This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231342e302f32342d3234203d3e20323136303939.roa File: 34352e39352e3231342e302f32342d3234203d3e20323136303939.roa (raw, json) Hash identifier: D/Nmap/PxRG4O5COkUTsliUnadwaB6xsHT4TvPGKFlQ= Subject key identifier: 94:90:65:39:5A:83:69:61:8D:CD:CE:12:45:F5:E6:CC:92:07:2D:A9 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 7CD41DB87BE223A7840A19F4921CFB1A9567A62D Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231342e302f32342d3234203d3e20323136303939.roa Signing time: Sat 03 Jan 2026 01:55:33 +0000 ROA not before: Sat 03 Jan 2026 01:50:33 +0000 ROA not after: Sat 02 Jan 2027 01:55:33 +0000 asID: 216099 IP address blocks: 45.95.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d4:1d:b8:7b:e2:23:a7:84:0a:19:f4:92:1c:fb:1a:95:67:a6:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jan 3 01:50:33 2026 GMT Not After : Jan 2 01:55:33 2027 GMT Subject: CN=949065395A8369618DCDCE1245F5E6CC92072DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:78:5e:4e:3d:d6:da:28:21:68:98:38:38:87: f0:af:5d:45:65:dc:03:2d:43:8e:6d:bb:c3:3b:4e: a3:cc:38:08:d0:84:56:4c:fd:84:1c:a1:04:07:e0: 87:a0:e9:43:8a:41:cb:7e:00:d5:7f:7d:0f:1d:b9: 2d:e9:dc:3b:c3:c4:90:5e:5f:c4:60:7b:3f:b1:9a: bd:be:c9:ef:f4:02:b4:e6:97:12:4b:c2:a4:08:e5: 0e:fb:cf:61:6f:2e:02:2b:eb:15:c9:ab:62:1f:08: 6e:6f:88:63:1d:2b:54:44:cd:39:15:7a:d8:fb:0f: 5a:c8:14:99:22:c7:7d:29:8f:f1:a0:1f:d2:af:67: fa:07:fe:4e:70:01:e7:be:23:ef:39:45:12:a8:03: 81:59:d6:26:50:8b:8a:ce:cd:37:00:61:70:20:57: b1:01:f1:b8:67:f7:25:9b:af:9d:3f:11:96:29:b8: f5:94:54:12:e9:78:92:c6:19:82:e1:f2:3f:b4:41: 4c:cc:a9:15:53:cd:48:77:66:d4:96:88:14:8a:b7: fa:f7:61:e8:3f:14:03:f5:2b:fd:3d:cc:8e:9b:56: 52:b9:da:e6:d6:4e:47:4f:78:18:bd:2a:06:1d:b0: f8:cb:57:75:57:50:85:f3:ee:ea:4e:5b:dc:14:44: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:90:65:39:5A:83:69:61:8D:CD:CE:12:45:F5:E6:CC:92:07:2D:A9 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/34352e39352e3231342e302f32342d3234203d3e20323136303939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.214.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:d2:c6:f6:54:f8:1d:1f:8c:60:cb:20:06:41:c9:20:f3:eb: 60:f8:d1:6b:68:8d:31:75:0a:06:28:c5:73:9a:3a:98:dd:19: 4c:e2:b2:24:1a:49:4f:5b:8b:92:d9:47:9a:91:2f:9f:cf:d6: 2a:15:05:47:26:4b:f6:8f:f3:16:37:ad:ec:0b:ff:da:2b:82: c0:54:cd:55:97:1c:1a:b7:ab:84:d3:a1:79:33:d3:95:64:07: dc:be:f2:58:e1:77:07:9a:ff:d2:81:c0:57:80:cf:7c:5a:66: 20:39:27:5a:59:f0:a5:82:a9:5c:c0:4b:a8:65:d6:0b:43:a9: d9:5a:11:d2:29:f4:4b:55:3c:45:e4:99:c2:a8:1d:e4:3d:85: 8a:4c:eb:5e:dd:1d:8d:18:8c:26:d3:d5:f8:4b:50:ed:ab:2d: 5e:42:55:e0:74:18:01:b1:2d:47:9b:1f:b7:cb:b8:f8:df:c6: ed:42:3d:85:36:5b:c2:f8:6e:0d:91:3c:ae:46:68:bb:c7:41: d8:41:54:19:18:e0:7b:03:50:6d:cb:6d:95:bf:d6:77:1d:d9: ae:de:9b:4f:21:26:1d:2c:b8:fa:7e:05:24:50:55:99:67:97: e0:2e:c6:98:9f:f9:11:5f:01:59:9c:a9:03:27:16:3f:02:e2: 47:c5:80:fc -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUfNQduHviI6eEChn0khz7GpVnpi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjAxMDMwMTUwMzNaFw0yNzAxMDIwMTU1MzNaMDMxMTAvBgNV BAMTKDk0OTA2NTM5NUE4MzY5NjE4RENEQ0UxMjQ1RjVFNkNDOTIwNzJEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFeF5OPdbaKCFomDg4h/CvXUVl 3AMtQ45tu8M7TqPMOAjQhFZM/YQcoQQH4Ieg6UOKQct+ANV/fQ8duS3p3DvDxJBe X8Rgez+xmr2+ye/0ArTmlxJLwqQI5Q77z2FvLgIr6xXJq2IfCG5viGMdK1REzTkV etj7D1rIFJkix30pj/GgH9KvZ/oH/k5wAee+I+85RRKoA4FZ1iZQi4rOzTcAYXAg V7EB8bhn9yWbr50/EZYpuPWUVBLpeJLGGYLh8j+0QUzMqRVTzUh3ZtSWiBSKt/r3 Yeg/FAP1K/09zI6bVlK52ubWTkdPeBi9KgYdsPjLV3VXUIXz7upOW9wURIC/AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlJBlOVqDaWGNzc4SRfXmzJIHLakwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzQzNTJlMzkzNTJlMzIzMTM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM2MzAzOTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LV/WMA0GCSqGSIb3DQEBCwUAA4IBAQCc0sb2VPgdH4xgyyAGQckg8+tg+NFraI0x dQoGKMVzmjqY3RlM4rIkGklPW4uS2UeakS+fz9YqFQVHJkv2j/MWN63sC//aK4LA VM1Vlxwat6uE06F5M9OVZAfcvvJY4XcHmv/SgcBXgM98WmYgOSdaWfClgqlcwEuo ZdYLQ6nZWhHSKfRLVTxF5JnCqB3kPYWKTOte3R2NGIwm09X4S1Dtqy1eQlXgdBgB sS1Hmx+3y7j438btQj2FNlvC+G4NkTyuRmi7x0HYQVQZGOB7A1Bty22Vv9Z3Hdmu 3ptPISYdLLj6fgUkUFWZZ5fgLsaYn/kRXwFZnKkDJxY/AuJHxYD8 -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:47 2026 by rpki-client