This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e372e302f32342d3234203d3e20323132363639.roa File: 34352e39312e372e302f32342d3234203d3e20323132363639.roa (raw, json) Hash identifier: CWJ4yuMQJEM/yX9gh9jzOi1iip8EMEjoeTSlOtbebKU= Subject key identifier: 1A:82:13:FB:F9:82:85:3C:99:5B:8A:73:D6:E6:A7:78:F3:80:97:CA Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 216080063F4FB9C2E636F120ED1D36337D981A5E Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e372e302f32342d3234203d3e20323132363639.roa Signing time: Wed 28 Jan 2026 13:00:53 +0000 ROA not before: Wed 28 Jan 2026 12:55:53 +0000 ROA not after: Wed 27 Jan 2027 13:00:53 +0000 asID: 212669 IP address blocks: 45.91.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:60:80:06:3f:4f:b9:c2:e6:36:f1:20:ed:1d:36:33:7d:98:1a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:53 2026 GMT Not After : Jan 27 13:00:53 2027 GMT Subject: CN=1A8213FBF982853C995B8A73D6E6A778F38097CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:92:4a:2d:31:62:04:f1:c0:42:e3:36:83:79: d8:61:d8:03:ce:fd:ae:6c:9d:19:a1:f6:c7:9d:2a: 7b:59:c8:94:21:8b:cd:1d:e0:b7:1d:61:5c:21:39: ab:f6:81:6b:d2:ce:2f:c2:7f:6c:5d:e8:06:c8:03: 73:eb:b6:96:cd:53:d3:5d:8a:aa:87:79:65:0f:70: 05:2f:0b:94:f1:02:b2:25:77:c5:17:92:27:6f:2d: ab:04:86:34:77:aa:7c:fb:98:b3:85:77:b6:27:44: 67:6e:53:1a:23:f3:87:1f:85:91:2f:2d:5c:99:6f: c4:b9:a8:dd:df:dc:4a:f1:c7:47:c8:b9:a9:ba:e9: 4e:d5:61:22:02:a4:55:06:c2:4c:93:2e:8e:b0:68: 8c:71:c3:fe:df:9e:29:57:44:f8:07:0f:cb:a6:92: 22:25:8e:91:38:6d:17:76:47:c4:ae:3b:58:8c:14: 8a:a5:53:ea:0b:ee:cf:97:35:4f:09:21:e5:ae:d6: 7d:a2:b1:a2:5e:3a:dd:44:88:a5:f3:86:74:78:86: b4:13:70:0d:1f:f6:6f:af:93:e6:09:b5:14:b8:58: 70:00:15:6e:05:9a:8d:32:04:02:eb:97:e2:f3:7d: f7:d4:b5:3f:d3:36:7f:3a:ce:78:14:be:21:07:3e: 2e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:82:13:FB:F9:82:85:3C:99:5B:8A:73:D6:E6:A7:78:F3:80:97:CA X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e372e302f32342d3234203d3e20323132363639.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.7.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:26:a6:d8:e1:d7:aa:a0:a9:23:09:b1:26:a5:43:23:86:54: d7:57:43:96:c1:53:e6:c9:ad:4d:bb:69:8a:e2:b8:58:e7:da: 78:59:50:eb:5c:b8:b8:77:c8:90:c0:59:5e:b8:1a:eb:c3:c2: ab:5d:fe:0b:1b:fa:22:ce:eb:02:66:a1:83:71:db:9e:f0:74: 80:40:45:7a:51:04:92:b4:78:8e:c5:72:c1:fa:5b:ce:03:ca: 21:56:30:76:68:a4:6a:96:f8:5c:4a:fd:33:5b:02:5c:fb:d6: bc:ec:13:8b:87:90:f7:4d:e5:ac:34:ce:4e:f1:ea:e5:cc:49: 7d:0f:16:e2:f6:48:f5:c1:89:66:09:8d:70:39:b7:db:94:a8: fc:6d:9b:68:8a:3e:f7:99:a1:5d:ea:6e:d0:ec:6d:a7:f7:6d: 5a:cf:29:8a:d0:73:4f:7d:98:d3:c9:97:55:8a:c8:1b:64:8a: 23:af:1b:1b:7d:df:8d:82:15:5d:3d:2f:e0:36:9c:ae:57:85: 18:c4:4b:87:ea:cb:25:0d:e3:aa:b6:f3:c3:83:5b:4d:8f:00: 23:60:7f:27:fb:22:57:51:8e:1f:fe:5c:b8:64:2a:c5:57:73: a8:f8:de:7b:b1:30:ac:8a:8f:16:4d:ff:37:a8:19:b5:ab:74: 2e:a9:82:9a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUIWCABj9PucLmNvEg7R02M32YGl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTNaFw0yNzAxMjcxMzAwNTNaMDMxMTAvBgNV BAMTKDFBODIxM0ZCRjk4Mjg1M0M5OTVCOEE3M0Q2RTZBNzc4RjM4MDk3Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCekkotMWIE8cBC4zaDedhh2APO /a5snRmh9sedKntZyJQhi80d4LcdYVwhOav2gWvSzi/Cf2xd6AbIA3PrtpbNU9Nd iqqHeWUPcAUvC5TxArIld8UXkidvLasEhjR3qnz7mLOFd7YnRGduUxoj84cfhZEv LVyZb8S5qN3f3Erxx0fIuam66U7VYSICpFUGwkyTLo6waIxxw/7fnilXRPgHD8um kiIljpE4bRd2R8SuO1iMFIqlU+oL7s+XNU8JIeWu1n2isaJeOt1EiKXzhnR4hrQT cA0f9m+vk+YJtRS4WHAAFW4Fmo0yBALrl+LzfffUtT/TNn86zngUviEHPi7TAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUGoIT+/mChTyZW4pz1uanePOAl8owHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzkzMTJlMzcyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNjM2Mzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWwcw DQYJKoZIhvcNAQELBQADggEBAJ4mptjh16qgqSMJsSalQyOGVNdXQ5bBU+bJrU27 aYriuFjn2nhZUOtcuLh3yJDAWV64GuvDwqtd/gsb+iLO6wJmoYNx257wdIBARXpR BJK0eI7FcsH6W84DyiFWMHZopGqW+FxK/TNbAlz71rzsE4uHkPdN5aw0zk7x6uXM SX0PFuL2SPXBiWYJjXA5t9uUqPxtm2iKPveZoV3qbtDsbaf3bVrPKYrQc099mNPJ l1WKyBtkiiOvGxt9342CFV09L+A2nK5XhRjES4fqyyUN46q288ODW02PACNgfyf7 IldRjh/+XLhkKsVXc6j43nuxMKyKjxZN/zeoGbWrdC6pgpo= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:14 2026 by rpki-client