This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34372e302f32342d3234203d3e20323134303235.roa File: 3231322e37342e34372e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: QUam6dtPdQjKjFQYRuAAmioM+BlzwP9YsrlnyjvNZ4M= Subject key identifier: AE:79:EF:1F:F0:C4:20:DF:75:21:FA:76:57:27:22:A9:C7:FF:94:A1 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 2208E2FFDDA75BB427297CC97CC39BA9C3A2586B Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34372e302f32342d3234203d3e20323134303235.roa Signing time: Wed 21 Jan 2026 02:58:16 +0000 ROA not before: Wed 21 Jan 2026 02:53:16 +0000 ROA not after: Wed 20 Jan 2027 02:58:16 +0000 asID: 214025 IP address blocks: 212.74.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:08:e2:ff:dd:a7:5b:b4:27:29:7c:c9:7c:c3:9b:a9:c3:a2:58:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 21 02:53:16 2026 GMT Not After : Jan 20 02:58:16 2027 GMT Subject: CN=AE79EF1FF0C420DF7521FA76572722A9C7FF94A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:13:96:f3:1a:91:bb:63:78:9a:53:06:d2: 4a:ab:81:d6:67:d6:33:50:04:ce:9a:bf:02:3a:1b: af:f2:8b:98:75:39:3c:54:50:61:b2:fe:f8:5d:ea: 31:f8:ba:69:c2:c3:42:db:c8:4b:9e:c9:0f:65:d3: f2:12:e9:93:d6:2d:c0:6d:27:e7:bf:11:1e:d5:d9: 43:0e:84:f0:0b:df:87:24:70:26:8f:9a:05:e8:ac: 1f:04:ef:3c:55:8c:ce:62:07:78:73:73:db:1a:d6: 26:83:cc:d8:f3:ed:a3:50:13:08:23:8d:94:d5:ed: ba:a3:bc:a3:7c:a4:52:32:d5:0b:6c:be:c5:87:16: 80:ff:69:4f:e6:ae:62:16:ba:3b:12:23:57:21:10: 96:63:7c:f0:e8:80:16:38:f9:ba:bd:ad:e9:8f:3d: e6:a1:29:41:b9:49:b6:1b:45:0c:4c:65:51:1b:ef: bf:30:c2:2a:57:b6:8d:8e:59:eb:5a:83:f5:dd:51: 84:71:8d:3e:3f:e3:7f:e1:ca:55:da:53:10:7f:32: 03:f8:10:a9:49:0e:7d:ff:df:22:52:7b:91:b4:85: 11:a4:47:01:98:12:6f:bf:17:7e:3a:69:d1:1d:cc: a5:9f:57:14:94:47:51:9e:e3:75:88:20:8c:ee:58: 9f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:EF:1F:F0:C4:20:DF:75:21:FA:76:57:27:22:A9:C7:FF:94:A1 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34372e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.47.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:d5:95:f1:89:23:00:28:bc:35:84:a2:2b:83:c6:9a:bb:4c: ae:bb:fe:b5:b0:04:ec:a0:62:b5:78:db:98:51:7f:56:96:15: 9c:b8:4c:a4:20:2a:6a:89:5a:6e:8a:09:ac:e7:db:db:d8:88: 10:aa:a9:55:f4:ed:3c:30:9b:ed:43:22:65:7a:0b:cb:95:ed: f8:4e:1c:ff:73:a7:8c:a0:b5:0e:57:01:57:ef:7f:a2:1e:c1: 10:9b:ec:c4:67:40:6f:ce:c2:64:71:9d:9d:32:3a:4d:39:5c: 16:70:99:c8:28:27:58:df:9a:d0:1d:bb:ae:69:4d:a6:8b:25: 1c:fc:c2:36:fa:0e:82:49:8a:96:84:01:e1:f0:06:6d:f2:0a: 53:f0:69:ac:70:4a:74:3f:d7:5a:d5:c1:5b:05:66:30:e5:0a: 96:7a:1b:c8:07:48:d4:0b:70:95:eb:a9:36:61:9e:da:7d:9f: e7:12:9a:fe:54:1e:c7:97:3b:0e:d1:7f:e7:a2:1c:19:33:a8: 3c:86:13:02:8f:19:60:99:16:f2:59:dc:4c:27:d7:b7:db:02: 4f:c4:6c:ec:d7:57:db:de:1e:40:88:71:67:83:0f:8a:e7:9e: 5c:97:e7:5c:ea:15:9a:52:07:d1:52:bc:41:0d:2f:b9:a0:1f: db:55:f0:c3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIgji/92nW7QnKXzJfMObqcOiWGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjEwMjUzMTZaFw0yNzAxMjAwMjU4MTZaMDMxMTAvBgNV BAMTKEFFNzlFRjFGRjBDNDIwREY3NTIxRkE3NjU3MjcyMkE5QzdGRjk0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFihOW8xqRu2N4mlMG0kqrgdZn 1jNQBM6avwI6G6/yi5h1OTxUUGGy/vhd6jH4umnCw0LbyEueyQ9l0/IS6ZPWLcBt J+e/ER7V2UMOhPAL34ckcCaPmgXorB8E7zxVjM5iB3hzc9sa1iaDzNjz7aNQEwgj jZTV7bqjvKN8pFIy1QtsvsWHFoD/aU/mrmIWujsSI1chEJZjfPDogBY4+bq9remP PeahKUG5SbYbRQxMZVEb778wwipXto2OWetag/XdUYRxjT4/43/hylXaUxB/MgP4 EKlJDn3/3yJSe5G0hRGkRwGYEm+/F346adEdzKWfVxSUR1Ge43WIIIzuWJ+tAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrnnvH/DEIN91Ifp2Vyciqcf/lKEwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzAzMjM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1EovMA0GCSqGSIb3DQEBCwUAA4IBAQA81ZXxiSMAKLw1hKIrg8aau0yuu/61sATs oGK1eNuYUX9WlhWcuEykICpqiVpuigms59vb2IgQqqlV9O08MJvtQyJlegvLle34 Thz/c6eMoLUOVwFX73+iHsEQm+zEZ0BvzsJkcZ2dMjpNOVwWcJnIKCdY35rQHbuu aU2miyUc/MI2+g6CSYqWhAHh8AZt8gpT8GmscEp0P9da1cFbBWYw5QqWehvIB0jU C3CV66k2YZ7afZ/nEpr+VB7HlzsO0X/nohwZM6g8hhMCjxlgmRbyWdxMJ9e32wJP xGzs11fb3h5AiHFngw+K555cl+dc6hWaUgfRUrxBDS+5oB/bVfDD -----END CERTIFICATE-----Generated at Sun Jan 25 16:39:14 2026 by rpki-client