This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa File: 34352e3134392e36322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: K8ltTDgW9HfANPuVJSFbKlcEJqaQBf+iEfDLJr+tHyE= Subject key identifier: 67:65:5F:1D:E5:99:F3:CC:A1:9A:45:FD:6D:10:47:62:A0:27:F9:BE Certificate issuer: /CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Certificate serial: 71C331364D6C75FE04C001CF79B12575D0FDC9D2 Authority key identifier: ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa Signing time: Sat 17 Jan 2026 09:19:24 +0000 ROA not before: Sat 17 Jan 2026 09:14:24 +0000 ROA not after: Sat 16 Jan 2027 09:19:24 +0000 asID: 834 IP address blocks: 45.149.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.mft rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:10:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c3:31:36:4d:6c:75:fe:04:c0:01:cf:79:b1:25:75:d0:fd:c9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed8f9a7c71d9400739bb8fc9716e4342ff6d645b Validity Not Before: Jan 17 09:14:24 2026 GMT Not After : Jan 16 09:19:24 2027 GMT Subject: CN=67655F1DE599F3CCA19A45FD6D104762A027F9BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c1:8a:e3:0c:bf:8d:76:28:48:59:16:47:27: 32:e9:b7:76:0e:d5:26:82:30:a8:73:cc:5a:77:cf: 26:e7:05:51:e8:9e:95:a8:a6:ac:a7:66:ef:54:e4: 73:5c:99:99:6e:bd:5a:39:92:d8:cd:5c:f6:86:d0: 5e:e2:b9:ea:ef:38:e9:b4:b7:44:8f:65:2d:ac:15: ee:b9:b0:73:a4:21:40:e1:92:0d:47:95:f0:bd:76: 78:bc:44:1f:46:22:88:63:9b:0c:ec:60:30:28:43: e0:71:a3:1d:c4:c7:a1:93:ae:76:02:d5:b9:6c:36: 1d:4a:35:ba:05:7d:15:df:14:7f:03:7b:ba:b3:ea: 45:92:3a:a6:6f:27:e6:de:3c:ab:86:7d:2c:09:fe: e0:3e:7a:cd:d2:7f:18:65:09:1e:00:b5:1c:a2:a1: 50:69:38:d3:cf:6c:ff:b1:1a:26:12:b0:4f:29:2c: 4a:16:aa:04:3c:9e:4b:4c:b5:60:1a:d4:ca:ce:47: 9e:1f:6e:2e:5d:46:5f:c6:d7:da:ba:a3:f0:f0:9e: 65:2a:f1:45:bb:f1:ae:9a:bd:76:6f:bd:95:38:8f: fe:4e:ef:a8:ba:06:97:f0:23:fb:43:f1:56:45:98: 08:2f:76:ad:aa:41:16:e4:e6:71:06:da:ab:a6:77: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:65:5F:1D:E5:99:F3:CC:A1:9A:45:FD:6D:10:47:62:A0:27:F9:BE X509v3 Authority Key Identifier: keyid:ED:8F:9A:7C:71:D9:40:07:39:BB:8F:C9:71:6E:43:42:FF:6D:64:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/ED8F9A7C71D9400739BB8FC9716E4342FF6D645B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y-afHHZQAc5u4_JcW5DQv9tZFs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/703079de-38a7-45f3-aa82-542eaf373760/0/34352e3134392e36322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.62.0/24 Signature Algorithm: sha256WithRSAEncryption 16:48:0a:ba:80:94:75:97:f9:fe:aa:90:25:de:fa:87:d3:8c: a7:7a:aa:99:22:dc:b0:a2:df:de:72:6f:e2:11:81:12:28:ed: 7c:c6:7c:fc:af:cc:21:ba:7c:bd:3f:70:1d:78:d6:33:c9:fb: cf:7b:ca:5c:20:87:f3:9a:8a:a6:72:d8:e9:87:5c:b5:35:d8: d5:e1:9e:73:dd:d5:b2:a1:1f:a1:00:0a:2a:cd:ec:5e:e6:64: f9:33:d7:a8:9a:c2:63:c6:79:19:75:f6:d7:83:26:be:22:4f: aa:68:56:b7:c4:76:4f:c2:7c:9a:3d:ed:1b:cf:55:71:e6:64: b9:e3:05:d3:70:e1:68:80:de:05:42:e1:1a:a8:37:a8:f3:b5: 28:f3:5b:e1:b2:16:7b:07:6c:dd:a6:11:8f:f4:40:44:26:ec: ed:f5:55:02:60:45:2a:36:ff:a5:e4:7b:0c:e5:cf:78:9e:04: 9e:3a:dc:b4:c7:6b:75:f1:93:1a:7b:0a:58:04:c7:48:53:1b: 70:c1:d5:60:32:e3:c4:19:16:ec:a9:90:f2:c9:7f:af:82:dd: 2c:8b:2e:c1:60:2b:65:a5:45:d7:48:c0:f9:f6:00:df:6b:dd: 27:de:12:b2:13:fd:45:0e:f2:26:2a:92:31:ee:28:5c:ea:60: fd:23:ac:dc -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUccMxNk1sdf4EwAHPebElddD9ydIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWQ4ZjlhN2M3MWQ5NDAwNzM5YmI4ZmM5NzE2ZTQzNDJm ZjZkNjQ1YjAeFw0yNjAxMTcwOTE0MjRaFw0yNzAxMTYwOTE5MjRaMDMxMTAvBgNV BAMTKDY3NjU1RjFERTU5OUYzQ0NBMTlBNDVGRDZEMTA0NzYyQTAyN0Y5QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRwYrjDL+NdihIWRZHJzLpt3YO 1SaCMKhzzFp3zybnBVHonpWopqynZu9U5HNcmZluvVo5ktjNXPaG0F7iuervOOm0 t0SPZS2sFe65sHOkIUDhkg1HlfC9dni8RB9GIohjmwzsYDAoQ+Bxox3Ex6GTrnYC 1blsNh1KNboFfRXfFH8De7qz6kWSOqZvJ+bePKuGfSwJ/uA+es3SfxhlCR4AtRyi oVBpONPPbP+xGiYSsE8pLEoWqgQ8nktMtWAa1MrOR54fbi5dRl/G19q6o/DwnmUq 8UW78a6avXZvvZU4j/5O76i6BpfwI/tD8VZFmAgvdq2qQRbk5nEG2qumd8odAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUZ2VfHeWZ88yhmkX9bRBHYqAn+b4wHwYDVR0j BBgwFoAU7Y+afHHZQAc5u4/JcW5DQv9tZFswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUtMzhhNy00NWYzLWFhODItNTQyZWFmMzcz NzYwLzAvRUQ4RjlBN0M3MUQ5NDAwNzM5QkI4RkM5NzE2RTQzNDJGRjZENjQ1Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdZLWFmSEhaUUFjNXU0X0pjVzVEUXY5 dFpGcy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNzAzMDc5ZGUt MzhhNy00NWYzLWFhODItNTQyZWFmMzczNzYwLzAvMzQzNTJlMzEzNDM5MmUzNjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZU+MA0G CSqGSIb3DQEBCwUAA4IBAQAWSAq6gJR1l/n+qpAl3vqH04yneqqZItywot/ecm/i EYESKO18xnz8r8whuny9P3AdeNYzyfvPe8pcIIfzmoqmctjph1y1NdjV4Z5z3dWy oR+hAAoqzexe5mT5M9eomsJjxnkZdfbXgya+Ik+qaFa3xHZPwnyaPe0bz1Vx5mS5 4wXTcOFogN4FQuEaqDeo87Uo81vhshZ7B2zdphGP9EBEJuzt9VUCYEUqNv+l5HsM 5c94ngSeOty0x2t18ZMaewpYBMdIUxtwwdVgMuPEGRbsqZDyyX+vgt0siy7BYCtl pUXXSMD59gDfa90n3hKyE/1FDvImKpIx7ihc6mD9I6zc -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:27 2026 by rpki-client