This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32332d3234203d3e20383334.roa File: 3231322e37342e34382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: NBsNdLeGDIHFmJPXpfv8ctHW62a7aEFb/J/Nyw0BF28= Subject key identifier: AA:36:FB:23:10:69:67:B9:D8:52:D2:C5:0D:CB:EF:0B:C7:4F:9D:9B Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1A1F59E116BC96E469AA0888BE57CA75BF7DFB92 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32332d3234203d3e20383334.roa Signing time: Sat 24 Jan 2026 02:41:48 +0000 ROA not before: Sat 24 Jan 2026 02:36:48 +0000 ROA not after: Sat 23 Jan 2027 02:41:48 +0000 asID: 834 IP address blocks: 212.74.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1f:59:e1:16:bc:96:e4:69:aa:08:88:be:57:ca:75:bf:7d:fb:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 24 02:36:48 2026 GMT Not After : Jan 23 02:41:48 2027 GMT Subject: CN=AA36FB23106967B9D852D2C50DCBEF0BC74F9D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4f:e1:f4:2c:7e:52:99:d6:e1:1c:cc:78:7f: e5:ef:f3:bf:91:0b:ac:dc:ac:9a:ec:8f:e0:9b:f7: 19:f9:cd:f9:e1:86:d8:4d:a4:b4:74:26:9b:f7:67: 1c:26:a1:64:da:63:da:97:05:e3:2c:b5:ac:9d:2c: 84:e3:2b:32:d1:44:a9:19:98:22:38:d0:2c:62:87: 50:f3:ca:53:7f:ac:3e:8a:da:ae:75:6f:76:07:84: b7:c2:9d:11:60:75:fe:3b:1b:31:b4:4e:25:d7:4a: c5:c8:8b:bc:de:58:7d:ee:4b:20:22:3e:00:53:4f: b9:0c:50:81:84:0c:bb:11:f8:c0:99:d1:6c:c3:0b: 61:28:fa:eb:0c:79:a1:17:0a:c3:1d:47:d7:5a:f1: 47:f1:c8:e7:ea:74:91:71:61:1c:39:46:3c:fe:a7: 8f:28:5b:a0:42:cb:33:13:de:7d:82:de:7b:e5:69: c9:8d:fb:0d:58:74:4f:9a:37:b4:60:23:d5:6e:4f: 3a:66:19:b6:6b:ca:2f:51:8c:a1:24:9c:a9:08:6e: 0f:71:7d:74:47:6c:58:3e:d6:b5:27:6c:4b:64:ab: 71:73:65:17:04:7d:6f:6e:25:4a:2b:2a:9a:a4:c5: 26:25:fa:12:40:87:16:dc:f7:2c:a4:ee:dc:4e:e2: c7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:36:FB:23:10:69:67:B9:D8:52:D2:C5:0D:CB:EF:0B:C7:4F:9D:9B X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e34382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.48.0/23 Signature Algorithm: sha256WithRSAEncryption cf:52:33:9c:e3:9b:00:ce:48:dd:e4:7d:2a:89:b4:ae:78:5a: e1:62:2f:56:42:45:96:5e:f5:47:db:82:04:9d:66:81:e4:36: 68:83:77:fa:72:6f:12:21:94:f5:fc:26:44:14:9a:45:9d:31: 54:96:e6:33:88:21:d5:97:25:4a:fa:74:30:8f:40:f4:66:a6: 51:9f:21:8b:d5:e5:3f:40:87:8c:a3:0c:e2:34:3d:ae:2e:26: 84:f8:ea:02:6f:78:49:f5:ab:ba:cc:15:bd:be:06:c9:58:a1: d7:66:42:ad:5c:c1:9b:ec:f2:91:b8:c4:5f:be:61:fa:8e:5e: 10:3f:e4:ed:0c:b8:60:2d:9d:ae:12:22:4b:1d:9f:23:66:a9: 35:d4:67:2f:15:3b:21:f8:02:63:d8:41:be:2f:c2:02:0b:39: b7:03:56:f2:df:d4:07:94:57:5a:76:90:fe:89:41:8f:68:54: 68:32:10:44:6d:77:90:96:a6:2c:01:f2:e2:d2:8f:5e:89:7d: 52:d4:a3:f9:45:c0:ba:0d:82:f4:40:37:f6:58:47:fe:66:1c: f0:ac:27:0c:92:e8:fa:00:f1:d9:51:34:87:eb:8d:85:2c:c1: d2:59:72:98:be:f3:e0:f0:84:31:00:7f:11:46:a9:b4:02:e7: 09:10:cf:6a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUGh9Z4Ra8luRpqgiIvlfKdb99+5IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjQwMjM2NDhaFw0yNzAxMjMwMjQxNDhaMDMxMTAvBgNV BAMTKEFBMzZGQjIzMTA2OTY3QjlEODUyRDJDNTBEQ0JFRjBCQzc0RjlEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXT+H0LH5SmdbhHMx4f+Xv87+R C6zcrJrsj+Cb9xn5zfnhhthNpLR0Jpv3ZxwmoWTaY9qXBeMstaydLITjKzLRRKkZ mCI40Cxih1DzylN/rD6K2q51b3YHhLfCnRFgdf47GzG0TiXXSsXIi7zeWH3uSyAi PgBTT7kMUIGEDLsR+MCZ0WzDC2Eo+usMeaEXCsMdR9da8UfxyOfqdJFxYRw5Rjz+ p48oW6BCyzMT3n2C3nvlacmN+w1YdE+aN7RgI9VuTzpmGbZryi9RjKEknKkIbg9x fXRHbFg+1rUnbEtkq3FzZRcEfW9uJUorKpqkxSYl+hJAhxbc9yyk7txO4se3AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUqjb7IxBpZ7nYUtLFDcvvC8dPnZswHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNDM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1EowMA0G CSqGSIb3DQEBCwUAA4IBAQDPUjOc45sAzkjd5H0qibSueFrhYi9WQkWWXvVH24IE nWaB5DZog3f6cm8SIZT1/CZEFJpFnTFUluYziCHVlyVK+nQwj0D0ZqZRnyGL1eU/ QIeMowziND2uLiaE+OoCb3hJ9au6zBW9vgbJWKHXZkKtXMGb7PKRuMRfvmH6jl4Q P+TtDLhgLZ2uEiJLHZ8jZqk11GcvFTsh+AJj2EG+L8ICCzm3A1by39QHlFdadpD+ iUGPaFRoMhBEbXeQlqYsAfLi0o9eiX1S1KP5RcC6DYL0QDf2WEf+ZhzwrCcMkuj6 APHZUTSH642FLMHSWXKYvvPg8IQxAH8RRqm0AucJEM9q -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:50 2026 by rpki-client