This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e20343031383338.roa File: 34352e3135302e38302e302f32332d3234203d3e20343031383338.roa (raw, json) Hash identifier: Jg7LR/Ly1PvnbM1eYJHRauwevtEfV5lpTFcDhbru9WA= Subject key identifier: E2:F6:11:01:19:8D:D1:50:29:84:F7:9B:8D:6B:05:C8:95:1C:CB:A5 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 64FC200E0C354D273165D99940F116D5B297F2E0 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e20343031383338.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 401838 IP address blocks: 45.150.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fc:20:0e:0c:35:4d:27:31:65:d9:99:40:f1:16:d5:b2:97:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=E2F61101198DD1502984F79B8D6B05C8951CCBA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:90:79:61:97:5e:fd:b9:38:1b:91:35:d6:29: de:da:9a:63:08:e0:38:59:69:cf:ab:13:a7:1f:c4: 9e:80:0a:80:38:3a:8d:d9:b4:fe:f6:35:0a:ed:1b: 70:9f:3d:55:80:0a:d5:b6:f9:17:ef:44:b6:12:da: 3f:5e:51:74:2d:35:89:bb:7c:52:60:49:42:46:b3: 8f:24:cf:bd:38:df:71:08:42:3e:ee:45:1f:53:d6: 9c:3c:d6:c6:d2:02:8c:c8:4e:9a:e8:5b:47:fa:c0: 13:fb:5d:5f:5d:5a:ea:86:59:39:2c:0f:5c:b4:79: c5:c0:56:08:cd:8a:07:70:53:81:a8:73:0d:2e:dd: 5a:bd:08:7b:ac:41:9b:43:ff:b6:3c:ba:b9:ac:e1: 44:80:ab:0a:63:f4:94:80:6a:ea:92:7e:51:35:c5: 8c:22:71:65:fb:11:a4:68:b8:5e:ff:2b:58:2c:32: b1:6e:55:e0:35:88:dd:65:96:de:fc:6d:29:2a:ed: f2:07:b2:d8:86:7b:96:e3:89:51:6b:c9:2a:9a:7f: a6:25:68:f9:6a:d4:3b:40:f1:51:6e:6d:d3:b9:59: 89:7b:62:4a:c9:4c:07:03:3c:e4:d5:e0:f4:7b:8f: 4e:ed:5c:6f:00:a3:27:62:fc:7a:b7:a3:b8:73:22: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F6:11:01:19:8D:D1:50:29:84:F7:9B:8D:6B:05:C8:95:1C:CB:A5 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e20343031383338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.80.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:b6:65:c8:e1:42:fd:ec:08:2d:69:08:f5:ea:3a:03:b7:33: f0:90:07:e8:6d:3e:df:7b:2e:27:8d:67:15:06:fe:a2:9b:3e: 7a:2b:90:78:a4:b6:22:ce:28:95:31:d8:84:10:31:09:0e:01: 97:6d:ed:b7:f9:e0:f8:61:31:b0:4a:9c:1d:80:62:5e:04:3b: 20:8e:7d:0b:39:d9:f2:74:32:c5:32:76:3b:7f:91:99:c7:d7: cd:a0:a5:3d:86:e0:c2:44:4d:0a:4d:cc:76:72:38:e5:b0:c1: 5c:a9:77:3d:b0:ae:66:1b:98:2c:d5:21:ad:32:a5:b6:20:af: b4:96:b0:bf:6a:9a:54:32:54:53:2a:03:9a:2f:e0:ca:56:68: a4:99:70:a5:8c:e2:5f:44:d9:e8:6c:ca:23:31:95:49:22:7f: 01:b0:4d:be:60:c1:32:0c:ad:57:b6:14:39:ab:03:e4:c4:12: 77:dd:69:71:29:ea:3d:f0:9d:dc:03:d9:42:15:fd:ee:87:2c: 3e:1c:6e:f0:b5:e8:00:15:73:9d:5f:bc:d1:1e:3f:db:85:90: 25:42:be:24:83:43:24:a5:fd:c8:a2:40:99:1b:2c:cd:2c:0c: 29:a8:f1:28:14:db:ca:0b:71:68:16:73:91:1e:e4:91:8b:3c: 13:27:6f:97 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZPwgDgw1TScxZdmZQPEW1bKX8uAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKEUyRjYxMTAxMTk4REQxNTAyOTg0Rjc5QjhENkIwNUM4OTUxQ0NCQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkHlhl179uTgbkTXWKd7ammMI 4DhZac+rE6cfxJ6ACoA4Oo3ZtP72NQrtG3CfPVWACtW2+RfvRLYS2j9eUXQtNYm7 fFJgSUJGs48kz70433EIQj7uRR9T1pw81sbSAozITproW0f6wBP7XV9dWuqGWTks D1y0ecXAVgjNigdwU4Gocw0u3Vq9CHusQZtD/7Y8urms4USAqwpj9JSAauqSflE1 xYwicWX7EaRouF7/K1gsMrFuVeA1iN1llt78bSkq7fIHstiGe5bjiVFrySqaf6Yl aPlq1DtA8VFubdO5WYl7YkrJTAcDPOTV4PR7j07tXG8Aoydi/Hq3o7hzIlrTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4vYRARmN0VAphPebjWsFyJUcy6UwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzNTMwMmUzODMw MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzMDMxMzgzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB LZZQMA0GCSqGSIb3DQEBCwUAA4IBAQB6tmXI4UL97AgtaQj16joDtzPwkAfobT7f ey4njWcVBv6imz56K5B4pLYiziiVMdiEEDEJDgGXbe23+eD4YTGwSpwdgGJeBDsg jn0LOdnydDLFMnY7f5GZx9fNoKU9huDCRE0KTcx2cjjlsMFcqXc9sK5mG5gs1SGt MqW2IK+0lrC/appUMlRTKgOaL+DKVmikmXCljOJfRNnobMojMZVJIn8BsE2+YMEy DK1XthQ5qwPkxBJ33WlxKeo98J3cA9lCFf3uhyw+HG7wtegAFXOdX7zRHj/bhZAl Qr4kg0Mkpf3IokCZGyzNLAwpqPEoFNvKC3FoFnORHuSRizwTJ2+X -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:38 2026 by rpki-client