This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/34352e3134362e372e302f32342d3332203d3e203439393831.roa File: 34352e3134362e372e302f32342d3332203d3e203439393831.roa (raw, json) Hash identifier: ohztvwe2w66eHUWp00RbU/8ScLc2/rEvRDbabjcZgPU= Subject key identifier: 92:80:7F:1D:2D:B4:0D:15:09:F2:F5:02:8E:FB:FE:05:8D:FD:2F:B6 Certificate issuer: /CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Certificate serial: 2A0E1DE9547FCB42A75261BA576C5F92371B818D Authority key identifier: 7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/34352e3134362e372e302f32342d3332203d3e203439393831.roa Signing time: Tue 30 Dec 2025 12:33:50 +0000 ROA not before: Tue 30 Dec 2025 12:28:50 +0000 ROA not after: Tue 29 Dec 2026 12:33:50 +0000 asID: 49981 IP address blocks: 45.146.7.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.mft rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0e:1d:e9:54:7f:cb:42:a7:52:61:ba:57:6c:5f:92:37:1b:81:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f216f49a3b9a84a0e85e80a2c42874f09ea3985 Validity Not Before: Dec 30 12:28:50 2025 GMT Not After : Dec 29 12:33:50 2026 GMT Subject: CN=92807F1D2DB40D1509F2F5028EFBFE058DFD2FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:91:4b:ee:78:d2:70:ec:56:74:2e:8b:35:8a: 72:aa:78:14:43:be:83:62:c2:46:ca:16:ec:a2:77: a5:be:55:7d:5d:f0:e0:fd:d1:11:1a:b5:df:c2:75: 9b:bf:92:2e:51:24:00:29:e3:2f:c2:2f:1a:98:c6: 71:b4:d3:eb:90:e8:93:85:d3:96:29:a1:bb:64:e8: 62:d0:04:6c:83:4f:02:c3:84:71:d2:ad:06:64:9d: 66:31:1e:8a:1c:ef:b6:99:69:0c:07:16:99:1e:aa: d9:60:fb:25:19:70:29:bd:c1:3e:54:8e:fe:c3:6e: 3c:36:43:27:f0:fb:f5:b7:77:96:de:d3:4a:2a:02: f4:14:69:e6:d6:bd:2f:98:97:c3:c1:1f:a4:1d:40: 77:fb:68:e9:06:49:b8:1f:07:88:ee:55:64:f4:7c: 3c:b9:75:8a:b5:19:87:25:63:9c:50:aa:e4:49:00: ed:66:79:e4:4d:f7:bc:f4:c5:a9:05:98:9d:4c:55: 70:f6:ed:4f:71:a4:7f:c2:85:d2:15:57:64:0a:fc: 7f:94:60:0e:61:44:33:62:f1:84:69:ce:fd:7d:40: 2a:f1:e3:17:cd:28:9d:16:aa:36:46:d6:22:5b:63: c0:5d:8e:ea:20:60:94:e0:a0:46:5d:7f:85:1e:1f: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:80:7F:1D:2D:B4:0D:15:09:F2:F5:02:8E:FB:FE:05:8D:FD:2F:B6 X509v3 Authority Key Identifier: keyid:7F:21:6F:49:A3:B9:A8:4A:0E:85:E8:0A:2C:42:87:4F:09:EA:39:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/7F216F49A3B9A84A0E85E80A2C42874F09EA3985.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyFvSaO5qEoOhegKLEKHTwnqOYU.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2dfb30ca-e1c2-4921-b054-d4af09165af1/0/34352e3134362e372e302f32342d3332203d3e203439393831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.7.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:b8:9d:2d:6f:f4:ee:a1:3f:e8:b4:06:2d:16:15:77:9b:26: c6:52:2b:89:4a:f7:2c:7c:60:c4:3b:4f:fd:62:06:0b:2a:f4: 08:ec:5e:29:83:8d:48:0c:ab:4c:7b:1f:54:08:63:85:9b:19: 0d:33:fd:dc:80:9d:0b:ad:5f:9c:43:ed:5c:a2:e5:59:a4:a5: d3:20:a7:9c:6a:94:9d:7b:f2:80:d7:1f:a7:c3:6b:1f:bb:81: 37:74:ad:06:33:78:2c:0b:86:13:a0:61:99:bd:e5:dc:a0:e9: 27:f6:d6:56:b3:a1:8b:e2:09:04:b8:eb:01:e1:aa:31:a9:11: bb:1a:0a:a1:3f:19:ff:35:39:12:12:d5:52:ab:e3:f4:02:6f: 41:49:91:fd:29:18:e4:fc:4e:27:19:1d:bc:1f:9d:a5:ed:28: da:ae:06:a6:c8:63:e6:dc:8f:9f:fb:b2:05:70:f5:fc:f1:d6: 28:ad:a3:e0:00:bc:53:06:68:10:a8:82:9b:7e:17:94:67:8a: b2:19:e5:49:8c:2d:3a:fa:15:04:bf:d4:1e:1f:11:ab:89:d2: a7:86:35:24:b2:29:3f:b8:81:59:21:2c:41:8b:3e:bc:4d:0b: 85:b7:91:41:90:73:ec:26:d7:bc:1b:97:10:52:4d:b2:42:48: d3:a7:77:59 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUKg4d6VR/y0KnUmG6V2xfkjcbgY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN2YyMTZmNDlhM2I5YTg0YTBlODVlODBhMmM0Mjg3NGYw OWVhMzk4NTAeFw0yNTEyMzAxMjI4NTBaFw0yNjEyMjkxMjMzNTBaMDMxMTAvBgNV BAMTKDkyODA3RjFEMkRCNDBEMTUwOUYyRjUwMjhFRkJGRTA1OERGRDJGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFkUvueNJw7FZ0Los1inKqeBRD voNiwkbKFuyid6W+VX1d8OD90REatd/CdZu/ki5RJAAp4y/CLxqYxnG00+uQ6JOF 05Ypobtk6GLQBGyDTwLDhHHSrQZknWYxHooc77aZaQwHFpkeqtlg+yUZcCm9wT5U jv7Dbjw2Qyfw+/W3d5be00oqAvQUaebWvS+Yl8PBH6QdQHf7aOkGSbgfB4juVWT0 fDy5dYq1GYclY5xQquRJAO1meeRN97z0xakFmJ1MVXD27U9xpH/ChdIVV2QK/H+U YA5hRDNi8YRpzv19QCrx4xfNKJ0WqjZG1iJbY8BdjuogYJTgoEZdf4UeHzcPAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUkoB/HS20DRUJ8vUCjvv+BY39L7YwHwYDVR0j BBgwFoAUfyFvSaO5qEoOhegKLEKHTwnqOYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmRmYjMwY2EtZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1 YWYxLzAvN0YyMTZGNDlBM0I5QTg0QTBFODVFODBBMkM0Mjg3NEYwOUVBMzk4NS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Z5RnZTYU81cUVvT2hlZ0tMRUtIVHdu cU9ZVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmRmYjMwY2Et ZTFjMi00OTIxLWIwNTQtZDRhZjA5MTY1YWYxLzAvMzQzNTJlMzEzNDM2MmUzNzJl MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM0MzkzOTM4MzEucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtkgcw DQYJKoZIhvcNAQELBQADggEBAJ64nS1v9O6hP+i0Bi0WFXebJsZSK4lK9yx8YMQ7 T/1iBgsq9AjsXimDjUgMq0x7H1QIY4WbGQ0z/dyAnQutX5xD7Vyi5VmkpdMgp5xq lJ178oDXH6fDax+7gTd0rQYzeCwLhhOgYZm95dyg6Sf21lazoYviCQS46wHhqjGp EbsaCqE/Gf81ORIS1VKr4/QCb0FJkf0pGOT8TicZHbwfnaXtKNquBqbIY+bcj5/7 sgVw9fzx1iito+AAvFMGaBCogpt+F5RnirIZ5UmMLTr6FQS/1B4fEauJ0qeGNSSy KT+4gVkhLEGLPrxNC4W3kUGQc+wm17wblxBSTbJCSNOnd1k= -----END CERTIFICATE-----Generated at Mon Jan 19 17:31:23 2026 by rpki-client