This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e203235313938.roa File: 34352e3134392e36302e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: BMVUQxVH4pq3R9s8f6YkxUT4rJ9AD3/MSsJhChcEejg= Subject key identifier: F5:8F:44:98:AD:9B:20:B7:2F:E0:F6:66:D3:4F:33:A9:AB:11:80:90 Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 6D990C9440C9A92AAFC504278E37436948E6FE3D Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e203235313938.roa Signing time: Thu 08 Jan 2026 09:15:52 +0000 ROA not before: Thu 08 Jan 2026 09:10:52 +0000 ROA not after: Thu 07 Jan 2027 09:15:52 +0000 asID: 25198 IP address blocks: 45.149.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:99:0c:94:40:c9:a9:2a:af:c5:04:27:8e:37:43:69:48:e6:fe:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Jan 8 09:10:52 2026 GMT Not After : Jan 7 09:15:52 2027 GMT Subject: CN=F58F4498AD9B20B72FE0F666D34F33A9AB118090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:36:00:e5:1c:97:e4:d0:37:52:cf:fa:90: 29:4e:a7:5c:65:f0:7b:68:1d:59:e2:da:e5:48:9f: 52:57:ce:ad:9d:be:a6:cf:89:98:08:3b:39:06:cc: e1:e8:69:be:e3:1c:4d:f1:c8:04:8a:f5:3f:d5:5f: 18:3f:c1:f7:9e:8f:1d:27:f1:aa:0c:69:7a:80:6e: e2:e8:70:e8:20:20:89:c2:73:80:71:34:c5:bf:09: 02:f8:b6:95:9f:7f:e0:8a:ea:ae:ac:fa:06:ff:b9: b0:ea:0c:ef:5f:21:48:b7:63:33:5a:3c:ad:90:d5: b2:1a:b2:65:9a:5a:c9:ec:8d:e3:0b:1d:bc:db:ca: 1c:33:93:58:5c:a8:92:bb:43:5d:59:74:db:9b:76: ae:4e:5c:36:e6:41:60:0a:23:d1:d0:1e:e5:eb:83: 98:f0:4a:9a:7a:2c:51:ab:9e:7f:be:0e:25:99:19: a9:b3:c3:ba:2b:7e:99:6e:f4:86:87:83:12:b0:14: c6:06:de:10:86:97:04:94:31:b6:bb:32:e8:27:8c: b1:ba:00:d0:b5:15:b0:17:f0:0e:bb:62:09:46:f0: 84:05:d5:52:b2:db:70:f0:b9:5e:9d:d4:b4:1d:4d: c3:b5:d5:e6:5e:7f:6a:5a:d2:65:76:f3:2e:da:8f: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:44:98:AD:9B:20:B7:2F:E0:F6:66:D3:4F:33:A9:AB:11:80:90 X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36302e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.60.0/24 Signature Algorithm: sha256WithRSAEncryption 35:63:4c:34:c7:53:b5:d4:9b:ba:aa:53:37:91:72:3b:87:a3: b7:01:a8:95:55:dd:ce:de:d8:af:86:d2:a5:01:29:0c:40:03: f9:a3:8b:56:a7:4f:63:f7:c4:81:9c:2f:4e:4e:13:66:c6:df: 9f:c5:5c:60:d3:fc:5d:7f:f4:6a:b2:72:b7:cf:41:ac:f4:f5: 8e:c8:ee:c7:ee:2c:d0:35:46:7a:a0:9a:f1:85:83:b9:4c:5a: 31:dc:42:77:e1:33:72:c2:0f:93:c3:b7:f3:01:2e:04:01:b1: 73:89:80:e7:21:14:5d:c5:fd:7e:2c:88:47:e3:7f:67:34:cb: a2:cd:d2:20:bd:ea:05:26:22:31:11:44:f6:ed:63:a1:f2:f3: 0d:5d:43:fd:2b:af:12:b9:84:b7:85:4a:79:b3:d2:ae:38:f5: 63:5f:ed:4a:0d:60:b0:25:fa:96:4d:7b:8e:0f:24:34:aa:d1: 5d:8c:d2:63:4f:ac:2e:7a:51:15:01:f8:3b:b6:e5:a5:a5:74: 64:d3:f9:22:27:0a:4b:01:bc:7b:47:ea:15:45:f9:27:d5:44: 83:89:b9:9c:34:be:af:e6:7d:ec:6a:e0:2b:b7:4d:d0:32:3e: 4a:7a:0f:aa:41:44:3e:c0:17:1b:e4:76:df:e4:f5:6c:96:e8: 75:05:45:78 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbZkMlEDJqSqvxQQnjjdDaUjm/j0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjAxMDgwOTEwNTJaFw0yNzAxMDcwOTE1NTJaMDMxMTAvBgNV BAMTKEY1OEY0NDk4QUQ5QjIwQjcyRkUwRjY2NkQzNEYzM0E5QUIxMTgwOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ9TYA5RyX5NA3Us/6kClOp1xl 8HtoHVni2uVIn1JXzq2dvqbPiZgIOzkGzOHoab7jHE3xyASK9T/VXxg/wfeejx0n 8aoMaXqAbuLocOggIInCc4BxNMW/CQL4tpWff+CK6q6s+gb/ubDqDO9fIUi3YzNa PK2Q1bIasmWaWsnsjeMLHbzbyhwzk1hcqJK7Q11ZdNubdq5OXDbmQWAKI9HQHuXr g5jwSpp6LFGrnn++DiWZGamzw7orfplu9IaHgxKwFMYG3hCGlwSUMba7MugnjLG6 ANC1FbAX8A67YglG8IQF1VKy23DwuV6d1LQdTcO11eZef2pa0mV28y7ajxMJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU9Y9EmK2bILcv4PZm008zqasRgJAwHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2V PDANBgkqhkiG9w0BAQsFAAOCAQEANWNMNMdTtdSbuqpTN5FyO4ejtwGolVXdzt7Y r4bSpQEpDEAD+aOLVqdPY/fEgZwvTk4TZsbfn8VcYNP8XX/0arJyt89BrPT1jsju x+4s0DVGeqCa8YWDuUxaMdxCd+EzcsIPk8O38wEuBAGxc4mA5yEUXcX9fiyIR+N/ ZzTLos3SIL3qBSYiMRFE9u1jofLzDV1D/SuvErmEt4VKebPSrjj1Y1/tSg1gsCX6 lk17jg8kNKrRXYzSY0+sLnpRFQH4O7blpaV0ZNP5IicKSwG8e0fqFUX5J9VEg4m5 nDS+r+Z97GrgK7dN0DI+SnoPqkFEPsAXG+R23+T1bJbodQVFeA== -----END CERTIFICATE-----Generated at Fri Jan 9 12:51:44 2026 by rpki-client