This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa File: 34352e38342e33392e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: M6I02DEp0BxGU/1LaW06c5KV5lk1TRNQ1XYZLNXdubI= Subject key identifier: 74:C5:50:B8:2A:06:64:3B:69:46:86:FD:A2:B1:B4:3D:2A:A1:29:4B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1C3B11E3438F682AB78F94F02FD3EAEF4C224407 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa Signing time: Mon 29 Dec 2025 09:51:07 +0000 ROA not before: Mon 29 Dec 2025 09:46:07 +0000 ROA not after: Mon 28 Dec 2026 09:51:07 +0000 asID: 207137 IP address blocks: 45.84.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3b:11:e3:43:8f:68:2a:b7:8f:94:f0:2f:d3:ea:ef:4c:22:44:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:07 2025 GMT Not After : Dec 28 09:51:07 2026 GMT Subject: CN=74C550B82A06643B694686FDA2B1B43D2AA1294B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:57:c9:a3:7d:96:92:62:a9:24:16:4c:a8:c7: 32:90:bc:45:37:f3:fd:15:bd:47:2a:22:80:2f:c5: 71:7a:f1:0f:50:36:da:0b:a4:ba:c7:3c:a6:47:f1: c0:40:c9:47:8f:97:53:6c:6d:b0:7f:1a:3e:55:24: a5:ef:d7:6a:9c:a5:00:94:2c:0c:21:f9:df:13:9f: e5:02:ce:db:e9:67:4b:74:35:17:31:c4:b8:d8:6e: c6:10:8c:22:24:2c:b6:4e:80:22:fc:75:d2:9f:37: c9:8f:80:cb:c0:17:5e:b9:37:7c:6a:27:ca:cb:81: ae:54:06:a1:c6:70:8d:2f:ee:10:44:bf:5f:69:d3: 48:be:29:b3:78:9e:37:4a:36:e8:d9:12:01:45:41: e5:3f:75:a2:c3:9b:c6:8c:53:6d:85:34:60:3f:9c: c8:9a:a1:b1:aa:11:f5:a9:f7:f3:ee:fb:ac:be:8e: c4:b7:0d:07:3c:6b:18:93:68:f1:40:32:5b:32:30: fb:7d:30:05:77:67:8d:44:61:e1:fb:18:f7:e7:0e: 98:f0:10:47:3c:97:48:0a:6a:e0:d3:ae:40:75:65: 8b:90:6c:de:d5:a6:5a:de:0f:d4:cd:dc:a9:b8:c4: 5d:ec:8b:1d:14:8b:b0:26:32:82:38:a2:7b:c8:c2: ae:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C5:50:B8:2A:06:64:3B:69:46:86:FD:A2:B1:B4:3D:2A:A1:29:4B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/34352e38342e33392e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.39.0/24 Signature Algorithm: sha256WithRSAEncryption 55:60:90:d6:e7:35:35:3b:55:9b:c2:b6:98:ec:ea:d9:0a:15: 8f:89:80:82:36:8b:3e:c8:32:9f:c1:c2:c8:23:f9:5f:12:ef: 07:17:82:4f:94:9e:0e:d8:ad:4e:60:f1:30:90:a0:69:a2:70: fe:08:04:6b:18:d0:68:b0:38:30:6b:a2:b9:9d:9b:b8:14:39: d0:7b:9a:9e:16:cd:cb:ae:3a:1d:66:39:ad:1a:15:8f:04:e0: 2d:8b:93:df:74:ef:b9:e1:8f:5a:b1:c2:0a:f2:b2:12:70:e3: 89:2e:01:29:7a:59:0b:a5:eb:1b:42:e0:79:1a:97:c0:7a:a3: 3c:e7:09:15:b7:34:8e:5c:b0:08:74:6e:14:ef:ae:14:c2:82: 6d:49:5d:85:3f:e6:a2:d1:35:f7:4d:82:c3:70:9c:a9:24:d8: 30:10:27:62:01:cc:06:d4:d7:25:69:b9:d3:3d:6b:52:98:87: f1:7f:ac:9f:a1:66:54:d0:d3:2c:30:12:d3:f1:84:5e:ea:d7: c0:f9:c3:25:ff:4e:5b:94:8f:34:1f:f3:b5:76:4a:aa:a9:dc: 41:53:f9:3c:7d:bf:5e:bd:e1:d1:ad:84:5e:9c:ca:4f:a9:11: 88:7e:1d:08:f2:b1:ae:7c:4a:0f:66:e4:c0:18:ba:b3:96:f6: 43:b2:a4:8a -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHDsR40OPaCq3j5TwL9Pq70wiRAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDdaFw0yNjEyMjgwOTUxMDdaMDMxMTAvBgNV BAMTKDc0QzU1MEI4MkEwNjY0M0I2OTQ2ODZGREEyQjFCNDNEMkFBMTI5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxV8mjfZaSYqkkFkyoxzKQvEU3 8/0VvUcqIoAvxXF68Q9QNtoLpLrHPKZH8cBAyUePl1NsbbB/Gj5VJKXv12qcpQCU LAwh+d8Tn+UCztvpZ0t0NRcxxLjYbsYQjCIkLLZOgCL8ddKfN8mPgMvAF165N3xq J8rLga5UBqHGcI0v7hBEv19p00i+KbN4njdKNujZEgFFQeU/daLDm8aMU22FNGA/ nMiaobGqEfWp9/Pu+6y+jsS3DQc8axiTaPFAMlsyMPt9MAV3Z41EYeH7GPfnDpjw EEc8l0gKauDTrkB1ZYuQbN7VplreD9TN3Km4xF3six0Ui7AmMoI4onvIwq49AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUdMVQuCoGZDtpRob9orG0PSqhKUswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzQzNTJlMzgzNDJlMzMzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzMzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1U JzANBgkqhkiG9w0BAQsFAAOCAQEAVWCQ1uc1NTtVm8K2mOzq2QoVj4mAgjaLPsgy n8HCyCP5XxLvBxeCT5SeDtitTmDxMJCgaaJw/ggEaxjQaLA4MGuiuZ2buBQ50Hua nhbNy646HWY5rRoVjwTgLYuT33TvueGPWrHCCvKyEnDjiS4BKXpZC6XrG0LgeRqX wHqjPOcJFbc0jlywCHRuFO+uFMKCbUldhT/motE1902Cw3CcqSTYMBAnYgHMBtTX JWm50z1rUpiH8X+sn6FmVNDTLDAS0/GEXurXwPnDJf9OW5SPNB/ztXZKqqncQVP5 PH2/Xr3h0a2EXpzKT6kRiH4dCPKxrnxKD2bkwBi6s5b2Q7Kkig== -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:14 2026 by rpki-client