This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e203239383032.roa File: 34362e3138332e33302e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: 72nHdO4b4bTlOVAl3qEYnqrejyz7ta1anmrlcAXdAWw= Subject key identifier: 7A:ED:5C:A1:35:70:3B:82:79:E7:20:99:D6:89:53:F8:EB:1E:02:7F Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 6223B23F49912008BF98C6868D40A8945DC5213D Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e203239383032.roa Signing time: Thu 29 Jan 2026 10:57:36 +0000 ROA not before: Thu 29 Jan 2026 10:52:36 +0000 ROA not after: Thu 28 Jan 2027 10:57:36 +0000 asID: 29802 IP address blocks: 46.183.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:23:b2:3f:49:91:20:08:bf:98:c6:86:8d:40:a8:94:5d:c5:21:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: Jan 29 10:52:36 2026 GMT Not After : Jan 28 10:57:36 2027 GMT Subject: CN=7AED5CA135703B8279E72099D68953F8EB1E027F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:de:c0:3c:59:d9:8b:b7:4f:0a:86:39:c9: ff:e5:09:2c:79:93:4a:32:39:b5:8f:e2:e8:f0:f2: 73:3d:b2:2f:b9:06:53:a6:fd:ec:b3:e6:af:e1:5d: 71:b0:c9:3d:86:60:71:72:16:7e:95:18:22:9a:eb: 06:9d:4e:55:95:53:6c:36:bf:bf:40:59:fc:1d:a2: 0f:97:99:90:d6:8e:48:23:99:5a:c0:bb:87:06:9f: bb:46:ef:58:c1:49:84:27:76:f7:3a:b6:1e:7d:ad: 1d:b5:1f:a5:5d:55:28:7c:48:2e:eb:32:67:8d:bb: 03:07:54:09:09:c2:fa:17:f4:13:b2:f0:8d:b2:65: 2d:21:6b:c6:68:fb:7a:3e:dd:00:db:cf:da:7e:78: ad:3b:87:86:9f:c2:a5:c3:b1:eb:9e:77:b2:5e:f0: 47:5d:39:80:4e:df:de:78:ed:b0:c7:72:cf:4a:1b: 87:2b:54:d1:be:7c:bd:bb:46:86:ec:a4:b7:35:87: 32:d7:2d:94:6c:d8:77:34:5d:70:ef:3a:57:5e:ed: 64:39:50:9c:19:e2:a1:80:81:e5:0e:4b:67:25:48: 71:b1:53:51:0d:d7:09:46:0f:bd:e4:d1:8a:de:4e: ee:ba:d3:bd:83:97:2a:b2:8a:83:69:8d:0b:4e:40: d9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:ED:5C:A1:35:70:3B:82:79:E7:20:99:D6:89:53:F8:EB:1E:02:7F X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/34362e3138332e33302e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.30.0/24 Signature Algorithm: sha256WithRSAEncryption 25:9d:bf:f6:d3:61:92:9c:d3:01:05:bb:9a:ce:5d:9f:0b:a8: 92:cc:04:6b:c7:52:6d:33:77:e4:87:80:7b:b2:be:28:83:a5: ea:b7:6f:96:34:38:d9:b1:dc:0d:dc:80:9b:47:d2:f6:c5:61: 4a:6a:18:e2:bf:ac:5d:bf:70:60:c7:5e:e9:d4:72:81:0a:cd: 23:75:fa:30:4e:89:80:28:08:a4:d8:31:4d:0e:5f:5b:8e:4e: 6d:04:4d:48:ae:bb:a5:38:ac:88:ce:53:84:d1:df:6e:6e:0c: c8:7a:69:36:b0:57:63:e7:8e:cd:62:e0:bf:b9:bc:d1:ce:8c: 81:ae:a0:6b:df:6a:de:13:dd:0e:d1:16:3a:8b:d8:34:cf:01: 2f:94:2c:f9:57:e7:03:47:84:42:f3:9a:b8:a5:36:3c:be:c7: 0a:4e:b3:e2:c5:06:8a:fb:d7:4c:96:56:81:a6:74:a1:9d:cf: 7e:9d:6c:3c:0d:7a:ee:e9:55:22:9b:03:a5:df:ee:f1:4d:94: 61:a4:d2:19:36:aa:b1:24:35:55:56:9f:16:80:04:d6:12:d1: bf:ae:29:33:8f:1a:76:6e:d2:f6:ec:66:05:5e:54:de:c3:5a: c4:54:70:d0:d2:75:f1:70:22:b9:34:f8:b8:55:1f:90:3a:47: 43:0a:ea:cb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUYiOyP0mRIAi/mMaGjUColF3FIT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNjAxMjkxMDUyMzZaFw0yNzAxMjgxMDU3MzZaMDMxMTAvBgNV BAMTKDdBRUQ1Q0ExMzU3MDNCODI3OUU3MjA5OUQ2ODk1M0Y4RUIxRTAyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnd7APFnZi7dPCoY5yf/lCSx5 k0oyObWP4ujw8nM9si+5BlOm/eyz5q/hXXGwyT2GYHFyFn6VGCKa6wadTlWVU2w2 v79AWfwdog+XmZDWjkgjmVrAu4cGn7tG71jBSYQndvc6th59rR21H6VdVSh8SC7r MmeNuwMHVAkJwvoX9BOy8I2yZS0ha8Zo+3o+3QDbz9p+eK07h4afwqXDseued7Je 8EddOYBO39547bDHcs9KG4crVNG+fL27RobspLc1hzLXLZRs2Hc0XXDvOlde7WQ5 UJwZ4qGAgeUOS2clSHGxU1EN1wlGD73k0YreTu66072DlyqyioNpjQtOQNkTAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUeu1coTVwO4J55yCZ1olT+OseAn8wHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAt NmQxZS00YWU0LTkxNzctZDkzOGU5ODA0Mzk1LzAvMzQzNjJlMzEzODMzMmUzMzMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC63 HjANBgkqhkiG9w0BAQsFAAOCAQEAJZ2/9tNhkpzTAQW7ms5dnwuokswEa8dSbTN3 5IeAe7K+KIOl6rdvljQ42bHcDdyAm0fS9sVhSmoY4r+sXb9wYMde6dRygQrNI3X6 ME6JgCgIpNgxTQ5fW45ObQRNSK67pTisiM5ThNHfbm4MyHppNrBXY+eOzWLgv7m8 0c6Mga6ga99q3hPdDtEWOovYNM8BL5Qs+VfnA0eEQvOauKU2PL7HCk6z4sUGivvX TJZWgaZ0oZ3Pfp1sPA167ulVIpsDpd/u8U2UYaTSGTaqsSQ1VVafFoAE1hLRv64p M48adm7S9uxmBV5U3sNaxFRw0NJ18XAiuTT4uFUfkDpHQwrqyw== -----END CERTIFICATE-----Generated at Thu Jan 29 17:48:56 2026 by rpki-client