This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa File: 34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa (raw, json) Hash identifier: MMdb5hdxzSDftqblycIDCKP70I+p+jFdwcOY1SSaT3g= Subject key identifier: 60:72:EA:0E:BB:5C:78:AF:78:9D:05:17:A7:77:DB:C1:21:FA:DB:4A Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 366154065AA905F8CD188B8A7FAF6395CB75CCB4 Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa Signing time: Fri 26 Dec 2025 18:17:03 +0000 ROA not before: Fri 26 Dec 2025 18:12:03 +0000 ROA not after: Fri 25 Dec 2026 18:17:03 +0000 asID: 202736 IP address blocks: 45.146.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:61:54:06:5a:a9:05:f8:cd:18:8b:8a:7f:af:63:95:cb:75:cc:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Dec 26 18:12:03 2025 GMT Not After : Dec 25 18:17:03 2026 GMT Subject: CN=6072EA0EBB5C78AF789D0517A777DBC121FADB4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b6:c8:6c:d2:55:6e:10:d8:f8:69:64:1f:6b: 05:6d:2b:6e:e7:16:c0:da:9f:96:52:0a:ef:e1:a0: f8:ac:9e:92:79:78:f3:37:e0:7c:04:5d:12:43:12: 2a:c7:70:99:84:97:d7:87:ab:f9:1f:82:5b:d8:6f: 25:dd:06:29:92:13:09:70:51:ae:dd:a8:b3:43:62: 67:d4:a3:9a:4d:7c:65:d2:d9:3f:41:02:8c:eb:63: 17:ae:b7:2c:3c:d2:7a:b2:48:51:61:44:c3:8a:4b: 1c:40:bf:75:df:fa:1b:92:c3:2d:b4:0e:59:05:ef: 3d:d2:56:b4:9a:03:91:65:0e:21:2c:20:9d:05:5b: 94:67:d7:0f:74:77:e8:35:57:9a:a4:74:b1:5b:bc: bb:9f:b0:91:88:fe:d3:12:d1:6f:4f:26:b6:08:00: ae:2e:62:93:8b:b5:d4:6c:cf:83:7b:51:e6:24:57: fc:58:55:95:52:d8:b9:46:43:6b:34:0b:c9:f5:48: c2:67:cb:f6:ce:01:82:4b:f6:1e:45:91:3e:c5:89: e7:2d:37:4d:a7:2f:cc:d3:9f:cb:f1:e4:c1:8e:78: 5f:b8:e1:fe:72:9b:bc:67:d8:b2:51:f9:54:1c:86: 37:1d:a0:9b:5a:c1:be:52:29:e3:85:ec:28:e5:54: cc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:72:EA:0E:BB:5C:78:AF:78:9D:05:17:A7:77:DB:C1:21:FA:DB:4A X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20323032373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.106.0/24 Signature Algorithm: sha256WithRSAEncryption 03:a2:27:61:e2:66:88:94:82:be:4e:04:21:d0:b3:ed:7e:70: 71:7c:bd:ff:79:43:69:5d:e2:fc:92:a7:77:ea:1a:d1:c8:29: 8c:20:db:10:c8:bb:47:a0:da:ec:a0:f5:7a:bf:44:b2:97:33: fb:b7:62:55:fe:cd:df:96:11:7f:c8:76:a7:6c:f0:bb:34:47: 7b:aa:03:31:69:24:26:7c:93:fb:82:79:d3:ef:3b:fa:23:07: 85:44:99:be:2b:d7:0e:6b:75:8e:da:59:3a:61:7c:22:c9:dc: b6:34:0a:cd:51:79:52:3f:47:c8:14:8d:e2:25:3b:4d:c6:1b: 33:46:4c:ca:9b:95:ab:85:7b:d7:9f:73:45:52:a0:78:4d:21: a7:da:9b:dd:1b:c1:08:d9:7d:8f:df:d9:30:ce:e8:84:ad:6c: 1b:e0:2c:16:08:9a:15:85:cd:db:da:12:33:08:c0:8d:06:b4: ca:e4:52:9d:1e:22:79:2c:65:0f:fe:a4:07:db:25:fc:13:6d: a6:a9:e2:dc:4c:52:af:7a:f3:f4:2b:f7:52:a1:91:20:61:95: ca:64:85:66:09:33:b5:ab:d2:1f:37:b8:d3:28:44:94:23:3b: ad:40:61:b6:f0:4d:fd:86:76:c6:a3:51:47:10:56:ae:14:71: dd:c6:5c:3a -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNmFUBlqpBfjNGIuKf69jlct1zLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNTEyMjYxODEyMDNaFw0yNjEyMjUxODE3MDNaMDMxMTAvBgNV BAMTKDYwNzJFQTBFQkI1Qzc4QUY3ODlEMDUxN0E3NzdEQkMxMjFGQURCNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCntshs0lVuENj4aWQfawVtK27n FsDan5ZSCu/hoPisnpJ5ePM34HwEXRJDEirHcJmEl9eHq/kfglvYbyXdBimSEwlw Ua7dqLNDYmfUo5pNfGXS2T9BAozrYxeutyw80nqySFFhRMOKSxxAv3Xf+huSwy20 DlkF7z3SVrSaA5FlDiEsIJ0FW5Rn1w90d+g1V5qkdLFbvLufsJGI/tMS0W9PJrYI AK4uYpOLtdRsz4N7UeYkV/xYVZVS2LlGQ2s0C8n1SMJny/bOAYJL9h5FkT7Fiect N02nL8zTn8vx5MGOeF+44f5ym7xn2LJR+VQchjcdoJtawb5SKeOF7CjlVMyfAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUYHLqDrtceK94nQUXp3fbwSH620owHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzNzMzMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtkmowDQYJKoZIhvcNAQELBQADggEBAAOiJ2HiZoiUgr5OBCHQs+1+cHF8vf95 Q2ld4vySp3fqGtHIKYwg2xDIu0eg2uyg9Xq/RLKXM/u3YlX+zd+WEX/Idqds8Ls0 R3uqAzFpJCZ8k/uCedPvO/ojB4VEmb4r1w5rdY7aWTphfCLJ3LY0Cs1ReVI/R8gU jeIlO03GGzNGTMqblauFe9efc0VSoHhNIafam90bwQjZfY/f2TDO6IStbBvgLBYI mhWFzdvaEjMIwI0GtMrkUp0eInksZQ/+pAfbJfwTbaap4txMUq968/Qr91KhkSBh lcpkhWYJM7Wr0h83uNMoRJQjO61AYbbwTf2GdsajUUcQVq4Ucd3GXDo= -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:43 2026 by rpki-client