This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e382e302f32342d3234203d3e20323031393439.roa File: 34352e38382e382e302f32342d3234203d3e20323031393439.roa (raw, json) Hash identifier: lYsZkax6BGd/WXzuLqvGIPa9eJmrFbaWrPG1MFxlqHs= Subject key identifier: 87:CE:A7:72:11:20:3B:0E:02:6B:28:C1:44:28:07:08:BC:45:D3:12 Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Certificate serial: 624222B6C299F004F3F47FE9641ECB07D41333F9 Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e382e302f32342d3234203d3e20323031393439.roa Signing time: Sun 25 Jan 2026 12:55:35 +0000 ROA not before: Sun 25 Jan 2026 12:50:35 +0000 ROA not after: Sun 24 Jan 2027 12:55:35 +0000 asID: 201949 IP address blocks: 45.88.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:42:22:b6:c2:99:f0:04:f3:f4:7f:e9:64:1e:cb:07:d4:13:33:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Validity Not Before: Jan 25 12:50:35 2026 GMT Not After : Jan 24 12:55:35 2027 GMT Subject: CN=87CEA77211203B0E026B28C144280708BC45D312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:02:f9:f3:b9:fc:ac:3a:84:cd:7b:26:4a: 56:46:72:16:d9:55:77:83:84:89:fb:e2:4c:cc:d9: bf:cb:0b:a7:92:4b:bf:f8:47:d1:35:cc:48:3c:39: 7e:d9:91:80:df:ce:ec:7f:6b:04:13:16:03:f5:b9: a9:95:92:5d:a0:0b:18:d8:63:8d:de:4d:46:6a:b1: 5c:00:4a:bd:ed:85:7d:7f:81:5f:83:57:b6:e7:81: 4a:39:3b:5b:9d:ed:bb:3f:da:ca:05:47:33:4d:1b: 62:9a:16:07:15:c5:53:2b:ce:18:6c:f3:bc:d3:f6: 1a:e1:90:b2:c2:1c:bb:66:86:b9:16:78:33:08:74: a7:70:52:07:76:ec:bd:e6:6a:67:22:ef:44:7d:31: 31:c9:f0:8c:3b:b6:cf:04:fd:8c:15:bf:fd:ef:54: 6f:a9:96:d4:7d:5e:90:87:48:a4:67:43:08:51:28: a6:a2:a1:1b:28:16:30:01:56:b0:7e:78:4f:18:88: 8c:e1:0c:e0:4d:f8:e3:46:98:86:24:c3:5a:48:02: 9b:d1:70:84:74:68:e9:0b:3a:03:47:a9:8e:2c:ac: 30:0f:e6:94:7b:c9:09:ce:ca:ff:36:76:a3:22:a2: b6:e8:4e:f8:79:a0:20:37:e0:02:a5:3c:c2:c4:03: ab:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CE:A7:72:11:20:3B:0E:02:6B:28:C1:44:28:07:08:BC:45:D3:12 X509v3 Authority Key Identifier: keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e38382e382e302f32342d3234203d3e20323031393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.8.0/24 Signature Algorithm: sha256WithRSAEncryption 34:90:a0:b7:f8:a8:58:c8:9a:c9:cc:8e:49:6e:0c:8b:6c:b2: ee:43:c3:bb:4f:db:a7:b4:bf:00:43:a2:36:1a:cf:1f:85:15: 28:73:09:0d:a7:82:78:81:79:68:61:55:44:ce:91:54:3f:91: 1a:69:21:0d:6a:09:29:b2:4a:d6:48:28:80:4f:0e:fe:b7:33: 3e:2f:9a:33:49:72:fe:c6:df:90:70:a8:ec:00:1b:f0:75:6a: 32:3e:07:4d:68:bb:a3:bb:17:11:cd:fd:7f:dd:2f:6e:7f:70: ca:d0:88:9c:1d:97:80:1a:99:39:47:02:c0:72:e8:46:95:44: 09:db:5f:9e:7a:b2:20:4e:9d:5f:d6:2c:db:46:35:f4:97:49: 56:8e:bb:41:04:76:7e:f8:66:43:7a:b2:8e:97:93:3a:9a:b7: 2c:5b:6b:eb:72:82:ff:b9:b6:b0:df:f0:93:d2:49:e3:71:51: cd:2c:df:13:f1:b7:c4:dc:f4:99:e5:bd:5a:7b:e7:ed:85:95: d6:a9:c7:8b:91:0f:27:9c:5e:d2:86:b7:e3:bb:b6:d3:72:5e: a0:07:a4:26:cd:35:18:92:95:ee:2f:2c:53:f9:64:13:23:98: 21:10:33:14:f6:67:1b:b5:4a:ad:43:b9:5c:02:ce:bf:5a:cb: de:d9:d8:03 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUYkIitsKZ8ATz9H/pZB7LB9QTM/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl OTczMjY2ZDAeFw0yNjAxMjUxMjUwMzVaFw0yNzAxMjQxMjU1MzVaMDMxMTAvBgNV BAMTKDg3Q0VBNzcyMTEyMDNCMEUwMjZCMjhDMTQ0MjgwNzA4QkM0NUQzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaHgL587n8rDqEzXsmSlZGchbZ VXeDhIn74kzM2b/LC6eSS7/4R9E1zEg8OX7ZkYDfzux/awQTFgP1uamVkl2gCxjY Y43eTUZqsVwASr3thX1/gV+DV7bngUo5O1ud7bs/2soFRzNNG2KaFgcVxVMrzhhs 87zT9hrhkLLCHLtmhrkWeDMIdKdwUgd27L3mamci70R9MTHJ8Iw7ts8E/YwVv/3v VG+pltR9XpCHSKRnQwhRKKaioRsoFjABVrB+eE8YiIzhDOBN+ONGmIYkw1pIApvR cIR0aOkLOgNHqY4srDAP5pR7yQnOyv82dqMiorboTvh5oCA34AKlPMLEA6sRAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUh86nchEgOw4CayjBRCgHCLxF0xIwHwYDVR0j BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4 MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s ekptMC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzgzODJlMzgyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzOTM0Mzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtWAgw DQYJKoZIhvcNAQELBQADggEBADSQoLf4qFjImsnMjkluDItssu5Dw7tP26e0vwBD ojYazx+FFShzCQ2ngniBeWhhVUTOkVQ/kRppIQ1qCSmyStZIKIBPDv63Mz4vmjNJ cv7G35BwqOwAG/B1ajI+B01ou6O7FxHN/X/dL25/cMrQiJwdl4AamTlHAsBy6EaV RAnbX556siBOnV/WLNtGNfSXSVaOu0EEdn74ZkN6so6Xkzqatyxba+tygv+5trDf 8JPSSeNxUc0s3xPxt8Tc9JnlvVp75+2Fldapx4uRDyecXtKGt+O7ttNyXqAHpCbN NRiSle4vLFP5ZBMjmCEQMxT2Zxu1Sq1DuVwCzr9ay97Z2AM= -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:00 2026 by rpki-client