9f: 2a:24:8c:71:7c:07:74:f1:4f:2d:3d:f6:fa:20:32: 40:5b:da:16:bb:0e:a7:73:ef:6c:8e:ea:87:cf:88: fe:3e:b8:66:d8:c1:30:f0:83:c3:9a:36:a1:2b:02: 42:cc:20:79:bc:5e:04:de:25:a1:72:86:87:38:b7: 46:1c:c6:6b:03:11:cf:07:1f:3b:64:16:1e:54:1a: a2:6f:c7:34:0b:8d:67:d9:f7:b7:e6:59:45:32:37: f7:db:66:78:84:cb:ce:19:13:e8:44:48:d4:8d:1b: 82:d6:14:f0:27:77:5b:af:4c:db:4a:4b:a0:1a:4d: 4a:1b:48:d5:fe:ec:5c:af:7d:e3:35:c5:90:e6:f9: 95:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AD:E2:56:67:69:53:BF:28:EA:CC:4E:AA:89:1E:0C:6E:39:BB:51 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3134352e31372e302f32342d3234203d3e2036303739.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.17.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:97:3f:c9:97:c9:6a:01:24:68:b6:34:f3:83:8a:9c:cd:9c: 68:5c:f5:33:4b:30:4b:a4:fa:0c:6f:21:02:4f:3d:74:6b:32: 91:3c:32:39:e4:5a:0c:26:f3:d1:ce:9f:db:ed:ef:f3:d5:aa: 93:21:2a:45:d9:b0:a4:09:ef:40:af:a9:d8:98:22:58:36:61: 6b:d1:bf:fb:3a:df:be:59:b0:fa:2c:8a:3b:4a:bc:22:83:15: a0:74:79:7b:be:35:7d:fc:61:f8:62:5d:a7:b5:58:fb:66:d0: a2:23:43:b4:76:93:07:dd:ad:ab:21:ac:5f:ff:8e:c1:8f:f8: 81:51:85:90:30:67:93:b7:e2:e0:d9:f1:6d:fa:a2:32:e9:fe: 40:bc:b8:10:f8:5f:fe:d8:56:12:0b:98:d5:b6:8b:be:b3:6b: 58:c5:40:1b:29:2c:f9:db:53:00:cf:5c:e9:29:21:e1:f6:04: b9:ec:98:6c:f4:c9:c2:3f:cf:18:a0:4a:a2:f1:ad:28:6e:4e: 5f:b6:93:48:e0:54:a2:16:dd:93:7b:c4:27:b1:dc:fd:61:57: c7:64:48:b4:4a:84:b2:8b:fc:c9:53:ca:e6:6b:88:34:6e:b5: b5:fc:a3:bf:12:12:73:61:ae:4f:8e:e8:28:3b:58:65:eb:c0: 30:e9:30:6a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCcuMm9Ez7adBpXGZ2TPpvOL8yicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEZCQURFMjU2Njc2OTUzQkYyOEVBQ0M0RUFBODkxRTBDNkUzOUJCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4y9fQd3V+YUs1Q1zWL2FmkyP yb+HJFUIYF/64m3aQe+pfvY3Q53gEAwkYYQafGlhgqU+l7CiB//tmN2+mwks9vJR czbEfBNKTxEF/UUIxCxdv5J9eq+L8w5TzKLDszD6cA2jsgNgoWoTkR9W92Q4HCHn h9sznyokjHF8B3TxTy099vogMkBb2ha7Dqdz72yO6ofPiP4+uGbYwTDwg8OaNqEr AkLMIHm8XgTeJaFyhoc4t0YcxmsDEc8HHztkFh5UGqJvxzQLjWfZ97fmWUUyN/fb ZniEy84ZE+hESNSNG4LWFPAnd1uvTNtKS6AaTUobSNX+7FyvfeM1xZDm+ZVJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU+63iVmdpU78o6sxOqokeDG45u1EwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzNDM1MmUzMTM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkREw DQYJKoZIhvcNAQELBQADggEBACqXP8mXyWoBJGi2NPODipzNnGhc9TNLMEuk+gxv IQJPPXRrMpE8MjnkWgwm89HOn9vt7/PVqpMhKkXZsKQJ70CvqdiYIlg2YWvRv/s6 375ZsPosijtKvCKDFaB0eXu+NX38YfhiXae1WPtm0KIjQ7R2kwfdrashrF//jsGP +IFRhZAwZ5O34uDZ8W36ojLp/kC8uBD4X/7YVhILmNW2i76za1jFQBspLPnbUwDP XOkpIeH2BLnsmGz0ycI/zxigSqLxrShuTl+2k0jgVKIW3ZN7xCex3P1hV8dkSLRK hLKL/MlTyuZriDRutbX8o78SEnNhrk+O6Cg7WGXrwDDpMGo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:37 2026 by rpki-client