This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35312e302f32342d3234203d3e20383334.roa File: 3231322e37342e35312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: cLBx1lX/6exn62eUjvaj2Xr/OvhnnepCie+htXteWQE= Subject key identifier: 10:7A:50:49:78:40:23:E8:E0:51:0D:CF:59:89:75:39:15:63:87:68 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 585FD974BD7EAC08023D89EC19888FA3BC5301A1 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35312e302f32342d3234203d3e20383334.roa Signing time: Sat 24 Jan 2026 02:41:49 +0000 ROA not before: Sat 24 Jan 2026 02:36:49 +0000 ROA not after: Sat 23 Jan 2027 02:41:49 +0000 asID: 834 IP address blocks: 212.74.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5f:d9:74:bd:7e:ac:08:02:3d:89:ec:19:88:8f:a3:bc:53:01:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 24 02:36:49 2026 GMT Not After : Jan 23 02:41:49 2027 GMT Subject: CN=107A5049784023E8E0510DCF5989753915638768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:0b:4a:0d:9d:da:b1:dc:c3:72:13:0e:c0: 33:85:37:f5:70:fa:1a:98:d9:c7:d2:e2:15:e0:c7: 60:bc:d5:8f:d8:22:5f:36:11:ed:88:00:bb:23:c7: 1f:05:fa:60:c6:2d:80:bf:f7:ac:f0:28:13:09:f6: 87:d0:a0:9f:53:7d:e8:81:11:50:d2:f3:9d:a8:53: f4:de:a9:24:d8:84:4c:9b:73:42:cf:f7:14:9c:a6: d5:fe:d0:00:6c:24:4c:df:31:be:b2:ac:0c:57:03: 47:64:bc:ce:7c:2c:09:ac:5f:90:5e:81:86:e2:9f: cc:b9:16:e3:29:8d:70:fa:43:94:5c:51:b3:ab:f8: 88:4f:d4:7e:30:bb:02:ab:d5:b3:af:7f:ea:1c:7f: de:47:0c:3b:02:20:61:37:1a:33:62:a4:e6:98:0e: 42:e2:3a:73:7a:a1:01:1d:25:ad:fb:35:1a:d8:17: 14:cb:11:21:40:2c:07:8a:84:62:63:5d:e6:c0:4d: 34:8b:96:6a:b5:d9:cb:23:54:69:fa:61:d4:2b:e1: 3e:0f:b4:da:3b:21:39:4d:60:67:37:a2:16:20:e9: 6d:6c:a0:32:c6:56:0a:08:01:24:a6:ae:8f:44:0f: 6d:ed:bb:ae:85:f0:26:ac:0a:f3:27:de:e3:1e:16: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7A:50:49:78:40:23:E8:E0:51:0D:CF:59:89:75:39:15:63:87:68 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.51.0/24 Signature Algorithm: sha256WithRSAEncryption 21:9d:1f:ce:2e:de:d2:a1:28:f1:2e:c8:20:32:0e:78:99:20: a1:45:0b:d1:9d:62:b6:19:d3:ca:aa:61:5e:b7:be:72:be:74: 9a:ab:f7:53:75:1c:c9:0f:12:e6:13:96:6d:9b:6f:f1:f5:27: 23:62:5b:61:5e:98:54:ee:75:3d:e8:01:9a:f6:9a:42:03:ec: 33:f6:7b:b3:27:16:25:d8:71:3e:a3:a7:87:8e:17:76:c0:6f: ab:d8:2f:f4:06:fb:69:e6:52:f2:14:1f:23:0a:8c:66:de:c0: 5e:8c:b7:28:59:32:e3:9e:b4:fa:3b:1f:61:c3:e4:93:e0:e2: 86:bc:0c:33:23:18:27:13:3d:0a:aa:8e:7e:86:65:9f:6c:0e: 10:22:fa:5e:e3:7d:52:5c:f5:c4:98:ac:5f:f8:43:e3:6a:a9: e7:19:be:42:fa:ca:65:ec:8c:fc:06:c0:b5:00:90:33:1e:02: 36:e9:0a:76:d4:d8:53:06:1d:0f:a7:c0:25:07:c8:70:6f:bb: c4:8f:ff:c8:28:7d:dd:21:a6:e3:8b:87:3b:b5:f2:29:fa:b2: 8b:81:8e:fa:bb:c1:5d:ec:48:cc:1c:07:83:93:ea:59:0e:7f: f7:e0:e9:b7:94:df:a7:a1:b0:4c:57:d1:51:24:97:97:da:b1: 81:75:1a:6d -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUWF/ZdL1+rAgCPYnsGYiPo7xTAaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjQwMjM2NDlaFw0yNzAxMjMwMjQxNDlaMDMxMTAvBgNV BAMTKDEwN0E1MDQ5Nzg0MDIzRThFMDUxMERDRjU5ODk3NTM5MTU2Mzg3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSXAtKDZ3asdzDchMOwDOFN/Vw +hqY2cfS4hXgx2C81Y/YIl82Ee2IALsjxx8F+mDGLYC/96zwKBMJ9ofQoJ9TfeiB EVDS852oU/TeqSTYhEybc0LP9xScptX+0ABsJEzfMb6yrAxXA0dkvM58LAmsX5Be gYbin8y5FuMpjXD6Q5RcUbOr+IhP1H4wuwKr1bOvf+ocf95HDDsCIGE3GjNipOaY DkLiOnN6oQEdJa37NRrYFxTLESFALAeKhGJjXebATTSLlmq12csjVGn6YdQr4T4P tNo7ITlNYGc3ohYg6W1soDLGVgoIASSmro9ED23tu66F8CasCvMn3uMeFqWtAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUEHpQSXhAI+jgUQ3PWYl1ORVjh2gwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTMx MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1EozMA0G CSqGSIb3DQEBCwUAA4IBAQAhnR/OLt7SoSjxLsggMg54mSChRQvRnWK2GdPKqmFe t75yvnSaq/dTdRzJDxLmE5Ztm2/x9ScjYlthXphU7nU96AGa9ppCA+wz9nuzJxYl 2HE+o6eHjhd2wG+r2C/0Bvtp5lLyFB8jCoxm3sBejLcoWTLjnrT6Ox9hw+ST4OKG vAwzIxgnEz0Kqo5+hmWfbA4QIvpe431SXPXEmKxf+EPjaqnnGb5C+spl7Iz8BsC1 AJAzHgI26Qp21NhTBh0Pp8AlB8hwb7vEj//IKH3dIabji4c7tfIp+rKLgY76u8Fd 7EjMHAeDk+pZDn/34Om3lN+nobBMV9FRJJeX2rGBdRpt -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:34 2026 by rpki-client