This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e203239383032.roa File: 34362e3138332e32382e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: kUcJYnZDGTlKIzzpmv1f5LvT/3qyw3JDmGespkIKDl8= Subject key identifier: D8:35:A7:D4:E4:99:63:C6:E3:A6:E7:D6:68:FC:D6:99:46:5E:AC:96 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 2E5C94551062A5883ECDF831F7177F05D3BF553E Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:35 +0000 ROA not before: Thu 29 Jan 2026 10:52:35 +0000 ROA not after: Thu 28 Jan 2027 10:57:35 +0000 asID: 29802 IP address blocks: 46.183.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:5c:94:55:10:62:a5:88:3e:cd:f8:31:f7:17:7f:05:d3:bf:55:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jan 29 10:52:35 2026 GMT Not After : Jan 28 10:57:35 2027 GMT Subject: CN=D835A7D4E49963C6E3A6E7D668FCD699465EAC96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:d7:06:c2:75:7a:ff:6c:8b:a4:3e:6a:fc: ba:83:7c:e7:4f:31:e3:6e:08:26:47:13:96:6a:02: 87:62:ae:c9:0a:26:8e:8e:f7:59:aa:cb:16:a8:b1: 82:85:76:4c:5d:cb:bf:68:91:f6:10:28:a1:0b:74: a1:0c:de:e4:b8:e4:25:50:80:20:07:f4:a2:e9:cb: cf:55:3f:1c:2a:bd:05:68:31:77:1d:93:c7:3e:84: 84:23:48:28:65:10:23:0d:1d:29:b8:ac:9e:b4:a5: a0:e4:41:03:79:c3:47:ea:1d:e2:d2:69:b7:cb:ba: ab:33:51:db:96:47:f0:2b:a4:48:82:c6:f1:94:e8: 91:2b:ba:16:2d:30:87:2a:c5:97:2b:df:41:ef:f3: fd:f7:93:6c:9f:a2:17:5d:0e:e5:b0:98:e8:80:5d: a5:61:a4:8b:06:1d:bf:34:07:a4:9e:61:5d:57:c5: 98:75:64:ba:02:b1:9a:b6:ad:34:45:d4:87:00:0d: 19:4f:27:24:cc:ed:05:3b:b0:3f:d7:50:2d:ef:d8: 4a:54:26:26:17:26:a9:ee:e4:e3:ad:93:46:a5:b6: f9:5a:10:bc:8d:1b:83:37:e3:58:ea:38:40:42:0b: 92:79:33:a1:ef:dc:ec:25:26:84:b4:87:a2:77:86: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:A7:D4:E4:99:63:C6:E3:A6:E7:D6:68:FC:D6:99:46:5E:AC:96 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e32382e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.28.0/24 Signature Algorithm: sha256WithRSAEncryption 91:7f:5b:50:23:d8:bb:e2:9a:41:9f:5a:e4:39:47:e2:4c:79: e4:72:e4:ae:b7:63:17:ca:a0:e1:19:cd:09:a6:2e:ce:34:b7: f4:59:dc:a2:42:d9:30:3a:d6:a6:f2:b5:79:10:75:bf:95:23: 49:f5:d8:36:08:72:37:e8:4c:ca:aa:59:08:01:9c:1f:a6:48: e8:50:84:c4:34:4a:27:84:b4:8c:69:b9:a9:b4:e4:63:87:d5: ac:be:42:8d:e0:56:d8:59:23:65:a5:10:29:e0:1c:c7:13:24: 8e:5a:63:20:3c:03:01:39:86:f4:f2:2c:11:8e:e6:d0:00:71: e0:4d:b0:6f:ff:a5:b1:02:c9:1c:57:a8:56:4a:27:14:91:ff: 8e:56:bc:97:98:fa:e4:17:b5:69:28:f6:30:bc:98:8e:3a:26: 0c:10:a5:d3:b5:87:0e:da:a0:3e:0c:b0:3f:4d:05:0e:24:2d: db:a1:36:66:af:24:2c:f5:b2:6f:b8:a6:1f:d0:8d:d7:f7:bd: c8:b4:71:52:6f:57:f8:c1:11:37:22:e8:8a:f8:32:f5:8f:8a: d4:c3:7f:81:58:30:0f:a7:39:c9:37:9b:9d:b2:42:a1:62:fb: 68:33:ce:df:f4:e9:8c:7d:dd:18:db:20:01:16:00:c1:f9:41: 79:7b:b1:13 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULlyUVRBipYg+zfgx9xd/BdO/VT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjAxMjkxMDUyMzVaFw0yNzAxMjgxMDU3MzVaMDMxMTAvBgNV BAMTKEQ4MzVBN0Q0RTQ5OTYzQzZFM0E2RTdENjY4RkNENjk5NDY1RUFDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP09cGwnV6/2yLpD5q/LqDfOdP MeNuCCZHE5ZqAodirskKJo6O91mqyxaosYKFdkxdy79okfYQKKELdKEM3uS45CVQ gCAH9KLpy89VPxwqvQVoMXcdk8c+hIQjSChlECMNHSm4rJ60paDkQQN5w0fqHeLS abfLuqszUduWR/ArpEiCxvGU6JEruhYtMIcqxZcr30Hv8/33k2yfohddDuWwmOiA XaVhpIsGHb80B6SeYV1XxZh1ZLoCsZq2rTRF1IcADRlPJyTM7QU7sD/XUC3v2EpU JiYXJqnu5OOtk0altvlaELyNG4M341jqOEBCC5J5M6Hv3OwlJoS0h6J3hvzhAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2DWn1OSZY8bjpufWaPzWmUZerJYwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMjM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC63 HDANBgkqhkiG9w0BAQsFAAOCAQEAkX9bUCPYu+KaQZ9a5DlH4kx55HLkrrdjF8qg 4RnNCaYuzjS39FncokLZMDrWpvK1eRB1v5UjSfXYNghyN+hMyqpZCAGcH6ZI6FCE xDRKJ4S0jGm5qbTkY4fVrL5CjeBW2FkjZaUQKeAcxxMkjlpjIDwDATmG9PIsEY7m 0ABx4E2wb/+lsQLJHFeoVkonFJH/jla8l5j65Be1aSj2MLyYjjomDBCl07WHDtqg PgywP00FDiQt26E2Zq8kLPWyb7imH9CN1/e9yLRxUm9X+MERNyLoivgy9Y+K1MN/ gVgwD6c5yTebnbJCoWL7aDPO3/TpjH3dGNsgARYAwflBeXuxEw== -----END CERTIFICATE-----Generated at Thu Jan 29 17:49:07 2026 by rpki-client