This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e372e302f32342d3234203d3e20323134323038.roa File: 34352e39312e372e302f32342d3234203d3e20323134323038.roa (raw, json) Hash identifier: vrS0OdeCuXf+kABpVjz4wnSbrnGwNKRVlUt2Y8L8W1E= Subject key identifier: 80:04:6C:46:E7:D1:57:CA:20:E4:DA:54:49:EB:17:60:60:74:B9:A4 Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 1D2F9C2ACED83B2B90BD61A04707F4D9487FA517 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e372e302f32342d3234203d3e20323134323038.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 214208 IP address blocks: 45.91.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2f:9c:2a:ce:d8:3b:2b:90:bd:61:a0:47:07:f4:d9:48:7f:a5:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=80046C46E7D157CA20E4DA5449EB17606074B9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:9b:02:ee:b6:e1:3a:5a:8b:15:70:e6:e8: 71:fa:b2:6d:e9:eb:e6:49:39:05:26:77:7e:7c:39: b3:1b:27:13:f2:0a:ee:10:c3:5f:55:34:0d:64:5f: b2:cc:10:a5:05:8a:2b:8e:ea:d2:bc:2d:96:bd:8b: 86:b8:03:af:06:6b:92:18:fc:85:35:51:85:d1:c4: 56:ef:60:eb:c9:24:90:a1:2c:77:17:2a:dc:27:d5: fb:22:32:18:48:f1:7c:29:ac:3c:c9:aa:7c:ff:e8: 8d:3b:fe:15:f8:d6:54:1f:cb:89:34:4b:22:08:dc: 14:5b:c3:b7:ab:bb:78:01:22:70:d3:0f:8b:d3:5d: 38:87:54:21:3e:2e:62:2e:d9:23:96:b1:44:0a:47: 91:9d:8b:ed:2c:16:c8:ef:4e:c2:91:23:c3:b7:8e: 6d:84:fd:4a:01:83:db:e7:48:87:6a:0c:95:4a:8d: b7:9f:7c:7c:d1:36:a3:65:c5:60:ad:4f:e3:90:d8: 1a:ce:33:20:0f:8b:42:fc:f1:10:35:68:c2:42:b2: d3:d2:4e:d7:da:65:98:68:5f:60:ee:f6:25:67:6a: e9:f4:7a:a9:37:04:3d:c8:61:58:4d:b5:fe:63:60: 4a:ff:84:f3:6b:fd:37:cb:ca:f3:00:95:60:a5:fc: d9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:04:6C:46:E7:D1:57:CA:20:E4:DA:54:49:EB:17:60:60:74:B9:A4 X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39312e372e302f32342d3234203d3e20323134323038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.7.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:a4:f6:31:b4:fe:74:a8:17:20:37:cd:43:21:f6:25:02:26: 94:6a:77:27:21:a1:6a:6e:d4:80:7a:d5:40:1e:51:cb:f2:73: 04:d2:a5:8b:4b:b9:cb:98:fb:e6:c8:98:ad:2f:24:06:70:d8: 87:7d:22:af:2b:62:c1:27:2a:a2:54:22:8b:c4:8c:8d:b2:6f: 03:d8:78:ab:27:e3:1e:b0:c2:fe:41:8c:d5:fc:9d:f4:a3:2c: 93:60:f8:af:bb:b7:54:d1:cb:00:59:ff:89:f8:56:6f:14:da: 2c:05:11:a0:79:46:f0:1f:34:f7:42:89:4c:e0:0a:13:8e:d0: c1:84:f3:14:c7:d3:c1:da:36:f7:3d:b8:4a:77:f6:d0:d1:47: 6d:6f:a7:11:7c:4f:62:70:47:e7:5f:32:7c:61:b5:de:09:46: ae:cf:8c:93:b7:46:36:05:a3:7f:93:ea:cc:60:55:ed:f8:87: 7d:7f:11:fe:0b:2a:31:e3:0a:7d:4b:40:a1:c3:80:1f:53:84: c8:1d:e3:ce:ca:4e:8d:4e:4d:a3:6e:00:c7:ed:78:a8:c2:e1: ca:2a:4c:a7:64:91:56:12:32:c4:bf:e5:3c:89:93:48:d5:4e: 5c:76:1b:3b:4d:06:0c:af:fc:fa:7d:10:d0:19:92:d3:a4:72: 1c:0e:63:f0 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUHS+cKs7YOyuQvWGgRwf02Uh/pRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKDgwMDQ2QzQ2RTdEMTU3Q0EyMEU0REE1NDQ5RUIxNzYwNjA3NEI5QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8r5sC7rbhOlqLFXDm6HH6sm3p 6+ZJOQUmd358ObMbJxPyCu4Qw19VNA1kX7LMEKUFiiuO6tK8LZa9i4a4A68Ga5IY /IU1UYXRxFbvYOvJJJChLHcXKtwn1fsiMhhI8XwprDzJqnz/6I07/hX41lQfy4k0 SyII3BRbw7eru3gBInDTD4vTXTiHVCE+LmIu2SOWsUQKR5Gdi+0sFsjvTsKRI8O3 jm2E/UoBg9vnSIdqDJVKjbeffHzRNqNlxWCtT+OQ2BrOMyAPi0L88RA1aMJCstPS TtfaZZhoX2Du9iVnaun0eqk3BD3IYVhNtf5jYEr/hPNr/TfLyvMAlWCl/NmxAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUgARsRufRV8og5NpUSesXYGB0uaQwHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzkzMTJlMzcyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzMjMwMzgucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWwcw DQYJKoZIhvcNAQELBQADggEBAC2k9jG0/nSoFyA3zUMh9iUCJpRqdychoWpu1IB6 1UAeUcvycwTSpYtLucuY++bImK0vJAZw2Id9Iq8rYsEnKqJUIovEjI2ybwPYeKsn 4x6wwv5BjNX8nfSjLJNg+K+7t1TRywBZ/4n4Vm8U2iwFEaB5RvAfNPdCiUzgChOO 0MGE8xTH08HaNvc9uEp39tDRR21vpxF8T2JwR+dfMnxhtd4JRq7PjJO3RjYFo3+T 6sxgVe34h31/Ef4LKjHjCn1LQKHDgB9ThMgd487KTo1OTaNuAMfteKjC4coqTKdk kVYSMsS/5TyJk0jVTlx2GztNBgyv/Pp9ENAZktOkchwOY/A= -----END CERTIFICATE-----Generated at Mon Feb 9 23:43:58 2026 by rpki-client