This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e2039333034.roa File: 34352e38392e3134382e302f32332d3234203d3e2039333034.roa (raw, json) Hash identifier: 01Ns2zacvuFqS8uOlsWojYjkWBIGN4AOQtvKqD1ZOSw= Subject key identifier: 68:0E:FB:C4:3F:7C:55:59:93:93:3E:8F:0D:88:B7:43:78:58:7E:3E Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 5844A3E71615CC6A796733ECDD29731E52CCDEF9 Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e2039333034.roa Signing time: Fri 09 Jan 2026 08:11:31 +0000 ROA not before: Fri 09 Jan 2026 08:06:31 +0000 ROA not after: Fri 08 Jan 2027 08:11:31 +0000 asID: 9304 IP address blocks: 45.89.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:14:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:44:a3:e7:16:15:cc:6a:79:67:33:ec:dd:29:73:1e:52:cc:de:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Jan 9 08:06:31 2026 GMT Not After : Jan 8 08:11:31 2027 GMT Subject: CN=680EFBC43F7C555993933E8F0D88B74378587E3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:21:a1:01:58:97:7e:00:60:6c:b8:52:89:b4: 3d:b7:6b:3d:36:53:7d:d6:40:74:9d:52:f8:27:32: a1:c4:3f:5a:ec:b6:56:72:44:57:72:6c:01:a0:d7: fe:6d:a2:50:0e:7a:f1:d0:98:d4:31:26:0c:39:c1: 09:96:11:67:b8:e5:b9:73:1f:e0:3c:14:fb:86:1f: d7:bd:e0:ba:aa:81:fe:3c:08:84:2f:64:f3:13:d3: b7:df:68:52:a0:4f:0f:19:64:69:e0:7e:c4:7b:32: cb:28:44:04:0c:2f:d6:0a:49:86:d1:50:07:48:f7: 68:24:54:b5:74:79:29:59:16:97:e9:98:5d:84:d4: 5e:0e:0f:38:6c:d8:01:b8:90:63:82:e1:bd:63:5e: 0b:50:76:04:cc:78:1e:a1:94:c6:ea:2b:3c:42:d9: 83:9f:ac:40:af:64:32:99:6e:99:db:74:20:55:a7: f2:6f:a1:d6:39:bc:59:83:20:ee:d2:8e:4d:da:d5: d1:3f:c1:10:ca:1b:21:5b:c5:3c:03:f3:4a:79:00: da:03:24:82:83:4b:dc:de:96:10:ef:f9:7e:41:b1: 7d:31:e9:a1:3a:02:13:07:6b:9b:3b:8b:74:7d:8b: 1f:ca:e3:7b:8b:73:85:fd:0b:9a:3a:cb:74:ae:8c: 8b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0E:FB:C4:3F:7C:55:59:93:93:3E:8F:0D:88:B7:43:78:58:7E:3E X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e38392e3134382e302f32332d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.148.0/23 Signature Algorithm: sha256WithRSAEncryption 18:72:8e:43:ec:6a:68:47:50:f1:39:66:6a:73:03:3d:b6:0e: 56:2e:2a:7d:77:9c:ab:0a:6a:65:88:c6:54:6e:e5:26:98:12: b7:1d:ad:c4:2d:f0:cf:fc:46:f0:7e:6b:4f:b8:1a:3a:cb:3c: 88:4b:81:08:e0:51:50:ec:51:8b:55:d9:97:c8:1e:d0:d9:29: 54:fb:04:54:f1:ea:22:14:7e:67:07:aa:5c:3c:37:17:6d:5a: 58:8a:bd:bf:ee:2d:86:55:8e:03:21:76:33:86:d5:8c:74:06: e5:d7:23:75:a3:9c:f0:7a:17:fa:81:59:b8:1b:6c:b8:e2:ce: 47:f4:91:c3:8d:a8:0e:79:12:ad:5d:9a:ba:92:6c:7f:73:bf: 94:ad:d3:f2:7f:20:52:e2:21:eb:07:fd:68:41:81:cb:c0:4f: 02:0c:e1:a5:5c:ff:5c:b8:ca:d6:5c:7c:de:9a:ba:9b:7e:9d: c4:30:76:1d:fd:58:74:67:c2:4a:85:e7:76:6e:f2:bb:ae:d2: 68:b7:93:0e:24:68:73:f0:87:5d:19:01:4b:1d:f1:53:5d:a0: 6e:22:9c:f8:83:69:ef:33:3d:2a:1b:71:16:be:7b:03:8b:91: d0:02:e8:e9:21:62:d9:61:ca:c9:81:aa:d1:0d:10:75:80:ae: d8:0d:b7:bc -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUWESj5xYVzGp5ZzPs3SlzHlLM3vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNjAxMDkwODA2MzFaFw0yNzAxMDgwODExMzFaMDMxMTAvBgNV BAMTKDY4MEVGQkM0M0Y3QzU1NTk5MzkzM0U4RjBEODhCNzQzNzg1ODdFM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9IaEBWJd+AGBsuFKJtD23az02 U33WQHSdUvgnMqHEP1rstlZyRFdybAGg1/5tolAOevHQmNQxJgw5wQmWEWe45blz H+A8FPuGH9e94Lqqgf48CIQvZPMT07ffaFKgTw8ZZGngfsR7MssoRAQML9YKSYbR UAdI92gkVLV0eSlZFpfpmF2E1F4ODzhs2AG4kGOC4b1jXgtQdgTMeB6hlMbqKzxC 2YOfrECvZDKZbpnbdCBVp/JvodY5vFmDIO7Sjk3a1dE/wRDKGyFbxTwD80p5ANoD JIKDS9zelhDv+X5BsX0x6aE6AhMHa5s7i3R9ix/K43uLc4X9C5o6y3SujIuZAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUaA77xD98VVmTkz6PDYi3Q3hYfj4wHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzgzOTJlMzEzNDM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtWZQw DQYJKoZIhvcNAQELBQADggEBABhyjkPsamhHUPE5ZmpzAz22DlYuKn13nKsKamWI xlRu5SaYErcdrcQt8M/8RvB+a0+4GjrLPIhLgQjgUVDsUYtV2ZfIHtDZKVT7BFTx 6iIUfmcHqlw8NxdtWliKvb/uLYZVjgMhdjOG1Yx0BuXXI3WjnPB6F/qBWbgbbLji zkf0kcONqA55Eq1dmrqSbH9zv5St0/J/IFLiIesH/WhBgcvATwIM4aVc/1y4ytZc fN6aupt+ncQwdh39WHRnwkqF53Zu8ruu0mi3kw4kaHPwh10ZAUsd8VNdoG4inPiD ae8zPSobcRa+ewOLkdAC6OkhYtlhysmBqtENEHWArtgNt7w= -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:30 2026 by rpki-client