This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32312d3234203d3e20383334.roa File: 3231322e37342e35362e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: QSZ4dnrI/pybRIhmpVos80GAXBfLMmudeR84QH1vlcA= Subject key identifier: FC:75:70:9B:23:EC:B0:2E:53:A1:D7:19:B0:F4:A4:19:D2:6F:EA:DC Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 33C9F72CC19B1F148C316E886FEEFB50A0969AC2 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32312d3234203d3e20383334.roa Signing time: Sat 24 Jan 2026 02:41:48 +0000 ROA not before: Sat 24 Jan 2026 02:36:48 +0000 ROA not after: Sat 23 Jan 2027 02:41:48 +0000 asID: 834 IP address blocks: 212.74.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c9:f7:2c:c1:9b:1f:14:8c:31:6e:88:6f:ee:fb:50:a0:96:9a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 24 02:36:48 2026 GMT Not After : Jan 23 02:41:48 2027 GMT Subject: CN=FC75709B23ECB02E53A1D719B0F4A419D26FEADC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:a6:8b:a5:43:08:4b:f4:f3:54:10:3a:85: 74:5f:05:ff:73:b0:7b:ab:82:01:e4:99:e7:56:8f: eb:2d:b3:2f:63:61:f2:18:bc:d9:92:04:d3:79:79: e9:cb:99:d5:41:b7:9f:05:15:fe:6b:db:5f:1e:af: 0f:da:c0:65:42:de:27:b3:87:44:9b:18:99:2c:ca: 63:99:14:c3:a2:ab:9b:fd:5c:e2:4c:02:54:d1:4c: 0c:8a:12:ad:22:34:1a:a3:30:e3:bb:f0:0d:c5:f0: ca:a7:1b:16:f9:e6:ec:87:79:f0:80:e5:84:27:65: 4b:c1:97:13:f0:a2:2f:fe:21:01:58:ef:56:cc:70: 4b:51:6a:96:5a:84:cf:ec:e3:ad:98:77:aa:ab:6d: 7c:9d:3f:9a:b1:fb:c5:26:cb:65:51:38:4d:ec:82: 25:c7:01:76:b2:0d:10:f7:92:ec:8b:dd:cb:b8:6d: c8:ea:c8:04:f8:c1:9c:20:6a:ea:b3:82:18:b6:6a: a5:40:02:0e:a9:99:64:1d:d9:b1:94:cc:17:3a:f4: ab:5e:70:66:79:ab:83:1a:d6:f9:17:40:52:c7:42: ea:4f:1b:e8:1a:97:e7:73:e3:e0:f9:1d:df:fd:bc: f0:01:bb:29:b3:05:f7:ff:cd:85:e9:87:46:4f:3f: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:75:70:9B:23:EC:B0:2E:53:A1:D7:19:B0:F4:A4:19:D2:6F:EA:DC X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/3231322e37342e35362e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.74.56.0/21 Signature Algorithm: sha256WithRSAEncryption 2e:bd:d7:f1:5c:a5:3a:59:55:66:92:af:a3:df:f4:22:1f:06: 5c:bc:dc:ce:e3:0c:9a:7c:ab:eb:45:17:15:b9:2e:08:6b:06: 5e:ef:e0:99:56:5c:3b:c8:c0:f9:a4:ff:3d:39:a9:14:70:6d: 0a:73:f2:90:cb:08:38:d0:2d:c8:42:8f:d8:00:90:68:d9:2c: 69:75:24:a2:ea:ae:5c:80:f9:eb:7b:14:7c:a6:f5:7c:9a:58: d4:49:83:c4:5a:5a:61:58:13:ab:e1:51:dc:64:66:6a:f6:cb: d7:5e:0e:f4:8c:df:d6:fb:8b:5b:3b:2e:6c:9b:5f:89:56:46: 1c:36:24:41:63:5f:ed:58:03:8b:fa:4f:35:dc:26:6b:27:2a: 76:31:3a:37:6b:08:ef:e6:89:ac:08:6b:1b:53:32:ae:a9:9e: 05:ec:ce:d4:97:e3:1e:24:5f:35:34:19:73:c2:ae:54:89:3a: b2:37:29:d1:12:60:57:e8:69:05:8e:e8:5b:10:68:e9:2c:26: 79:a4:2b:7f:6a:38:ef:00:60:ad:9b:3c:96:35:8f:55:ba:9e: c7:ef:37:0e:df:04:b4:a2:21:8c:64:de:7e:be:47:be:fd:67: 54:b3:95:8c:76:f2:92:32:15:c5:fd:10:8a:d2:76:7d:10:7f: 70:53:28:1a -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUM8n3LMGbHxSMMW6Ib+77UKCWmsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjQwMjM2NDhaFw0yNzAxMjMwMjQxNDhaMDMxMTAvBgNV BAMTKEZDNzU3MDlCMjNFQ0IwMkU1M0ExRDcxOUIwRjRBNDE5RDI2RkVBREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtKaLpUMIS/TzVBA6hXRfBf9z sHurggHkmedWj+stsy9jYfIYvNmSBNN5eenLmdVBt58FFf5r218erw/awGVC3iez h0SbGJksymOZFMOiq5v9XOJMAlTRTAyKEq0iNBqjMOO78A3F8MqnGxb55uyHefCA 5YQnZUvBlxPwoi/+IQFY71bMcEtRapZahM/s462Yd6qrbXydP5qx+8Umy2VROE3s giXHAXayDRD3kuyL3cu4bcjqyAT4wZwgauqzghi2aqVAAg6pmWQd2bGUzBc69Kte cGZ5q4Ma1vkXQFLHQupPG+gal+dz4+D5Hd/9vPABuymzBff/zYXph0ZPP2N5AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU/HVwmyPssC5TodcZsPSkGdJv6twwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzIzMTMyMmUzNzM0MmUzNTM2 MmUzMDJmMzIzMTJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1Eo4MA0G CSqGSIb3DQEBCwUAA4IBAQAuvdfxXKU6WVVmkq+j3/QiHwZcvNzO4wyafKvrRRcV uS4IawZe7+CZVlw7yMD5pP89OakUcG0Kc/KQywg40C3IQo/YAJBo2SxpdSSi6q5c gPnrexR8pvV8mljUSYPEWlphWBOr4VHcZGZq9svXXg70jN/W+4tbOy5sm1+JVkYc NiRBY1/tWAOL+k813CZrJyp2MTo3awjv5omsCGsbUzKuqZ4F7M7Ul+MeJF81NBlz wq5UiTqyNynREmBX6GkFjuhbEGjpLCZ5pCt/ajjvAGCtmzyWNY9Vup7H7zcO3wS0 oiGMZN5+vke+/WdUs5WMdvKSMhXF/RCK0nZ9EH9wUyga -----END CERTIFICATE-----Generated at Sun Jan 25 12:01:54 2026 by rpki-client