This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa File: 34352e38302e36302e302f32322d3234203d3e20323033303631.roa (raw, json) Hash identifier: PHaCxo8pd57uCPpN1qB8Vzs7Jeqbw44sRCxFv1SKiNg= Subject key identifier: 6B:A2:F0:A3:B5:A9:D3:43:47:CE:62:C0:8F:81:BB:1E:95:11:EB:FE Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 7FA1853D9E0594CEBE19E79ACC8018D47CEC53E6 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa Signing time: Mon 29 Dec 2025 09:50:30 +0000 ROA not before: Mon 29 Dec 2025 09:45:30 +0000 ROA not after: Mon 28 Dec 2026 09:50:30 +0000 asID: 203061 IP address blocks: 45.80.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a1:85:3d:9e:05:94:ce:be:19:e7:9a:cc:80:18:d4:7c:ec:53:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:30 2025 GMT Not After : Dec 28 09:50:30 2026 GMT Subject: CN=6BA2F0A3B5A9D34347CE62C08F81BB1E9511EBFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7d:83:e3:a1:bc:ea:db:7e:ac:5e:0e:37:e7: 87:44:92:11:58:64:1e:d7:9c:41:61:09:9a:b1:c3: c9:ad:2a:75:43:e5:ed:65:ac:03:59:e7:98:cc:f4: 16:a2:05:3f:a9:db:a2:c6:5e:cf:b9:e7:d0:58:12: f6:28:fb:b4:6d:2e:87:81:9d:2f:42:3a:e2:23:41: 6f:85:18:09:38:d3:85:fe:1d:8e:93:67:5a:05:aa: 0b:4d:ca:1b:f6:b1:2f:99:17:15:4b:8c:aa:f6:0b: e0:06:14:df:66:6d:3e:e2:dc:6c:dc:7d:f3:59:92: 81:dc:f6:c6:52:74:5d:2b:e3:7f:52:23:87:94:0c: 33:37:87:1c:48:ec:c2:d8:6f:6e:c9:6a:22:aa:8f: e6:3c:d0:e5:fa:a0:20:a0:b0:f8:94:fc:ee:eb:e6: ea:e9:5b:1d:b3:3a:71:20:55:88:ef:a6:36:ed:e9: d7:40:17:f0:60:28:1b:cd:e4:9a:b7:00:61:f4:df: a3:c5:28:c0:5d:c0:5a:df:60:bd:1f:ab:7a:4d:91: 8a:82:1b:4b:bd:8d:f0:e6:0e:aa:a7:58:df:5f:b8: 26:f7:6e:39:87:f7:3b:52:7e:62:b8:be:b0:3f:c7: 89:9f:e3:c4:78:b4:aa:fa:ae:c9:a7:68:a8:b4:f3: e8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A2:F0:A3:B5:A9:D3:43:47:CE:62:C0:8F:81:BB:1E:95:11:EB:FE X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e38302e36302e302f32322d3234203d3e20323033303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.60.0/22 Signature Algorithm: sha256WithRSAEncryption a5:1d:45:cf:31:3b:b0:72:44:a9:fa:5c:f3:d4:d9:1f:af:d9: 3b:54:32:53:1f:a1:76:25:20:ed:b8:9a:3e:35:70:d4:7b:22: 0e:a1:28:63:49:f6:7a:14:a8:ee:bd:06:1c:53:80:82:97:39: c5:3a:15:d6:65:ed:0e:76:03:96:9a:a7:b5:38:26:c5:76:64: b2:1d:09:a5:fe:b7:eb:2f:15:7f:e3:02:a2:11:f3:cf:6c:6b: b0:29:f1:5e:7c:d3:ba:1b:b1:0d:94:5d:7a:e1:ff:09:b5:5e: 1f:96:d4:0a:f8:a0:a4:5e:e6:c3:24:08:04:86:e4:95:7b:07: 6b:5a:9b:6e:e3:f7:01:11:6d:da:25:26:c3:87:7c:db:ff:dd: 65:bb:59:18:d6:7e:f8:88:40:41:26:9d:08:cd:dc:d3:af:10: ec:a9:d8:cc:09:82:d2:c0:e8:d4:2d:f2:be:d5:61:69:28:4b: 4e:10:50:48:15:c1:80:cb:2e:7d:72:4a:d4:ec:4e:fc:83:e1: 25:e1:25:bc:e2:05:c1:7c:0a:d6:9b:9c:20:06:9c:98:44:f8: a1:17:cf:d0:cc:31:c1:0f:35:f7:d1:a8:c0:65:29:1d:41:bd: f4:5d:b4:8b:ab:78:16:65:9e:03:98:5d:4a:08:45:44:68:f0: c2:fd:e6:b7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUf6GFPZ4FlM6+GeeazIAY1HzsU+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MzBaFw0yNjEyMjgwOTUwMzBaMDMxMTAvBgNV BAMTKDZCQTJGMEEzQjVBOUQzNDM0N0NFNjJDMDhGODFCQjFFOTUxMUVCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKfYPjobzq236sXg4354dEkhFY ZB7XnEFhCZqxw8mtKnVD5e1lrANZ55jM9BaiBT+p26LGXs+559BYEvYo+7RtLoeB nS9COuIjQW+FGAk404X+HY6TZ1oFqgtNyhv2sS+ZFxVLjKr2C+AGFN9mbT7i3Gzc ffNZkoHc9sZSdF0r439SI4eUDDM3hxxI7MLYb27JaiKqj+Y80OX6oCCgsPiU/O7r 5urpWx2zOnEgVYjvpjbt6ddAF/BgKBvN5Jq3AGH036PFKMBdwFrfYL0fq3pNkYqC G0u9jfDmDqqnWN9fuCb3bjmH9ztSfmK4vrA/x4mf48R4tKr6rsmnaKi08+h5AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUa6Lwo7Wp00NHzmLAj4G7HpUR6/4wHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzgzMDJlMzYzMDJl MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzYzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi1Q PDANBgkqhkiG9w0BAQsFAAOCAQEApR1FzzE7sHJEqfpc89TZH6/ZO1QyUx+hdiUg 7biaPjVw1HsiDqEoY0n2ehSo7r0GHFOAgpc5xToV1mXtDnYDlpqntTgmxXZksh0J pf636y8Vf+MCohHzz2xrsCnxXnzTuhuxDZRdeuH/CbVeH5bUCvigpF7mwyQIBIbk lXsHa1qbbuP3ARFt2iUmw4d82//dZbtZGNZ++IhAQSadCM3c068Q7KnYzAmC0sDo 1C3yvtVhaShLThBQSBXBgMsufXJK1OxO/IPhJeElvOIFwXwK1pucIAacmET4oRfP 0MwxwQ8199GowGUpHUG99F20i6t4FmWeA5hdSghFRGjwwv3mtw== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:58 2026 by rpki-client