This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa File: 34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa (raw, json) Hash identifier: Jv5hg7ZMCRB06s35wjHY/AJp0QtnS8MPIuq3o7PIiYc= Subject key identifier: 9D:50:DA:31:30:75:6D:EB:57:F7:42:F6:08:7B:88:6D:E1:B1:33:EB Certificate issuer: /CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Certificate serial: 28B129F2280A7C80CEC7914C29D7487FEDAC167E Authority key identifier: 83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa Signing time: Fri 09 Jan 2026 19:55:33 +0000 ROA not before: Fri 09 Jan 2026 19:50:33 +0000 ROA not after: Fri 08 Jan 2027 19:55:33 +0000 asID: 269070 IP address blocks: 45.145.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.mft rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b1:29:f2:28:0a:7c:80:ce:c7:91:4c:29:d7:48:7f:ed:ac:16:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=830e06419fc46a2802f6f03b71368ac7baaf64ce Validity Not Before: Jan 9 19:50:33 2026 GMT Not After : Jan 8 19:55:33 2027 GMT Subject: CN=9D50DA3130756DEB57F742F6087B886DE1B133EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:65:eb:26:ad:f1:8c:ac:ca:ff:8a:63:c9: b9:98:28:d8:03:8d:62:aa:31:9e:ab:d4:5c:d0:8d: bf:12:28:f0:fd:56:18:fb:32:9c:67:ba:a6:f2:8e: 47:ef:2a:9b:79:79:b1:21:38:28:9a:46:73:da:6a: c1:52:7d:09:ce:88:38:da:af:e7:e1:65:3f:81:bc: 41:15:58:0b:eb:10:97:8d:36:db:4f:e1:94:28:7b: 22:bf:1f:6b:bd:72:48:0d:85:23:9a:62:dd:79:de: 0d:4d:db:9e:e5:65:44:38:1c:95:a1:7d:f3:cf:70: 6e:49:78:08:cf:76:ad:ab:96:8d:7c:16:26:a2:7e: 64:14:53:ae:ba:1f:12:cf:59:6a:ff:c4:74:bd:41: 42:2f:e9:1f:8b:a0:d7:c7:4c:39:f1:98:f3:ad:c7: dc:87:03:f1:28:89:96:d7:43:28:a5:fd:06:59:c5: 6f:f3:f1:e3:98:9e:00:a5:39:02:16:57:61:19:fe: 82:6f:41:e2:23:49:56:c7:08:64:97:a0:3d:e6:44: cc:f3:4c:23:bc:83:a3:c6:87:48:47:2b:f2:72:48: 4d:2b:1f:f0:43:fc:67:13:74:de:1e:b1:1e:79:b6: 5d:21:05:48:72:dd:79:28:f3:03:1d:b9:f9:1f:8d: e1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:50:DA:31:30:75:6D:EB:57:F7:42:F6:08:7B:88:6D:E1:B1:33:EB X509v3 Authority Key Identifier: keyid:83:0E:06:41:9F:C4:6A:28:02:F6:F0:3B:71:36:8A:C7:BA:AF:64:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/830E06419FC46A2802F6F03B71368AC7BAAF64CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gw4GQZ_EaigC9vA7cTaKx7qvZM4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8e0d6a4d-ba67-4979-8d12-0ed4748fc86e/0/34352e3134352e3234302e302f32342d3234203d3e20323639303730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.240.0/24 Signature Algorithm: sha256WithRSAEncryption 23:72:f2:77:e9:56:f9:a1:32:aa:ed:a6:9b:23:c0:11:34:6d: d6:07:da:ce:18:43:d8:c2:36:e5:74:bb:7f:7c:81:2b:38:43: 52:5a:0a:bc:a6:f7:39:43:d8:8c:6d:d6:d2:12:c8:60:ce:25: 25:2e:28:bc:7f:48:c7:27:a4:00:6d:82:8d:06:7f:e6:14:b7: 97:3b:a9:0f:03:29:5c:7e:d0:d1:c2:3e:1c:f6:ad:2c:86:0f: 4c:44:bd:bd:70:b6:0d:3e:6e:f9:7c:7a:69:84:ec:e6:4e:05: 47:f5:75:65:4d:dd:84:b3:7e:5e:b9:56:7c:78:e0:19:f2:b6: d4:31:c8:ef:88:74:8c:c5:68:9b:a4:b8:1d:42:1c:88:b9:d8: 7c:b3:86:e7:2c:67:69:2b:fb:19:43:dd:e2:dc:7f:5e:7d:12: 1f:8e:bb:97:c1:8e:ff:fa:8c:28:c9:af:f6:c5:c2:15:05:d8: c7:31:20:a4:80:bc:9a:23:b6:0d:38:d8:67:a7:8c:21:99:a2: d2:a9:31:c5:9a:68:bf:80:14:45:10:b6:14:f7:df:39:5a:3c: c4:25:8b:9e:cf:d9:16:fd:51:43:e6:73:b1:52:0f:ad:ea:34: bd:19:92:db:f7:ae:e1:50:15:61:fe:a7:16:7f:64:87:e8:50: b0:a9:b8:38 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKLEp8igKfIDOx5FMKddIf+2sFn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODMwZTA2NDE5ZmM0NmEyODAyZjZmMDNiNzEzNjhhYzdi YWFmNjRjZTAeFw0yNjAxMDkxOTUwMzNaFw0yNzAxMDgxOTU1MzNaMDMxMTAvBgNV BAMTKDlENTBEQTMxMzA3NTZERUI1N0Y3NDJGNjA4N0I4ODZERTFCMTMzRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6tmXrJq3xjKzK/4pjybmYKNgD jWKqMZ6r1FzQjb8SKPD9Vhj7MpxnuqbyjkfvKpt5ebEhOCiaRnPaasFSfQnOiDja r+fhZT+BvEEVWAvrEJeNNttP4ZQoeyK/H2u9ckgNhSOaYt153g1N257lZUQ4HJWh ffPPcG5JeAjPdq2rlo18FiaifmQUU666HxLPWWr/xHS9QUIv6R+LoNfHTDnxmPOt x9yHA/EoiZbXQyil/QZZxW/z8eOYngClOQIWV2EZ/oJvQeIjSVbHCGSXoD3mRMzz TCO8g6PGh0hHK/JySE0rH/BD/GcTdN4esR55tl0hBUhy3Xko8wMdufkfjeHZAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUnVDaMTB1betX90L2CHuIbeGxM+swHwYDVR0j BBgwFoAUgw4GQZ/EaigC9vA7cTaKx7qvZM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQtYmE2Ny00OTc5LThkMTItMGVkNDc0OGZj ODZlLzAvODMwRTA2NDE5RkM0NkEyODAyRjZGMDNCNzEzNjhBQzdCQUFGNjRDRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2d3NEdRWl9FYWlnQzl2QTdjVGFLeDdx dlpNNC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOGUwZDZhNGQt YmE2Ny00OTc5LThkMTItMGVkNDc0OGZjODZlLzAvMzQzNTJlMzEzNDM1MmUzMjM0 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzkzMDM3MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAtkfAwDQYJKoZIhvcNAQELBQADggEBACNy8nfpVvmhMqrtppsjwBE0bdYH2s4Y Q9jCNuV0u398gSs4Q1JaCrym9zlD2Ixt1tISyGDOJSUuKLx/SMcnpABtgo0Gf+YU t5c7qQ8DKVx+0NHCPhz2rSyGD0xEvb1wtg0+bvl8emmE7OZOBUf1dWVN3YSzfl65 Vnx44BnyttQxyO+IdIzFaJukuB1CHIi52HyzhucsZ2kr+xlD3eLcf159Eh+Ou5fB jv/6jCjJr/bFwhUF2McxIKSAvJojtg042GenjCGZotKpMcWaaL+AFEUQthT33zla PMQli57P2Rb9UUPmc7FSD63qNL0Zktv3ruFQFWH+pxZ/ZIfoULCpuDg= -----END CERTIFICATE-----Generated at Sun Jan 25 10:23:09 2026 by rpki-client