This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34352e302f32342d3234203d3e203437333737.roa File: 3231322e37342e34352e302f32342d3234203d3e203437333737.roa (raw, json) Hash identifier: Zn3Y7A6Y/crPUFJOMqvQM06o0jPXCanmxrz4b7BfJgg= Subject key identifier: EC:07:7F:A2:33:DA:EC:75:67:D3:6F:63:3A:B2:03:AD:E6:84:F6:5B Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 79DB6610F3C4F3F3C05CDF91B51744919827EF38 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34352e302f32342d3234203d3e203437333737.roa Signing time: Thu 08 Jan 2026 11:00:06 +0000 ROA not before: Thu 08 Jan 2026 10:55:06 +0000 ROA not after: Thu 07 Jan 2027 11:00:06 +0000 asID: 47377 IP address blocks: 212.74.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:db:66:10:f3:c4:f3:f3:c0:5c:df:91:b5:17:44:91:98:27:ef:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 8 10:55:06 2026 GMT Not After : Jan 7 11:00:06 2027 GMT Subject: CN=EC077FA233DAEC7567D36F633AB203ADE684F65B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:e6:47:33:e5:71:cd:9d:91:6b:f7:fe:a4: b9:ad:34:e3:e2:38:e7:ce:ed:76:d6:fa:ae:1e:12: 52:72:f4:9e:a2:35:2f:76:75:e9:90:15:fe:e6:39: f6:c6:12:f7:2c:72:b2:a4:b2:32:94:57:39:3b:d9: 85:11:97:61:c1:ac:68:22:b3:69:88:53:c6:2d:93: e7:4e:83:e3:65:7b:3d:07:38:a6:89:8c:01:52:c5: 4d:c9:3c:f3:92:fc:33:85:a3:74:bd:18:69:30:a0: df:11:73:9d:c7:a6:c2:72:a6:c0:0b:d0:72:a8:a4: 39:43:a8:35:51:d3:6f:51:90:46:60:4e:fe:68:24: 65:db:e7:04:ff:b2:79:d9:bc:d4:14:e2:2b:6c:96: 08:a9:ed:8a:80:9e:41:7d:e7:a4:59:b1:88:13:b3: aa:a5:5a:1b:fe:8f:dd:81:78:b4:21:26:a9:68:3a: ec:f0:65:4a:37:24:a4:bb:ba:3a:42:fe:25:99:f5: 9b:cc:71:2b:10:17:b5:21:f3:8f:88:04:da:5b:b4: 07:24:f4:ce:26:b3:68:9b:76:0a:b0:8d:1f:91:f5: e8:c8:24:ee:95:05:7e:2e:d9:71:7f:19:f4:19:e7: f5:7b:c2:f7:c9:37:6c:6b:e3:1a:a7:a3:eb:13:c3: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:7F:A2:33:DA:EC:75:67:D3:6F:63:3A:B2:03:AD:E6:84:F6:5B X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34352e302f32342d3234203d3e203437333737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.45.0/24 Signature Algorithm: sha256WithRSAEncryption 48:c6:40:27:d1:5d:dd:02:eb:8e:b8:77:02:ca:43:ed:6a:4b: 60:d7:50:c5:2a:a3:87:b4:c9:95:e2:f6:24:94:a2:61:48:9f: 52:6e:f0:e3:3b:0a:b9:68:d3:bc:3a:ed:9a:ba:e8:99:0d:95: 5b:0e:cf:43:0d:e9:34:cf:0b:cf:88:41:b1:2c:c1:4f:ac:8d: e9:d3:3c:6f:62:73:1d:01:c8:dd:89:83:19:57:98:3f:10:20: a6:93:d3:f7:3f:4e:cb:8d:e9:f0:a4:74:97:af:2f:48:03:9d: 40:b8:c4:ea:de:f9:34:83:69:e6:b9:b6:1c:03:5d:90:50:9e: 18:f9:29:fd:72:46:b5:3a:9c:9d:7f:98:9e:93:62:1e:bd:cc: 1a:ac:28:02:c9:88:fe:6c:11:bc:88:6f:a1:d6:06:95:e8:21: 27:d7:0b:f5:5a:78:e1:52:03:5a:f0:c1:5d:60:a3:a7:b2:44: 0d:5f:39:a9:aa:b9:dd:85:90:7d:c8:24:85:63:ea:0c:ae:c8: b2:39:b5:27:1d:e6:66:83:80:53:eb:39:e4:c8:e8:40:ef:ab: df:50:8d:36:f4:fe:00:67:4d:b1:09:cf:a9:73:dc:83:29:b1: 5c:5d:c7:e8:bb:a3:e5:f7:17:ce:82:82:53:75:8f:91:ed:17: e4:f0:6e:c7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUedtmEPPE8/PAXN+RtRdEkZgn7zgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDgxMDU1MDZaFw0yNzAxMDcxMTAwMDZaMDMxMTAvBgNV BAMTKEVDMDc3RkEyMzNEQUVDNzU2N0QzNkY2MzNBQjIwM0FERTY4NEY2NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUveZHM+VxzZ2Ra/f+pLmtNOPi OOfO7XbW+q4eElJy9J6iNS92demQFf7mOfbGEvcscrKksjKUVzk72YURl2HBrGgi s2mIU8Ytk+dOg+Nlez0HOKaJjAFSxU3JPPOS/DOFo3S9GGkwoN8Rc53HpsJypsAL 0HKopDlDqDVR029RkEZgTv5oJGXb5wT/snnZvNQU4itslgip7YqAnkF956RZsYgT s6qlWhv+j92BeLQhJqloOuzwZUo3JKS7ujpC/iWZ9ZvMcSsQF7Uh84+IBNpbtAck 9M4ms2ibdgqwjR+R9ejIJO6VBX4u2XF/GfQZ5/V7wvfJN2xr4xqno+sTw+vPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU7Ad/ojPa7HVn029jOrIDreaE9lswHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzMzMzczNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK LTANBgkqhkiG9w0BAQsFAAOCAQEASMZAJ9Fd3QLrjrh3AspD7WpLYNdQxSqjh7TJ leL2JJSiYUifUm7w4zsKuWjTvDrtmrromQ2VWw7PQw3pNM8Lz4hBsSzBT6yN6dM8 b2JzHQHI3YmDGVeYPxAgppPT9z9Oy43p8KR0l68vSAOdQLjE6t75NINp5rm2HANd kFCeGPkp/XJGtTqcnX+YnpNiHr3MGqwoAsmI/mwRvIhvodYGleghJ9cL9Vp44VID WvDBXWCjp7JEDV85qaq53YWQfcgkhWPqDK7Isjm1Jx3mZoOAU+s55MjoQO+r31CN NvT+AGdNsQnPqXPcgymxXF3H6Luj5fcXzoKCU3WPke0X5PBuxw== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:31 2026 by rpki-client