This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38322e302f32342d3332203d3e20313336373837.roa File: 34352e3134342e38322e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: cta+ShLu6hMjE3U+2bEZP9eA6qWfMcFD8r7FPyRqlXA= Subject key identifier: EB:DF:12:77:E8:E4:93:B1:E1:36:01:F7:EC:79:B2:A7:91:37:0C:B5 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 40EB93A6AD1DFE8FB769E8D096C7334D9DA091FA Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38322e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:26 +0000 ROA not before: Mon 29 Dec 2025 09:45:26 +0000 ROA not after: Mon 28 Dec 2026 09:50:26 +0000 asID: 136787 IP address blocks: 45.144.82.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:eb:93:a6:ad:1d:fe:8f:b7:69:e8:d0:96:c7:33:4d:9d:a0:91:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:26 2025 GMT Not After : Dec 28 09:50:26 2026 GMT Subject: CN=EBDF1277E8E493B1E13601F7EC79B2A791370CB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:ff:24:cf:d6:4e:40:7b:b8:4c:71:55:b3: bf:d2:81:09:1e:44:e1:03:78:19:91:63:5f:94:be: f2:fb:de:d3:1d:4a:fd:98:5c:18:84:6e:da:72:67: 96:b5:6d:6d:b9:75:54:52:a3:dd:92:36:49:37:f6: 3d:72:db:a8:c8:14:c0:5e:79:c7:ce:1a:25:57:f1: 6b:7a:b2:b2:0b:6e:09:9b:bf:e0:8b:11:50:8a:55: 99:e2:e2:25:2a:5d:6c:02:40:8f:57:90:af:90:8e: f1:d8:05:f7:4c:ca:34:c3:43:1c:87:61:43:0a:fe: b5:1b:24:2f:d3:6a:fc:30:6d:3d:4c:f2:75:70:a1: 10:e7:f9:f3:64:25:a6:ac:17:bd:c4:d1:02:06:fc: 7b:89:04:6c:2d:ad:63:9d:af:4b:96:4d:7a:17:88: b2:7b:79:cf:15:d8:2c:2b:48:0a:39:44:56:11:42: 21:97:8f:38:0d:2b:78:1a:d8:52:88:b7:eb:a7:4e: 36:ed:0c:20:e1:82:87:c9:7f:3f:0c:82:98:82:0e: a3:cf:c9:e1:c6:60:50:fb:e9:3e:84:dc:bf:2c:06: ea:91:5f:f3:4b:97:9f:8c:11:6f:ba:b5:df:bd:79: e9:0a:5e:e4:b9:f3:04:09:ab:ec:48:c0:90:43:d7: 40:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DF:12:77:E8:E4:93:B1:E1:36:01:F7:EC:79:B2:A7:91:37:0C:B5 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38322e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.82.0/24 Signature Algorithm: sha256WithRSAEncryption 42:d7:5b:72:a9:6f:f1:89:42:11:2f:1d:e8:d0:80:13:ad:2d: f8:bd:36:30:f7:a0:b8:64:6b:23:2a:af:60:71:d0:6f:e0:be: 52:b6:0a:7b:a8:50:63:c0:e4:3d:1a:6a:27:53:f2:2e:67:54: ea:a3:d2:19:30:82:26:1f:d5:69:54:b7:55:56:bf:ce:f2:3b: 15:3d:9e:be:14:9e:9a:cf:47:ce:74:bc:b3:b7:b8:55:eb:88: 8a:bf:66:76:cd:cd:82:b9:75:fd:ac:8e:b7:9b:9a:4b:c7:fa: 7b:d1:b4:1a:5b:f5:32:58:f4:61:37:dc:86:43:14:dc:c3:c9: b1:2e:db:9b:91:c8:8e:8a:ef:94:4c:2c:e0:04:bd:ea:59:c7: fb:56:e8:a9:68:ae:05:53:7e:d9:d5:d5:02:80:f7:0f:7f:ee: d1:52:12:67:f5:49:ec:d7:52:57:b7:c8:e9:28:2e:0e:65:c1: d6:8a:ad:9c:27:9f:74:e7:d3:cc:44:60:5e:92:04:31:c4:08: ce:ba:54:e4:26:16:a1:f3:09:2c:3b:be:39:cf:e0:f7:ff:da: 17:0f:c9:dc:19:af:83:3d:e6:ca:36:25:74:d8:8f:3f:40:bd: cc:e5:7e:92:45:4e:b8:9e:f8:ce:f2:3e:1e:51:11:cc:98:06: a1:30:85:73 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUQOuTpq0d/o+3aejQlsczTZ2gkfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjZaFw0yNjEyMjgwOTUwMjZaMDMxMTAvBgNV BAMTKEVCREYxMjc3RThFNDkzQjFFMTM2MDFGN0VDNzlCMkE3OTEzNzBDQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1H/8kz9ZOQHu4THFVs7/SgQke ROEDeBmRY1+UvvL73tMdSv2YXBiEbtpyZ5a1bW25dVRSo92SNkk39j1y26jIFMBe ecfOGiVX8Wt6srILbgmbv+CLEVCKVZni4iUqXWwCQI9XkK+QjvHYBfdMyjTDQxyH YUMK/rUbJC/TavwwbT1M8nVwoRDn+fNkJaasF73E0QIG/HuJBGwtrWOdr0uWTXoX iLJ7ec8V2CwrSAo5RFYRQiGXjzgNK3ga2FKIt+unTjbtDCDhgofJfz8MgpiCDqPP yeHGYFD76T6E3L8sBuqRX/NLl5+MEW+6td+9eekKXuS58wQJq+xIwJBD10BhAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU698Sd+jkk7HhNgH37Hmyp5E3DLUwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzNDM0MmUzODMy MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZBSMA0GCSqGSIb3DQEBCwUAA4IBAQBC11tyqW/xiUIRLx3o0IATrS34vTYw96C4 ZGsjKq9gcdBv4L5Stgp7qFBjwOQ9GmonU/IuZ1Tqo9IZMIImH9VpVLdVVr/O8jsV PZ6+FJ6az0fOdLyzt7hV64iKv2Z2zc2CuXX9rI63m5pLx/p70bQaW/UyWPRhN9yG QxTcw8mxLtubkciOiu+UTCzgBL3qWcf7VuipaK4FU37Z1dUCgPcPf+7RUhJn9Uns 11JXt8jpKC4OZcHWiq2cJ59059PMRGBekgQxxAjOulTkJhah8wksO745z+D3/9oX D8ncGa+DPebKNiV02I8/QL3M5X6SRU64nvjO8j4eURHMmAahMIVz -----END CERTIFICATE-----Generated at Mon Jan 19 20:02:30 2026 by rpki-client