This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34342e302f32342d3234203d3e203437333737.roa File: 3231322e37342e34342e302f32342d3234203d3e203437333737.roa (raw, json) Hash identifier: imoswaNbO7vNN7VaKJkmnExgDYaRRjFPdtW0vclnvzc= Subject key identifier: F6:EE:0E:79:38:75:E4:40:18:1E:C3:89:EE:35:F8:EE:F7:0C:56:89 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 357551BB7726581DAE9AD8279430FCE22631E99E Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34342e302f32342d3234203d3e203437333737.roa Signing time: Thu 08 Jan 2026 11:00:06 +0000 ROA not before: Thu 08 Jan 2026 10:55:06 +0000 ROA not after: Thu 07 Jan 2027 11:00:06 +0000 asID: 47377 IP address blocks: 212.74.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:75:51:bb:77:26:58:1d:ae:9a:d8:27:94:30:fc:e2:26:31:e9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 8 10:55:06 2026 GMT Not After : Jan 7 11:00:06 2027 GMT Subject: CN=F6EE0E793875E440181EC389EE35F8EEF70C5689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4b:46:58:46:46:34:63:7d:f4:2d:38:7d:e9: 09:3c:d0:21:b6:67:0f:63:a6:54:57:34:55:5b:81: 22:96:36:4b:b9:fb:5e:ae:c8:a9:4b:5a:ec:a8:80: 5b:d0:84:e8:c4:98:2d:53:21:72:0d:77:85:a9:fe: 0c:4f:7e:8b:99:26:b4:0b:5b:f5:4e:6d:56:1c:d0: 48:af:72:e4:a8:01:3b:2c:6c:da:39:05:c8:22:69: 4e:f4:b3:e0:d8:0d:4f:f1:38:59:4e:36:e4:a7:75: f9:8e:16:38:46:08:93:79:24:8e:41:53:af:21:58: dc:34:87:d4:1a:07:22:b3:8c:26:bc:41:5c:d5:90: cf:80:71:0b:69:ae:76:e6:88:9f:58:6d:7f:36:51: 61:c6:5e:a2:fd:70:c4:e2:92:0f:60:43:42:c7:35: 20:89:09:ea:30:d5:58:9f:de:04:b3:e3:1b:e7:fe: 2d:fe:b9:0c:69:4d:5e:72:b6:29:44:b5:3a:11:2d: 64:ad:59:41:9e:55:d6:04:d1:f9:90:b2:09:2f:5a: b2:8b:e0:93:3c:d6:d4:19:44:9f:98:ce:8c:e6:a5: d6:29:66:e7:14:f1:f8:16:53:62:c1:ad:28:e1:a0: 08:b4:ae:97:df:66:5d:06:8e:bb:2a:d3:89:95:88: 5d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:EE:0E:79:38:75:E4:40:18:1E:C3:89:EE:35:F8:EE:F7:0C:56:89 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34342e302f32342d3234203d3e203437333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.44.0/24 Signature Algorithm: sha256WithRSAEncryption 23:c8:4d:82:9d:86:cc:7d:68:05:16:82:1d:02:6c:c0:86:dd: ff:f8:ff:2f:29:25:ac:5c:4e:ec:0a:e3:da:da:d3:1b:41:97: 3c:f6:d9:40:cf:57:11:fc:c7:1d:d1:6b:10:4e:4a:28:b6:88: 56:9f:a5:24:6c:bf:d5:8f:45:b9:af:af:e6:4e:60:8e:69:20: a7:14:ac:2e:a6:54:26:59:5b:c0:92:69:34:2a:bc:a8:1f:9f: cd:8f:34:72:3c:fd:c7:a3:da:e1:f6:aa:7e:68:d6:51:34:bd: 3e:3b:a6:fa:f2:45:58:fb:80:42:0c:37:fc:a9:a8:19:1c:d8: 81:e8:c0:11:63:9f:f5:3c:81:8c:e0:b1:ea:86:3b:6c:83:fa: 47:f6:c7:36:86:87:3a:aa:ca:4d:41:a8:5c:3d:85:c2:0f:2e: c6:3e:93:e1:a1:5d:bd:73:fa:9d:1a:d2:79:89:f6:66:c1:61: 7e:fb:c4:b7:10:e8:b1:81:05:8d:de:a0:87:d4:45:9f:1d:b0: 73:e6:dd:fc:8d:8c:cd:7f:49:dd:7d:e4:ae:61:d6:86:b9:f4: 11:eb:05:48:ce:b2:fc:7f:21:12:67:73:78:bb:19:fc:22:95: 5b:c8:f5:fc:ab:eb:34:b0:66:55:b0:36:4c:b7:53:f7:33:7c: 64:b9:99:55 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNXVRu3cmWB2umtgnlDD84iYx6Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDgxMDU1MDZaFw0yNzAxMDcxMTAwMDZaMDMxMTAvBgNV BAMTKEY2RUUwRTc5Mzg3NUU0NDAxODFFQzM4OUVFMzVGOEVFRjcwQzU2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkS0ZYRkY0Y330LTh96Qk80CG2 Zw9jplRXNFVbgSKWNku5+16uyKlLWuyogFvQhOjEmC1TIXINd4Wp/gxPfouZJrQL W/VObVYc0EivcuSoATssbNo5BcgiaU70s+DYDU/xOFlONuSndfmOFjhGCJN5JI5B U68hWNw0h9QaByKzjCa8QVzVkM+AcQtprnbmiJ9YbX82UWHGXqL9cMTikg9gQ0LH NSCJCeow1Vif3gSz4xvn/i3+uQxpTV5ytilEtToRLWStWUGeVdYE0fmQsgkvWrKL 4JM81tQZRJ+YzozmpdYpZucU8fgWU2LBrSjhoAi0rpffZl0Gjrsq04mViF2PAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU9u4OeTh15EAYHsOJ7jX47vcMVokwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzMzMzczNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK LDANBgkqhkiG9w0BAQsFAAOCAQEAI8hNgp2GzH1oBRaCHQJswIbd//j/LyklrFxO 7Arj2trTG0GXPPbZQM9XEfzHHdFrEE5KKLaIVp+lJGy/1Y9Fua+v5k5gjmkgpxSs LqZUJllbwJJpNCq8qB+fzY80cjz9x6Pa4faqfmjWUTS9Pjum+vJFWPuAQgw3/Kmo GRzYgejAEWOf9TyBjOCx6oY7bIP6R/bHNoaHOqrKTUGoXD2Fwg8uxj6T4aFdvXP6 nRrSeYn2ZsFhfvvEtxDosYEFjd6gh9RFnx2wc+bd/I2MzX9J3X3krmHWhrn0EesF SM6y/H8hEmdzeLsZ/CKVW8j1/KvrNLBmVbA2TLdT9zN8ZLmZVQ== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:31 2026 by rpki-client