This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37362e302f32342d3234203d3e203137353631.roa File: 34352e3133332e37362e302f32342d3234203d3e203137353631.roa (raw, json) Hash identifier: wx44McGEkXjXTCa0tT9MYO+m2X9qO8t/GKDms0o2eWo= Subject key identifier: A4:0E:72:59:40:9A:11:02:3B:24:3A:00:AD:C8:DF:3B:74:51:8D:2A Certificate issuer: /CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2 Certificate serial: 0B1B1FEA6015C0B83809278E94656E499CF83528 Authority key identifier: C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37362e302f32342d3234203d3e203137353631.roa Signing time: Mon 02 Feb 2026 09:08:54 +0000 ROA not before: Mon 02 Feb 2026 09:03:54 +0000 ROA not after: Mon 01 Feb 2027 09:08:54 +0000 asID: 17561 IP address blocks: 45.133.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.mft rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:1b:1f:ea:60:15:c0:b8:38:09:27:8e:94:65:6e:49:9c:f8:35:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2 Validity Not Before: Feb 2 09:03:54 2026 GMT Not After : Feb 1 09:08:54 2027 GMT Subject: CN=A40E7259409A11023B243A00ADC8DF3B74518D2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:e4:bc:f1:c5:bc:85:ea:5c:c9:e2:d5:d3: 02:d6:fe:cf:b2:86:97:0b:0c:35:43:e2:74:e2:cb: 3f:dc:2b:81:8f:9a:27:24:73:49:e0:86:e1:31:8c: 6b:d3:bd:af:4d:92:8e:36:61:11:74:2b:69:18:2e: ac:08:e9:3c:de:40:c1:23:8b:bd:c6:3d:7b:88:d4: ce:20:46:e4:51:2b:be:59:8a:25:7c:0d:07:26:8e: cb:d9:c0:77:bd:29:34:e7:8e:f7:a8:50:66:16:9b: d5:5e:16:9e:bc:09:55:f1:1f:1d:78:b1:ac:cf:4f: c4:54:52:a7:53:c6:08:b6:db:ed:4a:d1:e8:17:c2: c9:59:a9:a8:cc:b4:eb:85:ed:57:81:f6:0f:a8:4b: fc:4e:c6:5e:3f:ea:39:f9:7f:4b:b9:30:bb:23:c4: fb:45:76:01:d5:7b:79:fd:61:17:bf:e1:37:ad:e9: 66:27:a1:6d:11:65:4c:e3:13:bd:51:77:da:76:25: 72:0f:cd:56:54:ca:36:c6:48:c1:7d:2e:91:45:1b: 0d:b7:9c:3b:a1:75:86:48:e2:f5:76:f8:2a:73:66: 24:f6:ea:81:65:b5:e2:6b:e2:fa:80:2a:39:83:8f: fb:ed:a9:c4:66:3d:fb:60:47:b8:94:71:08:fb:e8: b7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0E:72:59:40:9A:11:02:3B:24:3A:00:AD:C8:DF:3B:74:51:8D:2A X509v3 Authority Key Identifier: keyid:C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37362e302f32342d3234203d3e203137353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.76.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:39:97:43:97:b4:da:07:04:a4:31:d5:1f:dc:52:24:cd:e7: c6:9c:87:c6:1f:87:f8:ef:32:a0:db:07:14:5f:a9:b2:95:5c: 20:bd:4b:43:7f:fc:5a:5b:21:0c:32:f4:df:94:22:bc:64:e3: 8e:8f:d3:85:11:13:07:1f:d2:c5:e1:9b:39:25:a4:a0:ba:23: 9e:1c:84:8f:fc:64:96:91:94:33:02:13:1e:f7:80:72:62:ab: c7:db:52:2b:e2:51:56:d8:d6:56:b4:95:75:4e:b5:b3:e6:be: 37:29:64:9e:bb:a7:3e:26:e9:76:79:41:25:05:7d:e5:7c:f1: 4f:dd:2f:b6:45:4d:0a:c8:59:8a:85:ff:b2:a8:3b:32:5c:ee: 8d:58:0a:e6:56:9a:23:c4:8d:63:9e:4f:f0:0f:1c:ff:98:be: 86:e7:f6:75:cb:10:39:28:5d:1f:5e:ba:1a:54:60:f7:f1:c5: 08:fa:0f:d1:f4:c4:d3:de:b6:df:14:70:b7:19:6c:45:55:45: 8e:ce:1c:20:35:10:b1:36:77:f5:89:14:4e:bd:86:18:89:5f: 3c:d2:69:17:fd:34:b3:27:2d:0c:b6:0b:f6:dc:61:08:f9:83: a8:f8:31:01:07:ce:95:6a:32:ef:07:e2:a8:cb:35:11:77:9c: df:8d:21:1e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCxsf6mAVwLg4CSeOlGVuSZz4NSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzAwZjE0OTdlODNmNmFiNDBhNzgzNGZiNDUwYmZmZTUy N2RiMmJiMjAeFw0yNjAyMDIwOTAzNTRaFw0yNzAyMDEwOTA4NTRaMDMxMTAvBgNV BAMTKEE0MEU3MjU5NDA5QTExMDIzQjI0M0EwMEFEQzhERjNCNzQ1MThEMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrIOS88cW8hepcyeLV0wLW/s+y hpcLDDVD4nTiyz/cK4GPmickc0nghuExjGvTva9Nko42YRF0K2kYLqwI6TzeQMEj i73GPXuI1M4gRuRRK75ZiiV8DQcmjsvZwHe9KTTnjveoUGYWm9VeFp68CVXxHx14 sazPT8RUUqdTxgi22+1K0egXwslZqajMtOuF7VeB9g+oS/xOxl4/6jn5f0u5MLsj xPtFdgHVe3n9YRe/4Tet6WYnoW0RZUzjE71Rd9p2JXIPzVZUyjbGSMF9LpFFGw23 nDuhdYZI4vV2+CpzZiT26oFlteJr4vqAKjmDj/vtqcRmPftgR7iUcQj76LfLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUpA5yWUCaEQI7JDoArcjfO3RRjSowHwYDVR0j BBgwFoAUwA8Ul+g/arQKeDT7RQv/5SfbK7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTlkN2U0NTUtMDY1OC00OTYwLWJmZjQtMDM1MjIxOWMy YjFlLzAvQzAwRjE0OTdFODNGNkFCNDBBNzgzNEZCNDUwQkZGRTUyN0RCMkJCMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dBOFVsLWdfYXJRS2VEVDdSUXZfNVNm Yks3SS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTlkN2U0NTUt MDY1OC00OTYwLWJmZjQtMDM1MjIxOWMyYjFlLzAvMzQzNTJlMzEzMzMzMmUzNzM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM1MzYzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2F TDANBgkqhkiG9w0BAQsFAAOCAQEAHDmXQ5e02gcEpDHVH9xSJM3nxpyHxh+H+O8y oNsHFF+pspVcIL1LQ3/8WlshDDL035QivGTjjo/ThRETBx/SxeGbOSWkoLojnhyE j/xklpGUMwITHveAcmKrx9tSK+JRVtjWVrSVdU61s+a+NylknrunPibpdnlBJQV9 5XzxT90vtkVNCshZioX/sqg7MlzujVgK5laaI8SNY55P8A8c/5i+huf2dcsQOShd H166GlRg9/HFCPoP0fTE09623xRwtxlsRVVFjs4cIDUQsTZ39YkUTr2GGIlfPNJp F/00syctDLYL9txhCPmDqPgxAQfOlWoy7wfiqMs1EXec340hHg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:09 2026 by rpki-client