This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234322e302f32332d3234203d3e203531313032.roa File: 34352e38362e3234322e302f32332d3234203d3e203531313032.roa (raw, json) Hash identifier: WmuplsTtYFFlCtyi/xPjKrQnvv3P2AF4kzoT8DAPzmM= Subject key identifier: 07:1D:A0:55:02:52:E5:DD:49:B6:80:98:AD:8C:A4:8E:23:DA:F1:42 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 42AD285E309D391FF75DC7135E9F3ACA396DC318 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234322e302f32332d3234203d3e203531313032.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 51102 IP address blocks: 45.86.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:ad:28:5e:30:9d:39:1f:f7:5d:c7:13:5e:9f:3a:ca:39:6d:c3:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=071DA0550252E5DD49B68098AD8CA48E23DAF142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:86:95:4b:78:f2:58:9d:ca:ba:95:8f:3d: ad:02:2a:8e:72:59:80:a7:50:0e:5e:93:c5:91:2c: 83:ba:0e:40:e6:9c:f4:7c:43:9b:17:5a:b2:98:2b: 2a:b9:43:09:33:f9:71:ad:33:6b:5e:4b:26:bd:98: e9:d9:ce:da:81:f9:d0:9d:b2:35:17:86:9a:50:3a: 8e:3b:4c:60:d9:5d:8a:c6:23:b6:21:3b:6f:88:22: 66:90:7b:3d:6c:7f:65:28:7f:3a:e9:0a:79:4b:3c: dc:39:8b:71:c0:2c:39:23:82:cc:51:7d:1d:ce:c9: 61:e8:de:e2:bb:67:77:dc:b0:f7:ed:5f:c0:e7:e1: 78:b1:c1:f2:a6:01:f7:09:77:10:e5:4c:fb:c5:77: e2:1a:c8:cc:64:17:6e:ff:65:82:83:4d:12:8b:7f: 1d:31:5a:2b:2c:ea:bf:4b:48:1a:a7:70:2e:1b:8f: 53:b2:d9:34:12:f4:d6:96:db:b9:2d:c8:05:b7:bc: 10:c4:de:10:ca:35:2a:3c:d8:19:11:ab:0c:05:08: 4d:0b:c6:11:52:05:5b:4a:6e:06:9e:a8:db:1b:4c: 38:21:b3:dc:18:b0:24:b6:16:2f:e3:fd:ae:2c:1e: dc:4b:b2:ec:6e:70:97:b1:6a:0f:fd:52:19:15:4e: b0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1D:A0:55:02:52:E5:DD:49:B6:80:98:AD:8C:A4:8E:23:DA:F1:42 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e38362e3234322e302f32332d3234203d3e203531313032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.242.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:8f:70:c2:44:09:f0:e7:40:b1:83:5a:2f:e2:15:39:42:be: 8a:a6:e3:79:7d:7d:e4:57:58:24:57:32:48:2d:d4:02:54:13: d7:e0:73:43:93:14:74:06:4a:cc:a7:5c:68:94:b1:53:2f:59: d9:05:6a:90:92:54:d7:27:1d:72:a1:95:62:32:2a:cd:53:84: de:92:4a:61:e4:a6:26:c2:f2:8d:fd:83:e0:5c:0b:40:8b:ac: 98:06:4d:26:24:9e:d1:6a:22:35:55:a5:a4:4c:94:2b:cd:af: 83:49:49:c7:75:92:30:40:9f:42:f3:82:d1:a6:f6:71:25:90: 2a:44:02:83:82:6a:96:9f:d3:09:4d:f0:2a:22:24:68:f3:54: 0c:35:46:21:e3:69:4d:5c:e0:5d:f4:96:c0:04:09:85:2a:65: 51:88:15:f7:81:15:8f:60:f4:17:fc:fa:58:f4:57:d4:6b:96: 24:9d:26:5c:5d:2b:ed:4d:2d:eb:ef:8d:9a:25:2d:1e:b9:43: c0:e0:e9:91:29:db:71:4d:2b:9d:09:e0:97:db:48:87:6c:b8: d3:0c:90:2f:a4:bc:db:9b:b1:04:4c:35:a6:f1:38:08:2b:10: 90:91:7d:1c:aa:fc:80:8f:3d:09:a6:cd:0c:0f:67:aa:87:3a: 6a:69:ec:94 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQq0oXjCdOR/3XccTXp86yjltwxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDA3MURBMDU1MDI1MkU1REQ0OUI2ODA5OEFEOENBNDhFMjNEQUYxNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqIaVS3jyWJ3KupWPPa0CKo5y WYCnUA5ek8WRLIO6DkDmnPR8Q5sXWrKYKyq5Qwkz+XGtM2teSya9mOnZztqB+dCd sjUXhppQOo47TGDZXYrGI7YhO2+IImaQez1sf2UofzrpCnlLPNw5i3HALDkjgsxR fR3OyWHo3uK7Z3fcsPftX8Dn4XixwfKmAfcJdxDlTPvFd+IayMxkF27/ZYKDTRKL fx0xWiss6r9LSBqncC4bj1Oy2TQS9NaW27ktyAW3vBDE3hDKNSo82BkRqwwFCE0L xhFSBVtKbgaeqNsbTDghs9wYsCS2Fi/j/a4sHtxLsuxucJexag/9UhkVTrARAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUBx2gVQJS5d1JtoCYrYykjiPa8UIwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzgzNjJlMzIzNDMy MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzMTMxMzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS1W 8jANBgkqhkiG9w0BAQsFAAOCAQEAao9wwkQJ8OdAsYNaL+IVOUK+iqbjeX195FdY JFcySC3UAlQT1+BzQ5MUdAZKzKdcaJSxUy9Z2QVqkJJU1ycdcqGVYjIqzVOE3pJK YeSmJsLyjf2D4FwLQIusmAZNJiSe0WoiNVWlpEyUK82vg0lJx3WSMECfQvOC0ab2 cSWQKkQCg4Jqlp/TCU3wKiIkaPNUDDVGIeNpTVzgXfSWwAQJhSplUYgV94EVj2D0 F/z6WPRX1GuWJJ0mXF0r7U0t6++NmiUtHrlDwODpkSnbcU0rnQngl9tIh2y40wyQ L6S825uxBEw1pvE4CCsQkJF9HKr8gI89CabNDA9nqoc6amnslA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:02 2026 by rpki-client