This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa File: 34352e382e3133322e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: zEr7Z1suwAdTKHYC0htF6T8/a6Alx1esDXNilQRvJoM= Subject key identifier: FE:1D:F5:4F:35:20:EF:84:31:26:8F:17:66:C8:90:15:3F:B1:7E:F0 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 10FF722477D639910317A3C4065749043511369A Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:27 +0000 ROA not before: Mon 29 Dec 2025 09:45:27 +0000 ROA not after: Mon 28 Dec 2026 09:50:27 +0000 asID: 51167 IP address blocks: 45.8.132.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:47:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:ff:72:24:77:d6:39:91:03:17:a3:c4:06:57:49:04:35:11:36:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:27 2025 GMT Not After : Dec 28 09:50:27 2026 GMT Subject: CN=FE1DF54F3520EF8431268F1766C890153FB17EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7b:7f:ed:5d:41:bf:35:ce:7d:a8:37:98:6d: 4f:32:32:4f:79:bf:0b:4b:be:ee:66:06:d8:33:49: 7a:8e:ea:61:ae:e8:03:5b:87:b2:72:97:4d:77:aa: 94:2a:11:70:5d:84:40:7a:19:c5:a6:e6:61:e2:72: 4a:c1:2b:50:b6:11:8a:06:09:ed:dc:a9:7b:07:df: 5e:91:b1:2c:64:34:c0:78:d2:dc:11:3b:8e:20:38: 41:65:29:f1:c0:0f:92:2a:fc:b1:09:30:ed:bb:9b: 64:aa:14:ea:04:c3:e0:e0:3a:b4:b0:f4:43:7a:5b: 86:27:2b:14:7c:d9:60:de:35:28:41:e2:7d:87:66: 15:09:1b:48:43:e3:52:e3:89:a2:7b:1e:7e:41:cd: 38:64:25:6a:81:4a:e9:e8:f6:01:f5:fd:b8:e3:ef: a8:6d:cc:0b:cb:3d:50:dd:e6:23:7e:91:f9:a6:c3: e2:aa:68:76:d0:0f:85:c8:eb:39:9e:4f:1a:d9:cc: 59:3a:35:a7:51:67:47:5b:5e:9d:71:22:0d:9b:07: 36:70:2a:32:b5:d2:ff:a9:94:6b:03:bd:59:6e:28: 03:52:50:f3:3c:50:14:35:9c:6e:32:a9:ae:d4:87: d4:46:c0:40:b0:3f:fb:0c:2e:21:c2:02:b4:bf:e5: ba:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:F5:4F:35:20:EF:84:31:26:8F:17:66:C8:90:15:3F:B1:7E:F0 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e382e3133322e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.132.0/23 Signature Algorithm: sha256WithRSAEncryption b1:55:c5:43:96:23:94:8e:3e:e1:c4:87:98:68:90:77:10:5b: cd:22:b9:cc:20:a4:f4:53:3a:85:42:a4:e0:51:b2:75:f4:d1: a4:fa:cc:4f:e8:86:fd:89:b6:94:7a:46:0c:81:da:40:64:63: 6e:e8:89:06:76:b7:89:1c:9a:76:11:6e:49:02:28:cb:13:44: 66:16:96:88:25:5c:22:b1:23:a5:1f:21:a5:d0:e7:bc:76:61: 05:d2:d3:62:f8:8e:2f:66:24:c9:1b:28:31:35:d8:7f:7f:47: 71:ff:97:59:7d:88:87:3e:98:c1:6e:f0:94:ff:ea:8e:58:eb: a3:4e:6c:e0:0c:a0:12:05:ec:e3:a1:97:e7:e3:f5:6c:4e:92: 59:0c:ea:8c:2e:0b:a7:46:59:09:fa:c3:2a:2c:1c:eb:13:db: bf:dd:b4:40:b3:06:e8:b6:db:78:2e:d7:ba:82:c8:03:c0:5b: 0a:04:de:c2:d7:26:f4:9b:d5:c9:55:4e:4a:4a:12:a2:5f:0e: 2e:a2:51:cf:b1:1f:7a:06:08:ec:fd:d7:b6:8d:e0:39:f4:d7: f6:31:ce:d6:ff:0c:0a:bc:f8:1a:f4:52:7e:ee:d3:b2:fb:6c: 8a:4e:a0:f0:c9:db:f4:6b:a6:c3:36:3d:ca:fe:84:0d:34:77: a5:ee:dc:75 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUEP9yJHfWOZEDF6PEBldJBDURNpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjdaFw0yNjEyMjgwOTUwMjdaMDMxMTAvBgNV BAMTKEZFMURGNTRGMzUyMEVGODQzMTI2OEYxNzY2Qzg5MDE1M0ZCMTdFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZe3/tXUG/Nc59qDeYbU8yMk95 vwtLvu5mBtgzSXqO6mGu6ANbh7Jyl013qpQqEXBdhEB6GcWm5mHickrBK1C2EYoG Ce3cqXsH316RsSxkNMB40twRO44gOEFlKfHAD5Iq/LEJMO27m2SqFOoEw+DgOrSw 9EN6W4YnKxR82WDeNShB4n2HZhUJG0hD41LjiaJ7Hn5BzThkJWqBSuno9gH1/bjj 76htzAvLPVDd5iN+kfmmw+KqaHbQD4XI6zmeTxrZzFk6NadRZ0dbXp1xIg2bBzZw KjK10v+plGsDvVluKANSUPM8UBQ1nG4yqa7Uh9RGwECwP/sMLiHCArS/5bohAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/h31TzUg74QxJo8XZsiQFT+xfvAwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzgyZTMxMzMzMjJl MzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtCIQw DQYJKoZIhvcNAQELBQADggEBALFVxUOWI5SOPuHEh5hokHcQW80iucwgpPRTOoVC pOBRsnX00aT6zE/ohv2JtpR6RgyB2kBkY27oiQZ2t4kcmnYRbkkCKMsTRGYWlogl XCKxI6UfIaXQ57x2YQXS02L4ji9mJMkbKDE12H9/R3H/l1l9iIc+mMFu8JT/6o5Y 66NObOAMoBIF7OOhl+fj9WxOklkM6owuC6dGWQn6wyosHOsT27/dtECzBui223gu 17qCyAPAWwoE3sLXJvSb1clVTkpKEqJfDi6iUc+xH3oGCOz917aN4Dn01/Yxztb/ DAq8+Br0Un7u07L7bIpOoPDJ2/RrpsM2Pcr+hA00d6Xu3HU= -----END CERTIFICATE-----Generated at Tue Feb 10 06:09:54 2026 by rpki-client