This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34332e302f32342d3234203d3e203633313939.roa File: 3231322e37342e34332e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: KhXxXTZ7/JXho34rzUaWRKuxbOLdNAB2TzmyX3erroU= Subject key identifier: 46:4F:A3:2D:E7:13:28:E4:9B:52:93:51:4D:F0:B8:52:A6:42:EC:62 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 5192E2F06A999213DF9852014517661A80EEE6BC Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34332e302f32342d3234203d3e203633313939.roa Signing time: Wed 07 Jan 2026 11:36:42 +0000 ROA not before: Wed 07 Jan 2026 11:31:42 +0000 ROA not after: Wed 06 Jan 2027 11:36:42 +0000 asID: 63199 IP address blocks: 212.74.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:92:e2:f0:6a:99:92:13:df:98:52:01:45:17:66:1a:80:ee:e6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 7 11:31:42 2026 GMT Not After : Jan 6 11:36:42 2027 GMT Subject: CN=464FA32DE71328E49B5293514DF0B852A642EC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:83:76:b7:65:99:20:f1:0b:f9:00:75:4d:04: 70:5c:9e:9c:91:19:22:a6:77:16:d8:91:b7:56:ae: d2:f6:d1:5d:d2:61:fc:4c:fe:f7:4c:3b:af:89:23: 2b:2b:04:7e:ad:ba:c0:a3:37:3d:a7:54:14:5e:28: ed:51:3a:ab:2d:34:d1:1b:07:a2:58:25:b0:ea:bd: 6b:f7:76:c9:6b:54:36:91:f3:a3:64:86:72:2d:3c: 86:0b:3f:8f:4d:d6:01:bf:e6:41:43:48:b9:12:d5: 51:2c:2e:c0:06:d1:21:17:35:b4:d4:b8:09:4a:aa: 0f:47:cc:38:4c:84:aa:23:b8:b4:80:fe:15:15:f3: 5a:eb:4b:80:fe:a8:de:be:d7:78:3a:28:24:b6:47: 81:52:6c:ba:08:c8:c7:6b:79:15:54:00:c4:e2:6f: f1:5b:e1:94:d3:1b:fd:88:c1:a8:0a:77:47:62:73: 35:6f:71:37:9c:fd:43:5d:66:be:e6:64:0a:df:47: 74:da:4f:55:98:d9:18:64:3e:ae:63:61:cf:d5:18: 4d:01:4e:28:07:90:9f:89:b2:6b:3c:df:5a:10:f4: 7a:a4:3b:da:f8:fa:f9:a2:20:e5:16:e0:a0:b3:05: ab:a8:d4:e3:78:94:cf:2a:a5:5e:70:4d:c4:2f:01: 80:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4F:A3:2D:E7:13:28:E4:9B:52:93:51:4D:F0:B8:52:A6:42:EC:62 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34332e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.43.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c9:e5:d4:c5:d0:ea:ea:5a:bf:0e:b6:39:b5:8d:3c:b5:a2: 99:ce:9b:39:2b:cf:81:84:61:54:0b:b4:18:73:be:fb:b8:26: 65:34:d7:3d:c6:d8:fd:b1:45:be:32:8b:92:75:32:88:7a:73: 4b:d9:ed:5c:4a:68:28:05:d4:23:62:38:b3:e8:a1:38:04:bd: 18:c5:18:26:6f:4e:a3:9e:46:5d:fd:6d:3c:b8:3a:c2:b4:ef: 33:f9:31:bc:34:16:a0:a7:ea:f9:58:cd:c4:8d:2f:79:92:28: 49:46:f8:19:a7:31:59:89:d9:60:19:04:60:a9:20:0e:a3:82: d3:9a:1c:b8:4d:81:0a:58:31:86:b5:8b:d0:b7:97:50:7d:4e: f2:52:43:53:13:2e:71:f5:a3:3a:05:59:ef:48:74:ab:dd:59: 91:ef:15:84:db:d1:64:89:4b:b9:ff:59:c7:9a:8b:ea:76:0b: ab:17:e8:8b:59:8a:ca:e7:88:df:b4:c7:b4:2f:13:be:c0:ca: f5:c1:24:94:f3:95:f2:a1:7b:02:1a:d6:64:10:71:e7:62:d1: a1:bf:56:de:5e:5f:49:b5:86:82:36:e5:cf:55:e6:20:aa:2e: ac:b7:24:3d:59:61:75:7d:55:e3:80:a0:3a:f7:db:e9:68:df: 46:e5:d9:aa -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUZLi8GqZkhPfmFIBRRdmGoDu5rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDcxMTMxNDJaFw0yNzAxMDYxMTM2NDJaMDMxMTAvBgNV BAMTKDQ2NEZBMzJERTcxMzI4RTQ5QjUyOTM1MTRERjBCODUyQTY0MkVDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLg3a3ZZkg8Qv5AHVNBHBcnpyR GSKmdxbYkbdWrtL20V3SYfxM/vdMO6+JIysrBH6tusCjNz2nVBReKO1ROqstNNEb B6JYJbDqvWv3dslrVDaR86NkhnItPIYLP49N1gG/5kFDSLkS1VEsLsAG0SEXNbTU uAlKqg9HzDhMhKojuLSA/hUV81rrS4D+qN6+13g6KCS2R4FSbLoIyMdreRVUAMTi b/Fb4ZTTG/2IwagKd0diczVvcTec/UNdZr7mZArfR3TaT1WY2RhkPq5jYc/VGE0B TigHkJ+Jsms831oQ9HqkO9r4+vmiIOUW4KCzBauo1ON4lM8qpV5wTcQvAYBTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQURk+jLecTKOSbUpNRTfC4UqZC7GIwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK KzANBgkqhkiG9w0BAQsFAAOCAQEACcnl1MXQ6upavw62ObWNPLWimc6bOSvPgYRh VAu0GHO++7gmZTTXPcbY/bFFvjKLknUyiHpzS9ntXEpoKAXUI2I4s+ihOAS9GMUY Jm9Oo55GXf1tPLg6wrTvM/kxvDQWoKfq+VjNxI0veZIoSUb4GacxWYnZYBkEYKkg DqOC05ocuE2BClgxhrWL0LeXUH1O8lJDUxMucfWjOgVZ70h0q91Zke8VhNvRZIlL uf9Zx5qL6nYLqxfoi1mKyueI37THtC8TvsDK9cEklPOV8qF7AhrWZBBx52LRob9W 3l5fSbWGgjblz1XmIKourLckPVlhdX1V44CgOvfb6WjfRuXZqg== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:56 2026 by rpki-client