This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37382e302f32342d3234203d3e203137353631.roa File: 34352e3133332e37382e302f32342d3234203d3e203137353631.roa (raw, json) Hash identifier: 2wssyJyM8SuWuVvKG5z/cWE13aPnMXN7R14l3hWD+TQ= Subject key identifier: 75:DA:28:92:3C:B1:B7:88:BF:7F:5D:EB:1C:AA:F6:05:B7:DD:FD:CC Certificate issuer: /CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2 Certificate serial: 3D09F32A083CB2AAC43EEC37E724C1E05F9B8DA3 Authority key identifier: C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37382e302f32342d3234203d3e203137353631.roa Signing time: Mon 02 Feb 2026 09:08:55 +0000 ROA not before: Mon 02 Feb 2026 09:03:55 +0000 ROA not after: Mon 01 Feb 2027 09:08:55 +0000 asID: 17561 IP address blocks: 45.133.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.mft rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:09:f3:2a:08:3c:b2:aa:c4:3e:ec:37:e7:24:c1:e0:5f:9b:8d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c00f1497e83f6ab40a7834fb450bffe527db2bb2 Validity Not Before: Feb 2 09:03:55 2026 GMT Not After : Feb 1 09:08:55 2027 GMT Subject: CN=75DA28923CB1B788BF7F5DEB1CAAF605B7DDFDCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:00:58:9c:27:05:3f:a8:69:51:0c:10:10:ce: 3c:95:3f:80:69:16:75:3e:9d:c1:f3:f8:b6:93:5f: a8:41:8a:e0:26:5d:42:7d:30:a8:5b:bc:16:4d:9a: 38:c4:95:8a:aa:b8:c7:6f:81:10:ec:0c:d8:ee:83: 58:a9:55:2a:7b:87:ac:a6:65:bc:af:76:cf:d5:1b: 6f:68:99:60:78:e3:92:bc:16:b5:d1:5e:bc:27:e5: 00:99:0e:10:5a:26:6d:68:c5:5a:9e:3e:9d:3f:d2: f9:49:11:97:19:b2:61:83:5b:0e:1e:c8:71:c8:aa: 3e:be:45:5d:23:09:ea:73:46:3b:39:a7:98:16:87: 5a:e4:d9:66:a3:e0:b3:be:fb:05:55:26:55:a3:79: 1c:cf:f8:63:aa:30:da:ab:24:6f:ec:51:4c:c8:f0: a5:95:b8:3d:1d:8f:5d:62:c1:ed:65:57:27:8a:87: 8d:9d:56:05:17:ff:11:65:f4:0d:3c:bb:9a:eb:d9: 2c:bf:6d:f2:f6:24:89:44:21:d0:d0:bf:71:93:c8: e2:e2:c9:1b:a6:25:fe:1a:cd:a0:86:7a:97:5d:c7: 35:17:a7:04:98:78:cc:18:6c:f2:81:b6:3e:0c:d3: 93:cb:32:d3:fe:26:9c:8a:76:32:97:15:bd:4f:17: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DA:28:92:3C:B1:B7:88:BF:7F:5D:EB:1C:AA:F6:05:B7:DD:FD:CC X509v3 Authority Key Identifier: keyid:C0:0F:14:97:E8:3F:6A:B4:0A:78:34:FB:45:0B:FF:E5:27:DB:2B:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/C00F1497E83F6AB40A7834FB450BFFE527DB2BB2.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA8Ul-g_arQKeDT7RQv_5SfbK7I.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e9d7e455-0658-4960-bff4-0352219c2b1e/0/34352e3133332e37382e302f32342d3234203d3e203137353631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.78.0/24 Signature Algorithm: sha256WithRSAEncryption 75:88:3a:c1:c9:8a:df:3e:77:f9:4a:0e:5d:0a:d3:7b:67:78: 3d:d9:45:e9:1b:a9:72:a5:af:90:c0:99:e5:ec:59:a7:e5:30: 6d:0e:97:88:bb:32:15:ea:79:15:4a:d8:39:10:c5:44:3b:5b: 7b:46:f0:7e:ae:72:6b:2f:ab:ba:3a:82:a7:87:8a:59:07:93: b7:60:f5:ea:38:a2:91:d3:17:fd:4b:35:0f:fb:28:26:96:cd: e6:91:cd:5f:ea:4f:43:75:59:1a:1e:95:af:b6:97:e0:8c:7a: 0e:20:9b:05:09:3c:61:a0:09:c5:d6:1e:b8:ae:12:73:df:87: 04:ad:5c:e3:8d:b9:d7:53:87:96:fe:81:00:d8:6f:3e:a7:91: 80:87:ad:39:ae:19:76:0e:82:ad:50:4a:b6:a8:ca:50:f2:9f: 2c:45:57:3f:29:9e:9c:b9:84:58:e9:40:2f:8e:ca:e2:fa:73: 16:86:e3:42:a5:2d:75:d6:f9:71:77:a0:43:4a:07:80:71:ba: 2f:8e:36:17:cb:23:96:e2:ec:95:5a:13:63:f8:0c:31:87:7c: 2b:c0:d4:bb:11:3f:83:31:40:4f:b8:d2:3c:98:6c:df:58:a9: 5e:6c:f7:4d:9c:b3:58:3e:e4:b7:6d:60:a4:f5:c7:07:51:95: 54:5c:e9:b2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUPQnzKgg8sqrEPuw35yTB4F+bjaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYzAwZjE0OTdlODNmNmFiNDBhNzgzNGZiNDUwYmZmZTUy N2RiMmJiMjAeFw0yNjAyMDIwOTAzNTVaFw0yNzAyMDEwOTA4NTVaMDMxMTAvBgNV BAMTKDc1REEyODkyM0NCMUI3ODhCRjdGNURFQjFDQUFGNjA1QjdEREZEQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmAFicJwU/qGlRDBAQzjyVP4Bp FnU+ncHz+LaTX6hBiuAmXUJ9MKhbvBZNmjjElYqquMdvgRDsDNjug1ipVSp7h6ym Zbyvds/VG29omWB445K8FrXRXrwn5QCZDhBaJm1oxVqePp0/0vlJEZcZsmGDWw4e yHHIqj6+RV0jCepzRjs5p5gWh1rk2Waj4LO++wVVJlWjeRzP+GOqMNqrJG/sUUzI 8KWVuD0dj11iwe1lVyeKh42dVgUX/xFl9A08u5rr2Sy/bfL2JIlEIdDQv3GTyOLi yRumJf4azaCGepddxzUXpwSYeMwYbPKBtj4M05PLMtP+JpyKdjKXFb1PF7GVAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUddookjyxt4i/f13rHKr2Bbfd/cwwHwYDVR0j BBgwFoAUwA8Ul+g/arQKeDT7RQv/5SfbK7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZTlkN2U0NTUtMDY1OC00OTYwLWJmZjQtMDM1MjIxOWMy YjFlLzAvQzAwRjE0OTdFODNGNkFCNDBBNzgzNEZCNDUwQkZGRTUyN0RCMkJCMi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3dBOFVsLWdfYXJRS2VEVDdSUXZfNVNm Yks3SS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZTlkN2U0NTUt MDY1OC00OTYwLWJmZjQtMDM1MjIxOWMyYjFlLzAvMzQzNTJlMzEzMzMzMmUzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM1MzYzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2F TjANBgkqhkiG9w0BAQsFAAOCAQEAdYg6wcmK3z53+UoOXQrTe2d4PdlF6RupcqWv kMCZ5exZp+UwbQ6XiLsyFep5FUrYORDFRDtbe0bwfq5yay+rujqCp4eKWQeTt2D1 6jiikdMX/Us1D/soJpbN5pHNX+pPQ3VZGh6Vr7aX4Ix6DiCbBQk8YaAJxdYeuK4S c9+HBK1c442511OHlv6BANhvPqeRgIetOa4Zdg6CrVBKtqjKUPKfLEVXPymenLmE WOlAL47K4vpzFobjQqUtddb5cXegQ0oHgHG6L442F8sjluLslVoTY/gMMYd8K8DU uxE/gzFAT7jSPJhs31ipXmz3TZyzWD7kt21gpPXHB1GVVFzpsg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:24 2026 by rpki-client