This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37372e302f32342d3234203d3e203137353631.roa
File: 34352e3133332e37372e302f32342d3234203d3e203137353631.roa (raw, json)
Hash identifier: DRqCqjTTmocXEMPhaAW2LfrGPc7Vql9LBY0UQUvukm8=
Subject key identifier: 6F:33:6C:B6:E4:62:E2:2E:13:FE:47:43:8E:B1:7E:01:0F:FC:B1:5B
Certificate issuer: /CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2
Certificate serial: 5A4DD42A56060AFA09B009DC6E93E99C0EEF647E
Authority key identifier: C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37372e302f32342d3234203d3e203137353631.roa
Signing time: Mon 02 Feb 2026 09:08:54 +0000
ROA not before: Mon 02 Feb 2026 09:03:54 +0000
ROA not after: Mon 01 Feb 2027 09:08:54 +0000
asID: 17561
IP address blocks: 45.133.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl
rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.mft
rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:4d:d4:2a:56:06:0a:fa:09:b0:09:dc:6e:93:e9:9c:0e:ef:64:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2
Validity
Not Before: Feb 2 09:03:54 2026 GMT
Not After : Feb 1 09:08:54 2027 GMT
Subject: CN=6F336CB6E462E22E13FE47438EB17E010FFCB15B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:a7:23:d7:9a:e5:16:20:04:1c:3c:9d:ff:
c6:f8:bb:c4:a4:44:ed:5d:3f:65:4c:da:ba:4b:82:
43:5d:12:01:dd:93:25:b7:1c:21:9a:f4:c9:7e:48:
df:e7:22:94:3f:bb:61:99:c9:18:65:26:d9:3f:76:
9f:5a:aa:a1:80:89:3c:a7:e0:bb:c3:98:d2:4f:d1:
c1:42:20:28:26:03:c7:b7:6f:7e:b8:37:ea:bf:7f:
1c:f8:bc:a2:5e:7a:0c:b3:00:c1:b8:1f:58:24:4c:
e0:e2:6a:f5:6e:51:12:73:9b:d2:4a:a9:9d:a4:45:
15:fc:ca:1f:5c:5b:28:f6:00:62:90:8d:5b:a3:0e:
54:dd:27:e9:2e:d6:79:1d:16:97:dc:6e:8b:4b:dd:
c8:4e:4f:6c:6f:86:1b:0b:7f:99:e7:af:90:07:07:
08:d4:04:fb:9f:91:b1:4d:b7:e1:99:5c:ba:1f:18:
f6:4f:84:d1:d4:7a:13:d1:92:c8:cb:11:50:95:2d:
eb:e1:f9:6a:7e:3d:0b:c3:89:7a:17:4a:a4:b4:72:
26:b1:40:47:c2:8d:04:a6:0d:9c:22:fe:44:b9:52:
db:01:30:df:75:95:e2:cb:03:f7:44:f3:a6:5d:79:
56:77:e1:be:bb:af:ef:8a:96:bb:25:62:fd:f4:02:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:6C:B6:E4:62:E2:2E:13:FE:47:43:8E:B1:7E:01:0F:FC:B1:5B
X509v3 Authority Key Identifier:
keyid:C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37372e302f32342d3234203d3e203137353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
02:93:d2:0b:37:b5:4e:a4:1c:9d:14:c6:e4:d9:0c:ec:21:a0:
de:28:48:a7:cd:50:e0:97:52:e9:dc:35:b4:cc:32:a5:6d:05:
e2:54:0e:7a:2f:e8:53:c5:d6:a9:d6:a5:8c:4d:99:be:0b:48:
2d:4c:1a:bd:35:15:93:42:a6:14:5d:f1:9a:22:37:3c:da:a7:
f8:2b:65:66:3d:39:28:c6:c0:59:37:16:91:8f:e5:59:f4:3f:
98:b0:94:00:3d:52:b8:01:5a:23:20:c1:f4:49:b0:f6:6b:51:
f9:31:55:4e:c1:eb:a3:c1:83:99:40:4e:55:32:3c:ee:3a:6b:
58:b6:cc:f2:3e:1e:c6:6b:c2:4a:ee:bb:0f:d9:d7:63:ab:c9:
89:77:bc:7e:52:36:d9:0d:cf:da:1c:b1:35:61:33:a4:47:2d:
0a:71:15:5c:c1:5f:40:e9:01:8b:22:49:2b:59:ae:b1:b9:38:
e4:7a:55:85:a2:24:97:ff:57:70:a7:c7:d1:d8:30:e9:d6:87:
1f:20:02:70:66:4b:a2:b7:69:a9:87:f2:3a:b6:16:96:8a:15:
fa:25:60:8c:44:d1:63:94:1c:4a:09:02:cb:96:64:7d:cb:e2:
2d:4f:50:75:4b:48:a5:54:9f:13:80:42:79:c3:54:9f:2f:64:
12:bf:6d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:28:00 2026 by rpki-client