This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e2037303138.roa File: 34352e3135302e38302e302f32332d3234203d3e2037303138.roa (raw, json) Hash identifier: kOulxplMED124mReSqMPrJ2bJU5Nefonu2YlbcieVgQ= Subject key identifier: 07:FC:D0:F1:4C:3C:6B:5C:BF:32:02:22:68:E7:83:68:8C:FF:B8:11 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 4871E8A60B9F2D6685B15E3F284FD1ED7668576F Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e2037303138.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 7018 IP address blocks: 45.150.80.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:71:e8:a6:0b:9f:2d:66:85:b1:5e:3f:28:4f:d1:ed:76:68:57:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=07FCD0F14C3C6B5CBF32022268E783688CFFB811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:09:9a:74:18:05:e0:1d:71:f0:c2:27:24:20: d3:47:78:91:22:fa:02:07:f5:b3:92:d4:a9:f0:3a: 60:fb:5c:31:44:6e:d2:bb:27:f6:55:7b:7c:93:13: 11:a3:e8:8d:72:f6:d9:3f:f6:06:b4:79:19:70:71: 8a:45:8d:b9:17:6b:3d:a1:e8:54:4a:1e:1b:94:e1: 0f:f9:d7:f4:dd:b0:d0:93:51:1d:04:16:7e:67:9e: 44:ab:21:cf:ba:a4:46:8b:04:62:a0:5e:45:3d:c5: 69:8c:7e:b3:59:32:a8:d9:1e:b2:3f:62:0e:65:ae: 90:43:a3:77:be:f0:56:48:15:e4:15:61:66:62:f0: 80:c8:7f:53:46:4a:0e:ea:db:bd:d4:c0:cc:fc:dd: ee:88:25:dc:0c:55:a7:ef:cd:16:95:2e:9d:89:11: d4:b2:b0:15:58:95:44:91:95:11:1f:8e:ac:ea:b4: c1:0e:03:b7:be:f1:1b:20:33:20:02:d4:49:8a:76: 82:33:2a:ec:de:43:e6:65:0a:71:45:54:fb:82:b8: a7:32:9c:08:62:85:64:54:49:a4:e5:99:de:e4:c6: 93:9e:56:f0:8b:49:0f:03:19:83:68:63:f1:63:17: 98:2c:3c:82:12:cc:cc:ee:fd:19:52:db:c4:e7:79: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:D0:F1:4C:3C:6B:5C:BF:32:02:22:68:E7:83:68:8C:FF:B8:11 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38302e302f32332d3234203d3e2037303138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.80.0/23 Signature Algorithm: sha256WithRSAEncryption bc:17:ae:d8:6f:04:2a:77:f8:43:25:5a:ac:8c:d5:6c:a6:e9: bb:e1:c6:9c:98:31:57:41:f0:2f:eb:61:dd:be:af:3c:89:70: 8b:fa:25:32:00:6a:89:23:c6:d0:62:92:ce:46:4d:8c:f4:63: a4:c3:38:dd:a2:86:a0:ab:67:46:4d:5b:3c:cd:95:19:f6:df: 90:8c:1b:38:f1:40:3e:1f:d3:e3:f5:74:c0:ee:40:5a:7c:2c: b4:cb:37:12:b6:ff:9d:db:de:e0:eb:cd:46:65:be:d3:19:f2: 84:1e:52:5a:e0:2c:81:be:1b:a8:a5:4a:e7:32:ee:96:34:ec: 90:ed:ba:c3:1b:42:fb:cf:7b:ed:e0:ba:36:01:5d:3c:c6:68: fd:60:9a:68:32:d8:d7:2a:2d:0c:2d:48:15:0c:d5:0d:ec:82: 4d:d9:ea:3d:46:e6:ef:f0:d5:db:a0:44:cc:fb:2f:97:40:a4: d8:52:50:1d:8a:9c:42:cd:77:6a:f0:79:51:a7:ea:9f:3b:62: 82:69:3d:c2:26:ac:fe:0d:19:a8:47:bd:84:5c:3b:78:95:9a: 49:82:7e:bc:8c:b3:6a:43:ef:1e:c2:2c:52:07:b3:b7:6d:35: 8b:1a:5d:6b:ce:04:ae:ca:f1:85:03:59:dd:4b:53:f4:2f:7a: e9:23:4e:da -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUSHHopgufLWaFsV4/KE/R7XZoV28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDA3RkNEMEYxNEMzQzZCNUNCRjMyMDIyMjY4RTc4MzY4OENGRkI4MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CZp0GAXgHXHwwickINNHeJEi +gIH9bOS1KnwOmD7XDFEbtK7J/ZVe3yTExGj6I1y9tk/9ga0eRlwcYpFjbkXaz2h 6FRKHhuU4Q/51/TdsNCTUR0EFn5nnkSrIc+6pEaLBGKgXkU9xWmMfrNZMqjZHrI/ Yg5lrpBDo3e+8FZIFeQVYWZi8IDIf1NGSg7q273UwMz83e6IJdwMVafvzRaVLp2J EdSysBVYlUSRlREfjqzqtMEOA7e+8RsgMyAC1EmKdoIzKuzeQ+ZlCnFFVPuCuKcy nAhihWRUSaTlmd7kxpOeVvCLSQ8DGYNoY/FjF5gsPIISzMzu/RlS28TneTX/AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUB/zQ8Uw8a1y/MgIiaOeDaIz/uBEwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzNTMwMmUzODMw MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtllAw DQYJKoZIhvcNAQELBQADggEBALwXrthvBCp3+EMlWqyM1Wym6bvhxpyYMVdB8C/r Yd2+rzyJcIv6JTIAaokjxtBiks5GTYz0Y6TDON2ihqCrZ0ZNWzzNlRn235CMGzjx QD4f0+P1dMDuQFp8LLTLNxK2/53b3uDrzUZlvtMZ8oQeUlrgLIG+G6ilSucy7pY0 7JDtusMbQvvPe+3gujYBXTzGaP1gmmgy2NcqLQwtSBUM1Q3sgk3Z6j1G5u/w1dug RMz7L5dApNhSUB2KnELNd2rweVGn6p87YoJpPcImrP4NGahHvYRcO3iVmkmCfryM s2pD7x7CLFIHs7dtNYsaXWvOBK7K8YUDWd1LU/QveukjTto= -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:38 2026 by rpki-client