This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/34352e3134302e3234372e302f32342d3234203d3e203239383032.roa File: 34352e3134302e3234372e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: 17d8EZwswl99vYfVGSPZn0UNeWHnAEV/6RqAI4Pc7X8= Subject key identifier: E0:A1:17:95:11:0C:6B:64:2E:C1:6D:2A:35:C6:EB:66:84:61:49:BC Certificate issuer: /CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Certificate serial: 3E821AC7820AE4852193DEE14362A00C63FCD093 Authority key identifier: B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/34352e3134302e3234372e302f32342d3234203d3e203239383032.roa Signing time: Tue 06 Jan 2026 07:52:28 +0000 ROA not before: Tue 06 Jan 2026 07:47:28 +0000 ROA not after: Tue 05 Jan 2027 07:52:28 +0000 asID: 29802 IP address blocks: 45.140.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.mft rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 09:06:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:82:1a:c7:82:0a:e4:85:21:93:de:e1:43:62:a0:0c:63:fc:d0:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7c75b0ee5281d7520b6724e8cc3ccf0a871ce8f Validity Not Before: Jan 6 07:47:28 2026 GMT Not After : Jan 5 07:52:28 2027 GMT Subject: CN=E0A11795110C6B642EC16D2A35C6EB66846149BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:bd:9b:67:07:d0:5d:ba:d0:69:8f:ce:07: 8d:c6:42:ae:5c:fd:70:37:33:ff:94:5d:34:66:df: 9a:13:2e:8d:fd:50:ce:a6:4a:8a:e7:82:0c:3e:2d: b5:bb:66:75:c4:cf:3f:38:1a:f9:b5:73:6e:46:ce: 06:90:3c:9f:b4:2c:eb:cd:c6:eb:d9:f7:fc:8e:03: d0:70:fc:59:2d:1d:5f:2a:54:ac:e8:f0:c1:a5:ef: 08:0c:db:e5:6a:97:80:b9:28:2c:f3:cb:2d:e3:3a: 2e:a9:d6:1d:54:7f:b1:b5:31:8f:46:97:f2:06:71: e2:50:80:0b:3f:d2:99:bc:c2:3e:23:ae:78:72:07: b4:94:b3:4e:9d:f5:3c:6b:b6:20:b6:f8:31:9d:75: 18:40:d6:9e:e6:f7:c7:29:c4:7a:23:6d:d0:8f:ed: 5e:20:2a:3f:c3:33:b4:5d:46:52:3f:c9:23:06:05: 44:43:47:c6:fe:c4:10:c4:ac:b7:c3:b7:e6:af:b2: 39:53:84:b8:3d:43:83:91:35:40:4b:40:ed:29:de: 00:42:fd:f6:5c:33:27:46:6c:24:f7:8a:7e:d9:2d: 47:ee:db:31:fd:1e:70:6d:52:34:e1:61:50:38:a6: a0:90:36:fa:cb:86:27:be:d8:c5:9b:55:27:41:50: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:17:95:11:0C:6B:64:2E:C1:6D:2A:35:C6:EB:66:84:61:49:BC X509v3 Authority Key Identifier: keyid:B7:C7:5B:0E:E5:28:1D:75:20:B6:72:4E:8C:C3:CC:F0:A8:71:CE:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/B7C75B0EE5281D7520B6724E8CC3CCF0A871CE8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8dbDuUoHXUgtnJOjMPM8Khxzo8.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/13daa142-a245-47aa-a5dd-21202f6595a8/0/34352e3134302e3234372e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.247.0/24 Signature Algorithm: sha256WithRSAEncryption c4:cb:f6:cf:f4:05:82:d8:cb:07:2f:84:5e:47:06:d9:6d:a8: ca:f6:dd:1e:56:c3:30:83:37:92:f6:d1:0a:91:4e:2b:e8:03: e8:ac:1f:42:98:f9:03:6c:2a:64:03:72:81:f9:22:5b:6b:42: 53:6a:ca:57:bc:38:04:a9:9d:46:68:31:ff:e6:2f:7e:37:9f: 6b:ae:06:b6:5a:eb:f7:ce:cf:b8:e7:8e:eb:15:7c:ea:de:3d: 1a:39:d6:52:90:18:63:c6:f2:b3:f0:06:48:75:07:73:99:a4: 77:5e:b8:a7:81:d0:0f:e2:57:a3:65:f6:6c:7b:1f:19:0d:c3: e0:3f:34:19:38:f6:25:4e:f7:bd:53:b0:e4:0b:f5:90:a5:52: 88:94:72:3f:62:bd:2c:d3:ec:e8:24:43:8f:ae:5d:bd:4f:87: 6d:ac:89:1c:4c:95:55:1f:20:a8:68:4e:53:40:90:96:40:b4: bb:e6:64:b0:94:8d:f6:96:0b:dc:3d:ab:d9:bd:b9:97:72:7b: 63:10:47:c8:77:ed:d1:e1:2c:38:22:ad:b2:47:fe:b0:21:d3: 41:25:ef:31:54:16:fc:f5:56:c7:37:96:ae:26:b4:33:69:1a: df:0c:b2:fa:28:31:c7:74:81:d9:96:d0:2e:79:9c:36:9a:b6: 79:3d:3e:a8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUPoIax4IK5IUhk97hQ2KgDGP80JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYjdjNzViMGVlNTI4MWQ3NTIwYjY3MjRlOGNjM2NjZjBh ODcxY2U4ZjAeFw0yNjAxMDYwNzQ3MjhaFw0yNzAxMDUwNzUyMjhaMDMxMTAvBgNV BAMTKEUwQTExNzk1MTEwQzZCNjQyRUMxNkQyQTM1QzZFQjY2ODQ2MTQ5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvr2bZwfQXbrQaY/OB43GQq5c /XA3M/+UXTRm35oTLo39UM6mSornggw+LbW7ZnXEzz84Gvm1c25GzgaQPJ+0LOvN xuvZ9/yOA9Bw/FktHV8qVKzo8MGl7wgM2+Vql4C5KCzzyy3jOi6p1h1Uf7G1MY9G l/IGceJQgAs/0pm8wj4jrnhyB7SUs06d9TxrtiC2+DGddRhA1p7m98cpxHojbdCP 7V4gKj/DM7RdRlI/ySMGBURDR8b+xBDErLfDt+avsjlThLg9Q4ORNUBLQO0p3gBC /fZcMydGbCT3in7ZLUfu2zH9HnBtUjThYVA4pqCQNvrLhie+2MWbVSdBUJyHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU4KEXlREMa2QuwW0qNcbrZoRhSbwwHwYDVR0j BBgwFoAUt8dbDuUoHXUgtnJOjMPM8Khxzo8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTNkYWExNDItYTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5 NWE4LzAvQjdDNzVCMEVFNTI4MUQ3NTIwQjY3MjRFOENDM0NDRjBBODcxQ0U4Ri5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3Q4ZGJEdVVvSFhVZ3RuSk9qTVBNOEto eHpvOC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTNkYWExNDIt YTI0NS00N2FhLWE1ZGQtMjEyMDJmNjU5NWE4LzAvMzQzNTJlMzEzNDMwMmUzMjM0 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LYz3MA0GCSqGSIb3DQEBCwUAA4IBAQDEy/bP9AWC2MsHL4ReRwbZbajK9t0eVsMw gzeS9tEKkU4r6APorB9CmPkDbCpkA3KB+SJba0JTaspXvDgEqZ1GaDH/5i9+N59r rga2Wuv3zs+4547rFXzq3j0aOdZSkBhjxvKz8AZIdQdzmaR3XringdAP4lejZfZs ex8ZDcPgPzQZOPYlTve9U7DkC/WQpVKIlHI/Yr0s0+zoJEOPrl29T4dtrIkcTJVV HyCoaE5TQJCWQLS75mSwlI32lgvcPavZvbmXcntjEEfId+3R4Sw4Iq2yR/6wIdNB Je8xVBb89VbHN5auJrQzaRrfDLL6KDHHdIHZltAueZw2mrZ5PT6o -----END CERTIFICATE-----Generated at Sat Jan 10 00:19:17 2026 by rpki-client