This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323130313634.roa File: 34352e39352e36352e302f32342d3234203d3e20323130313634.roa (raw, json) Hash identifier: U0yUReXntAhTNEU0c4o7sTqtKzZKyc4u28zd/yh7qD0= Subject key identifier: 08:5E:B9:8F:3E:BE:A9:94:FC:F7:73:0F:3F:EA:09:D1:4C:C1:E8:06 Certificate issuer: /CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Certificate serial: 237B80B4BA76E3E195AFC06B2CB467AB88710554 Authority key identifier: 62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323130313634.roa Signing time: Mon 05 Jan 2026 09:55:33 +0000 ROA not before: Mon 05 Jan 2026 09:50:33 +0000 ROA not after: Mon 04 Jan 2027 09:55:33 +0000 asID: 210164 IP address blocks: 45.95.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.mft rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7b:80:b4:ba:76:e3:e1:95:af:c0:6b:2c:b4:67:ab:88:71:05:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fbd2cc0012fb2f86db40b589bd1ac4e973266d Validity Not Before: Jan 5 09:50:33 2026 GMT Not After : Jan 4 09:55:33 2027 GMT Subject: CN=085EB98F3EBEA994FCF7730F3FEA09D14CC1E806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:52:56:31:b8:ed:3c:e9:dc:5c:e3:d2:7c: 05:4e:9d:e7:10:aa:46:4e:37:fa:9e:9a:98:53:01: 75:1f:e9:2d:46:6a:39:81:74:ea:08:73:a8:76:98: a6:5a:69:72:8b:13:25:f1:54:56:51:3b:db:00:a1: 57:4c:e0:44:47:6a:3b:0a:9a:89:6c:53:80:66:69: 3a:d8:e2:c9:0f:7a:68:ed:49:cf:2e:d5:e8:67:8f: ed:2f:aa:f7:58:0b:f5:1b:58:f5:4a:6e:86:3c:2f: c7:3f:de:4e:81:1f:98:d1:f8:98:4e:48:04:4c:01: 5e:de:35:62:95:56:b8:90:8f:76:da:cf:12:89:4a: 72:60:4a:9c:6c:5c:17:6c:9b:35:49:6a:cc:39:28: a9:7e:56:bf:03:55:a8:7e:20:d7:f8:bf:bc:7a:5f: 26:62:d9:a9:3e:b2:7a:b1:bc:f0:98:a8:18:54:64: 76:78:99:16:ec:02:75:97:2a:a4:31:a4:eb:34:fa: 64:1f:31:4e:69:9d:1e:cf:79:f6:28:08:97:d2:35: 25:e4:1f:50:6a:42:0a:56:ae:4e:5f:54:49:4e:2d: d7:85:86:b3:00:c3:fd:a5:ce:f0:d4:33:65:5c:56: 9b:36:a9:04:d8:6c:9f:07:a0:99:ec:22:9a:d3:63: 41:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5E:B9:8F:3E:BE:A9:94:FC:F7:73:0F:3F:EA:09:D1:4C:C1:E8:06 X509v3 Authority Key Identifier: keyid:62:FB:D2:CC:00:12:FB:2F:86:DB:40:B5:89:BD:1A:C4:E9:73:26:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/62FBD2CC0012FB2F86DB40B589BD1AC4E973266D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YvvSzAAS-y-G20C1ib0axOlzJm0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/46b93df0-ac8d-4da8-afb8-dcb7f2888362/0/34352e39352e36352e302f32342d3234203d3e20323130313634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.65.0/24 Signature Algorithm: sha256WithRSAEncryption a0:b3:a1:8a:09:ba:4f:ab:35:74:b3:9c:40:31:48:55:96:dd: fb:42:b4:bc:f2:2d:51:26:b8:40:0b:5f:74:ba:de:ce:56:df: 9d:56:fd:1b:3f:ec:2c:72:50:2a:80:d6:49:c8:fe:b9:b2:7e: d8:0a:57:23:6c:2c:4a:f5:ad:c4:32:ca:51:a4:20:ad:5e:a6: 0b:91:e3:6e:4a:15:b6:37:e6:a4:ef:fe:3f:9a:2c:48:ca:e8: 10:ab:d4:32:d4:2a:04:24:88:a7:d9:75:a2:17:82:09:18:77: 20:25:de:4f:d6:4c:49:95:0b:cf:50:f5:ed:e0:05:e6:31:7f: e0:7e:58:25:12:32:2f:33:8a:53:24:fe:7c:91:71:55:e2:5c: e5:2d:5a:d9:79:d9:23:0f:b4:8a:f5:6b:75:c4:7f:b1:b3:8e: 8a:08:d7:cb:85:7e:b1:75:1c:aa:b4:f2:cb:52:d2:5d:13:d4: 5f:ac:e4:d2:7b:d3:63:94:53:8d:b0:4e:5a:c9:4c:db:57:84: 23:b7:98:4e:ed:ed:0a:30:7b:fe:d0:52:67:76:70:27:c7:7b: 39:9d:c4:8c:9c:ee:68:4b:3a:cd:4b:cb:f4:f7:a6:59:00:31: df:e1:92:05:85:da:5e:04:08:57:d0:50:b6:55:8e:a0:6c:57: da:0b:cf:70 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUI3uAtLp24+GVr8BrLLRnq4hxBVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJmYmQyY2MwMDEyZmIyZjg2ZGI0MGI1ODliZDFhYzRl OTczMjY2ZDAeFw0yNjAxMDUwOTUwMzNaFw0yNzAxMDQwOTU1MzNaMDMxMTAvBgNV BAMTKDA4NUVCOThGM0VCRUE5OTRGQ0Y3NzMwRjNGRUEwOUQxNENDMUU4MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvQFJWMbjtPOncXOPSfAVOnecQ qkZON/qemphTAXUf6S1GajmBdOoIc6h2mKZaaXKLEyXxVFZRO9sAoVdM4ERHajsK molsU4BmaTrY4skPemjtSc8u1ehnj+0vqvdYC/UbWPVKboY8L8c/3k6BH5jR+JhO SARMAV7eNWKVVriQj3bazxKJSnJgSpxsXBdsmzVJasw5KKl+Vr8DVah+INf4v7x6 XyZi2ak+snqxvPCYqBhUZHZ4mRbsAnWXKqQxpOs0+mQfMU5pnR7PefYoCJfSNSXk H1BqQgpWrk5fVElOLdeFhrMAw/2lzvDUM2VcVps2qQTYbJ8HoJnsIprTY0E3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUCF65jz6+qZT893MPP+oJ0UzB6AYwHwYDVR0j BBgwFoAUYvvSzAAS+y+G20C1ib0axOlzJm0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAtYWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4 MzYyLzAvNjJGQkQyQ0MwMDEyRkIyRjg2REI0MEI1ODlCRDFBQzRFOTczMjY2RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1l2dlN6QUFTLXktRzIwQzFpYjBheE9s ekptMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNDZiOTNkZjAt YWM4ZC00ZGE4LWFmYjgtZGNiN2YyODg4MzYyLzAvMzQzNTJlMzkzNTJlMzYzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMDMxMzYzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1f QTANBgkqhkiG9w0BAQsFAAOCAQEAoLOhigm6T6s1dLOcQDFIVZbd+0K0vPItUSa4 QAtfdLrezlbfnVb9Gz/sLHJQKoDWScj+ubJ+2ApXI2wsSvWtxDLKUaQgrV6mC5Hj bkoVtjfmpO/+P5osSMroEKvUMtQqBCSIp9l1oheCCRh3ICXeT9ZMSZULz1D17eAF 5jF/4H5YJRIyLzOKUyT+fJFxVeJc5S1a2XnZIw+0ivVrdcR/sbOOigjXy4V+sXUc qrTyy1LSXRPUX6zk0nvTY5RTjbBOWslM21eEI7eYTu3tCjB7/tBSZ3ZwJ8d7OZ3E jJzuaEs6zUvL9PemWQAx3+GSBYXaXgQIV9BQtlWOoGxX2gvPcA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:41 2026 by rpki-client