This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e203232373733.roa File: 34352e3135302e38302e302f32332d3234203d3e203232373733.roa (raw, json) Hash identifier: mX/eXAuvLLtuQDYpRLJBRsFLnqs4IGZOMKw9wGOtrFo= Subject key identifier: 06:39:8D:0E:F0:E6:E1:0B:48:5A:D0:8F:23:47:23:C7:86:0D:05:AD Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 494359023751D19E1A052FDEDFEFD06C39206370 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e203232373733.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 22773 IP address blocks: 45.150.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:43:59:02:37:51:d1:9e:1a:05:2f:de:df:ef:d0:6c:39:20:63:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=06398D0EF0E6E10B485AD08F234723C7860D05AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:55:39:41:fd:e8:c9:78:3c:8e:26:40:14:40: 34:8f:6d:6c:de:16:4c:24:21:8b:46:53:2b:28:a5: 88:17:57:b5:fd:bf:21:c2:30:55:68:1f:75:9d:48: d6:01:22:73:d0:4a:24:e6:17:18:6b:8d:91:23:90: e9:fd:c3:32:77:3e:d1:64:07:37:a6:f2:62:41:f6: 14:39:f3:42:93:4a:08:b8:06:bf:da:d4:60:f4:9e: 2a:da:90:47:78:90:ce:96:7e:2c:d0:0d:8d:98:c2: 46:89:7c:03:45:b2:cc:e3:39:ff:44:dd:e4:6b:5f: 49:c8:db:3a:75:d3:2c:b7:81:f2:5f:a4:4f:b0:af: 94:20:2c:25:11:23:dd:6d:09:12:eb:a7:96:ce:86: c6:5d:d7:00:79:c7:33:c4:fb:55:f4:f1:20:0e:f2: 0b:89:d6:16:74:f7:bd:e4:38:2c:a6:9c:c2:4d:77: 1b:b0:41:89:09:71:5c:00:8b:2a:8e:09:26:2d:c4: 88:25:ee:cd:97:86:27:dd:51:fc:a8:a0:14:ac:30: 8f:c7:37:fb:70:b2:fe:ec:20:9a:7c:8e:f8:1f:0b: a0:96:a8:2d:17:11:ec:fe:64:5b:50:82:62:ec:9c: 91:31:7d:90:fe:fa:26:43:cf:20:96:fd:16:8b:0d: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:39:8D:0E:F0:E6:E1:0B:48:5A:D0:8F:23:47:23:C7:86:0D:05:AD X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e203232373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.80.0/23 Signature Algorithm: sha256WithRSAEncryption da:a1:76:b9:fd:b2:82:11:9b:72:73:4d:cc:4d:46:f3:d4:7f: 70:56:bc:bf:7b:5c:0e:5c:ed:6f:76:6e:51:fb:72:73:a8:61: a8:38:79:3e:30:ab:34:db:96:bd:ba:53:be:28:8d:c9:ec:e7: e9:0d:05:f1:7e:19:c2:96:d9:2f:28:00:dc:91:9a:33:f0:fa: cf:86:97:4e:10:68:b4:db:22:e5:1c:16:f7:00:53:ab:40:7e: 76:fb:be:e2:ab:a4:5f:c6:6c:f0:0d:2a:3d:8e:b4:7a:36:93: d5:66:2d:bf:a6:e6:ff:77:c8:3f:e0:7a:ba:1f:a0:82:a8:a8: 91:6d:04:a7:ef:e2:1b:14:4c:0c:61:59:c3:97:e8:51:30:a1: fd:8a:47:b1:27:71:f5:9a:f5:29:12:89:c8:30:0e:7c:ec:fd: c6:5a:14:58:da:05:e6:a8:19:6b:82:1a:0d:fe:18:a9:83:79: 0d:1c:e7:54:5e:6f:b7:0a:ea:5d:60:79:0d:27:9c:31:67:48: f4:1c:c0:66:4c:01:75:97:35:59:2c:8b:5e:c2:6e:85:81:b1: 59:6a:8d:a8:bf:aa:37:8c:56:2c:a4:22:23:e7:e1:8d:dd:34: 7d:cb:3e:e5:1a:4b:fe:d0:a8:8d:23:eb:fd:f8:71:89:40:6d: b2:62:c0:13 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSUNZAjdR0Z4aBS/e3+/QbDkgY3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDA2Mzk4RDBFRjBFNkUxMEI0ODVBRDA4RjIzNDcyM0M3ODYwRDA1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVTlB/ejJeDyOJkAUQDSPbWze FkwkIYtGUysopYgXV7X9vyHCMFVoH3WdSNYBInPQSiTmFxhrjZEjkOn9wzJ3PtFk Bzem8mJB9hQ580KTSgi4Br/a1GD0nirakEd4kM6WfizQDY2YwkaJfANFsszjOf9E 3eRrX0nI2zp10yy3gfJfpE+wr5QgLCURI91tCRLrp5bOhsZd1wB5xzPE+1X08SAO 8guJ1hZ0973kOCymnMJNdxuwQYkJcVwAiyqOCSYtxIgl7s2XhifdUfyooBSsMI/H N/twsv7sIJp8jvgfC6CWqC0XEez+ZFtQgmLsnJExfZD++iZDzyCW/RaLDX8tAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBjmNDvDm4QtIWtCPI0cjx4YNBa0wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzNTMwMmUzODMw MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMjM3MzczMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS2W UDANBgkqhkiG9w0BAQsFAAOCAQEA2qF2uf2yghGbcnNNzE1G89R/cFa8v3tcDlzt b3ZuUftyc6hhqDh5PjCrNNuWvbpTviiNyezn6Q0F8X4ZwpbZLygA3JGaM/D6z4aX ThBotNsi5RwW9wBTq0B+dvu+4qukX8Zs8A0qPY60ejaT1WYtv6bm/3fIP+B6uh+g gqiokW0Ep+/iGxRMDGFZw5foUTCh/YpHsSdx9Zr1KRKJyDAOfOz9xloUWNoF5qgZ a4IaDf4YqYN5DRznVF5vtwrqXWB5DSecMWdI9BzAZkwBdZc1WSyLXsJuhYGxWWqN qL+qN4xWLKQiI+fhjd00fcs+5RpL/tCojSPr/fhxiUBtsmLAEw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:02 2026 by rpki-client