This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e3138302e302f32322d3234203d3e203437353833.roa File: 34352e38302e3138302e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: tlm5uKiO1lPHzO0W55fE2VFVgUSnmO2Jd0+4VM9vIOI= Subject key identifier: 79:37:0B:64:4B:14:AF:22:C7:F6:C5:59:6D:D2:77:53:C6:E7:D1:41 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 09178324629B74B234D27AC60300D2F130138485 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e3138302e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:43 +0000 ROA not before: Mon 29 Dec 2025 09:45:43 +0000 ROA not after: Mon 28 Dec 2026 09:50:43 +0000 asID: 47583 IP address blocks: 45.80.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:17:83:24:62:9b:74:b2:34:d2:7a:c6:03:00:d2:f1:30:13:84:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:43 2025 GMT Not After : Dec 28 09:50:43 2026 GMT Subject: CN=79370B644B14AF22C7F6C5596DD27753C6E7D141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:4e:ea:26:7d:89:2a:8b:40:84:5f:2c:6f: 05:7a:4e:10:14:34:d6:68:70:42:24:55:87:fb:24: e8:37:84:dd:c9:dd:8a:13:d1:8c:bf:21:e1:4c:06: a8:6c:47:32:04:75:be:cf:a4:37:60:ec:42:95:c6: bd:55:08:11:c3:e3:53:85:80:cc:0e:3f:02:6b:85: 79:d6:aa:ae:56:25:63:92:86:af:9d:7d:6e:dc:92: 75:d1:54:3a:ef:cb:5b:0f:fd:2c:26:4b:0a:70:0e: 01:60:fd:bc:29:bf:df:2b:28:3e:fe:23:53:43:55: 8c:c1:fe:97:98:06:9a:32:86:82:3a:52:57:f3:f6: 43:28:a7:7d:91:92:54:8c:ef:d0:01:70:8e:41:32: 40:6e:ea:e3:7f:ff:e6:ad:7e:ae:e9:2d:eb:d6:9a: 53:c7:33:de:9a:3e:98:07:14:0b:30:b6:6a:91:d9: 20:02:73:67:f5:e9:24:93:2c:61:8a:4d:89:37:a4: 28:88:7e:18:71:f0:2c:c8:55:8a:47:aa:c4:ea:d6: ec:a4:e6:59:9b:f2:8a:a1:02:c9:50:3d:36:55:48: 2c:a8:5a:1d:9f:d2:45:28:84:a5:23:91:82:bf:af: 3f:1c:69:ff:ca:bc:1d:bd:6a:25:ce:0f:4a:68:64: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:0B:64:4B:14:AF:22:C7:F6:C5:59:6D:D2:77:53:C6:E7:D1:41 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38302e3138302e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.180.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:8f:18:e0:63:d8:8f:58:90:44:ad:0e:1a:47:71:ce:87:32: af:9b:ea:46:07:7c:7a:99:aa:d2:78:f6:6b:4b:65:7a:9b:5c: 49:16:d6:fe:df:9c:96:84:46:ca:b5:0d:5a:c1:7c:b2:e9:10: 72:d3:b3:dc:ea:33:19:0e:ca:d6:43:0b:ef:e6:26:fa:12:82: 04:01:f9:03:96:92:cc:54:93:8f:01:73:1c:a0:84:33:c6:25: 65:bb:2f:b1:c2:5b:4e:05:69:7d:6a:25:f2:ef:bb:d0:2a:48: 91:c4:08:63:f6:77:1c:79:55:47:ea:b9:62:67:fd:27:95:45: c1:21:24:2f:b1:99:79:84:9b:ca:c8:13:3d:f2:e2:7a:22:2c: c9:ea:7a:5e:f9:e6:1f:f2:84:96:50:87:dc:fd:89:ec:b3:c6: fc:28:74:7c:6f:67:0b:95:cb:5e:32:d0:34:d1:2e:b3:fb:17: fb:01:78:24:ab:55:b3:6a:db:98:14:87:12:7e:9d:fe:7f:43: 83:e3:5e:88:77:24:e3:78:a9:d2:52:91:5f:c4:64:6c:1f:e1: c9:a8:37:4b:8a:9f:63:b4:ca:b0:ca:15:6b:d8:2a:3c:7e:0d: 64:18:a4:84:32:71:c0:22:d8:25:d1:08:8e:ba:3a:c2:af:87: b8:4a:4b:91 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUCReDJGKbdLI00nrGAwDS8TAThIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDNaFw0yNjEyMjgwOTUwNDNaMDMxMTAvBgNV BAMTKDc5MzcwQjY0NEIxNEFGMjJDN0Y2QzU1OTZERDI3NzUzQzZFN0QxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUlk7qJn2JKotAhF8sbwV6ThAU NNZocEIkVYf7JOg3hN3J3YoT0Yy/IeFMBqhsRzIEdb7PpDdg7EKVxr1VCBHD41OF gMwOPwJrhXnWqq5WJWOShq+dfW7cknXRVDrvy1sP/SwmSwpwDgFg/bwpv98rKD7+ I1NDVYzB/peYBpoyhoI6Ulfz9kMop32RklSM79ABcI5BMkBu6uN//+atfq7pLevW mlPHM96aPpgHFAswtmqR2SACc2f16SSTLGGKTYk3pCiIfhhx8CzIVYpHqsTq1uyk 5lmb8oqhAslQPTZVSCyoWh2f0kUohKUjkYK/rz8caf/KvB29aiXOD0poZJWJAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUeTcLZEsUryLH9sVZbdJ3U8bn0UEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzMDJlMzEzODMw MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1Q tDANBgkqhkiG9w0BAQsFAAOCAQEAKo8Y4GPYj1iQRK0OGkdxzocyr5vqRgd8epmq 0nj2a0tleptcSRbW/t+cloRGyrUNWsF8sukQctOz3OozGQ7K1kML7+Ym+hKCBAH5 A5aSzFSTjwFzHKCEM8YlZbsvscJbTgVpfWol8u+70CpIkcQIY/Z3HHlVR+q5Ymf9 J5VFwSEkL7GZeYSbysgTPfLieiIsyep6XvnmH/KEllCH3P2J7LPG/Ch0fG9nC5XL XjLQNNEus/sX+wF4JKtVs2rbmBSHEn6d/n9Dg+NeiHck43ip0lKRX8RkbB/hyag3 S4qfY7TKsMoVa9gqPH4NZBikhDJxwCLYJdEIjro6wq+HuEpLkQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:08 2026 by rpki-client