This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203136323736.roa File: 34352e3134362e3130372e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: JvAnLS+DVFiZNiWyj/5sfg3byaJ8ewCg0UUenm66Oo8= Subject key identifier: 6D:F4:64:7E:5A:3A:1D:C3:5A:EA:5F:CD:F1:19:8E:6B:20:DB:BF:EC Certificate issuer: /CN=0d059f10d18d00052c808eb8069f90d47e30564a Certificate serial: 5673725CDA8C6D93813C6D733EDC4415E6ADA8CA Authority key identifier: 0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203136323736.roa Signing time: Mon 19 Jan 2026 13:55:34 +0000 ROA not before: Mon 19 Jan 2026 13:50:34 +0000 ROA not after: Mon 18 Jan 2027 13:55:34 +0000 asID: 16276 IP address blocks: 45.146.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.mft rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:72:5c:da:8c:6d:93:81:3c:6d:73:3e:dc:44:15:e6:ad:a8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d059f10d18d00052c808eb8069f90d47e30564a Validity Not Before: Jan 19 13:50:34 2026 GMT Not After : Jan 18 13:55:34 2027 GMT Subject: CN=6DF4647E5A3A1DC35AEA5FCDF1198E6B20DBBFEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7b:92:2b:1a:ed:67:e8:c8:f9:11:9b:96:2a: ea:3e:03:ba:97:cc:83:84:32:a2:df:e6:7f:78:e9: cd:81:c9:8c:90:56:10:95:80:3b:a0:e2:0c:7b:f1: 7b:a0:b2:d6:37:35:11:5f:e4:e3:fb:2b:ab:a7:04: e8:be:f7:c2:60:40:9f:65:dc:51:0d:08:9c:69:54: 16:95:b0:b5:dd:c8:ad:56:97:67:9d:8c:00:35:2b: b2:2c:1f:72:2d:a2:0f:b1:c2:8d:8b:c5:96:14:05: d8:ee:df:f8:f1:54:38:60:ad:48:00:8a:03:11:17: d9:6d:a7:f7:b9:d3:2d:7d:16:be:be:46:b1:62:e4: 13:b3:df:a0:99:79:18:13:73:04:af:89:2b:51:e5: d3:ac:92:03:4f:12:c5:5e:72:a0:a4:d4:c2:45:77: 0a:de:d3:2a:4e:e5:f9:1d:81:0b:d9:98:b3:1a:68: 73:f4:e1:a7:6a:69:1c:12:78:02:a9:fa:99:f4:e3: 60:31:47:e5:b4:ba:89:03:e2:6e:a8:ae:1a:cc:bf: 54:f3:12:a2:35:a6:d1:c8:58:53:66:5d:8a:6c:42: 3f:a0:44:f6:bd:f8:83:fa:f2:ce:83:a6:b1:1d:da: 2c:9d:08:25:7f:3d:fa:69:87:74:9f:0d:4b:36:35: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F4:64:7E:5A:3A:1D:C3:5A:EA:5F:CD:F1:19:8E:6B:20:DB:BF:EC X509v3 Authority Key Identifier: keyid:0D:05:9F:10:D1:8D:00:05:2C:80:8E:B8:06:9F:90:D4:7E:30:56:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/0D059F10D18D00052C808EB8069F90D47E30564A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQWfENGNAAUsgI64Bp-Q1H4wVko.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/faf16704-2854-4080-9a09-7262326c9e22/1/34352e3134362e3130372e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.107.0/24 Signature Algorithm: sha256WithRSAEncryption 58:e5:cf:13:88:d2:02:4b:c7:bd:12:dc:fa:6c:12:d4:aa:b3: 8c:5b:78:d6:0a:bd:be:92:ed:8e:49:ed:73:06:8b:fb:bc:60: 76:4e:9c:9c:ec:90:0c:c8:96:ee:4c:2a:4e:3c:14:10:91:f3: 16:b3:45:91:aa:8d:70:72:06:17:58:00:97:a3:b3:2d:df:47: 8d:c6:7a:d7:a7:58:a4:ee:30:b7:d5:e8:9d:d5:5a:fa:79:3a: d7:14:01:2f:7b:82:50:aa:26:ca:4e:ab:f2:c1:0c:fb:ad:d0: 90:97:d4:d3:34:7f:06:e2:66:4d:a9:64:8a:9b:18:3c:5a:ad: fa:ae:e5:35:78:49:40:56:a0:c4:11:47:7a:09:62:91:cd:d8: 6a:2b:4d:92:61:b5:7a:24:1c:9e:50:f1:94:d4:3f:33:61:82: e1:f0:d0:de:63:53:a8:4d:32:a2:54:2b:7a:49:60:51:c5:f7: bb:17:94:2c:f2:e4:48:92:fe:77:de:98:60:4c:ca:cd:be:07: 09:89:40:e3:9f:48:fd:53:04:4b:ed:0b:a3:bd:ec:2a:fb:f9: 76:ea:3f:74:14:57:48:e6:bf:43:fe:a2:ae:25:4e:ce:77:2d: 7b:9f:e4:80:5d:92:f7:2d:9c:c2:44:a5:61:03:88:4e:f9:15: 8c:17:8d:e3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVnNyXNqMbZOBPG1zPtxEFeatqMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMGQwNTlmMTBkMThkMDAwNTJjODA4ZWI4MDY5ZjkwZDQ3 ZTMwNTY0YTAeFw0yNjAxMTkxMzUwMzRaFw0yNzAxMTgxMzU1MzRaMDMxMTAvBgNV BAMTKDZERjQ2NDdFNUEzQTFEQzM1QUVBNUZDREYxMTk4RTZCMjBEQkJGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQe5IrGu1n6Mj5EZuWKuo+A7qX zIOEMqLf5n946c2ByYyQVhCVgDug4gx78XugstY3NRFf5OP7K6unBOi+98JgQJ9l 3FENCJxpVBaVsLXdyK1Wl2edjAA1K7IsH3Itog+xwo2LxZYUBdju3/jxVDhgrUgA igMRF9ltp/e50y19Fr6+RrFi5BOz36CZeRgTcwSviStR5dOskgNPEsVecqCk1MJF dwre0ypO5fkdgQvZmLMaaHP04adqaRwSeAKp+pn042AxR+W0uokD4m6orhrMv1Tz EqI1ptHIWFNmXYpsQj+gRPa9+IP68s6DprEd2iydCCV/Pfpph3SfDUs2Na4NAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbfRkflo6HcNa6l/N8RmOayDbv+wwHwYDVR0j BBgwFoAUDQWfENGNAAUsgI64Bp+Q1H4wVkowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQtMjg1NC00MDgwLTlhMDktNzI2MjMyNmM5 ZTIyLzEvMEQwNTlGMTBEMThEMDAwNTJDODA4RUI4MDY5RjkwRDQ3RTMwNTY0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RRV2ZFTkdOQUFVc2dJNjRCcC1RMUg0 d1Zrby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmFmMTY3MDQt Mjg1NC00MDgwLTlhMDktNzI2MjMyNmM5ZTIyLzEvMzQzNTJlMzEzNDM2MmUzMTMw MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM2MzIzNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZJrMA0GCSqGSIb3DQEBCwUAA4IBAQBY5c8TiNICS8e9Etz6bBLUqrOMW3jWCr2+ ku2OSe1zBov7vGB2Tpyc7JAMyJbuTCpOPBQQkfMWs0WRqo1wcgYXWACXo7Mt30eN xnrXp1ik7jC31eid1Vr6eTrXFAEve4JQqibKTqvywQz7rdCQl9TTNH8G4mZNqWSK mxg8Wq36ruU1eElAVqDEEUd6CWKRzdhqK02SYbV6JByeUPGU1D8zYYLh8NDeY1Oo TTKiVCt6SWBRxfe7F5Qs8uRIkv533phgTMrNvgcJiUDjn0j9UwRL7Qujvewq+/l2 6j90FFdI5r9D/qKuJU7Ody17n+SAXZL3LZzCRKVhA4hO+RWMF43j -----END CERTIFICATE-----Generated at Tue Jan 20 02:50:07 2026 by rpki-client