This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3135312e302f32342d3234203d3e20333933393432.roa
File: 34352e36362e3135312e302f32342d3234203d3e20333933393432.roa (raw, json)
Hash identifier: oZ9oAIkx04oyjdrYnnMVN8eWxNzVYaRW8fHPenuhT5I=
Subject key identifier: FB:F1:92:27:7B:3B:E7:5E:B5:3B:B9:4B:A6:1D:63:A8:42:30:0A:F4
Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4
Certificate serial: 7E799E88D7994E3FCB4675AA08296C31E9587928
Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3135312e302f32342d3234203d3e20333933393432.roa
Signing time: Fri 06 Feb 2026 02:55:37 +0000
ROA not before: Fri 06 Feb 2026 02:50:37 +0000
ROA not after: Fri 05 Feb 2027 02:55:37 +0000
asID: 393942
IP address blocks: 45.66.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Feb 2026 09:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:79:9e:88:d7:99:4e:3f:cb:46:75:aa:08:29:6c:31:e9:58:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4
Validity
Not Before: Feb 6 02:50:37 2026 GMT
Not After : Feb 5 02:55:37 2027 GMT
Subject: CN=FBF192277B3BE75EB53BB94BA61D63A842300AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:50:03:9a:08:f5:d0:60:7e:a3:14:16:b9:
48:dd:4c:ed:79:c0:54:32:5a:70:67:8c:10:b8:15:
67:3a:7c:b8:9b:06:58:a2:f7:32:23:c2:83:16:fb:
c5:4a:9c:f7:04:65:9b:35:83:8c:34:03:e6:b2:f2:
2b:f0:ad:75:72:79:8d:6f:fb:fa:27:a0:80:6d:18:
ff:85:af:da:16:92:d2:15:d0:8b:a9:16:e7:a0:bf:
91:b0:72:0c:e2:a4:f1:94:7a:55:20:f2:75:7b:cb:
96:8b:e8:b7:9a:14:f8:5d:1d:93:d2:97:c4:de:4b:
0a:9a:c0:6c:40:de:85:13:be:5c:ce:cd:5f:91:8e:
f4:eb:9c:28:48:c9:b5:b9:b1:a0:19:e1:35:43:7c:
de:45:72:28:28:1a:4f:ad:13:d8:d0:24:72:a3:32:
e3:2c:3b:de:a5:b7:0d:f4:9a:14:bb:0d:30:e9:5e:
8a:22:f4:51:a0:4b:5a:47:25:91:6f:37:52:69:57:
a9:3a:f9:86:19:5d:43:9d:ce:1d:66:89:3f:b6:51:
e8:e6:52:61:3f:52:5b:56:33:84:41:23:dc:44:b1:
2b:ba:5a:e0:ae:21:29:ce:da:35:1d:42:21:db:bc:
3a:46:99:6c:02:81:c8:41:51:d7:e4:97:87:e3:20:
c4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F1:92:27:7B:3B:E7:5E:B5:3B:B9:4B:A6:1D:63:A8:42:30:0A:F4
X509v3 Authority Key Identifier:
keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e36362e3135312e302f32342d3234203d3e20333933393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.151.0/24
Signature Algorithm: sha256WithRSAEncryption
61:74:e6:71:77:ff:ce:cf:d2:d5:ce:18:97:c6:c0:a8:54:9b:
1f:d9:0e:53:b8:fe:fb:46:94:ed:9a:c6:25:25:c2:4f:da:a3:
50:07:18:29:6e:e1:c8:16:34:57:33:ce:54:e5:bd:05:c8:cd:
e6:0b:bd:8b:15:cb:bf:32:27:44:98:53:03:6d:8b:44:49:cd:
5e:b6:44:11:52:d2:0a:1a:e8:20:5c:af:74:79:74:b6:75:88:
10:c2:3b:61:d9:e7:a9:1b:ef:71:5b:a4:db:2e:2c:70:44:bb:
32:14:2b:40:21:85:b3:90:45:28:e7:8f:21:77:e0:6a:f6:1e:
a6:87:df:a4:c8:d2:f4:3e:84:17:e5:a9:71:77:7d:d9:71:c2:
f5:26:3f:e6:08:e6:a0:e5:83:63:ea:44:9d:e1:aa:c0:3e:e3:
56:d4:c9:7e:06:dc:96:b6:fd:07:a8:89:ff:86:59:28:ef:0c:
fc:59:f8:23:c9:33:90:bb:5e:99:ef:03:64:be:f4:02:5e:32:
42:2d:9f:1a:d1:ca:29:c6:88:aa:b7:65:3e:e8:f1:3f:87:6a:
62:50:dc:15:29:a2:7d:6c:6e:01:bc:da:4e:9b:aa:54:61:fb:
9a:94:b3:24:50:ba:1c:b7:47:dc:21:76:1d:02:aa:3d:2a:5d:
b0:92:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 16:27:10 2026 by rpki-client