This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38322e302f32332d3234203d3e2038373038.roa File: 34352e3135302e38322e302f32332d3234203d3e2038373038.roa (raw, json) Hash identifier: h92ojw4F8ke03iY8ys0WrfzvIMk3uu7aZq8MrbGJTZk= Subject key identifier: F5:4C:11:1A:82:81:F9:93:CD:F8:17:9B:8A:1D:D0:C3:FE:49:19:0F Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 7A0955D56246168B25FBF4B65D705A7BF3D3156E Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38322e302f32332d3234203d3e2038373038.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 8708 IP address blocks: 45.150.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:09:55:d5:62:46:16:8b:25:fb:f4:b6:5d:70:5a:7b:f3:d3:15:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=F54C111A8281F993CDF8179B8A1DD0C3FE49190F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:54:0c:ba:3e:94:46:a3:cf:b1:e2:17:73:da: bf:a2:52:39:55:fc:01:d9:0d:3c:30:21:4e:9f:e1: b3:dd:37:bb:81:9d:ae:69:14:98:36:3e:ae:1b:3a: e2:1a:d9:ab:c5:8b:50:bd:c0:ea:b4:88:5f:59:e2: 69:42:c4:fb:9f:7c:d2:d7:84:a7:3b:9f:d6:2f:b6: 24:56:f9:41:23:e9:0b:e9:31:dc:ad:db:b7:d0:27: 1f:d7:96:4d:f6:fe:3d:fb:b9:e7:50:79:1e:b1:7b: 98:b9:7f:51:dc:3f:b8:9e:4b:b4:9e:b0:66:2a:d7: 5e:a3:ed:9f:8a:42:c4:07:2f:ec:b7:0f:2d:ac:c5: 64:64:49:1c:93:30:d1:ee:1e:16:26:5f:67:89:8c: b1:4a:12:f0:c7:79:bb:c2:c4:ba:66:c5:e3:3c:bb: ca:52:8d:73:d8:3b:2a:c8:ed:1c:cd:be:8e:c6:74: d6:8e:86:cb:f7:c3:d7:8a:09:ca:cd:41:d2:01:b8: 81:51:76:8c:8f:46:e3:42:d8:b4:9b:d9:5b:36:ca: e0:21:6a:ac:b7:25:72:14:4c:62:62:90:90:c0:3e: cb:8d:1a:a3:a0:e9:12:0c:fe:e0:58:f2:8a:36:93: db:40:5b:d0:f0:1f:aa:b4:d0:b6:0b:ce:f9:4b:8d: fc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:4C:11:1A:82:81:F9:93:CD:F8:17:9B:8A:1D:D0:C3:FE:49:19:0F X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e3135302e38322e302f32332d3234203d3e2038373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.82.0/23 Signature Algorithm: sha256WithRSAEncryption dd:13:0e:1d:ee:99:c3:db:64:81:9e:4f:62:9e:6d:af:38:53: f3:fb:41:0b:97:0c:c9:09:46:0c:33:4d:44:3d:36:a5:a5:15: d0:a7:89:c5:c3:73:f6:6b:06:8f:6a:a1:c4:23:52:c8:54:c2: 8a:50:74:15:92:b4:87:91:2e:4d:c3:b9:b2:3f:f2:70:8a:86: 52:8e:63:3b:d0:49:62:45:0e:01:9c:cf:65:d7:87:79:8c:f5: 86:21:70:7b:44:b3:f5:54:15:70:47:74:2b:de:1f:d8:31:5c: 33:f3:07:bb:42:89:0b:34:3f:f8:43:b8:1e:5b:a4:8f:ea:98: ee:35:09:e9:4e:f4:28:8f:fd:70:4a:82:fa:bd:b9:b2:c1:d8: c0:8d:cc:9b:32:d1:b6:b0:de:52:0b:9a:46:20:0e:aa:34:6b: 13:ec:cb:7c:18:55:6a:65:96:d8:c3:09:e4:69:fc:3e:f4:57: 29:17:7d:2b:6b:43:cb:af:1e:89:17:f2:d5:96:17:fa:74:bf: 2a:8c:54:d0:99:94:1f:40:48:bc:35:d0:62:b0:c7:f3:83:7f: 00:d5:e9:8d:a1:5c:03:01:6a:9b:76:b3:f7:94:81:05:aa:58: 42:9d:b4:01:4c:1d:87:37:0d:1e:4d:53:31:ba:6f:52:a6:e3: fb:fb:8d:52 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUeglV1WJGFosl+/S2XXBae/PTFW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKEY1NEMxMTFBODI4MUY5OTNDREY4MTc5QjhBMUREMEMzRkU0OTE5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1VAy6PpRGo8+x4hdz2r+iUjlV /AHZDTwwIU6f4bPdN7uBna5pFJg2Pq4bOuIa2avFi1C9wOq0iF9Z4mlCxPuffNLX hKc7n9YvtiRW+UEj6QvpMdyt27fQJx/Xlk32/j37uedQeR6xe5i5f1HcP7ieS7Se sGYq116j7Z+KQsQHL+y3Dy2sxWRkSRyTMNHuHhYmX2eJjLFKEvDHebvCxLpmxeM8 u8pSjXPYOyrI7RzNvo7GdNaOhsv3w9eKCcrNQdIBuIFRdoyPRuNC2LSb2Vs2yuAh aqy3JXIUTGJikJDAPsuNGqOg6RIM/uBY8oo2k9tAW9DwH6q00LYLzvlLjfw3AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU9UwRGoKB+ZPN+Bebih3Qw/5JGQ8wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzEzNTMwMmUzODMy MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzNzMwMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtllIw DQYJKoZIhvcNAQELBQADggEBAN0TDh3umcPbZIGeT2Keba84U/P7QQuXDMkJRgwz TUQ9NqWlFdCnicXDc/ZrBo9qocQjUshUwopQdBWStIeRLk3DubI/8nCKhlKOYzvQ SWJFDgGcz2XXh3mM9YYhcHtEs/VUFXBHdCveH9gxXDPzB7tCiQs0P/hDuB5bpI/q mO41CelO9CiP/XBKgvq9ubLB2MCNzJsy0baw3lILmkYgDqo0axPsy3wYVWplltjD CeRp/D70VykXfStrQ8uvHokX8tWWF/p0vyqMVNCZlB9ASLw10GKwx/ODfwDV6Y2h XAMBapt2s/eUgQWqWEKdtAFMHYc3DR5NUzG6b1Km4/v7jVI= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:29 2026 by rpki-client