This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33362e302f32342d3234203d3e203633303235.roa File: 34352e3133362e33362e302f32342d3234203d3e203633303235.roa (raw, json) Hash identifier: +pP+6RG5Xk+om9nXzvq6WKJqnS83TS8lI7ERhzFqThI= Subject key identifier: 49:A6:C3:49:A3:C5:E4:5C:AB:C7:D0:3B:BB:DE:D1:1F:E2:49:6B:CE Certificate issuer: /CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Certificate serial: 705E943E174D7A8AEAC91D316AEAF9859D853240 Authority key identifier: AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33362e302f32342d3234203d3e203633303235.roa Signing time: Wed 04 Feb 2026 13:41:20 +0000 ROA not before: Wed 04 Feb 2026 13:36:20 +0000 ROA not after: Wed 03 Feb 2027 13:41:20 +0000 asID: 63025 IP address blocks: 45.136.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.mft rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.crl rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/8CC300FAF2F6D49186A8B62E08F190107743973D.mft rsync://rpki.ripe.net/repository/DEFAULT/jMMA-vL21JGGqLYuCPGQEHdDlz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5e:94:3e:17:4d:7a:8a:ea:c9:1d:31:6a:ea:f9:85:9d:85:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96 Validity Not Before: Feb 4 13:36:20 2026 GMT Not After : Feb 3 13:41:20 2027 GMT Subject: CN=49A6C349A3C5E45CABC7D03BBBDED11FE2496BCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:93:26:d4:3d:a1:1d:77:69:46:94:d6:b9: 9f:76:3d:4b:0d:bf:41:11:90:2a:b3:87:96:b4:8d: 53:76:83:c9:8f:1e:80:86:29:d7:5b:73:81:e7:59: 45:3c:8b:d2:47:79:b5:3b:48:14:d3:51:22:8d:d1: 60:d6:dc:6e:73:8e:0e:cb:9e:2d:0b:13:ff:e1:af: 81:4b:22:dc:68:76:a9:58:98:1c:b4:61:b5:8e:e1: 34:86:25:e9:6c:df:60:36:45:62:f0:94:70:48:4b: 3b:39:ca:50:cd:d7:1c:b9:f4:e7:64:62:bf:20:c7: ad:ca:a2:4e:a7:10:2c:4b:eb:e3:87:aa:32:51:38: 05:9b:cb:09:74:e1:85:55:3f:ad:af:5a:96:48:54: 18:59:76:7b:f0:ad:72:b2:32:63:43:9b:0d:fb:ab: da:0e:2b:79:98:13:0e:f6:95:4c:94:4c:f9:98:52: 12:f5:05:9a:21:6f:1e:1c:9f:7f:b6:96:c6:1b:87: 0b:10:20:23:7f:43:a9:6b:cb:4f:af:b3:2e:01:4e: f9:65:00:09:24:fd:4f:7d:6a:8d:d0:f7:e6:8e:89: 45:3f:1b:9b:27:e0:30:2b:2d:b9:5c:df:9c:fe:47: 4d:98:fe:1a:de:e3:1a:22:20:0c:a9:5e:d4:1e:ca: 20:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A6:C3:49:A3:C5:E4:5C:AB:C7:D0:3B:BB:DE:D1:1F:E2:49:6B:CE X509v3 Authority Key Identifier: keyid:AE:2E:1D:EF:AD:81:FF:39:E0:28:3E:D6:1B:C9:F9:DC:6D:A9:BE:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d9062de-f536-445d-ba71-035fbfecaad8/0/AE2E1DEFAD81FF39E0283ED61BC9F9DC6DA9BE96.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f07c93ed-b819-45e8-945d-42636d471710/0/34352e3133362e33362e302f32342d3234203d3e203633303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.36.0/24 Signature Algorithm: sha256WithRSAEncryption 02:63:64:40:75:a8:f0:a2:d8:6d:5a:95:01:9a:09:31:78:28: ac:50:a3:d4:6e:30:25:d6:62:48:39:e4:41:2a:40:2c:be:62: fa:f7:9f:ad:37:76:2d:e7:d4:ea:4f:2c:50:43:de:ac:c2:b3: e5:9d:69:60:59:ad:38:23:91:47:50:de:63:c7:df:44:0b:97: 9f:3b:b2:a4:9f:c7:13:d3:57:d0:2e:84:f3:88:6e:e7:7d:f9: e5:d1:fe:dd:92:5d:13:a5:10:a6:6c:cb:6a:71:7f:39:fd:9d: ae:02:a3:01:ee:78:e1:0d:22:1f:0c:66:19:b9:bf:64:ff:7c: 22:f0:bf:b0:f0:46:47:f3:08:d5:ff:a0:a2:94:26:d7:78:23: 4f:1c:cd:50:14:23:2f:09:76:f9:9a:91:ef:79:13:e2:69:14: 3e:6c:09:64:ef:e8:0c:ce:86:77:93:a1:02:bf:27:27:29:29: 69:52:44:e2:5e:f2:ee:0a:cb:7e:9e:a4:ad:f1:59:68:46:f2: 8d:d2:58:1f:72:63:22:13:e4:d2:bb:0b:ab:dd:d5:35:e3:0a: 89:88:a3:8d:be:07:2e:b3:d5:9d:d2:e3:c2:f7:f4:e1:9c:1d: ff:13:ab:3d:4d:03:fb:92:d7:db:ab:22:37:6e:55:2f:65:32: e1:ec:cc:bf -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgIUcF6UPhdNeorqyR0xaur5hZ2FMkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2 REE5QkU5NjAeFw0yNjAyMDQxMzM2MjBaFw0yNzAyMDMxMzQxMjBaMDMxMTAvBgNV BAMTKDQ5QTZDMzQ5QTNDNUU0NUNBQkM3RDAzQkJCREVEMTFGRTI0OTZCQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfbpMm1D2hHXdpRpTWuZ92PUsN v0ERkCqzh5a0jVN2g8mPHoCGKddbc4HnWUU8i9JHebU7SBTTUSKN0WDW3G5zjg7L ni0LE//hr4FLItxodqlYmBy0YbWO4TSGJels32A2RWLwlHBISzs5ylDN1xy59Odk Yr8gx63Kok6nECxL6+OHqjJROAWbywl04YVVP62vWpZIVBhZdnvwrXKyMmNDmw37 q9oOK3mYEw72lUyUTPmYUhL1BZohbx4cn3+2lsYbhwsQICN/Q6lry0+vsy4BTvll AAkk/U99ao3Q9+aOiUU/G5sn4DArLblc35z+R02Y/hre4xoiIAypXtQeyiAJAgMB AAGjggJ2MIICcjAdBgNVHQ4EFgQUSabDSaPF5Fyrx9A7u97RH+JJa84wHwYDVR0j BBgwFoAUri4d762B/zngKD7WG8n53G2pvpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjA3YzkzZWQtYjgxOS00NWU4LTk0NWQtNDI2MzZkNDcx NzEwLzAvQUUyRTFERUZBRDgxRkYzOUUwMjgzRUQ2MUJDOUY5REM2REE5QkU5Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84ZDkwNjJkZS1mNTM2LTQ0 NWQtYmE3MS0wMzVmYmZlY2FhZDgvMC9BRTJFMURFRkFEODFGRjM5RTAyODNFRDYx QkM5RjlEQzZEQTlCRTk2LmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgGCCsGAQUF BzALhoGLcnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9y eS9mMDdjOTNlZC1iODE5LTQ1ZTgtOTQ1ZC00MjYzNmQ0NzE3MTAvMC8zNDM1MmUz MTMzMzYyZTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzAzMjM1LnJv YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQALYgkMA0GCSqGSIb3DQEBCwUAA4IBAQACY2RAdajwothtWpUBmgkx eCisUKPUbjAl1mJIOeRBKkAsvmL695+tN3Yt59TqTyxQQ96swrPlnWlgWa04I5FH UN5jx99EC5efO7Kkn8cT01fQLoTziG7nffnl0f7dkl0TpRCmbMtqcX85/Z2uAqMB 7njhDSIfDGYZub9k/3wi8L+w8EZH8wjV/6CilCbXeCNPHM1QFCMvCXb5mpHveRPi aRQ+bAlk7+gMzoZ3k6ECvycnKSlpUkTiXvLuCst+nqSt8VloRvKN0lgfcmMiE+TS uwur3dU14wqJiKONvgcus9Wd0uPC9/ThnB3/E6s9TQP7ktfbqyI3blUvZTLh7My/ -----END CERTIFICATE-----Generated at Mon Feb 9 20:52:01 2026 by rpki-client