This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31332e37322e302f32322d3234203d3e20323033303631.roa File: 34352e31332e37322e302f32322d3234203d3e20323033303631.roa (raw, json) Hash identifier: aQg3IpJVJ1ZYULYqrFg/SVCHWeY1RM6604YV6IudkWs= Subject key identifier: DC:05:76:A2:6B:C7:2A:F1:AD:3C:F7:98:8A:73:A3:82:73:E1:D8:CA Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 5DAD3D52B8B72035D719EA5AC893CFB63E0A4621 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31332e37322e302f32322d3234203d3e20323033303631.roa Signing time: Mon 29 Dec 2025 09:50:26 +0000 ROA not before: Mon 29 Dec 2025 09:45:26 +0000 ROA not after: Mon 28 Dec 2026 09:50:26 +0000 asID: 203061 IP address blocks: 45.13.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ad:3d:52:b8:b7:20:35:d7:19:ea:5a:c8:93:cf:b6:3e:0a:46:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:26 2025 GMT Not After : Dec 28 09:50:26 2026 GMT Subject: CN=DC0576A26BC72AF1AD3CF7988A73A38273E1D8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f7:ae:00:08:ea:0e:97:9d:11:c6:68:29:10: c4:09:87:b7:c7:36:6c:56:66:e0:d8:81:27:9a:8c: 0b:da:bf:0c:32:23:51:54:2b:9e:a8:a6:83:2d:95: de:41:ef:13:8c:d3:00:42:1b:27:8d:62:7a:06:e5: f3:35:c0:9c:0f:85:c4:ce:b7:8b:9a:3b:a8:ac:9a: 69:7c:c8:59:ca:1d:c3:29:1c:41:20:5e:17:4c:48: 63:5a:c0:9c:49:02:df:eb:73:4c:0f:f2:7c:1c:34: 85:10:5e:0f:3f:fd:6a:8d:8c:7d:1f:48:42:8c:a4: 8f:fb:60:1e:70:3f:63:63:64:6f:74:e6:ee:55:36: cb:1d:d5:df:05:7d:0b:50:5c:2b:78:8e:09:39:b1: bb:5e:d3:1c:39:c6:30:6c:a7:d3:2b:3d:5c:bd:9e: fd:6c:87:ed:39:70:73:3b:42:d2:2c:f6:21:64:5d: b5:ed:e0:13:32:73:57:33:fb:9d:f6:0a:30:cb:5a: fd:e9:a5:55:64:11:80:ca:8a:56:0a:07:00:42:b7: 69:d2:33:73:74:30:0e:d5:3b:e5:ac:25:bf:6c:16: d4:16:48:83:c8:b1:f1:41:25:c4:36:4c:e3:d9:89: cf:d1:86:0a:4a:ac:34:32:4c:58:3d:91:3b:a7:94: 2d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:05:76:A2:6B:C7:2A:F1:AD:3C:F7:98:8A:73:A3:82:73:E1:D8:CA X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e31332e37322e302f32322d3234203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.72.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:33:fd:61:2c:d1:97:1f:83:79:bb:18:64:0f:d8:1b:c0:b1: a8:a8:cb:63:67:c3:42:04:a5:aa:a4:2c:87:12:77:65:d1:08: 3e:56:1d:e1:af:38:81:7d:2d:76:ab:0f:c7:47:61:d1:40:84: ab:a0:8a:84:87:eb:f8:41:f9:37:a2:a3:6f:44:1f:c7:c5:3b: dc:db:a5:5d:4c:5c:c8:0f:a2:a7:18:ca:f0:a4:8b:bd:17:18: bc:30:f3:e5:49:c2:e7:1b:b9:d0:6e:ef:7d:4d:b8:d3:5c:23: a9:f1:39:55:c6:0c:82:20:e1:cb:8d:57:5d:fa:fa:b7:f5:bf: 3c:f1:f4:48:84:9c:29:8d:7c:39:15:71:d9:cb:af:4e:2e:8f: c9:9c:9c:5b:e2:3a:55:53:10:e6:4f:54:e6:0b:e4:30:14:0c: 9d:2b:1a:8a:b1:71:de:e6:d2:b6:83:65:86:41:93:cd:a9:ce: 76:27:93:a7:54:dd:74:02:05:5a:fc:de:56:9a:99:92:ed:4f: cb:e1:78:00:3a:bb:9f:14:37:2d:f0:55:4b:b1:bd:26:56:11: 8f:73:77:aa:ed:79:ef:5e:66:a6:93:0a:d7:79:7f:fe:4e:66: 95:1a:3d:b2:1e:4d:f2:ad:ab:2d:a7:7b:1f:f5:f8:54:dd:8c: de:59:0e:aa -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUXa09Uri3IDXXGepayJPPtj4KRiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjZaFw0yNjEyMjgwOTUwMjZaMDMxMTAvBgNV BAMTKERDMDU3NkEyNkJDNzJBRjFBRDNDRjc5ODhBNzNBMzgyNzNFMUQ4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+964ACOoOl50RxmgpEMQJh7fH NmxWZuDYgSeajAvavwwyI1FUK56opoMtld5B7xOM0wBCGyeNYnoG5fM1wJwPhcTO t4uaO6ismml8yFnKHcMpHEEgXhdMSGNawJxJAt/rc0wP8nwcNIUQXg8//WqNjH0f SEKMpI/7YB5wP2NjZG905u5VNssd1d8FfQtQXCt4jgk5sbte0xw5xjBsp9MrPVy9 nv1sh+05cHM7QtIs9iFkXbXt4BMyc1cz+532CjDLWv3ppVVkEYDKilYKBwBCt2nS M3N0MA7VO+WsJb9sFtQWSIPIsfFBJcQ2TOPZic/RhgpKrDQyTFg9kTunlC1tAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU3AV2omvHKvGtPPeYinOjgnPh2MowHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzMzJlMzczMjJl MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi0N SDANBgkqhkiG9w0BAQsFAAOCAQEAWjP9YSzRlx+DebsYZA/YG8CxqKjLY2fDQgSl qqQshxJ3ZdEIPlYd4a84gX0tdqsPx0dh0UCEq6CKhIfr+EH5N6Kjb0Qfx8U73Nul XUxcyA+ipxjK8KSLvRcYvDDz5UnC5xu50G7vfU2401wjqfE5VcYMgiDhy41XXfr6 t/W/PPH0SIScKY18ORVx2cuvTi6PyZycW+I6VVMQ5k9U5gvkMBQMnSsairFx3ubS toNlhkGTzanOdieTp1TddAIFWvzeVpqZku1Py+F4ADq7nxQ3LfBVS7G9JlYRj3N3 qu15715mppMK13l//k5mlRo9sh5N8q2rLad7H/X4VN2M3lkOqg== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:58 2026 by rpki-client