This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35302e302f32342d3234203d3e20323133373334.roa File: 3231322e37342e35302e302f32342d3234203d3e20323133373334.roa (raw, json) Hash identifier: qJc5nJLjeG10vxx32AruX7BikP7bysjNYKtkXo374xQ= Subject key identifier: 5D:31:7E:A1:7C:DB:CC:EC:32:65:3E:3E:E8:E7:BB:8B:CC:32:34:B0 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 228467EE4538D24BB975F6AD808304DFA7A0F7D4 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35302e302f32342d3234203d3e20323133373334.roa Signing time: Sat 24 Jan 2026 02:38:56 +0000 ROA not before: Sat 24 Jan 2026 02:33:56 +0000 ROA not after: Sat 23 Jan 2027 02:38:56 +0000 asID: 213734 IP address blocks: 212.74.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:84:67:ee:45:38:d2:4b:b9:75:f6:ad:80:83:04:df:a7:a0:f7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 24 02:33:56 2026 GMT Not After : Jan 23 02:38:56 2027 GMT Subject: CN=5D317EA17CDBCCEC32653E3EE8E7BB8BCC3234B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:02:3b:18:62:33:04:7d:4f:c9:c1:05:bd:4d: ae:89:24:fe:10:f5:a7:26:0e:cb:c1:54:6c:05:b1: ec:0e:8c:61:c6:fe:2d:60:36:8a:b6:45:4d:91:d7: 3c:02:1b:50:cd:71:7f:15:f0:a7:f3:92:9b:3e:86: b8:3b:b2:58:3a:1a:f5:a9:a0:d6:30:59:d2:b7:6e: 17:18:7b:c3:fa:f8:54:78:b3:da:98:c8:1a:54:f8: cd:bb:5f:c2:77:84:e2:a0:31:6b:3a:81:6f:6b:10: 44:ce:66:dd:23:ac:a7:fa:e5:e2:0d:46:2a:2c:14: b2:2a:86:39:e3:a3:e0:8f:a3:11:33:2f:db:db:b3: ce:79:38:2d:33:9c:0f:af:c6:f1:84:a5:16:dc:6a: c7:08:16:0c:8b:e7:01:c2:95:3c:af:03:36:f7:24: 93:b0:3e:d2:93:7c:e0:34:14:91:84:4f:bd:71:ce: f2:c7:ab:02:c4:98:b0:4f:62:45:df:3b:e3:37:fe: 82:32:9f:4e:56:1d:0b:20:bd:36:dd:01:f6:42:c6: 7e:30:7b:e9:4d:f5:56:75:97:1a:8e:d6:7d:93:b6: 32:a8:2e:3b:a9:d5:b0:4e:b6:0d:47:da:6f:fb:6d: 9a:b0:a6:cd:31:a0:95:87:ad:28:d0:2e:63:4b:27: 8e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:31:7E:A1:7C:DB:CC:EC:32:65:3E:3E:E8:E7:BB:8B:CC:32:34:B0 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35302e302f32342d3234203d3e20323133373334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.50.0/24 Signature Algorithm: sha256WithRSAEncryption a5:9f:2c:a5:dc:7c:03:47:6b:2e:85:e1:cf:96:09:00:5c:42: 93:d8:a0:6e:b3:df:2a:fb:61:2d:bd:a6:3c:69:e4:48:46:fd: da:e6:97:b1:ad:df:29:79:f3:c1:73:7a:ce:93:80:96:18:11: ac:66:2c:24:b5:45:04:8f:09:c8:68:0a:06:96:ef:07:ce:ba: ca:9a:e4:7b:64:f9:42:2b:11:3d:02:5e:cf:4c:3e:af:09:34: 36:83:0f:9d:e9:b5:f2:28:71:43:06:45:a7:b9:79:9c:f8:2a: 78:e6:90:3f:fa:90:c8:5d:33:a6:31:dd:bb:4b:37:1b:2c:6f: 0c:e4:94:5f:e6:ec:f1:89:eb:60:53:2c:71:47:85:37:fc:b9: d4:2b:8a:ac:06:c2:ca:dc:cc:db:a0:06:02:aa:04:96:60:1c: a1:10:16:b0:37:b1:54:d0:ec:48:bf:41:76:8d:92:51:f0:c9: b3:1d:68:64:35:ae:93:81:02:81:41:54:07:49:6e:a8:1f:6a: a5:b3:03:21:4a:4d:67:1b:51:4b:d1:b3:c5:28:ef:55:01:24: f5:fd:f9:7b:05:3a:a1:b6:25:50:de:7d:16:72:40:2b:2c:60: a2:0c:20:cb:dd:d1:54:9c:dc:6a:74:53:50:12:8e:bd:74:22: 1b:74:11:03 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIoRn7kU40ku5dfatgIME36eg99QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjQwMjMzNTZaFw0yNzAxMjMwMjM4NTZaMDMxMTAvBgNV BAMTKDVEMzE3RUExN0NEQkNDRUMzMjY1M0UzRUU4RTdCQjhCQ0MzMjM0QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3AjsYYjMEfU/JwQW9Ta6JJP4Q 9acmDsvBVGwFsewOjGHG/i1gNoq2RU2R1zwCG1DNcX8V8Kfzkps+hrg7slg6GvWp oNYwWdK3bhcYe8P6+FR4s9qYyBpU+M27X8J3hOKgMWs6gW9rEETOZt0jrKf65eIN RiosFLIqhjnjo+CPoxEzL9vbs855OC0znA+vxvGEpRbcascIFgyL5wHClTyvAzb3 JJOwPtKTfOA0FJGET71xzvLHqwLEmLBPYkXfO+M3/oIyn05WHQsgvTbdAfZCxn4w e+lN9VZ1lxqO1n2TtjKoLjup1bBOtg1H2m/7bZqwps0xoJWHrSjQLmNLJ45rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUXTF+oXzbzOwyZT4+6Oe7i8wyNLAwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMzMzczMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 1EoyMA0GCSqGSIb3DQEBCwUAA4IBAQClnyyl3HwDR2suheHPlgkAXEKT2KBus98q +2EtvaY8aeRIRv3a5pexrd8pefPBc3rOk4CWGBGsZiwktUUEjwnIaAoGlu8HzrrK muR7ZPlCKxE9Al7PTD6vCTQ2gw+d6bXyKHFDBkWnuXmc+Cp45pA/+pDIXTOmMd27 SzcbLG8M5JRf5uzxietgUyxxR4U3/LnUK4qsBsLK3MzboAYCqgSWYByhEBawN7FU 0OxIv0F2jZJR8MmzHWhkNa6TgQKBQVQHSW6oH2qlswMhSk1nG1FL0bPFKO9VAST1 /fl7BTqhtiVQ3n0WckArLGCiDCDL3dFUnNxqdFNQEo69dCIbdBED -----END CERTIFICATE-----Generated at Sun Jan 25 13:33:18 2026 by rpki-client