This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234302e302f32342d3234203d3e203438333336.roa File: 34352e38362e3234302e302f32342d3234203d3e203438333336.roa (raw, json) Hash identifier: brC7v7co+B797a1REbvG744UlM2RE2OH6cOB5hW9nL4= Subject key identifier: 29:F9:10:DB:49:79:A5:E7:BB:2A:E7:CC:66:1E:17:95:C7:BE:E9:02 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 78D4376B3AF335FAE04F35031DC9F1948EDDD35D Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234302e302f32342d3234203d3e203438333336.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 48336 IP address blocks: 45.86.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d4:37:6b:3a:f3:35:fa:e0:4f:35:03:1d:c9:f1:94:8e:dd:d3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=29F910DB4979A5E7BB2AE7CC661E1795C7BEE902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:0a:14:d5:e3:4e:65:04:d7:ca:26:3d:d6: 07:e4:1d:d4:8d:94:10:b7:a9:60:3a:44:3c:3d:93: 8d:a0:08:0b:f8:93:a6:ac:17:33:c0:e8:57:c5:b1: 7a:3e:23:bb:c8:51:21:78:2b:46:8f:79:c2:b9:15: 1f:d5:cd:49:d4:40:9f:00:29:b8:90:ed:c0:78:9e: f9:14:7d:8b:ba:30:b3:a7:56:c6:3d:ea:60:47:66: 7d:0f:92:c9:42:3d:89:ff:b6:9e:fb:e1:09:21:ca: 6e:36:49:ad:d3:b2:86:36:b1:ab:2e:1f:27:48:86: 1c:9a:5c:35:f1:99:dc:1b:3f:ef:cb:fb:86:1a:96: e7:1c:d3:ef:39:83:8b:af:58:c5:7e:3b:f8:5c:84: 84:bf:58:35:e1:3b:43:27:e2:09:32:99:6b:1f:67: ae:41:94:df:9e:a3:3e:4e:90:84:94:f2:5f:2d:60: 20:1a:78:47:88:f2:37:c2:18:7a:2a:1f:3e:d6:0b: 3a:c8:98:87:69:e1:8b:d7:08:29:6b:23:45:24:96: e7:5e:d8:ed:6e:90:85:cf:4f:59:2a:7a:f8:4b:a1: a6:bf:e0:14:9e:b3:5f:32:88:eb:51:99:01:8d:3a: 5b:7d:ce:e9:d5:c0:ce:cb:ff:c5:46:e7:2c:8e:0a: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:10:DB:49:79:A5:E7:BB:2A:E7:CC:66:1E:17:95:C7:BE:E9:02 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234302e302f32342d3234203d3e203438333336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.240.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:5a:d3:e3:f6:5c:d5:2d:19:62:fe:cc:52:b3:e2:18:6e:c2: 5b:3b:33:7e:5b:76:a1:b9:cb:13:18:b1:e4:2b:a8:20:38:e0: 7a:00:50:19:da:04:e4:cc:7d:59:49:6f:91:2d:7b:77:c3:16: 8a:c7:ae:6a:36:b2:1c:dd:fa:84:95:81:76:b9:57:20:d8:8e: 2d:7f:aa:6f:5d:c6:e9:c3:9e:63:0d:39:73:04:1e:42:1a:0c: 4f:b0:a2:03:60:58:fc:94:a7:94:a2:fd:72:eb:bc:6f:33:9a: f7:2f:55:c5:16:da:59:0c:62:3e:93:81:fe:10:99:5b:e5:d7: 97:f7:2c:79:db:e5:cc:12:8e:0e:94:ec:77:91:4a:15:b3:33: 81:47:e2:ad:5b:df:77:84:02:c9:07:7b:0a:03:03:3c:b1:30: 66:ed:f6:49:88:fd:b1:b6:46:a3:42:c6:99:19:70:83:ff:d2: ba:13:b2:44:fb:db:4e:55:a1:8d:e2:1f:29:54:58:17:41:97: f4:d3:1e:11:0b:f7:d8:20:8a:54:05:2f:f3:82:b2:7b:86:df: d7:81:13:b7:9e:69:d2:70:6c:a1:d7:5a:5f:39:5a:0f:0d:67: 26:20:13:af:e6:6d:65:f2:48:16:38:48:ff:08:da:cb:4a:d9: f9:04:e8:5e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUeNQ3azrzNfrgTzUDHcnxlI7d010wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDI5RjkxMERCNDk3OUE1RTdCQjJBRTdDQzY2MUUxNzk1QzdCRUU5MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LQoU1eNOZQTXyiY91gfkHdSN lBC3qWA6RDw9k42gCAv4k6asFzPA6FfFsXo+I7vIUSF4K0aPecK5FR/VzUnUQJ8A KbiQ7cB4nvkUfYu6MLOnVsY96mBHZn0PkslCPYn/tp774Qkhym42Sa3TsoY2sasu HydIhhyaXDXxmdwbP+/L+4Yalucc0+85g4uvWMV+O/hchIS/WDXhO0Mn4gkymWsf Z65BlN+eoz5OkISU8l8tYCAaeEeI8jfCGHoqHz7WCzrImIdp4YvXCClrI0Uklude 2O1ukIXPT1kqevhLoaa/4BSes18yiOtRmQGNOlt9zunVwM7L/8VG5yyOCpGtAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUKfkQ20l5pee7KufMZh4Xlce+6QIwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzgzNjJlMzIzNDMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzMzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1W 8DANBgkqhkiG9w0BAQsFAAOCAQEATlrT4/Zc1S0ZYv7MUrPiGG7CWzszflt2obnL Exix5CuoIDjgegBQGdoE5Mx9WUlvkS17d8MWiseuajayHN36hJWBdrlXINiOLX+q b13G6cOeYw05cwQeQhoMT7CiA2BY/JSnlKL9cuu8bzOa9y9VxRbaWQxiPpOB/hCZ W+XXl/csedvlzBKODpTsd5FKFbMzgUfirVvfd4QCyQd7CgMDPLEwZu32SYj9sbZG o0LGmRlwg//SuhOyRPvbTlWhjeIfKVRYF0GX9NMeEQv32CCKVAUv84Kye4bf14ET t55p0nBsoddaXzlaDw1nJiATr+ZtZfJIFjhI/wjay0rZ+QToXg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:41 2026 by rpki-client