This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35322e302f32322d3234203d3e20383334.roa File: 3231322e37342e35322e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: x8JTTor56MRdIiFlXbixQT04md4WFgqxv5/Wwbh28Zk= Subject key identifier: 6D:44:7C:9E:1A:57:31:84:A7:49:7E:C7:2E:ED:8C:FE:F7:A7:29:20 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 793EF2D5EEE3962D8979B547037CAB9332515B22 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35322e302f32322d3234203d3e20383334.roa Signing time: Sat 24 Jan 2026 02:41:48 +0000 ROA not before: Sat 24 Jan 2026 02:36:48 +0000 ROA not after: Sat 23 Jan 2027 02:41:48 +0000 asID: 834 IP address blocks: 212.74.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:3e:f2:d5:ee:e3:96:2d:89:79:b5:47:03:7c:ab:93:32:51:5b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 24 02:36:48 2026 GMT Not After : Jan 23 02:41:48 2027 GMT Subject: CN=6D447C9E1A573184A7497EC72EED8CFEF7A72920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0f:ce:63:c2:97:98:00:1e:db:ff:6c:58:6f: 68:f5:cf:ce:58:02:72:77:56:99:0c:ab:27:55:23: e0:50:4e:e8:c3:90:a3:00:d6:65:bd:72:92:12:df: 7e:d6:5b:e7:9b:c3:f5:2c:b4:55:54:3d:50:4e:58: 38:51:d6:f6:fa:a9:8b:97:8e:9e:9a:da:a7:5a:cd: 6c:c8:e5:75:79:96:d3:85:21:15:55:54:05:cf:1e: dc:c6:fd:ba:c5:1a:10:68:4a:74:14:34:93:c5:ec: 95:a9:8f:d8:cd:93:b5:41:0c:3f:86:2c:f8:88:6a: 3c:9a:bd:be:9b:47:a1:b5:45:03:50:00:ae:07:18: 12:ec:95:24:fc:59:b1:ef:fc:e3:1f:2c:0b:6e:22: c2:55:9a:6a:46:83:25:df:5b:64:77:40:d9:8c:65: 49:25:fb:3b:dd:07:f0:e2:ba:ed:71:20:1d:02:a9: 16:1f:e6:b8:0a:9a:dd:20:67:72:c9:ae:17:fd:6d: fe:8f:9d:54:59:77:79:34:55:53:57:61:67:6a:cb: 21:d2:7b:7b:73:a6:e9:fe:6c:83:06:a8:74:f6:26: 87:1f:5b:86:ae:37:49:e8:c2:71:0c:cb:1d:53:06: bd:1a:7f:9d:79:68:80:62:51:e0:f8:38:13:fd:32: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:44:7C:9E:1A:57:31:84:A7:49:7E:C7:2E:ED:8C:FE:F7:A7:29:20 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35322e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.52.0/22 Signature Algorithm: sha256WithRSAEncryption c7:a0:da:88:45:c7:55:7b:ed:e6:bc:ef:8d:9c:ed:9b:72:33: df:91:a5:c9:0e:39:8d:f5:31:3e:aa:a7:24:87:18:3c:26:a0: 84:db:00:ba:23:5b:ee:2c:b5:89:40:1c:3c:8f:bd:d4:bd:15: 2e:a8:2b:fa:1e:84:9f:a6:64:d7:ef:3a:44:f2:9b:63:24:d5: 7f:ee:e1:c5:5e:50:64:13:89:7b:42:36:5c:90:50:e0:c8:03: de:4f:de:bb:2a:8a:97:5e:69:39:39:c8:b8:60:1c:31:4a:64: 69:f6:c9:f7:97:ab:be:a8:0d:f3:34:41:c8:49:2c:fe:0e:bf: 64:6e:49:cd:92:3c:a5:9a:13:6f:51:95:a2:69:b4:02:7b:8e: 54:76:0c:3a:7e:a7:d9:9b:32:b6:72:6d:05:9c:7f:ce:f2:59: 02:75:36:c9:8d:15:6a:c2:38:b9:40:0a:2c:2a:f5:ed:7b:45: d2:43:4e:67:0c:ed:71:34:d8:6c:8b:b7:e6:c8:6e:2c:22:fc: 9e:bd:e9:3d:d0:c7:7e:e1:f9:d6:0d:d1:2b:b6:e7:6f:b0:ff: 80:04:86:2f:1e:80:d9:d3:44:16:33:74:f5:b9:13:7e:fe:95: 09:22:39:63:d6:ff:bd:de:61:d7:e3:5a:b5:75:bc:37:73:21: e7:ea:53:47 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUeT7y1e7jli2JebVHA3yrkzJRWyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjQwMjM2NDhaFw0yNzAxMjMwMjQxNDhaMDMxMTAvBgNV BAMTKDZENDQ3QzlFMUE1NzMxODRBNzQ5N0VDNzJFRUQ4Q0ZFRjdBNzI5MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3D85jwpeYAB7b/2xYb2j1z85Y AnJ3VpkMqydVI+BQTujDkKMA1mW9cpIS337WW+ebw/UstFVUPVBOWDhR1vb6qYuX jp6a2qdazWzI5XV5ltOFIRVVVAXPHtzG/brFGhBoSnQUNJPF7JWpj9jNk7VBDD+G LPiIajyavb6bR6G1RQNQAK4HGBLslST8WbHv/OMfLAtuIsJVmmpGgyXfW2R3QNmM ZUkl+zvdB/Diuu1xIB0CqRYf5rgKmt0gZ3LJrhf9bf6PnVRZd3k0VVNXYWdqyyHS e3tzpun+bIMGqHT2JocfW4auN0nownEMyx1TBr0af515aIBiUeD4OBP9MmNXAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUbUR8nhpXMYSnSX7HLu2M/venKSAwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTMy MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1Eo0MA0G CSqGSIb3DQEBCwUAA4IBAQDHoNqIRcdVe+3mvO+NnO2bcjPfkaXJDjmN9TE+qqck hxg8JqCE2wC6I1vuLLWJQBw8j73UvRUuqCv6HoSfpmTX7zpE8ptjJNV/7uHFXlBk E4l7QjZckFDgyAPeT967KoqXXmk5Oci4YBwxSmRp9sn3l6u+qA3zNEHISSz+Dr9k bknNkjylmhNvUZWiabQCe45Udgw6fqfZmzK2cm0FnH/O8lkCdTbJjRVqwji5QAos KvXte0XSQ05nDO1xNNhsi7fmyG4sIvyevek90Md+4fnWDdErtudvsP+ABIYvHoDZ 00QWM3T1uRN+/pUJIjlj1v+93mHX41q1dbw3cyHn6lNH -----END CERTIFICATE-----Generated at Sun Jan 25 12:00:55 2026 by rpki-client