This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234312e302f32342d3234203d3e203532323032.roa File: 34352e38362e3234312e302f32342d3234203d3e203532323032.roa (raw, json) Hash identifier: 6j76sm2WaPevogiQD9RTu3/ysIngZQNd7rieWwapF8I= Subject key identifier: 60:8F:C8:7E:93:4F:59:B1:44:8E:71:E4:82:0F:F9:EE:A3:86:C0:ED Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 5FCC443FFEF20EB13AF53D0A4E0596CA7C3DBAE4 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234312e302f32342d3234203d3e203532323032.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 52202 IP address blocks: 45.86.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cc:44:3f:fe:f2:0e:b1:3a:f5:3d:0a:4e:05:96:ca:7c:3d:ba:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=608FC87E934F59B1448E71E4820FF9EEA386C0ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:16:1a:2e:f9:54:b2:4f:e4:1c:ef:c7:ab: e7:4a:87:ef:12:c6:ad:db:10:c2:9b:98:c7:30:3d: 4a:17:0d:e8:83:2a:8e:6a:63:16:50:cd:0a:97:1e: 30:5f:bb:20:ee:aa:f8:47:41:10:e6:db:ae:c2:6a: b2:2c:d2:36:40:b5:d5:90:ff:bf:f9:ca:cc:01:24: 24:cb:20:2c:1c:f0:45:1b:a9:b2:fc:89:cc:1b:29: 4f:81:ef:c9:10:ec:8d:ad:69:2c:f2:a7:37:16:41: ba:a2:cb:ec:7a:6f:eb:c8:da:f8:8b:4e:28:86:2e: ae:f7:09:fa:d1:95:da:fb:81:ea:b3:5b:77:bc:37: b1:5e:b6:7b:63:ef:2c:ec:4e:93:13:47:d8:64:47: f6:fe:33:b9:5a:6b:e7:cf:25:b0:cf:f8:e8:09:16: 4d:88:f5:97:fb:41:21:47:af:9d:8c:20:77:d3:b7: 4f:60:e4:78:49:01:c5:ee:ca:8e:74:ad:b7:55:f7: a8:4f:4a:fe:68:d5:d5:65:b0:1f:e5:fa:8c:fc:8c: 74:ae:67:0e:be:4d:68:b2:f2:2f:3c:cd:2f:2b:f1: 49:ba:8b:31:b7:a8:c2:2d:01:7f:1d:95:18:7d:67: 84:70:17:b7:a4:dc:c1:59:ec:f9:ee:06:a1:64:35: eb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8F:C8:7E:93:4F:59:B1:44:8E:71:E4:82:0F:F9:EE:A3:86:C0:ED X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234312e302f32342d3234203d3e203532323032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.241.0/24 Signature Algorithm: sha256WithRSAEncryption 81:44:49:03:e3:1f:f1:c3:ae:55:ef:1d:1f:ee:be:31:72:a5: a0:97:33:ac:79:75:c3:0f:7d:fe:2c:b8:0d:16:17:b6:8c:e4: aa:25:da:13:4d:09:ec:2d:3d:00:3c:9b:67:53:0e:f0:87:19: 66:a1:94:45:92:6a:e8:ce:f3:b2:59:56:3d:0a:6e:a1:c5:cd: 15:f5:22:fa:e0:8c:c6:0b:42:c9:14:6c:18:ea:5f:e0:c4:35: af:b2:ad:43:86:76:b6:bf:91:6b:d5:f0:c1:6b:c7:59:25:56: cf:4f:50:27:bf:6c:91:52:e6:d1:08:13:9c:aa:81:bf:e6:1e: 5d:71:61:73:8d:53:d8:11:2f:fb:f4:cd:f1:5b:0b:5c:ef:10: a7:3b:ec:71:99:29:f0:2a:52:b4:66:24:c6:01:67:4a:8b:4b: 4d:10:ac:b6:66:f3:0d:0f:e7:1b:69:6c:da:dc:1f:58:1d:62: 32:45:ef:ca:cb:5f:aa:a9:d9:9e:2c:f5:cf:31:de:20:87:a2: 3d:bc:51:9c:92:28:b0:48:1b:d9:f4:e1:0e:14:71:27:72:42: 25:cc:5f:d2:cc:6f:64:eb:a7:9c:c7:d3:45:ea:a9:1a:fb:42: 97:aa:62:16:95:e3:1c:4f:b5:0f:a8:aa:2d:94:a3:d3:80:cd: fd:3b:8f:ca -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUX8xEP/7yDrE69T0KTgWWynw9uuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDYwOEZDODdFOTM0RjU5QjE0NDhFNzFFNDgyMEZGOUVFQTM4NkMwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0BYaLvlUsk/kHO/Hq+dKh+8S xq3bEMKbmMcwPUoXDeiDKo5qYxZQzQqXHjBfuyDuqvhHQRDm267CarIs0jZAtdWQ /7/5yswBJCTLICwc8EUbqbL8icwbKU+B78kQ7I2taSzypzcWQbqiy+x6b+vI2viL TiiGLq73CfrRldr7geqzW3e8N7Fetntj7yzsTpMTR9hkR/b+M7laa+fPJbDP+OgJ Fk2I9Zf7QSFHr52MIHfTt09g5HhJAcXuyo50rbdV96hPSv5o1dVlsB/l+oz8jHSu Zw6+TWiy8i88zS8r8Um6izG3qMItAX8dlRh9Z4RwF7ek3MFZ7PnuBqFkNetNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUYI/IfpNPWbFEjnHkgg/57qOGwO0wHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzgzNjJlMzIzNDMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1W 8TANBgkqhkiG9w0BAQsFAAOCAQEAgURJA+Mf8cOuVe8dH+6+MXKloJczrHl1ww99 /iy4DRYXtozkqiXaE00J7C09ADybZ1MO8IcZZqGURZJq6M7zsllWPQpuocXNFfUi +uCMxgtCyRRsGOpf4MQ1r7KtQ4Z2tr+Ra9XwwWvHWSVWz09QJ79skVLm0QgTnKqB v+YeXXFhc41T2BEv+/TN8VsLXO8QpzvscZkp8CpStGYkxgFnSotLTRCstmbzDQ/n G2ls2twfWB1iMkXvystfqqnZniz1zzHeIIeiPbxRnJIosEgb2fThDhRxJ3JCJcxf 0sxvZOunnMfTReqpGvtCl6piFpXjHE+1D6iqLZSj04DN/TuPyg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client