This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e362e302f32342d3234203d3e2038373038.roa File: 34352e39312e362e302f32342d3234203d3e2038373038.roa (raw, json) Hash identifier: +sWQZoFUZoM/yHt56c3wXnix1xzX3Euj1duEhJeaQcY= Subject key identifier: 8D:59:B2:BA:14:E4:73:2B:7F:56:A7:0E:21:96:F4:75:A2:EC:19:78 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 1CAEBAB5252081302DA0AA6BA87231BC2968BB72 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e362e302f32342d3234203d3e2038373038.roa Signing time: Wed 28 Jan 2026 13:00:51 +0000 ROA not before: Wed 28 Jan 2026 12:55:51 +0000 ROA not after: Wed 27 Jan 2027 13:00:51 +0000 asID: 8708 IP address blocks: 45.91.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ae:ba:b5:25:20:81:30:2d:a0:aa:6b:a8:72:31:bc:29:68:bb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:51 2026 GMT Not After : Jan 27 13:00:51 2027 GMT Subject: CN=8D59B2BA14E4732B7F56A70E2196F475A2EC1978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:96:52:00:5f:3e:c9:f5:3f:71:48:59:49:7b: 8a:46:2b:61:4f:1d:89:87:df:d8:91:f9:db:44:cd: 74:38:2f:c3:9e:d5:95:09:d1:51:65:1c:04:f2:45: f1:7a:1b:6f:3c:67:ea:0a:47:16:e9:19:7d:31:af: 57:1b:b7:f1:c5:99:93:ce:ad:ff:5d:cf:e4:06:9c: 3c:ac:fe:3b:d9:2b:9b:47:c7:4c:74:f5:af:39:26: 6d:1c:c2:10:21:7d:5b:fd:98:13:22:c7:fd:ee:d2: d6:0d:48:cf:1e:05:d0:60:49:d0:da:74:9d:75:85: 75:ba:e2:3a:01:ab:a6:0b:4d:54:06:7d:94:0b:78: dd:1c:34:d3:2d:1d:d1:28:bd:5c:74:b3:f3:14:16: 3c:f3:b3:a0:30:2e:3a:28:47:a7:92:a3:a2:d4:55: 02:e8:a2:0c:ae:d9:86:ad:03:7c:f7:21:2a:dc:c3: b7:67:88:49:66:a0:d3:c7:4d:c5:de:c3:1e:45:30: 0c:bb:3c:80:39:89:a0:90:d7:b4:a1:bb:bb:a2:d7: f8:42:92:51:ab:65:3a:df:68:fd:ed:16:37:ac:66: c2:33:e9:17:9a:52:be:ba:cb:a2:d3:30:91:4e:88: 19:0c:04:76:5c:15:ee:ce:f3:2a:f9:02:3e:aa:87: d2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:59:B2:BA:14:E4:73:2B:7F:56:A7:0E:21:96:F4:75:A2:EC:19:78 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e362e302f32342d3234203d3e2038373038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.6.0/24 Signature Algorithm: sha256WithRSAEncryption a4:98:55:2c:c9:2d:de:f0:70:16:99:4e:38:e6:f4:a8:92:ad: dc:6f:fc:82:5a:f1:59:48:74:2c:52:d8:f8:a8:ad:00:4a:80: b3:c1:7c:b2:01:91:f2:92:c3:34:30:b7:2d:e7:4e:8b:65:57: fe:c5:90:b2:27:ac:83:ab:a6:17:03:8f:cb:5b:27:0f:83:39: d9:19:c6:97:e6:cd:ab:1e:43:4f:79:51:fe:73:bb:86:75:91: 28:4f:57:34:1a:b4:82:3c:18:80:b2:06:05:17:7a:f6:10:82: 8b:18:45:86:5b:7e:97:c0:30:e1:49:ae:bf:07:f7:07:05:d1: db:80:c1:a7:68:bb:31:f9:78:70:de:d7:1b:8f:26:b6:53:aa: 2d:4d:ee:3a:9f:01:23:9b:14:74:2f:e7:3e:87:38:d9:6a:3b: b2:17:dc:e9:99:d7:cd:90:bc:cc:60:74:47:7e:fa:df:42:3e: 58:52:ab:8b:5d:07:00:49:e7:ec:e2:0a:a5:c2:d6:bc:ed:9e: af:39:8f:07:d5:b2:12:e1:03:1f:31:14:04:47:bd:62:3c:8d: 22:0e:d4:d2:23:b5:6d:c3:80:2a:8f:08:cd:a8:4e:bd:90:17: e4:9a:14:74:17:49:03:4e:46:d4:d1:85:07:1c:c1:0b:67:14: b3:48:1f:4e -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUHK66tSUggTAtoKprqHIxvClou3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTFaFw0yNzAxMjcxMzAwNTFaMDMxMTAvBgNV BAMTKDhENTlCMkJBMTRFNDczMkI3RjU2QTcwRTIxOTZGNDc1QTJFQzE5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLllIAXz7J9T9xSFlJe4pGK2FP HYmH39iR+dtEzXQ4L8Oe1ZUJ0VFlHATyRfF6G288Z+oKRxbpGX0xr1cbt/HFmZPO rf9dz+QGnDys/jvZK5tHx0x09a85Jm0cwhAhfVv9mBMix/3u0tYNSM8eBdBgSdDa dJ11hXW64joBq6YLTVQGfZQLeN0cNNMtHdEovVx0s/MUFjzzs6AwLjooR6eSo6LU VQLoogyu2YatA3z3ISrcw7dniElmoNPHTcXewx5FMAy7PIA5iaCQ17Shu7ui1/hC klGrZTrfaP3tFjesZsIz6ReaUr66y6LTMJFOiBkMBHZcFe7O8yr5Aj6qh9LJAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUjVmyuhTkcyt/VqcOIZb0daLsGXgwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzkzMTJlMzYyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzODM3MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1bBjANBgkq hkiG9w0BAQsFAAOCAQEApJhVLMkt3vBwFplOOOb0qJKt3G/8glrxWUh0LFLY+Kit AEqAs8F8sgGR8pLDNDC3LedOi2VX/sWQsiesg6umFwOPy1snD4M52RnGl+bNqx5D T3lR/nO7hnWRKE9XNBq0gjwYgLIGBRd69hCCixhFhlt+l8Aw4Umuvwf3BwXR24DB p2i7Mfl4cN7XG48mtlOqLU3uOp8BI5sUdC/nPoc42Wo7shfc6ZnXzZC8zGB0R376 30I+WFKri10HAEnn7OIKpcLWvO2erzmPB9WyEuEDHzEUBEe9YjyNIg7U0iO1bcOA Ko8IzahOvZAX5JoUdBdJA05G1NGFBxzBC2cUs0gfTg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:16 2026 by rpki-client