This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa File: 34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa (raw, json) Hash identifier: VZE+m0hFRe+1+SKsPJ2iMqzOw/gI5S5chPRbn/oZfBs= Subject key identifier: CC:02:C0:C0:C0:F8:71:FE:DE:80:14:4C:3E:B0:BC:4F:46:55:2D:95 Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 2C83D068E630DDA23875376277C47EE84E78B7D5 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa Signing time: Tue 06 Jan 2026 07:52:28 +0000 ROA not before: Tue 06 Jan 2026 07:47:28 +0000 ROA not after: Tue 05 Jan 2027 07:52:28 +0000 asID: 211373 IP address blocks: 45.140.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:83:d0:68:e6:30:dd:a2:38:75:37:62:77:c4:7e:e8:4e:78:b7:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:28 2026 GMT Not After : Jan 5 07:52:28 2027 GMT Subject: CN=CC02C0C0C0F871FEDE80144C3EB0BC4F46552D95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ca:29:6a:5c:41:04:6d:c6:b4:70:77:28:0e: c2:ef:23:2d:59:56:9e:96:9c:5a:87:ff:e1:e1:9b: 86:41:00:59:c2:ac:db:d0:c9:b2:3b:9f:6e:90:78: 16:02:e2:f8:a9:ad:4a:c1:e9:4e:ae:6d:97:cb:c7: ce:5f:25:bc:2e:58:cf:6a:2f:3b:0a:e0:14:12:e9: 0a:5e:44:0c:d7:67:36:33:ad:60:35:80:05:21:db: c5:45:44:3c:a7:5f:7a:fa:73:1e:84:67:59:00:09: 00:c7:2c:16:e2:b6:75:6d:67:ec:2d:b3:23:90:93: 64:80:7e:04:d2:ca:2d:10:dc:9b:b7:de:52:3e:56: 27:ef:7b:97:66:38:97:67:d8:95:86:d5:80:fc:b7: 00:3e:71:98:4a:e6:1a:84:28:3f:3f:ed:14:a6:5b: 86:0b:bd:0f:b6:7d:0c:03:fa:c2:32:fd:b6:ce:d0: 95:5c:31:28:a5:c7:fa:2e:b8:a6:b3:95:5f:1a:35: bb:80:19:0b:dc:d5:a9:f6:66:69:4a:f9:f6:87:39: 30:13:a6:fe:ce:db:db:57:2b:77:ed:76:2b:09:57: 18:e0:fd:dc:12:85:65:4e:88:1f:f1:09:e0:7a:a8: f6:fd:c6:47:99:a0:9f:e2:93:11:6d:ba:06:97:68: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:02:C0:C0:C0:F8:71:FE:DE:80:14:4C:3E:B0:BC:4F:46:55:2D:95 X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/34352e3134302e3234342e302f32342d3234203d3e20323131333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.244.0/24 Signature Algorithm: sha256WithRSAEncryption 34:ca:d0:39:aa:5c:44:c7:12:29:dd:d9:ce:62:82:ea:19:b2: d6:a3:6a:90:68:49:45:83:1d:d4:97:ed:4d:c3:fe:19:24:33: a3:0b:11:31:6a:a4:ea:94:ab:94:04:a9:3e:bd:79:e9:d4:d9: 44:12:c5:9f:be:fe:35:3a:8d:dc:d0:d0:57:e8:97:f4:00:4d: 50:1e:59:06:2e:4d:b1:55:a8:3e:50:f0:c0:10:ed:74:94:29: f4:60:5c:6d:0d:f5:26:86:dc:31:81:d1:5f:5d:e7:ac:58:40: a6:1b:47:6c:be:4e:f2:2c:fe:3f:a1:3e:b4:5c:44:27:08:e6: 7d:18:59:13:c2:0e:5b:58:65:14:c7:0f:2a:41:7b:8b:e0:28: 0a:0b:24:94:6a:bd:8c:c3:7f:4e:ba:8b:d6:d5:a9:d2:66:47: 52:9b:eb:51:07:e5:63:fa:22:6b:a6:8b:d6:05:b3:06:e5:cb: 0b:8c:7e:b9:cf:dd:e4:49:e0:81:e8:11:99:24:1f:1b:a2:b2: 44:73:56:cc:88:e2:7d:96:1a:08:56:46:d3:d8:4f:54:5e:bf: f2:90:ef:e1:e8:15:64:25:12:94:d8:45:b5:52:ea:8e:76:3d: 9b:08:71:09:d1:f1:1c:c1:b6:d8:74:b1:d1:32:e2:29:af:f3: 00:3d:1b:db -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIULIPQaOYw3aI4dTdid8R+6E54t9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjhaFw0yNzAxMDUwNzUyMjhaMDMxMTAvBgNV BAMTKENDMDJDMEMwQzBGODcxRkVERTgwMTQ0QzNFQjBCQzRGNDY1NTJEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMyilqXEEEbca0cHcoDsLvIy1Z Vp6WnFqH/+Hhm4ZBAFnCrNvQybI7n26QeBYC4viprUrB6U6ubZfLx85fJbwuWM9q LzsK4BQS6QpeRAzXZzYzrWA1gAUh28VFRDynX3r6cx6EZ1kACQDHLBbitnVtZ+wt syOQk2SAfgTSyi0Q3Ju33lI+Vifve5dmOJdn2JWG1YD8twA+cZhK5hqEKD8/7RSm W4YLvQ+2fQwD+sIy/bbO0JVcMSilx/ouuKazlV8aNbuAGQvc1an2ZmlK+faHOTAT pv7O29tXK3ftdisJVxjg/dwShWVOiB/xCeB6qPb9xkeZoJ/ikxFtugaXaBtpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUzALAwMD4cf7egBRMPrC8T0ZVLZUwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzQzNTJlMzEzNDMwMmUzMjM0 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzMzM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtjPQwDQYJKoZIhvcNAQELBQADggEBADTK0DmqXETHEind2c5iguoZstajapBo SUWDHdSX7U3D/hkkM6MLETFqpOqUq5QEqT69eenU2UQSxZ++/jU6jdzQ0Ffol/QA TVAeWQYuTbFVqD5Q8MAQ7XSUKfRgXG0N9SaG3DGB0V9d56xYQKYbR2y+TvIs/j+h PrRcRCcI5n0YWRPCDltYZRTHDypBe4vgKAoLJJRqvYzDf066i9bVqdJmR1Kb61EH 5WP6Imumi9YFswblywuMfrnP3eRJ4IHoEZkkHxuiskRzVsyI4n2WGghWRtPYT1Re v/KQ7+HoFWQlEpTYRbVS6o52PZsIcQnR8RzBtth0sdEy4imv8wA9G9s= -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:34 2026 by rpki-client