This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20383334.roa File: 34352e382e3137332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: qQ1tzHUZIZEb5XbLljDQmm9eLYLTYU4JE96t4BjRAw0= Subject key identifier: 9B:E2:45:7D:B0:31:24:95:04:64:F9:9B:36:40:39:77:E9:2B:4C:13 Certificate issuer: /CN=cefce449bea8deaedb1804dba25c584df5873dc4 Certificate serial: 1CB8AB1434025896A1C93EE765425FA378D2F199 Authority key identifier: CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20383334.roa Signing time: Fri 23 Jan 2026 13:20:49 +0000 ROA not before: Fri 23 Jan 2026 13:15:49 +0000 ROA not after: Fri 22 Jan 2027 13:20:49 +0000 asID: 834 IP address blocks: 45.8.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.mft rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b8:ab:14:34:02:58:96:a1:c9:3e:e7:65:42:5f:a3:78:d2:f1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cefce449bea8deaedb1804dba25c584df5873dc4 Validity Not Before: Jan 23 13:15:49 2026 GMT Not After : Jan 22 13:20:49 2027 GMT Subject: CN=9BE2457DB03124950464F99B36403977E92B4C13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:41:06:31:52:af:83:52:fa:2a:85:b8:19: 9a:dd:f4:f2:5d:7d:14:0f:04:22:21:cd:d2:a4:41: b3:23:d6:43:b7:56:fc:5b:0e:9b:d7:4e:9b:07:47: a5:d8:bb:46:3a:21:27:a8:16:43:3e:55:4d:33:48: fe:77:ec:70:54:33:03:ea:a2:08:89:0e:34:91:0d: 71:e1:fa:e0:fb:40:b1:9e:11:56:ac:a8:4e:cf:f0: 76:ca:1b:08:aa:e2:d9:53:dc:a8:b8:37:c3:8f:5c: 50:73:ec:10:4f:7f:c0:a1:41:bc:fb:da:2b:29:b4: a6:96:43:64:64:4b:8a:5d:e3:b2:60:9b:69:ed:0b: 02:d9:5a:bc:c7:ac:63:62:c9:2c:fc:62:67:e8:ba: f8:57:57:1a:f6:fd:58:d8:94:82:15:d5:92:81:d0: f6:6f:d3:b8:32:4f:9d:d6:0e:d8:15:45:cb:16:a5: 7c:3c:09:89:11:8f:a8:c9:dd:12:03:c1:f2:29:f5: 67:13:74:24:37:b0:de:42:e0:6a:ef:5e:52:e7:01: 4b:71:7b:91:0d:7f:a4:02:b6:a8:04:87:f0:18:b4: 6f:09:0d:3e:30:a6:e8:19:23:c9:d2:de:e1:bd:75: 7c:24:17:4f:fc:41:e9:4c:71:de:3c:4e:71:f7:c9: 76:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E2:45:7D:B0:31:24:95:04:64:F9:9B:36:40:39:77:E9:2B:4C:13 X509v3 Authority Key Identifier: keyid:CE:FC:E4:49:BE:A8:DE:AE:DB:18:04:DB:A2:5C:58:4D:F5:87:3D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/CEFCE449BEA8DEAEDB1804DBA25C584DF5873DC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvzkSb6o3q7bGATbolxYTfWHPcQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d1b35f8b-6f48-4bad-b185-5c1daa8acda9/0/34352e382e3137332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.173.0/24 Signature Algorithm: sha256WithRSAEncryption cc:25:ac:15:91:4a:13:62:f8:b7:30:67:29:36:62:62:ef:de: 98:cf:6f:2b:71:ef:0b:24:9e:a1:d1:71:56:df:86:dd:67:7f: 96:2f:2e:e8:71:11:79:69:ce:8d:c4:78:15:ca:74:0d:9c:d0: 12:93:79:66:7b:38:cc:57:3a:8e:ac:7f:9e:9e:d8:a7:88:26: 9a:bd:6e:64:94:3d:f7:35:f0:1e:ab:5d:d2:dc:d4:72:13:bb: 90:89:07:12:10:e0:d3:7d:65:e2:86:99:ce:fb:6b:02:87:49: 10:08:1c:1c:76:7e:67:09:5a:b5:38:e6:4b:ea:0d:82:e2:8b: 98:61:01:9d:25:50:a9:f9:99:15:ab:ea:1d:fb:6f:80:58:ba: 12:38:fe:f6:fc:92:89:cd:46:0c:8e:b0:ea:9e:be:4b:e4:25: 3c:0f:eb:26:d4:fd:19:05:a2:8a:82:11:1b:07:d7:ed:72:ce: 8d:19:07:5b:e0:50:83:4f:52:7a:d9:06:7c:85:a2:ee:9c:a8: 4d:54:e2:b3:4d:f0:93:23:1c:06:79:7b:13:d0:8e:42:d6:31: 6c:38:60:eb:14:dd:51:2d:a0:0e:95:3e:27:3b:45:b2:9c:e0: a1:9f:fc:51:6c:54:e4:72:05:14:36:71:23:c4:67:9b:0b:53: e2:56:12:cf -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUHLirFDQCWJahyT7nZUJfo3jS8ZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoY2VmY2U0NDliZWE4ZGVhZWRiMTgwNGRiYTI1YzU4NGRm NTg3M2RjNDAeFw0yNjAxMjMxMzE1NDlaFw0yNzAxMjIxMzIwNDlaMDMxMTAvBgNV BAMTKDlCRTI0NTdEQjAzMTI0OTUwNDY0Rjk5QjM2NDAzOTc3RTkyQjRDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnfUEGMVKvg1L6KoW4GZrd9PJd fRQPBCIhzdKkQbMj1kO3VvxbDpvXTpsHR6XYu0Y6ISeoFkM+VU0zSP537HBUMwPq ogiJDjSRDXHh+uD7QLGeEVasqE7P8HbKGwiq4tlT3Ki4N8OPXFBz7BBPf8ChQbz7 2isptKaWQ2RkS4pd47Jgm2ntCwLZWrzHrGNiySz8YmfouvhXVxr2/VjYlIIV1ZKB 0PZv07gyT53WDtgVRcsWpXw8CYkRj6jJ3RIDwfIp9WcTdCQ3sN5C4GrvXlLnAUtx e5ENf6QCtqgEh/AYtG8JDT4wpugZI8nS3uG9dXwkF0/8QelMcd48TnH3yXb3AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUm+JFfbAxJJUEZPmbNkA5d+krTBMwHwYDVR0j BBgwFoAUzvzkSb6o3q7bGATbolxYTfWHPcQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDFiMzVmOGItNmY0OC00YmFkLWIxODUtNWMxZGFhOGFj ZGE5LzAvQ0VGQ0U0NDlCRUE4REVBRURCMTgwNERCQTI1QzU4NERGNTg3M0RDNC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3p2emtTYjZvM3E3YkdBVGJvbHhZVGZX SFBjUS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZDFiMzVmOGIt NmY0OC00YmFkLWIxODUtNWMxZGFhOGFjZGE5LzAvMzQzNTJlMzgyZTMxMzczMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC0IrTANBgkq hkiG9w0BAQsFAAOCAQEAzCWsFZFKE2L4tzBnKTZiYu/emM9vK3HvCySeodFxVt+G 3Wd/li8u6HEReWnOjcR4Fcp0DZzQEpN5Zns4zFc6jqx/np7Yp4gmmr1uZJQ99zXw Hqtd0tzUchO7kIkHEhDg031l4oaZzvtrAodJEAgcHHZ+ZwlatTjmS+oNguKLmGEB nSVQqfmZFavqHftvgFi6Ejj+9vySic1GDI6w6p6+S+QlPA/rJtT9GQWiioIRGwfX 7XLOjRkHW+BQg09SetkGfIWi7pyoTVTis03wkyMcBnl7E9COQtYxbDhg6xTdUS2g DpU+JztFspzgoZ/8UWxU5HIFFDZxI8RnmwtT4lYSzw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:04 2026 by rpki-client