This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32302d3234203d3e20383334.roa File: 3231322e37342e34382e302f32302d3234203d3e20383334.roa (raw, json) Hash identifier: x4Owhy/QYjPThokcJTNyEYJql2jRjZmhc3+Ow1CZvZM= Subject key identifier: 86:A2:C0:15:D6:32:18:04:91:97:C2:DC:06:8E:92:19:A2:9C:FA:4D Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 5DAF2DA3AE1ECBB83B521E09EAA809DF005CF837 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32302d3234203d3e20383334.roa Signing time: Tue 13 Jan 2026 09:54:02 +0000 ROA not before: Tue 13 Jan 2026 09:49:02 +0000 ROA not after: Tue 12 Jan 2027 09:54:02 +0000 asID: 834 IP address blocks: 212.74.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:af:2d:a3:ae:1e:cb:b8:3b:52:1e:09:ea:a8:09:df:00:5c:f8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 13 09:49:02 2026 GMT Not After : Jan 12 09:54:02 2027 GMT Subject: CN=86A2C015D63218049197C2DC068E9219A29CFA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:81:12:98:24:27:52:aa:44:e8:1f:a4:ef: 7a:ba:b9:13:f5:86:22:b5:c4:82:24:69:ee:6b:54: e2:1a:ce:78:78:9a:48:d8:b4:e8:38:b8:56:73:a8: 7f:cb:97:6e:57:9a:68:ce:12:da:27:dd:d6:8b:87: e6:7c:bb:89:06:70:99:4d:67:27:76:58:fd:06:70: f5:a6:18:62:0b:3f:fa:7f:44:4f:a5:07:2d:66:bb: 97:6b:c7:c4:19:c7:52:af:02:03:40:37:c0:ca:0e: 53:8c:11:fd:e9:04:4d:05:46:66:aa:92:63:6d:b2: ad:09:5e:36:b9:81:20:31:c8:74:a6:e9:85:78:77: 92:13:f3:7e:f4:95:0c:a5:05:5a:4d:22:79:53:20: c0:f0:f8:1b:ad:c0:ae:ef:56:79:82:cb:b1:7c:b7: 9d:23:94:57:5f:fe:ea:4e:32:4c:15:29:65:97:de: 46:9b:f8:c1:60:2f:bd:fd:bd:1a:f2:6a:09:6b:0e: a1:48:ed:ff:c5:01:8a:48:2d:b3:74:db:7f:9f:2f: 87:01:a6:1d:e8:1d:ee:88:24:54:fb:a2:39:f9:88: 80:0f:ef:54:5a:fa:db:85:d1:ef:a8:1b:fb:4d:8a: 64:51:17:72:f5:3e:ee:da:b1:43:57:05:32:b4:b4: f3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A2:C0:15:D6:32:18:04:91:97:C2:DC:06:8E:92:19:A2:9C:FA:4D X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32302d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.48.0/20 Signature Algorithm: sha256WithRSAEncryption a4:e4:74:dd:99:06:72:52:2e:76:ac:fe:9e:61:01:c5:cb:3f: 73:f0:73:08:29:f3:66:3d:df:a7:32:69:34:0e:02:d9:47:9c: 8d:5c:e5:6c:4a:04:cf:29:e6:83:dd:d5:cb:d4:f4:ca:08:71: 33:ee:9e:17:42:55:81:45:70:f8:e5:a3:44:46:9b:ed:8b:4f: 0c:ad:68:6f:42:ec:a6:4e:53:7f:9b:60:00:9a:c1:97:46:98: b6:59:35:ca:82:c3:70:99:80:41:31:17:1a:10:47:f4:da:75: a0:91:4d:9b:8a:89:49:d8:92:99:1d:a5:13:60:8f:93:06:66: ea:df:75:c4:23:ec:54:72:52:cf:a0:ef:8b:d0:8a:21:e2:a9: 8b:bb:dc:f3:44:7e:c6:cf:54:66:da:1b:8d:c6:d0:dc:af:82: e0:6d:3c:e5:c1:df:32:86:69:61:82:f0:da:c4:31:3e:1d:1e: 48:dc:88:30:36:4f:33:1f:4a:11:68:e0:00:a2:5b:2e:06:c0: 85:c9:f7:86:68:4a:07:b1:08:0f:e5:8f:3f:61:b0:a1:54:80: 44:ad:08:b6:ad:ca:13:16:fa:99:21:aa:ad:a1:d0:9f:16:96: 61:ca:0c:72:7d:25:3c:5e:b1:8a:a2:e7:b7:73:e2:60:63:a7: 14:b8:0e:bd -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUXa8to64ey7g7Uh4J6qgJ3wBc+DcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMTMwOTQ5MDJaFw0yNzAxMTIwOTU0MDJaMDMxMTAvBgNV BAMTKDg2QTJDMDE1RDYzMjE4MDQ5MTk3QzJEQzA2OEU5MjE5QTI5Q0ZBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCenYESmCQnUqpE6B+k73q6uRP1 hiK1xIIkae5rVOIaznh4mkjYtOg4uFZzqH/Ll25XmmjOEton3daLh+Z8u4kGcJlN Zyd2WP0GcPWmGGILP/p/RE+lBy1mu5drx8QZx1KvAgNAN8DKDlOMEf3pBE0FRmaq kmNtsq0JXja5gSAxyHSm6YV4d5IT8370lQylBVpNInlTIMDw+ButwK7vVnmCy7F8 t50jlFdf/upOMkwVKWWX3kab+MFgL739vRryaglrDqFI7f/FAYpILbN023+fL4cB ph3oHe6IJFT7ojn5iIAP71Ra+tuF0e+oG/tNimRRF3L1Pu7asUNXBTK0tPMBAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUhqLAFdYyGASRl8LcBo6SGaKc+k0wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM4 MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE1EowMA0G CSqGSIb3DQEBCwUAA4IBAQCk5HTdmQZyUi52rP6eYQHFyz9z8HMIKfNmPd+nMmk0 DgLZR5yNXOVsSgTPKeaD3dXL1PTKCHEz7p4XQlWBRXD45aNERpvti08MrWhvQuym TlN/m2AAmsGXRpi2WTXKgsNwmYBBMRcaEEf02nWgkU2biolJ2JKZHaUTYI+TBmbq 33XEI+xUclLPoO+L0Ioh4qmLu9zzRH7Gz1Rm2huNxtDcr4LgbTzlwd8yhmlhgvDa xDE+HR5I3IgwNk8zH0oRaOAAolsuBsCFyfeGaEoHsQgP5Y8/YbChVIBErQi2rcoT FvqZIaqtodCfFpZhygxyfSU8XrGKoue3c+JgY6cUuA69 -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:21 2026 by rpki-client