This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e352e302f32342d3234203d3e20323039383534.roa File: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (raw, json) Hash identifier: Crd2ncf4lQNUDj/2Yu6qDEEKdYEoj89TZ7JLTUVoXfY= Subject key identifier: 35:C6:B1:E3:A1:A8:82:BC:BD:18:BF:57:9D:06:BF:51:6F:CB:17:B1 Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 509B8729D26C2FA082412B51D525F9C14F35FCB6 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e352e302f32342d3234203d3e20323039383534.roa Signing time: Tue 20 Jan 2026 11:55:34 +0000 ROA not before: Tue 20 Jan 2026 11:50:34 +0000 ROA not after: Tue 19 Jan 2027 11:55:34 +0000 asID: 209854 IP address blocks: 45.150.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9b:87:29:d2:6c:2f:a0:82:41:2b:51:d5:25:f9:c1:4f:35:fc:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Jan 20 11:50:34 2026 GMT Not After : Jan 19 11:55:34 2027 GMT Subject: CN=35C6B1E3A1A882BCBD18BF579D06BF516FCB17B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:70:a2:f5:c3:ce:fa:e9:e3:c3:d4:37:0e:02: a5:cc:73:f9:64:6b:b2:0d:dd:3d:1b:bf:e0:5f:c3: bb:eb:a5:d7:a1:0f:37:53:2a:ec:12:8a:cd:a9:f7: 50:8c:c7:5c:ff:0f:f5:66:1f:65:72:1a:e1:8e:41: a4:c0:30:cc:48:0b:4a:8a:d5:63:1a:58:3d:f8:3d: db:f4:ad:35:a2:77:82:84:00:21:50:30:75:49:18: da:bf:b2:83:b9:ec:4e:25:ef:2c:79:fb:f1:51:82: eb:90:48:66:9a:73:b8:10:d5:3f:83:7b:d2:6f:c3: fe:ae:01:2c:2a:df:ca:06:3c:89:e3:ab:c9:c8:37: ce:b8:67:2c:20:da:a2:b4:8d:85:88:d8:55:42:26: e3:0a:4b:79:59:02:af:cc:8a:c0:4c:1b:44:6a:97: c8:8a:7e:76:fc:2a:41:0d:d8:70:4e:87:44:c3:ef: 09:c9:ef:16:5c:3e:b1:71:8b:35:5e:0f:96:97:fb: 98:e3:6f:7e:9f:f1:47:e8:0c:a1:69:3d:c5:ae:68: 65:e3:ca:f5:24:81:2b:2e:ad:59:39:8c:2b:aa:44: 43:99:8e:c2:a0:28:ef:0f:11:2a:c1:18:38:a1:7b: a7:78:d4:54:94:b8:bd:f9:9a:3e:4d:9e:cb:d7:ff: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C6:B1:E3:A1:A8:82:BC:BD:18:BF:57:9D:06:BF:51:6F:CB:17:B1 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/34352e3135302e352e302f32342d3234203d3e20323039383534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.150.5.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ef:85:f1:08:2b:73:3f:4c:41:8c:53:6e:07:30:da:bf:1e: 3e:a7:89:99:c6:ce:b8:a7:04:4e:77:bb:36:27:8a:18:dc:31: b7:08:1f:b0:84:14:ff:a1:58:01:85:ca:40:11:37:67:8f:a3: 44:0f:bb:d5:13:ba:49:c7:45:25:be:80:fd:c0:0f:8d:73:cb: f2:c7:8a:02:50:6a:a6:86:2c:93:72:4c:49:87:f4:e7:ce:b1: c2:0a:be:81:fb:22:a9:66:64:67:f9:90:11:2f:b5:83:ea:1d: d0:34:45:91:49:a9:0b:52:d2:50:f5:1b:b0:b4:66:25:38:86: ff:10:a1:33:d2:f1:f5:e3:57:41:99:bc:cb:b9:d9:72:83:e0: 44:2e:1f:fe:4c:c7:df:2d:62:63:fb:7e:76:39:f6:10:72:91: 43:fd:3c:2c:49:57:15:18:0a:49:08:73:1d:53:82:53:5a:f1: 20:e4:1c:a2:0c:c5:95:65:ba:66:b7:03:4b:03:5c:ae:11:c0: c0:42:49:8d:2d:fb:43:79:29:46:ff:56:77:ce:b3:e1:dd:1d: 6e:fd:c9:eb:62:78:3c:cb:4a:8f:0e:81:ce:ab:cc:24:06:6b: ff:22:97:cd:c6:35:68:25:c9:32:b4:da:a0:8a:a8:9f:2e:dd: fc:65:4c:35 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUUJuHKdJsL6CCQStR1SX5wU81/LYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNjAxMjAxMTUwMzRaFw0yNzAxMTkxMTU1MzRaMDMxMTAvBgNV BAMTKDM1QzZCMUUzQTFBODgyQkNCRDE4QkY1NzlEMDZCRjUxNkZDQjE3QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDScKL1w8766ePD1DcOAqXMc/lk a7IN3T0bv+Bfw7vrpdehDzdTKuwSis2p91CMx1z/D/VmH2VyGuGOQaTAMMxIC0qK 1WMaWD34Pdv0rTWid4KEACFQMHVJGNq/soO57E4l7yx5+/FRguuQSGaac7gQ1T+D e9Jvw/6uASwq38oGPInjq8nIN864Zywg2qK0jYWI2FVCJuMKS3lZAq/MisBMG0Rq l8iKfnb8KkEN2HBOh0TD7wnJ7xZcPrFxizVeD5aX+5jjb36f8UfoDKFpPcWuaGXj yvUkgSsurVk5jCuqREOZjsKgKO8PESrBGDihe6d41FSUuL35mj5NnsvX/+fFAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUNcax46Gogry9GL9XnQa/UW/LF7EwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYt N2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZlMDMxLzAvMzQzNTJlMzEzNTMwMmUzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzOTM4MzUzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2W BTANBgkqhkiG9w0BAQsFAAOCAQEAmu+F8Qgrcz9MQYxTbgcw2r8ePqeJmcbOuKcE Tne7NieKGNwxtwgfsIQU/6FYAYXKQBE3Z4+jRA+71RO6ScdFJb6A/cAPjXPL8seK AlBqpoYsk3JMSYf0586xwgq+gfsiqWZkZ/mQES+1g+od0DRFkUmpC1LSUPUbsLRm JTiG/xChM9Lx9eNXQZm8y7nZcoPgRC4f/kzH3y1iY/t+djn2EHKRQ/08LElXFRgK SQhzHVOCU1rxIOQcogzFlWW6ZrcDSwNcrhHAwEJJjS37Q3kpRv9Wd86z4d0dbv3J 62J4PMtKjw6BzqvMJAZr/yKXzcY1aCXJMrTaoIqony7d/GVMNQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:53:35 2026 by rpki-client