This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39352e3232302e302f32322d3234203d3e203438393535.roa File: 34352e39352e3232302e302f32322d3234203d3e203438393535.roa (raw, json) Hash identifier: uOY756Za/miJH4oS3OysidlaXqyJXjOw3rYXpdPFmFw= Subject key identifier: D4:38:CF:9D:EC:53:FB:54:DE:18:D2:AD:F8:ED:A4:71:6F:28:9D:0A Certificate issuer: /CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Certificate serial: 2FA70A5F2C5229692F7D91FB76A9822537B16D20 Authority key identifier: 7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39352e3232302e302f32322d3234203d3e203438393535.roa Signing time: Wed 28 Jan 2026 13:00:52 +0000 ROA not before: Wed 28 Jan 2026 12:55:52 +0000 ROA not after: Wed 27 Jan 2027 13:00:52 +0000 asID: 48955 IP address blocks: 45.95.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.mft rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a7:0a:5f:2c:52:29:69:2f:7d:91:fb:76:a9:82:25:37:b1:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fea37fdfe29b34173e97f1b637a44ec41acebb8 Validity Not Before: Jan 28 12:55:52 2026 GMT Not After : Jan 27 13:00:52 2027 GMT Subject: CN=D438CF9DEC53FB54DE18D2ADF8EDA4716F289D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0a:6a:c9:44:da:3f:ba:4b:49:bc:04:7b:8d: 28:48:10:27:52:3e:6e:68:03:19:95:05:c7:66:99: e9:57:e3:be:8e:ed:a0:82:20:9e:e9:59:dd:f2:19: d1:4f:43:38:02:d2:f5:d3:e9:c7:dd:b2:92:1e:06: 87:26:8f:7c:ba:86:7f:76:b7:13:ca:44:59:12:d5: b4:a0:4c:84:48:c6:f3:f4:22:f8:c1:12:21:8e:14: a5:11:f4:ca:61:7c:ed:a8:6e:63:45:a6:dc:05:8f: dc:30:03:b3:61:09:b7:86:19:f2:9b:b3:3e:5d:d1: 30:df:64:b4:e5:5a:5d:1f:93:dd:97:a5:79:32:19: f4:ec:3c:fc:48:b7:f0:19:49:f8:28:58:a4:ea:14: ea:a7:8a:87:89:bb:a0:95:05:02:18:1d:74:cc:19: 92:ab:61:bc:7c:52:e3:ed:cf:88:f5:52:f6:c4:70: 91:5e:66:23:8d:82:aa:8d:bc:10:d7:9c:cf:0b:65: d8:36:9c:ca:94:e4:32:10:72:9f:dc:25:c0:ff:c7: 87:cc:9d:fe:13:64:89:95:ca:ef:7b:3e:b1:07:58: e7:b4:10:d9:2d:38:7f:7a:e7:25:40:e8:c4:25:1b: 01:5b:87:7f:e0:6c:e3:11:d4:c4:71:35:88:4f:c1: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:38:CF:9D:EC:53:FB:54:DE:18:D2:AD:F8:ED:A4:71:6F:28:9D:0A X509v3 Authority Key Identifier: keyid:7F:EA:37:FD:FE:29:B3:41:73:E9:7F:1B:63:7A:44:EC:41:AC:EB:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/7FEA37FDFE29B34173E97F1B637A44EC41ACEBB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-o3_f4ps0Fz6X8bY3pE7EGs67g.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/03dd48eb-d136-4f0e-af8a-57a6bdd93a9d/0/34352e39352e3232302e302f32322d3234203d3e203438393535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.220.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:b0:91:63:41:0c:e6:ea:d6:5e:eb:68:c6:86:24:7a:55:23: 92:6a:44:ba:dd:ac:7b:ab:0b:97:7a:54:45:96:d2:a2:51:09: 4e:25:58:d3:c1:95:23:3a:78:71:a0:c4:5e:cb:21:24:b2:00: 58:2c:54:43:79:99:ea:76:7f:bb:94:d7:25:6a:23:d5:d5:4c: 59:5e:47:fc:77:26:7c:e1:e2:a9:60:f7:31:f8:0c:54:8f:75: c1:50:fc:8e:65:69:92:fd:00:7b:d8:a2:4c:3e:4b:9d:67:19: 8f:5e:66:2a:c6:0f:5d:6b:e7:1d:c6:cc:27:83:fb:cb:41:a6: 62:b9:64:a9:ed:a1:aa:ce:9f:a9:d2:dc:94:4a:88:a9:e4:ae: 5b:66:63:a9:cf:61:69:a7:ec:8a:57:d9:88:84:b5:89:6c:30: 95:62:ef:3c:73:1e:52:14:2a:7c:c5:81:c5:50:3b:4b:4e:bd: d2:3d:57:a3:a6:4a:da:95:d3:57:74:4f:0d:a6:03:5d:ad:52: 12:8b:ab:6e:3d:b3:87:09:65:f4:9c:06:51:6b:cf:b5:e0:15: 31:b9:17:a3:d8:76:23:af:f6:94:5c:4e:be:0e:87:4f:2f:e3: 82:58:48:51:a4:3e:c4:87:2f:4d:0a:d5:a5:9f:00:eb:1f:a9: 19:4e:fb:92 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUL6cKXyxSKWkvfZH7dqmCJTexbSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2ZlYTM3ZmRmZTI5YjM0MTczZTk3ZjFiNjM3YTQ0ZWM0 MWFjZWJiODAeFw0yNjAxMjgxMjU1NTJaFw0yNzAxMjcxMzAwNTJaMDMxMTAvBgNV BAMTKEQ0MzhDRjlERUM1M0ZCNTRERTE4RDJBREY4RURBNDcxNkYyODlEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCmrJRNo/uktJvAR7jShIECdS Pm5oAxmVBcdmmelX476O7aCCIJ7pWd3yGdFPQzgC0vXT6cfdspIeBocmj3y6hn92 txPKRFkS1bSgTIRIxvP0IvjBEiGOFKUR9MphfO2obmNFptwFj9wwA7NhCbeGGfKb sz5d0TDfZLTlWl0fk92XpXkyGfTsPPxIt/AZSfgoWKTqFOqnioeJu6CVBQIYHXTM GZKrYbx8UuPtz4j1UvbEcJFeZiONgqqNvBDXnM8LZdg2nMqU5DIQcp/cJcD/x4fM nf4TZImVyu97PrEHWOe0ENktOH965yVA6MQlGwFbh3/gbOMR1MRxNYhPwc9/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU1DjPnexT+1TeGNKt+O2kcW8onQowHwYDVR0j BBgwFoAUf+o3/f4ps0Fz6X8bY3pE7EGs67gwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWItZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkz YTlkLzAvN0ZFQTM3RkRGRTI5QjM0MTczRTk3RjFCNjM3QTQ0RUM0MUFDRUJCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YtbzNfZjRwczBGejZYOGJZM3BFN0VH czY3Zy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMDNkZDQ4ZWIt ZDEzNi00ZjBlLWFmOGEtNTdhNmJkZDkzYTlkLzAvMzQzNTJlMzkzNTJlMzIzMjMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzODM5MzUzNS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1f 3DANBgkqhkiG9w0BAQsFAAOCAQEAj7CRY0EM5urWXutoxoYkelUjkmpEut2se6sL l3pURZbSolEJTiVY08GVIzp4caDEXsshJLIAWCxUQ3mZ6nZ/u5TXJWoj1dVMWV5H /HcmfOHiqWD3MfgMVI91wVD8jmVpkv0Ae9iiTD5LnWcZj15mKsYPXWvnHcbMJ4P7 y0GmYrlkqe2hqs6fqdLclEqIqeSuW2Zjqc9haafsilfZiIS1iWwwlWLvPHMeUhQq fMWBxVA7S0690j1Xo6ZK2pXTV3RPDaYDXa1SEourbj2zhwll9JwGUWvPteAVMbkX o9h2I6/2lFxOvg6HTy/jglhIUaQ+xIcvTQrVpZ8A6x+pGU77kg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:15 2026 by rpki-client