This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e20383334.roa File: 34352e38312e35362e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: RvBwqpsMFaC4kQ3VLDNfZDDqspDe1yGNu+5Eo3ESLBg= Subject key identifier: EE:BA:8D:64:5A:B0:3D:4A:54:F5:0B:FD:E2:01:B4:B6:8B:55:40:ED Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 4F4753EC12B95A9DA4EDC2046B5ABB209120A961 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e20383334.roa Signing time: Sun 08 Feb 2026 09:40:01 +0000 ROA not before: Sun 08 Feb 2026 09:35:01 +0000 ROA not after: Sun 07 Feb 2027 09:40:01 +0000 asID: 834 IP address blocks: 45.81.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:47:53:ec:12:b9:5a:9d:a4:ed:c2:04:6b:5a:bb:20:91:20:a9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Feb 8 09:35:01 2026 GMT Not After : Feb 7 09:40:01 2027 GMT Subject: CN=EEBA8D645AB03D4A54F50BFDE201B4B68B5540ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:05:ad:cd:a1:22:35:e5:eb:96:87:b5:ef:e8: cf:b3:87:fb:71:91:b8:93:be:59:56:b3:fe:44:c0: 04:10:de:2e:0a:dd:19:6f:00:45:0e:d4:f7:ab:3a: c4:cc:58:08:34:d0:98:d3:39:3b:df:ea:b2:28:07: 84:9a:69:d2:74:a3:cc:23:52:32:f4:63:c0:8b:7e: d7:64:2c:41:38:c5:58:93:19:7f:5b:da:10:d1:32: dc:57:14:a8:2e:80:ac:79:44:96:de:5d:0c:a4:3c: 60:ef:30:f3:0e:7a:c7:cd:b0:ea:9f:9b:14:8e:a6: 18:d6:64:5d:16:c3:4a:d6:d1:2b:f6:56:8a:e8:e2: 32:48:61:ae:b7:e6:0b:0d:46:d4:23:ba:ab:60:59: 44:79:fc:d7:a0:4b:97:4a:de:ae:70:f5:d3:d9:fd: 61:b6:2d:bf:ea:73:29:9c:cb:9b:7b:3f:96:1a:28: ac:db:eb:10:b8:87:ac:12:76:16:bb:9a:7d:fa:60: d9:22:b9:57:c4:db:86:9c:b7:4c:4a:8e:4c:7b:47: e1:ff:ce:26:e9:fd:de:f3:0c:cb:4f:68:37:e8:c6: 81:fa:db:25:a5:5b:63:69:ab:d7:49:3d:a2:8b:cc: 1c:6e:22:97:00:f2:9c:b9:99:c3:9e:89:dc:32:ac: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BA:8D:64:5A:B0:3D:4A:54:F5:0B:FD:E2:01:B4:B6:8B:55:40:ED X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35362e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.56.0/24 Signature Algorithm: sha256WithRSAEncryption 37:0f:0d:6b:92:77:c9:c3:a9:41:a8:29:5c:8d:75:94:06:bd: 9a:2d:7f:58:1e:c3:ba:42:cf:d5:2c:be:74:91:98:3e:2e:23: 9e:3c:4f:61:3f:f5:5b:de:68:a2:d2:2a:85:56:39:b1:3b:d7: 1b:db:c3:8d:86:f1:fb:5a:f6:c5:fd:0d:a6:50:4b:b1:f6:1f: 71:6c:2d:c8:6c:67:87:8d:89:1f:cc:a5:44:c2:d1:94:55:80: b4:49:6e:d0:cc:f5:d4:e5:ea:4f:e0:5b:9c:95:43:c3:4a:f8: 66:c7:d7:b7:dd:47:20:20:eb:a0:29:17:f2:1d:0d:14:d2:bb: 8f:18:8d:1f:48:56:2f:b0:58:69:10:b9:e5:23:de:71:c2:59: 40:b4:a9:62:54:a4:ef:07:a6:58:11:6e:97:02:50:f2:89:db: 12:7d:91:91:ed:a3:34:18:fe:58:72:2b:4f:8d:87:41:67:63: f5:ff:33:4b:7b:7e:c7:9f:32:78:5f:16:df:2c:5f:4f:73:e7: 5f:7e:12:00:46:30:56:67:26:46:f9:6b:dd:46:af:c9:c1:16: a1:37:8b:44:3d:ee:a4:b9:6b:55:7e:20:e2:be:b8:cc:6f:16: d9:f9:a8:8a:77:f2:cc:52:d4:9f:4e:dd:02:a4:14:d0:aa:ef: f5:1e:c1:4a -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUT0dT7BK5Wp2k7cIEa1q7IJEgqWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjAyMDgwOTM1MDFaFw0yNzAyMDcwOTQwMDFaMDMxMTAvBgNV BAMTKEVFQkE4RDY0NUFCMDNENEE1NEY1MEJGREUyMDFCNEI2OEI1NTQwRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ba3NoSI15euWh7Xv6M+zh/tx kbiTvllWs/5EwAQQ3i4K3RlvAEUO1PerOsTMWAg00JjTOTvf6rIoB4SaadJ0o8wj UjL0Y8CLftdkLEE4xViTGX9b2hDRMtxXFKgugKx5RJbeXQykPGDvMPMOesfNsOqf mxSOphjWZF0Ww0rW0Sv2Voro4jJIYa635gsNRtQjuqtgWUR5/NegS5dK3q5w9dPZ /WG2Lb/qcymcy5t7P5YaKKzb6xC4h6wSdha7mn36YNkiuVfE24act0xKjkx7R+H/ zibp/d7zDMtPaDfoxoH62yWlW2Npq9dJPaKLzBxuIpcA8py5mcOeidwyrBbVAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU7rqNZFqwPUpU9Qv94gG0totVQO0wHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzNjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1RODANBgkq hkiG9w0BAQsFAAOCAQEANw8Na5J3ycOpQagpXI11lAa9mi1/WB7DukLP1Sy+dJGY Pi4jnjxPYT/1W95ootIqhVY5sTvXG9vDjYbx+1r2xf0NplBLsfYfcWwtyGxnh42J H8ylRMLRlFWAtElu0Mz11OXqT+BbnJVDw0r4ZsfXt91HICDroCkX8h0NFNK7jxiN H0hWL7BYaRC55SPeccJZQLSpYlSk7wemWBFulwJQ8onbEn2Rke2jNBj+WHIrT42H QWdj9f8zS3t+x58yeF8W3yxfT3PnX34SAEYwVmcmRvlr3UavycEWoTeLRD3upLlr VX4g4r64zG8W2fmoinfyzFLUn07dAqQU0Krv9R7BSg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:57 2026 by rpki-client