This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e203631333137.roa File: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: wLY+uAAZaapza9rnm+rvcKy/RGqb5OINBZoQF5pW50I= Subject key identifier: 12:0F:83:AD:C5:62:6A:A2:10:20:31:ED:F4:18:D7:74:20:BF:87:AC Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 6B622EE9161766D9A16B92D4C1C84D86D4D1333B Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e203631333137.roa Signing time: Fri 16 Jan 2026 10:55:33 +0000 ROA not before: Fri 16 Jan 2026 10:50:33 +0000 ROA not after: Fri 15 Jan 2027 10:55:33 +0000 asID: 61317 IP address blocks: 45.81.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:35:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:62:2e:e9:16:17:66:d9:a1:6b:92:d4:c1:c8:4d:86:d4:d1:33:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Jan 16 10:50:33 2026 GMT Not After : Jan 15 10:55:33 2027 GMT Subject: CN=120F83ADC5626AA2102031EDF418D77420BF87AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f6:dd:73:7b:3a:08:ec:4b:0f:1e:e6:d9:62: c1:ce:a8:37:0a:a2:9f:cf:89:c3:9a:bf:8c:b1:47: f3:ff:ab:d6:77:29:70:5b:5a:04:62:2c:e3:37:88: cb:31:0c:05:f1:35:48:75:e4:00:e1:cd:00:dc:62: c1:d8:90:c4:1d:8e:97:58:d4:f4:ef:f9:f5:bd:7b: d9:85:2d:fd:3b:82:18:1f:ac:76:f4:39:8d:bb:95: ab:ed:af:e1:02:91:ed:a2:25:2f:ef:06:6b:04:34: da:9d:6f:dc:15:e7:65:34:6a:46:c0:02:3e:8a:b6: df:07:2e:52:70:07:46:62:d8:08:dc:3e:c4:57:01: e2:73:9a:db:f5:30:08:3b:68:40:c2:75:47:b0:82: 41:09:f8:a3:be:c4:e0:de:e9:cf:2c:48:24:40:be: 17:e8:6a:6f:57:41:f5:9f:24:78:47:0e:67:be:66: e7:ea:37:ee:c0:91:9b:31:18:da:13:22:48:b3:a2: 84:06:f9:72:af:78:93:2c:a0:85:62:ac:f3:96:e7: ab:13:8f:41:16:5c:4b:f7:27:b6:4c:a8:51:70:7d: 6e:a5:4c:dd:da:1c:65:ff:af:03:4a:15:b0:df:07: 80:04:17:e5:1f:6a:8f:5d:cf:26:b7:3b:d6:5d:36: d4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0F:83:AD:C5:62:6A:A2:10:20:31:ED:F4:18:D7:74:20:BF:87:AC X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/34352e38312e35372e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.57.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:79:83:c1:5e:5a:3f:cf:35:ab:44:83:75:42:68:dc:bb:58: 83:83:b2:3a:8f:a3:10:36:8f:91:1b:e2:3c:20:47:2c:84:2c: c7:0d:31:2d:ea:f3:a8:97:0b:93:2e:dd:11:72:6a:b5:c5:b9: 29:ca:12:91:06:60:2c:d8:4b:aa:d4:7d:10:8c:1d:53:31:a6: 87:b6:ef:a2:8a:bc:ad:7a:79:4b:3d:34:1c:5d:eb:a5:21:e8: 1c:a5:ab:f6:f8:1d:22:44:ea:9e:c3:59:9a:d5:76:2b:b2:49: 4d:fd:cf:b6:ba:28:3a:d3:0b:53:4d:5b:7e:4c:dd:84:e6:04: 66:b0:69:3a:a2:19:e9:49:f3:54:b7:99:d3:f2:be:6c:11:ef: eb:ce:7c:60:f4:21:b9:4a:f1:a1:a4:cb:06:f6:6c:18:63:f8: 96:7e:1b:8a:b6:48:fb:15:0a:45:f2:d7:dd:e4:9a:57:36:58: 8d:03:5a:75:7d:7a:c6:ea:07:97:11:8a:44:b6:44:14:c6:84: ac:a9:7d:1a:01:44:95:1e:34:8f:11:c3:1a:80:fb:47:e4:96: 1b:9f:5e:be:5c:64:53:84:6a:a3:88:c6:80:14:89:ac:00:c2: ab:b2:6b:95:b2:44:6a:1f:4c:ea:e7:68:e9:5b:15:fa:b8:4e: e0:ca:c0:4a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUa2Iu6RYXZtmha5LUwchNhtTRMzswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNjAxMTYxMDUwMzNaFw0yNzAxMTUxMDU1MzNaMDMxMTAvBgNV BAMTKDEyMEY4M0FEQzU2MjZBQTIxMDIwMzFFREY0MThENzc0MjBCRjg3QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX9t1zezoI7EsPHubZYsHOqDcK op/PicOav4yxR/P/q9Z3KXBbWgRiLOM3iMsxDAXxNUh15ADhzQDcYsHYkMQdjpdY 1PTv+fW9e9mFLf07ghgfrHb0OY27lavtr+ECke2iJS/vBmsENNqdb9wV52U0akbA Aj6Ktt8HLlJwB0Zi2AjcPsRXAeJzmtv1MAg7aEDCdUewgkEJ+KO+xODe6c8sSCRA vhfoam9XQfWfJHhHDme+ZufqN+7AkZsxGNoTIkizooQG+XKveJMsoIVirPOW56sT j0EWXEv3J7ZMqFFwfW6lTN3aHGX/rwNKFbDfB4AEF+Ufao9dzya3O9ZdNtR5AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUEg+DrcViaqIQIDHt9BjXdCC/h6wwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYmYyNDU2N2It N2E3NC00YzFmLWFhODUtZGQyNGFmNzNjY2JiLzAvMzQzNTJlMzgzMTJlMzUzNzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtUTkw DQYJKoZIhvcNAQELBQADggEBAF55g8FeWj/PNatEg3VCaNy7WIODsjqPoxA2j5Eb 4jwgRyyELMcNMS3q86iXC5Mu3RFyarXFuSnKEpEGYCzYS6rUfRCMHVMxpoe276KK vK16eUs9NBxd66Uh6Bylq/b4HSJE6p7DWZrVdiuySU39z7a6KDrTC1NNW35M3YTm BGawaTqiGelJ81S3mdPyvmwR7+vOfGD0IblK8aGkywb2bBhj+JZ+G4q2SPsVCkXy 193kmlc2WI0DWnV9esbqB5cRikS2RBTGhKypfRoBRJUeNI8RwxqA+0fklhufXr5c ZFOEaqOIxoAUiawAwquya5WyRGofTOrnaOlbFfq4TuDKwEo= -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:23 2026 by rpki-client