This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32342d3234203d3e203235313938.roa File: 3231322e37342e34362e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: X/g9Ugp09hJDMhPnpSV25WXf3lMYdLhTbT7dlOtuMKI= Subject key identifier: DB:07:CF:62:F1:C4:FD:01:68:A2:41:A8:F8:84:30:A3:EA:D9:52:F2 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 717628244361DEF9A1E068FED27E823952CEB062 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32342d3234203d3e203235313938.roa Signing time: Fri 09 Jan 2026 13:16:39 +0000 ROA not before: Fri 09 Jan 2026 13:11:39 +0000 ROA not after: Fri 08 Jan 2027 13:16:39 +0000 asID: 25198 IP address blocks: 212.74.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:76:28:24:43:61:de:f9:a1:e0:68:fe:d2:7e:82:39:52:ce:b0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 9 13:11:39 2026 GMT Not After : Jan 8 13:16:39 2027 GMT Subject: CN=DB07CF62F1C4FD0168A241A8F88430A3EAD952F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3e:47:47:86:da:78:4b:21:8e:76:b8:9d:e3: 55:91:a8:fe:38:d0:5e:83:d0:95:43:ab:74:4c:c6: f0:c1:db:f5:29:2a:b2:15:b4:de:74:19:98:67:22: b5:75:be:76:72:5f:d3:42:be:62:d1:2c:a7:4c:d6: 9e:01:fa:93:5e:33:e2:d3:70:f3:25:c4:f8:50:68: df:52:cc:57:30:ae:c3:53:9f:74:2d:52:3e:81:f4: 28:53:48:9c:98:9c:c3:8d:ed:ed:63:d7:4d:a2:5a: 78:df:e6:9d:80:ec:47:0d:1a:24:d0:5c:da:e9:72: 61:d9:2b:27:f9:17:a4:38:cd:f8:df:a7:6e:29:cf: 31:66:91:b3:24:6f:1b:af:92:b2:d8:a4:cc:8a:a0: 17:6c:31:10:73:d8:f2:f3:a9:42:5b:f4:0b:0f:75: ed:dd:66:3c:31:29:b7:d8:14:56:9a:38:54:a4:1b: 8c:02:f2:f3:1d:78:77:8e:f1:4d:dc:00:b8:58:02: 5d:53:95:89:4f:6b:6e:96:2f:60:fd:fa:50:57:c1: 39:58:87:c4:ea:0d:30:d9:07:56:eb:3d:35:39:8e: 49:ca:35:e0:f3:2a:5b:d7:c0:dc:43:23:f2:28:76: 4a:e1:04:8c:2e:cc:55:80:23:7d:13:c0:15:88:bf: 45:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:07:CF:62:F1:C4:FD:01:68:A2:41:A8:F8:84:30:A3:EA:D9:52:F2 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34362e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.46.0/24 Signature Algorithm: sha256WithRSAEncryption 21:09:7d:b2:db:fb:56:5c:af:fc:42:73:b8:cb:a1:e6:76:66: 44:bd:ea:3b:49:1c:34:08:50:f2:a5:15:57:ef:a3:fd:b8:60: a0:70:05:ac:63:f3:00:c5:29:9c:c1:cc:3f:61:8c:d2:e4:32: 27:54:57:d0:b6:b7:0e:4e:39:2d:ef:12:9d:11:10:aa:b0:95: 2c:93:44:b9:f5:92:b2:80:6e:b7:19:fd:e2:76:eb:40:8d:5c: cb:fe:81:2b:4e:c2:93:94:35:1d:0c:7b:06:cd:69:97:2f:98: 21:cd:16:85:8e:0b:e3:c5:0a:b1:f8:38:a2:7b:ea:65:30:e4: 9e:c0:56:4c:1e:d5:7b:e7:0d:b3:f6:da:29:a7:5f:44:87:9c: 7a:17:32:26:6f:ca:e5:7c:25:bb:e2:c1:01:04:65:2c:19:c7: b2:e7:99:a9:49:df:2a:35:d4:c3:27:95:d3:ed:95:5f:d7:98: 24:70:5b:04:b9:d4:e9:ce:25:99:8f:eb:20:a5:2d:32:35:d8: ae:9f:3c:73:22:bb:f6:91:93:12:66:df:09:e8:3f:d2:9b:3d: 2d:d1:9e:f4:bb:cc:b0:39:a7:fa:42:9e:69:d2:d6:21:de:97: 92:59:1c:a6:ac:25:03:3d:93:fe:89:60:65:ba:63:8b:87:51: fb:aa:5f:e0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUcXYoJENh3vmh4Gj+0n6COVLOsGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDkxMzExMzlaFw0yNzAxMDgxMzE2MzlaMDMxMTAvBgNV BAMTKERCMDdDRjYyRjFDNEZEMDE2OEEyNDFBOEY4ODQzMEEzRUFEOTUyRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPkdHhtp4SyGOdrid41WRqP44 0F6D0JVDq3RMxvDB2/UpKrIVtN50GZhnIrV1vnZyX9NCvmLRLKdM1p4B+pNeM+LT cPMlxPhQaN9SzFcwrsNTn3QtUj6B9ChTSJyYnMON7e1j102iWnjf5p2A7EcNGiTQ XNrpcmHZKyf5F6Q4zfjfp24pzzFmkbMkbxuvkrLYpMyKoBdsMRBz2PLzqUJb9AsP de3dZjwxKbfYFFaaOFSkG4wC8vMdeHeO8U3cALhYAl1TlYlPa26WL2D9+lBXwTlY h8TqDTDZB1brPTU5jknKNeDzKlvXwNxDI/IodkrhBIwuzFWAI30TwBWIv0VXAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2wfPYvHE/QFookGo+IQwo+rZUvIwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANRK LjANBgkqhkiG9w0BAQsFAAOCAQEAIQl9stv7Vlyv/EJzuMuh5nZmRL3qO0kcNAhQ 8qUVV++j/bhgoHAFrGPzAMUpnMHMP2GM0uQyJ1RX0La3Dk45Le8SnREQqrCVLJNE ufWSsoButxn94nbrQI1cy/6BK07Ck5Q1HQx7Bs1ply+YIc0WhY4L48UKsfg4onvq ZTDknsBWTB7Ve+cNs/baKadfRIecehcyJm/K5Xwlu+LBAQRlLBnHsueZqUnfKjXU wyeV0+2VX9eYJHBbBLnU6c4lmY/rIKUtMjXYrp88cyK79pGTEmbfCeg/0ps9LdGe 9LvMsDmn+kKeadLWId6XklkcpqwlAz2T/olgZbpji4dR+6pf4A== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:56 2026 by rpki-client