This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e342e302f32342d3234203d3e203538303631.roa File: 34352e39312e342e302f32342d3234203d3e203538303631.roa (raw, json) Hash identifier: llPiizS/K+0z5+YMGnd8eQbCFKqq/3Y67WGHdKFGjtU= Subject key identifier: 81:E4:5B:BE:5C:B8:3D:4C:4A:ED:81:DE:47:0A:81:3D:30:DC:33:AA Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 62A369FABEE6562C840F6239BA5DB6EB63F2FD26 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e342e302f32342d3234203d3e203538303631.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 58061 IP address blocks: 45.91.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a3:69:fa:be:e6:56:2c:84:0f:62:39:ba:5d:b6:eb:63:f2:fd:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=81E45BBE5CB83D4C4AED81DE470A813D30DC33AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:77:44:a6:a2:70:85:ee:90:8b:c2:43:4a:a9: bd:07:e0:11:d8:3f:b8:f6:0f:b7:7b:a5:56:8d:e0: e3:5e:cb:38:b3:76:0e:e4:9e:f9:61:37:71:63:c5: 67:0f:f4:14:83:14:cd:2b:72:27:cc:84:93:f8:ea: d0:3b:d9:c9:05:1d:17:60:d1:2c:9e:55:87:70:49: 94:01:87:19:bc:4e:d7:f4:c0:b7:d4:40:6d:28:d6: f2:71:5c:a6:3f:c4:5b:84:5e:ce:14:99:39:17:39: 06:10:f0:37:fb:4f:05:ed:c0:56:81:e1:a9:25:00: 62:8a:91:71:54:87:6a:b1:a1:d4:db:b7:40:dd:31: aa:2d:38:db:c1:74:5d:22:57:e5:60:ea:79:42:09: 76:57:2f:44:de:af:5b:8b:6d:2d:52:1f:96:fd:4d: ae:e4:9a:c7:13:cd:2a:bf:03:89:ed:3d:78:b9:d4: 2e:76:d6:c7:d2:bf:a3:0b:73:09:85:19:6b:65:dd: a5:fc:66:23:1e:80:6f:09:36:1a:f5:8b:a5:3a:fa: e9:30:84:67:83:7d:cb:a7:a3:cf:67:4d:39:80:6a: bf:4b:3d:48:0b:d4:3e:1f:c8:dc:6e:77:72:00:c3: be:0b:e2:98:92:43:57:e2:80:5d:24:f9:cd:7a:ad: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E4:5B:BE:5C:B8:3D:4C:4A:ED:81:DE:47:0A:81:3D:30:DC:33:AA X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e342e302f32342d3234203d3e203538303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.4.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:f5:ff:14:0f:26:b5:cc:e4:79:50:ed:e3:56:f8:00:af:52: 3a:ae:c6:92:b9:26:c2:08:98:d4:80:b6:71:0d:90:99:32:4c: c9:36:43:3f:a8:f1:75:cf:22:08:b9:d3:44:06:25:d4:6c:8b: 94:36:9d:1a:40:26:fc:93:ef:7a:e4:7a:11:f5:fd:8e:00:54: 43:a9:f0:44:07:86:11:ec:4d:68:27:3d:a6:3b:36:26:26:b8: 3f:8e:71:a6:c0:74:57:47:e6:4a:ab:4a:b8:19:6e:76:5d:a0: 52:45:11:b0:71:33:2d:f8:7a:73:0e:04:bf:e4:08:0a:bd:15: d1:20:7d:32:ca:96:a9:59:d7:45:05:88:23:c5:0f:dd:9e:98: 59:97:88:7c:99:a1:50:16:ed:b2:a2:b9:1d:0a:6f:4d:11:0c: bd:b8:e4:1e:dc:a7:94:c7:c5:36:04:9c:6b:21:ac:b2:a0:21: e4:90:35:e1:60:89:07:6e:04:28:b7:28:42:60:23:06:13:76: 4d:65:49:12:67:1a:46:d7:90:98:b5:68:e6:1a:2c:f6:b4:40: 31:89:85:c7:e5:7c:50:13:2d:97:91:fc:2f:23:e1:95:49:00: 34:59:33:a6:6d:e6:c4:94:62:a2:7d:35:09:31:4a:07:49:7a: 9d:fd:32:9f -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUYqNp+r7mViyED2I5ul2262Py/SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDgxRTQ1QkJFNUNCODNENEM0QUVEODFERTQ3MEE4MTNEMzBEQzMzQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBd0SmonCF7pCLwkNKqb0H4BHY P7j2D7d7pVaN4ONeyzizdg7knvlhN3FjxWcP9BSDFM0rcifMhJP46tA72ckFHRdg 0SyeVYdwSZQBhxm8Ttf0wLfUQG0o1vJxXKY/xFuEXs4UmTkXOQYQ8Df7TwXtwFaB 4aklAGKKkXFUh2qxodTbt0DdMaotONvBdF0iV+Vg6nlCCXZXL0Ter1uLbS1SH5b9 Ta7kmscTzSq/A4ntPXi51C521sfSv6MLcwmFGWtl3aX8ZiMegG8JNhr1i6U6+ukw hGeDfcuno89nTTmAar9LPUgL1D4fyNxud3IAw74L4piSQ1figF0k+c16rR7lAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUgeRbvly4PUxK7YHeRwqBPTDcM6owHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzkzMTJlMzQyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM4MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVsEMA0G CSqGSIb3DQEBCwUAA4IBAQAM9f8UDya1zOR5UO3jVvgAr1I6rsaSuSbCCJjUgLZx DZCZMkzJNkM/qPF1zyIIudNEBiXUbIuUNp0aQCb8k+965HoR9f2OAFRDqfBEB4YR 7E1oJz2mOzYmJrg/jnGmwHRXR+ZKq0q4GW52XaBSRRGwcTMt+HpzDgS/5AgKvRXR IH0yypapWddFBYgjxQ/dnphZl4h8maFQFu2yorkdCm9NEQy9uOQe3KeUx8U2BJxr IayyoCHkkDXhYIkHbgQotyhCYCMGE3ZNZUkSZxpG15CYtWjmGiz2tEAxiYXH5XxQ Ey2XkfwvI+GVSQA0WTOmbebElGKifTUJMUoHSXqd/TKf -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:41 2026 by rpki-client