This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa File: 34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa (raw, json) Hash identifier: 01Vb2KSNzkh/GGzFrCIjs5tLsppA7mVVMUUDmrHzNok= Subject key identifier: 2D:A3:DF:66:4E:E3:22:D0:A2:7D:2D:21:05:13:01:B9:0E:49:59:48 Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 3F128BF4AA6992CA0CE12C71339AD69B1853BE65 Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa Signing time: Fri 26 Dec 2025 18:25:10 +0000 ROA not before: Fri 26 Dec 2025 18:20:10 +0000 ROA not after: Fri 25 Dec 2026 18:25:10 +0000 asID: 216138 IP address blocks: 45.146.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:12:8b:f4:aa:69:92:ca:0c:e1:2c:71:33:9a:d6:9b:18:53:be:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Dec 26 18:20:10 2025 GMT Not After : Dec 25 18:25:10 2026 GMT Subject: CN=2DA3DF664EE322D0A27D2D21051301B90E495948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:95:ad:5f:66:db:bb:4f:68:8d:70:40:2d:88: 9a:0b:14:1d:7e:90:3b:ba:03:a4:ae:93:2e:6a:c9: f6:49:af:8b:d3:ed:55:16:a3:9a:b6:c4:1f:37:5e: e6:63:c7:e9:63:af:fe:cb:6b:7d:33:e3:74:33:26: d0:18:a3:2f:d8:7f:49:2a:27:9f:a6:1b:49:b4:47: 18:f7:ca:1d:b1:60:6e:44:3d:f0:08:f1:df:90:d6: 0e:a3:2a:fb:56:f0:01:5a:76:1b:e0:b5:fb:a7:da: 22:18:1c:73:c8:58:5e:0b:f2:cc:d5:8d:04:69:df: 36:ed:e1:09:7a:19:a2:0c:dc:aa:9d:0f:4c:28:5e: fa:ff:30:07:6b:a5:c4:ca:dd:4f:43:3c:ee:26:f2: 4e:6e:4c:f1:cd:29:c5:3d:b5:9e:3f:2d:21:83:68: 84:96:f7:9d:42:98:be:92:95:ff:66:f4:73:ac:fa: 67:f5:84:7f:b3:8c:63:06:39:09:1f:9b:cd:5e:fd: 5c:89:0a:f1:1c:cf:6e:b6:25:76:71:49:53:f7:0b: 0f:aa:36:05:72:a1:d9:15:0c:38:41:d2:28:c6:cb: 5a:b7:96:02:72:99:e4:bd:0e:01:a3:09:8d:ea:e0: 32:3d:c4:d2:cb:fc:fa:6c:00:a7:50:fe:61:09:f6: 5a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A3:DF:66:4E:E3:22:D0:A2:7D:2D:21:05:13:01:B9:0E:49:59:48 X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e20323136313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.106.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c6:e7:b7:0c:1c:0d:0a:f4:71:6c:81:46:d4:bb:f2:9e:ee: 77:82:98:4f:d9:1a:7e:c0:ad:8e:0c:8e:95:bf:dc:d1:2a:ff: 38:01:3c:ac:49:53:d2:ba:38:61:8f:90:8f:b3:e9:3e:ff:72: 94:26:d9:f3:f6:b3:81:72:b3:b4:5b:4c:ef:a4:43:d9:ae:32: b7:a5:0c:b1:71:73:68:ba:95:76:33:c9:34:2f:af:21:5d:68: 24:65:da:aa:fd:65:e8:b0:f0:15:95:49:54:65:33:c3:06:09: 55:8d:41:ec:85:56:4a:c5:e7:e1:5f:b0:0a:1b:6e:2e:b2:66: 51:0f:d9:24:a3:b3:92:5a:c3:84:a9:e5:08:38:56:7f:66:52: 93:45:72:6d:d7:68:4c:fc:cd:6b:f9:24:f4:99:30:08:72:6d: b3:a2:45:70:e1:1c:a5:50:85:aa:9e:bf:ec:18:a9:4c:89:cb: 44:ff:d2:8c:73:2d:28:3a:9c:dd:e3:cd:88:8c:40:35:e7:e1: 70:15:12:4c:39:05:56:45:3e:f1:31:15:53:59:21:0a:e5:b8: 8c:0b:c8:b7:5d:1e:15:d7:54:fd:66:f2:b7:bf:9a:05:31:5e: 80:eb:3a:72:22:c3:24:0c:53:7b:2c:84:40:d5:a5:55:fb:d4: 2f:1a:45:72 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPxKL9KppksoM4SxxM5rWmxhTvmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNTEyMjYxODIwMTBaFw0yNjEyMjUxODI1MTBaMDMxMTAvBgNV BAMTKDJEQTNERjY2NEVFMzIyRDBBMjdEMkQyMTA1MTMwMUI5MEU0OTU5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvla1fZtu7T2iNcEAtiJoLFB1+ kDu6A6Suky5qyfZJr4vT7VUWo5q2xB83XuZjx+ljr/7La30z43QzJtAYoy/Yf0kq J5+mG0m0Rxj3yh2xYG5EPfAI8d+Q1g6jKvtW8AFadhvgtfun2iIYHHPIWF4L8szV jQRp3zbt4Ql6GaIM3KqdD0woXvr/MAdrpcTK3U9DPO4m8k5uTPHNKcU9tZ4/LSGD aISW951CmL6Slf9m9HOs+mf1hH+zjGMGOQkfm81e/VyJCvEcz262JXZxSVP3Cw+q NgVyodkVDDhB0ijGy1q3lgJymeS9DgGjCY3q4DI9xNLL/PpsAKdQ/mEJ9lpTAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQULaPfZk7jItCifS0hBRMBuQ5JWUgwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMTMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtkmowDQYJKoZIhvcNAQELBQADggEBAGvG57cMHA0K9HFsgUbUu/Ke7neCmE/Z Gn7ArY4MjpW/3NEq/zgBPKxJU9K6OGGPkI+z6T7/cpQm2fP2s4Fys7RbTO+kQ9mu MrelDLFxc2i6lXYzyTQvryFdaCRl2qr9Zeiw8BWVSVRlM8MGCVWNQeyFVkrF5+Ff sAobbi6yZlEP2SSjs5Jaw4Sp5Qg4Vn9mUpNFcm3XaEz8zWv5JPSZMAhybbOiRXDh HKVQhaqev+wYqUyJy0T/0oxzLSg6nN3jzYiMQDXn4XAVEkw5BVZFPvExFVNZIQrl uIwLyLddHhXXVP1m8re/mgUxXoDrOnIiwyQMU3sshEDVpVX71C8aRXI= -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:12 2026 by rpki-client