This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
File: 34332e3233302e38342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: N+DNH3cZSUB3/2IAiDvrSRIBUTXQrXsxpW7BekUy55w=
Subject key identifier: 55:65:C8:E4:DF:71:76:C1:8F:73:B1:69:27:97:5B:F0:DA:3B:E4:BB
Certificate issuer: /CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Certificate serial: 075D8891B387D9D32B3B71A74B381484F93B11ED
Authority key identifier: C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
Signing time: Fri 06 Feb 2026 10:40:46 +0000
ROA not before: Fri 06 Feb 2026 10:35:46 +0000
ROA not after: Fri 05 Feb 2027 10:40:46 +0000
asID: 834
IP address blocks: 43.230.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 10:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:5d:88:91:b3:87:d9:d3:2b:3b:71:a7:4b:38:14:84:f9:3b:11:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c770f43358b97ba0aa9bdc62bbd511e90aeab29d
Validity
Not Before: Feb 6 10:35:46 2026 GMT
Not After : Feb 5 10:40:46 2027 GMT
Subject: CN=5565C8E4DF7176C18F73B16927975BF0DA3BE4BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:18:3c:cd:2b:f7:ab:5d:a6:96:a5:88:79:10:
34:9b:31:3d:07:c5:a8:d4:4d:7b:83:c8:d4:22:e9:
ce:28:40:c8:a7:5d:91:9d:d9:26:8d:33:50:b9:44:
b3:b3:44:41:97:98:cd:09:2f:a9:65:43:c8:ec:d3:
ce:90:7f:53:68:43:62:9c:4b:59:cf:da:3e:9d:72:
c4:c0:1a:eb:5d:83:5d:fe:d9:d1:04:17:8a:43:80:
e6:76:07:f7:1d:81:ca:d6:e7:8c:47:73:9e:80:f8:
57:a2:84:d0:db:15:e3:ca:40:d7:9e:d3:f6:80:5f:
c2:a5:fe:34:08:ee:da:9b:2f:e8:81:a6:67:d3:5c:
65:ec:73:26:25:36:8c:1b:bb:39:63:43:57:1b:3e:
31:b2:4d:bc:c2:75:5a:a2:c5:7c:db:3d:14:25:cf:
2d:1a:d0:2f:2d:d7:4c:92:ba:69:1d:36:4c:4a:9e:
c6:cb:dd:13:bf:1c:c4:90:87:98:81:ea:a1:a3:50:
89:66:5e:9e:92:0d:4e:c1:06:1c:03:c4:e2:3a:2b:
83:cd:87:85:cc:10:d9:d8:f1:ca:e8:34:8d:da:9e:
30:81:52:bd:d2:d2:58:27:9d:0f:b2:6c:a6:19:44:
6b:c9:f8:1d:38:6b:6b:71:7d:14:ee:b9:8e:2c:5d:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:65:C8:E4:DF:71:76:C1:8F:73:B1:69:27:97:5B:F0:DA:3B:E4:BB
X509v3 Authority Key Identifier:
keyid:C7:70:F4:33:58:B9:7B:A0:AA:9B:DC:62:BB:D5:11:E9:0A:EA:B2:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/C770F43358B97BA0AA9BDC62BBD511E90AEAB29D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3D0M1i5e6Cqm9xiu9UR6Qrqsp0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/eafebdb4-6f0b-404b-98e2-a26be94a6620/0/34332e3233302e38342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9b:59:61:2d:57:cd:ed:09:8c:40:a0:98:d6:17:d3:ad:bc:
7d:82:ce:15:73:9d:0a:9d:66:5b:4d:ac:69:34:5b:23:3b:8b:
2d:1c:bb:5b:06:35:45:e5:8b:b5:ba:ed:a4:16:54:a4:92:6c:
56:7e:0d:bd:d7:6a:c6:0c:2f:c1:96:6b:f3:28:dd:ee:b7:0b:
31:41:6b:09:84:8f:14:b9:d2:83:a0:0d:5d:82:bc:1e:ee:76:
10:f2:2d:37:33:9d:01:7c:94:a1:9c:92:bc:70:f5:9e:27:38:
bb:7e:66:b3:33:6b:13:b6:07:72:74:bf:17:8b:92:1f:26:76:
52:34:5f:8f:ed:d6:40:bd:27:8c:9b:f6:3c:32:74:ed:97:20:
f1:96:e2:b8:4d:5c:88:53:e7:b0:cb:f5:1a:08:d8:fb:ce:68:
60:f0:2d:bf:e7:28:0c:a0:8f:52:c2:c1:2b:37:fe:f9:5f:ad:
73:a3:3c:ee:c1:16:19:33:29:fa:34:3c:55:0d:85:59:da:3e:
d5:85:60:9f:13:82:8f:6f:13:09:fc:50:57:f6:12:ec:19:bb:
77:b7:b4:db:14:78:6c:71:7e:5a:90:76:af:e4:15:64:cc:19:
11:f6:67:ad:14:08:68:69:c3:8b:eb:6b:eb:26:82:76:da:36:
dd:cf:b6:8f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUB12IkbOH2dMrO3GnSzgUhPk7Ee0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzc3MGY0MzM1OGI5N2JhMGFhOWJkYzYyYmJkNTExZTkw
YWVhYjI5ZDAeFw0yNjAyMDYxMDM1NDZaFw0yNzAyMDUxMDQwNDZaMDMxMTAvBgNV
BAMTKDU1NjVDOEU0REY3MTc2QzE4RjczQjE2OTI3OTc1QkYwREEzQkU0QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpGDzNK/erXaaWpYh5EDSbMT0H
xajUTXuDyNQi6c4oQMinXZGd2SaNM1C5RLOzREGXmM0JL6llQ8js086Qf1NoQ2Kc
S1nP2j6dcsTAGutdg13+2dEEF4pDgOZ2B/cdgcrW54xHc56A+FeihNDbFePKQNee
0/aAX8Kl/jQI7tqbL+iBpmfTXGXscyYlNowbuzljQ1cbPjGyTbzCdVqixXzbPRQl
zy0a0C8t10ySumkdNkxKnsbL3RO/HMSQh5iB6qGjUIlmXp6SDU7BBhwDxOI6K4PN
h4XMENnY8croNI3anjCBUr3S0lgnnQ+ybKYZRGvJ+B04a2txfRTuuY4sXTAjAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUVWXI5N9xdsGPc7FpJ5db8No75LswHwYDVR0j
BBgwFoAUx3D0M1i5e6Cqm9xiu9UR6Qrqsp0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQtNmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2
NjIwLzAvQzc3MEY0MzM1OEI5N0JBMEFBOUJEQzYyQkJENTExRTkwQUVBQjI5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3gzRDBNMWk1ZTZDcW05eGl1OVVSNlFy
cXNwMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZWFmZWJkYjQt
NmYwYi00MDRiLTk4ZTItYTI2YmU5NGE2NjIwLzAvMzQzMzJlMzIzMzMwMmUzODM0
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+ZUMA0G
CSqGSIb3DQEBCwUAA4IBAQCKm1lhLVfN7QmMQKCY1hfTrbx9gs4Vc50KnWZbTaxp
NFsjO4stHLtbBjVF5Yu1uu2kFlSkkmxWfg2912rGDC/BlmvzKN3utwsxQWsJhI8U
udKDoA1dgrwe7nYQ8i03M50BfJShnJK8cPWeJzi7fmazM2sTtgdydL8Xi5IfJnZS
NF+P7dZAvSeMm/Y8MnTtlyDxluK4TVyIU+ewy/UaCNj7zmhg8C2/5ygMoI9SwsEr
N/75X61zozzuwRYZMyn6NDxVDYVZ2j7VhWCfE4KPbxMJ/FBX9hLsGbt3t7TbFHhs
cX5akHav5BVkzBkR9metFAhoacOL62vrJoJ22jbdz7aP
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:26:38 2026 by rpki-client