This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e203535323031.roa File: 34352e3134362e3130362e302f32342d3234203d3e203535323031.roa (raw, json) Hash identifier: uQC20MmSjy1Cc5RYjKHMaAo4fj5NpzuBkQBiuImfQRw= Subject key identifier: D1:49:EC:30:05:F7:58:F3:F5:8F:61:49:2D:E0:E0:60:04:12:69:C4 Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 54DEA5F11083A401F2D49CD71CDE28CDFB98BAA3 Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e203535323031.roa Signing time: Fri 26 Dec 2025 18:25:10 +0000 ROA not before: Fri 26 Dec 2025 18:20:10 +0000 ROA not after: Fri 25 Dec 2026 18:25:10 +0000 asID: 55201 IP address blocks: 45.146.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:de:a5:f1:10:83:a4:01:f2:d4:9c:d7:1c:de:28:cd:fb:98:ba:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Dec 26 18:20:10 2025 GMT Not After : Dec 25 18:25:10 2026 GMT Subject: CN=D149EC3005F758F3F58F61492DE0E060041269C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7a:1c:bf:0b:e9:64:c6:aa:d3:27:5b:eb:44: 48:4c:11:6e:d2:c1:4b:cd:ec:97:7c:a1:f7:86:e9: 64:a2:ba:4b:78:f2:da:25:77:57:96:4f:43:69:5a: e5:5a:07:13:68:bd:ca:c1:5d:4a:9d:3e:69:89:be: d7:78:57:19:46:01:b2:e6:3b:f8:c9:02:92:f6:1d: 9c:b0:d9:5d:25:f5:36:19:cc:5a:78:12:19:b5:0a: b2:fd:9f:1e:8e:e7:39:51:d0:86:fe:10:4f:35:d8: 7e:52:dd:e3:bb:43:ee:07:b6:77:cf:ae:89:8e:01: b6:94:e6:14:d0:1e:90:29:2c:60:33:53:25:47:4c: cf:a2:b8:ce:72:01:0a:7a:23:6f:6b:67:e3:25:6a: e0:6a:db:19:c3:3c:ba:e3:71:e6:54:01:73:52:28: 03:19:9b:89:d8:be:38:5e:a5:31:58:13:d3:f0:6d: 51:f4:7f:be:e7:17:59:c8:fd:f5:90:ba:b2:cd:1b: 06:e6:fa:55:66:60:25:7c:35:13:b6:58:2f:85:93: 64:c1:20:a5:19:c2:d3:98:73:9f:f2:a7:11:8c:e8: e7:cf:75:1d:ad:57:61:d2:05:f7:86:27:24:98:56: e4:7e:a0:0f:fd:9e:0d:fd:ed:ce:ba:11:0d:65:0f: 83:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:49:EC:30:05:F7:58:F3:F5:8F:61:49:2D:E0:E0:60:04:12:69:C4 X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130362e302f32342d3234203d3e203535323031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.106.0/24 Signature Algorithm: sha256WithRSAEncryption b8:1e:1e:8f:30:fd:c2:5f:5b:29:4e:60:e1:83:b8:7a:20:bb: e5:01:8f:91:f1:e3:d1:34:6f:cd:a3:f4:0b:02:ab:20:31:86: 96:bc:4f:58:b1:76:87:06:2e:85:d3:3d:f4:9a:0b:2b:c9:7a: 5a:ed:6f:fe:87:6f:76:a1:c1:d5:9a:6d:0c:7f:9d:31:07:b7: d8:9c:b7:93:42:4a:df:fd:06:fd:c9:3c:de:67:77:88:24:92: c8:e6:b3:14:7d:0b:f2:12:8a:55:c0:38:0a:2b:aa:f6:79:a1: 8d:64:51:f1:58:f8:86:f0:94:2d:f5:56:f7:49:3e:01:63:f1: 1d:97:5c:c1:a4:b0:f6:6e:71:96:ff:26:3a:d4:84:67:3e:e4: d4:1f:0e:0b:4f:e1:86:ab:e9:f8:d6:bf:03:d8:e1:e6:67:70: de:a8:f5:e4:ff:e2:4b:33:cb:b3:16:7d:96:22:62:05:e1:b8: d7:91:a8:c2:75:9e:cb:f6:bc:fe:c3:9f:87:0e:2f:79:9c:7f: 2e:e5:0a:36:11:b6:17:c3:69:6c:af:4a:9d:50:61:bf:ef:19: 2b:68:f6:0a:e8:14:52:6e:5d:ba:f5:16:27:aa:9a:1e:6a:ef: 94:d8:e6:f2:4c:ed:8e:d1:53:79:fa:1a:14:3e:2b:51:4e:02: 65:eb:cc:c7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVN6l8RCDpAHy1JzXHN4ozfuYuqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNTEyMjYxODIwMTBaFw0yNjEyMjUxODI1MTBaMDMxMTAvBgNV BAMTKEQxNDlFQzMwMDVGNzU4RjNGNThGNjE0OTJERTBFMDYwMDQxMjY5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjehy/C+lkxqrTJ1vrREhMEW7S wUvN7Jd8ofeG6WSiukt48told1eWT0NpWuVaBxNovcrBXUqdPmmJvtd4VxlGAbLm O/jJApL2HZyw2V0l9TYZzFp4Ehm1CrL9nx6O5zlR0Ib+EE812H5S3eO7Q+4HtnfP romOAbaU5hTQHpApLGAzUyVHTM+iuM5yAQp6I29rZ+MlauBq2xnDPLrjceZUAXNS KAMZm4nYvjhepTFYE9PwbVH0f77nF1nI/fWQurLNGwbm+lVmYCV8NRO2WC+Fk2TB IKUZwtOYc5/ypxGM6OfPdR2tV2HSBfeGJySYVuR+oA/9ng397c66EQ1lD4N/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU0UnsMAX3WPP1j2FJLeDgYAQSacQwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzIzMDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZJqMA0GCSqGSIb3DQEBCwUAA4IBAQC4Hh6PMP3CX1spTmDhg7h6ILvlAY+R8ePR NG/No/QLAqsgMYaWvE9YsXaHBi6F0z30mgsryXpa7W/+h292ocHVmm0Mf50xB7fY nLeTQkrf/Qb9yTzeZ3eIJJLI5rMUfQvyEopVwDgKK6r2eaGNZFHxWPiG8JQt9Vb3 ST4BY/Edl1zBpLD2bnGW/yY61IRnPuTUHw4LT+GGq+n41r8D2OHmZ3DeqPXk/+JL M8uzFn2WImIF4bjXkajCdZ7L9rz+w5+HDi95nH8u5Qo2EbYXw2lsr0qdUGG/7xkr aPYK6BRSbl269RYnqpoeau+U2ObyTO2O0VN5+hoUPitRTgJl68zH -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:01 2026 by rpki-client