This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203136323736.roa File: 34352e3134302e33362e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: YE94fuCtLJmvEhZZYY+osVagEB1zJux37+nlYqs1In8= Subject key identifier: 1F:C6:88:D1:51:74:CC:80:8D:64:66:74:4D:DB:F7:6B:69:DD:01:29 Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 04BDCE554FA3A8F40FF131E61F5E9E87A35CB63B Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203136323736.roa Signing time: Mon 19 Jan 2026 13:55:34 +0000 ROA not before: Mon 19 Jan 2026 13:50:34 +0000 ROA not after: Mon 18 Jan 2027 13:55:34 +0000 asID: 16276 IP address blocks: 45.140.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:bd:ce:55:4f:a3:a8:f4:0f:f1:31:e6:1f:5e:9e:87:a3:5c:b6:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Jan 19 13:50:34 2026 GMT Not After : Jan 18 13:55:34 2027 GMT Subject: CN=1FC688D15174CC808D6466744DDBF76B69DD0129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:68:65:b6:b2:e1:42:f9:a0:0a:a3:16:0c:ad: 32:69:7c:71:5d:d7:e2:11:f2:1d:a7:cf:5c:14:8a: 1e:39:37:e7:a5:01:aa:d8:a4:98:f4:7d:55:7e:35: 0c:74:f3:e3:9c:86:8b:bf:b0:08:47:0a:eb:a8:d5: 6b:3f:bf:cd:ca:33:9b:78:26:9c:39:e4:a3:e7:73: 0a:78:e3:7b:09:62:01:6e:53:0c:66:3d:7a:be:a5: 6c:4b:d7:01:78:40:54:b2:37:b8:03:49:ec:b2:f4: 06:0b:7e:ac:69:3f:01:9e:16:a7:5e:56:16:ae:ca: 80:d8:ba:c2:d9:bc:47:4c:a8:15:bb:97:8f:23:9f: 46:a4:84:6d:5e:5b:a6:09:66:36:b6:4b:e0:14:c6: 43:6d:98:5b:8a:e8:ff:de:32:50:be:01:6d:74:9a: 20:a5:0d:38:f6:72:d4:d3:0c:bb:14:06:1e:e8:49: f0:89:7c:95:ba:b0:68:0d:6d:6b:06:60:39:de:a3: 83:47:b2:55:8e:a2:1c:23:38:c8:09:46:80:4f:ca: c1:33:a5:cb:09:ab:b2:91:3b:6d:81:62:2c:d8:97: 83:fe:53:8f:5c:1f:82:e7:38:5c:43:20:3a:49:bf: a8:0d:e3:0a:45:09:f1:f2:30:81:4f:88:85:69:bc: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:88:D1:51:74:CC:80:8D:64:66:74:4D:DB:F7:6B:69:DD:01:29 X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134302e33362e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.36.0/24 Signature Algorithm: sha256WithRSAEncryption 13:ff:3b:b3:46:a7:18:90:7b:ca:34:cb:aa:5a:d7:9d:46:3f: 85:53:70:5a:7f:70:1a:5b:6e:30:05:3a:14:66:ec:8c:5a:1e: 23:5b:56:68:a3:b9:8b:aa:34:67:ca:c1:dd:7e:66:c3:ed:39: 70:26:05:e1:e4:8c:e0:24:78:84:53:4c:00:cf:cb:8b:0a:f2: 03:d4:d0:65:ac:a3:25:94:a5:e0:29:3e:63:ad:02:74:97:e9: 01:a2:0a:3b:b3:94:5a:66:16:63:c5:99:1c:48:4a:00:9d:28: 71:57:96:79:00:72:70:50:57:d7:c3:83:06:44:01:d4:af:60: 7f:30:33:20:f2:eb:5d:79:8c:62:5a:02:65:4e:bd:60:91:73: f6:ab:78:fa:09:6b:84:70:7f:34:5e:06:56:db:a0:85:83:f1: 8e:0f:58:ff:8e:93:e6:c3:5f:36:e9:bf:d3:b2:0a:98:83:ba: c9:38:a7:fd:42:0a:1a:f7:ff:24:85:e9:b8:68:de:32:49:fe: fd:f1:d5:fc:fd:1c:cb:86:b6:45:a4:9a:27:18:5c:35:ba:26: ed:e4:18:95:c3:6a:e8:1b:ff:f7:56:81:de:0c:08:4c:60:7c: ef:b8:03:93:14:e3:e1:0e:4b:84:15:fd:7c:bb:3a:d7:cd:ff: b3:13:88:62 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBL3OVU+jqPQP8THmH16eh6NctjswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNjAxMTkxMzUwMzRaFw0yNzAxMTgxMzU1MzRaMDMxMTAvBgNV BAMTKDFGQzY4OEQxNTE3NENDODA4RDY0NjY3NDREREJGNzZCNjlERDAxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4aGW2suFC+aAKoxYMrTJpfHFd 1+IR8h2nz1wUih45N+elAarYpJj0fVV+NQx08+Ochou/sAhHCuuo1Ws/v83KM5t4 Jpw55KPncwp443sJYgFuUwxmPXq+pWxL1wF4QFSyN7gDSeyy9AYLfqxpPwGeFqde VhauyoDYusLZvEdMqBW7l48jn0akhG1eW6YJZja2S+AUxkNtmFuK6P/eMlC+AW10 miClDTj2ctTTDLsUBh7oSfCJfJW6sGgNbWsGYDneo4NHslWOohwjOMgJRoBPysEz pcsJq7KRO22BYizYl4P+U49cH4LnOFxDIDpJv6gN4wpFCfHyMIFPiIVpvIhxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUH8aI0VF0zICNZGZ0Tdv3a2ndASkwHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDMwMmUzMzM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2M JDANBgkqhkiG9w0BAQsFAAOCAQEAE/87s0anGJB7yjTLqlrXnUY/hVNwWn9wGltu MAU6FGbsjFoeI1tWaKO5i6o0Z8rB3X5mw+05cCYF4eSM4CR4hFNMAM/LiwryA9TQ ZayjJZSl4Ck+Y60CdJfpAaIKO7OUWmYWY8WZHEhKAJ0ocVeWeQBycFBX18ODBkQB 1K9gfzAzIPLrXXmMYloCZU69YJFz9qt4+glrhHB/NF4GVtughYPxjg9Y/46T5sNf Num/07IKmIO6yTin/UIKGvf/JIXpuGjeMkn+/fHV/P0cy4a2RaSaJxhcNbom7eQY lcNq6Bv/91aB3gwITGB877gDkxTj4Q5LhBX9fLs6183/sxOIYg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:58:51 2026 by rpki-client