This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20383334.roa File: 34352e31322e38302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 2NUw9nAJb5n0ae49Y5OqpcWE3K4+QyU30mfQkAUKz58= Subject key identifier: CA:71:13:23:98:38:11:47:D6:C1:23:45:62:E4:ED:E4:77:E4:12:B0 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 212DF06D335BEE7F4579B52E427ECF1DFCECEEAD Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20383334.roa Signing time: Sun 08 Feb 2026 00:04:50 +0000 ROA not before: Sat 07 Feb 2026 23:59:50 +0000 ROA not after: Sun 07 Feb 2027 00:04:50 +0000 asID: 834 IP address blocks: 45.12.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 09:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:2d:f0:6d:33:5b:ee:7f:45:79:b5:2e:42:7e:cf:1d:fc:ec:ee:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Feb 7 23:59:50 2026 GMT Not After : Feb 7 00:04:50 2027 GMT Subject: CN=CA71132398381147D6C1234562E4EDE477E412B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:43:20:f2:e6:fb:e1:4e:82:6b:2e:3d:91: 9d:20:c8:d7:a3:25:96:5b:70:c0:ae:3e:63:f3:9c: 2f:2a:5c:b2:51:db:04:4c:a6:a3:e0:69:c5:26:ad: 22:4b:04:64:4d:fa:ce:c3:fb:91:96:ef:dc:cc:d0: da:a9:7b:7b:4c:d4:4f:c8:ba:4e:f4:3e:b7:87:80: 01:25:86:34:38:c5:cd:22:88:42:72:49:96:b1:ad: f1:25:7f:4f:7f:02:68:d2:3a:0e:52:b9:0e:78:5c: 89:f7:37:69:66:9e:1d:64:eb:8d:d7:0a:8f:df:87: 9a:3e:62:6a:b4:2e:02:7a:c7:71:86:7b:8b:92:52: df:54:e7:40:52:7d:42:15:6b:14:6f:40:b5:b1:e8: 7d:14:61:b2:e7:20:ee:4a:d4:44:0d:81:9b:e5:f0: 32:de:5d:f9:bb:1d:b0:d1:44:b0:5f:b8:f8:aa:bd: d4:15:99:c3:6d:3a:0f:c1:6e:2d:3f:6e:14:99:69: 6a:ff:9f:be:e7:77:f9:7f:3b:ea:01:7f:73:8e:33: ec:f8:11:7e:20:3c:f9:31:08:b4:70:18:f3:1e:ec: db:9f:03:cd:0d:59:cd:30:3b:32:3e:83:1f:4f:de: cd:5a:01:e5:74:89:33:a2:a4:36:8f:d6:26:81:ef: 57:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:71:13:23:98:38:11:47:D6:C1:23:45:62:E4:ED:E4:77:E4:12:B0 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/34352e31322e38302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.80.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:dd:48:7b:b2:d8:5d:6c:92:58:71:d7:d9:09:0c:14:1e:47: 83:86:10:11:e2:7f:6b:15:c1:a2:99:dc:79:32:7c:3f:89:14: c7:0a:97:06:2c:06:45:9c:6d:62:39:d3:ac:1a:a1:0f:ac:12: 65:98:21:2e:99:7c:1c:af:57:7a:6f:2a:e4:b5:7d:48:6c:af: c8:c3:1f:29:ca:6d:eb:f1:db:1a:aa:92:94:cc:62:0c:b5:17: d3:6f:ee:dd:85:bc:ee:f0:bb:9d:30:ba:63:8e:dd:c6:90:61: 7b:a5:78:6c:48:92:c4:cf:f5:b9:ac:3e:28:1d:85:7d:04:80: e7:be:4b:6f:95:fd:38:17:19:56:f7:b2:58:06:e8:63:c3:f6: 68:0b:9e:fc:70:0c:ec:35:11:d6:aa:2b:8c:7d:17:1e:49:18: 57:a4:25:51:0e:9e:15:3d:ee:6d:3c:86:0d:2f:7a:84:44:21: c6:a5:6e:ba:51:ff:b6:42:c2:83:2e:3a:10:76:6f:90:46:71: ec:73:b3:37:69:0b:23:23:e2:a4:db:13:d5:79:73:8d:7c:2c: 6f:14:dc:05:8b:53:50:b2:26:53:63:92:cb:1f:7f:54:0a:e4: 35:78:d7:fb:f9:fb:8e:37:01:c3:4a:0c:d3:1a:96:59:ef:b8: 53:41:a5:0c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUIS3wbTNb7n9FebUuQn7PHfzs7q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNjAyMDcyMzU5NTBaFw0yNzAyMDcwMDA0NTBaMDMxMTAvBgNV BAMTKENBNzExMzIzOTgzODExNDdENkMxMjM0NTYyRTRFREU0NzdFNDEyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcSUMg8ub74U6Cay49kZ0gyNej JZZbcMCuPmPznC8qXLJR2wRMpqPgacUmrSJLBGRN+s7D+5GW79zM0Nqpe3tM1E/I uk70PreHgAElhjQ4xc0iiEJySZaxrfElf09/AmjSOg5SuQ54XIn3N2lmnh1k643X Co/fh5o+Ymq0LgJ6x3GGe4uSUt9U50BSfUIVaxRvQLWx6H0UYbLnIO5K1EQNgZvl 8DLeXfm7HbDRRLBfuPiqvdQVmcNtOg/Bbi0/bhSZaWr/n77nd/l/O+oBf3OOM+z4 EX4gPPkxCLRwGPMe7NufA80NWc0wOzI+gx9P3s1aAeV0iTOipDaP1iaB71eNAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUynETI5g4EUfWwSNFYuTt5HfkErAwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzQzNTJlMzEzMjJlMzgzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0MUDANBgkq hkiG9w0BAQsFAAOCAQEAPN1Ie7LYXWySWHHX2QkMFB5Hg4YQEeJ/axXBopnceTJ8 P4kUxwqXBiwGRZxtYjnTrBqhD6wSZZghLpl8HK9Xem8q5LV9SGyvyMMfKcpt6/Hb GqqSlMxiDLUX02/u3YW87vC7nTC6Y47dxpBhe6V4bEiSxM/1uaw+KB2FfQSA575L b5X9OBcZVveyWAboY8P2aAue/HAM7DUR1qorjH0XHkkYV6QlUQ6eFT3ubTyGDS96 hEQhxqVuulH/tkLCgy46EHZvkEZx7HOzN2kLIyPipNsT1XlzjXwsbxTcBYtTULIm U2OSyx9/VArkNXjX+/n7jjcBw0oM0xqWWe+4U0GlDA== -----END CERTIFICATE-----Generated at Sat Feb 14 17:26:36 2026 by rpki-client