This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e203138363331.roa File: 34352e3134362e3136322e302f32342d3234203d3e203138363331.roa (raw, json) Hash identifier: mQKE/0/NnV539NSoXtVCOp3+AeXahl8sUnLhuxaZN7o= Subject key identifier: 2C:A4:07:34:EE:67:2E:8A:3A:98:97:BD:25:5B:D7:11:E0:A8:93:0D Certificate issuer: /CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Certificate serial: 3BF61D564BE29FF7EFE90FB809C298F51B233481 Authority key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e203138363331.roa Signing time: Fri 02 Jan 2026 17:55:33 +0000 ROA not before: Fri 02 Jan 2026 17:50:33 +0000 ROA not after: Fri 01 Jan 2027 17:55:33 +0000 asID: 18631 IP address blocks: 45.146.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:46:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f6:1d:56:4b:e2:9f:f7:ef:e9:0f:b8:09:c2:98:f5:1b:23:34:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3 Validity Not Before: Jan 2 17:50:33 2026 GMT Not After : Jan 1 17:55:33 2027 GMT Subject: CN=2CA40734EE672E8A3A9897BD255BD711E0A8930D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:96:12:33:3a:7c:2c:a7:ed:f7:a1:fa:79: b1:06:63:4c:46:bc:a9:b1:2f:7c:a8:2f:23:27:fc: 57:dc:cc:c9:e6:17:fd:81:2d:d8:66:2f:00:7e:11: 57:de:8e:f9:a2:4c:4a:1f:43:59:ce:e0:b1:b4:de: 91:4d:1c:ce:3c:4f:ad:e8:34:43:e8:8d:53:c7:d3: 24:e6:e5:10:46:f1:5b:12:d0:37:e4:b7:1b:2e:e5: 13:46:f7:88:ad:c3:a3:af:83:a0:e8:0a:8e:75:23: f8:60:f7:2a:a2:39:22:13:47:a5:5b:b3:2d:b8:8a: eb:67:dd:01:bb:e4:4f:1f:80:53:aa:f0:da:59:1c: dd:54:45:d7:71:4f:8f:2d:2b:ff:f7:f7:59:99:43: 2d:4d:43:8b:b4:96:75:aa:5d:38:dd:40:c2:17:4c: e8:3b:cf:fa:f0:3e:3b:87:8a:94:ff:ba:11:cb:50: 72:b7:7c:cb:ae:7c:88:c5:e2:40:b3:a9:a2:57:6b: 50:f5:2b:d9:27:99:48:14:12:12:95:91:7d:ac:e7: 84:74:86:29:26:d3:98:42:47:19:64:6c:17:76:68: 4f:ad:90:99:d4:91:65:d0:6a:3b:74:33:c5:b0:cc: 4e:aa:f0:42:1d:35:85:26:d1:cd:99:15:06:7b:2b: a6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A4:07:34:EE:67:2E:8A:3A:98:97:BD:25:5B:D7:11:E0:A8:93:0D X509v3 Authority Key Identifier: keyid:5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/34352e3134362e3136322e302f32342d3234203d3e203138363331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.146.162.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:0a:cb:34:db:bf:71:74:6a:32:ef:e0:c3:1c:94:fe:27:65: 53:0c:0f:d9:bc:6b:ee:1a:cc:88:68:1c:17:bd:f6:d2:38:11: 0f:66:90:c0:0a:44:c5:e8:68:47:0c:95:07:11:6e:d1:31:25: b4:50:df:85:63:e0:d9:83:40:53:7a:a0:45:03:5d:93:42:b4: 7b:8b:7d:7b:de:78:57:9e:38:8a:d1:3a:44:4f:4b:e3:b5:dc: 05:1a:d0:e0:bb:56:fb:ee:67:b0:25:06:77:b7:86:a2:33:0d: 63:02:83:dd:21:cf:68:7a:e1:6b:b9:18:9e:da:1f:d3:e3:38: f8:b6:5c:92:17:f2:3a:40:a4:23:46:c2:62:78:97:b3:29:7d: 1a:e0:d2:f9:58:6a:c2:b5:89:32:84:e9:bd:86:80:d4:53:56: 52:a2:bf:86:f2:fa:55:06:c3:25:ba:dc:3a:cd:2f:e3:94:5b: 69:d9:cf:b3:1c:6c:b3:4b:47:9e:b6:f1:ba:41:f5:68:7b:9e: b4:9c:a6:16:00:75:f5:61:ef:99:e0:bc:8e:3e:25:cd:47:12: a8:b7:49:9c:f1:a0:93:6c:15:95:d4:ae:24:55:06:bd:0f:06: 57:92:d7:89:bf:77:46:8e:c3:18:a0:5a:e3:ed:08:49:76:5f: 00:1b:95:4a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUO/YdVkvin/fv6Q+4CcKY9RsjNIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRlZmUwOTIyZjRmNTUyNzBkY2Q1YzA4ZjA0ZjFjN2Jm MjYwNzNjMzAeFw0yNjAxMDIxNzUwMzNaFw0yNzAxMDExNzU1MzNaMDMxMTAvBgNV BAMTKDJDQTQwNzM0RUU2NzJFOEEzQTk4OTdCRDI1NUJENzExRTBBODkzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyDpYSMzp8LKft96H6ebEGY0xG vKmxL3yoLyMn/FfczMnmF/2BLdhmLwB+EVfejvmiTEofQ1nO4LG03pFNHM48T63o NEPojVPH0yTm5RBG8VsS0Dfktxsu5RNG94itw6Ovg6DoCo51I/hg9yqiOSITR6Vb sy24iutn3QG75E8fgFOq8NpZHN1URddxT48tK//391mZQy1NQ4u0lnWqXTjdQMIX TOg7z/rwPjuHipT/uhHLUHK3fMuufIjF4kCzqaJXa1D1K9knmUgUEhKVkX2s54R0 hikm05hCRxlkbBd2aE+tkJnUkWXQajt0M8WwzE6q8EIdNYUm0c2ZFQZ7K6ZFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQULKQHNO5nLoo6mJe9JVvXEeCokw0wHwYDVR0j BBgwFoAUXe/gki9PVScNzVwI8E8ce/Jgc8MwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmZlMmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYz NzkwLzAvNURFRkUwOTIyRjRGNTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hlX2draTlQVlNjTnpWd0k4RThjZV9K Z2M4TS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZlMmIyN2Et MWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvMzQzNTJlMzEzNDM2MmUzMTM2 MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM4MzYzMzMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZKiMA0GCSqGSIb3DQEBCwUAA4IBAQCKCss0279xdGoy7+DDHJT+J2VTDA/ZvGvu GsyIaBwXvfbSOBEPZpDACkTF6GhHDJUHEW7RMSW0UN+FY+DZg0BTeqBFA12TQrR7 i3173nhXnjiK0TpET0vjtdwFGtDgu1b77mewJQZ3t4aiMw1jAoPdIc9oeuFruRie 2h/T4zj4tlySF/I6QKQjRsJieJezKX0a4NL5WGrCtYkyhOm9hoDUU1ZSor+G8vpV BsMlutw6zS/jlFtp2c+zHGyzS0eetvG6QfVoe560nKYWAHX1Ye+Z4LyOPiXNRxKo t0mc8aCTbBWV1K4kVQa9DwZXkteJv3dGjsMYoFrj7QhJdl8AG5VK -----END CERTIFICATE-----Generated at Sun Jan 25 13:59:12 2026 by rpki-client