This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38332e302f32342d3332203d3e20313336373837.roa File: 34352e3134342e38332e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: wyo+JZAuvtN2G4EeOYKY6+TmU3JPJF+2dOADowU6S28= Subject key identifier: 9D:02:E3:FD:DF:A1:9F:86:31:75:4A:72:D1:8C:9D:CE:B0:63:48:57 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 7327AEFC9DD3B294EEBB1B6AFE6A24D6BAB4FECE Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38332e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:29 +0000 ROA not before: Mon 29 Dec 2025 09:45:29 +0000 ROA not after: Mon 28 Dec 2026 09:50:29 +0000 asID: 136787 IP address blocks: 45.144.83.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:27:ae:fc:9d:d3:b2:94:ee:bb:1b:6a:fe:6a:24:d6:ba:b4:fe:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:29 2025 GMT Not After : Dec 28 09:50:29 2026 GMT Subject: CN=9D02E3FDDFA19F8631754A72D18C9DCEB0634857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9d:b4:8c:96:5b:fb:dd:6f:67:c7:44:34:cd: 15:9b:d5:a9:c6:8a:af:22:fe:56:65:5d:45:de:a8: e0:3f:aa:75:b6:1c:9b:7c:7b:77:ad:2b:6d:15:86: 64:d4:26:ec:22:6f:2e:a6:73:6a:8b:08:1d:b7:e1: 74:ef:11:e4:8c:0a:7e:db:60:be:d7:cf:85:cf:b3: 50:60:ba:5f:e0:97:c3:e2:a4:57:b5:30:8f:fa:a0: fa:2d:4f:f3:3c:50:14:06:57:af:58:61:67:99:74: 81:10:13:b4:9f:41:c8:3e:68:f0:de:c9:d4:e3:ac: 7e:b0:60:98:10:a3:21:f7:f0:b9:23:f6:71:d6:2b: 8c:31:26:45:17:39:5e:92:5e:79:ce:51:50:e8:ec: cb:f3:ad:d6:fe:07:f2:41:bd:d7:fd:4b:eb:41:55: 41:dd:d1:24:59:e7:ff:c5:db:26:a1:0c:90:21:ac: ec:c2:57:34:2b:18:01:e8:7b:f2:40:4a:0c:e7:13: 4c:24:89:d3:6a:a7:de:9a:59:51:5e:b3:14:a2:77: a9:3c:9f:cf:bb:dc:d0:85:b2:fa:8b:1a:99:12:39: 62:8e:a3:f8:ce:58:f0:1a:64:74:9c:57:96:6c:ff: f7:76:23:da:6b:00:7a:e8:c2:e3:3f:80:9c:08:48: 8e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:02:E3:FD:DF:A1:9F:86:31:75:4A:72:D1:8C:9D:CE:B0:63:48:57 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/34352e3134342e38332e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.83.0/24 Signature Algorithm: sha256WithRSAEncryption ad:5f:c4:85:b0:69:d3:ff:d9:df:99:ed:c4:01:5d:9f:76:6e: 02:a8:bd:43:7f:17:9f:9a:93:96:08:7b:8c:c6:b9:a2:f4:6b: 4a:11:54:1a:4b:19:39:a2:39:65:89:50:19:4c:ff:7d:50:cf: bf:77:3a:ee:34:0b:36:fb:e3:4d:c9:7b:5d:e3:52:a0:7c:0f: 6d:98:ec:18:b5:65:cf:0b:44:1a:90:19:4a:a5:52:9e:b1:f0: dc:0d:c2:03:c9:28:78:12:e2:eb:d4:8d:c8:43:b5:5e:cf:a4: 4c:c5:b3:bb:6b:8d:fd:42:e7:7a:aa:71:13:f5:63:04:31:05: 50:c5:18:06:0f:cb:90:2d:bb:7d:d8:0d:12:18:dd:dc:b9:71: db:c5:06:f3:45:65:05:e9:b3:8a:28:9e:1a:a4:d5:86:f5:ed: 74:d7:96:e8:08:b6:ad:80:c2:97:8a:4a:21:45:94:78:8c:8f: a2:b8:40:7c:19:75:36:91:dd:5c:a7:02:00:73:8e:55:e1:91: 25:10:86:ab:e0:14:81:fb:fc:0c:0d:8f:54:c2:e0:04:5d:01: e6:f7:1f:85:37:11:ae:eb:08:ca:8f:0b:28:c7:c8:59:e1:03: a2:8b:0a:ca:5e:e7:7d:0b:20:bf:ac:9b:f5:bf:ba:a1:64:6b: c4:a6:a6:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUcyeu/J3TspTuuxtq/mok1rq0/s4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjlaFw0yNjEyMjgwOTUwMjlaMDMxMTAvBgNV BAMTKDlEMDJFM0ZEREZBMTlGODYzMTc1NEE3MkQxOEM5RENFQjA2MzQ4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnnbSMllv73W9nx0Q0zRWb1anG iq8i/lZlXUXeqOA/qnW2HJt8e3etK20VhmTUJuwiby6mc2qLCB234XTvEeSMCn7b YL7Xz4XPs1Bgul/gl8PipFe1MI/6oPotT/M8UBQGV69YYWeZdIEQE7SfQcg+aPDe ydTjrH6wYJgQoyH38Lkj9nHWK4wxJkUXOV6SXnnOUVDo7Mvzrdb+B/JBvdf9S+tB VUHd0SRZ5//F2yahDJAhrOzCVzQrGAHoe/JASgznE0wkidNqp96aWVFesxSid6k8 n8+73NCFsvqLGpkSOWKOo/jOWPAaZHScV5Zs//d2I9prAHrowuM/gJwISI61AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUnQLj/d+hn4YxdUpy0YydzrBjSFcwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzQzNTJlMzEzNDM0MmUzODMz MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA LZBTMA0GCSqGSIb3DQEBCwUAA4IBAQCtX8SFsGnT/9nfme3EAV2fdm4CqL1Dfxef mpOWCHuMxrmi9GtKEVQaSxk5ojlliVAZTP99UM+/dzruNAs2++NNyXtd41KgfA9t mOwYtWXPC0QakBlKpVKesfDcDcIDySh4EuLr1I3IQ7Vez6RMxbO7a439Qud6qnET 9WMEMQVQxRgGD8uQLbt92A0SGN3cuXHbxQbzRWUF6bOKKJ4apNWG9e1015boCLat gMKXikohRZR4jI+iuEB8GXU2kd1cpwIAc45V4ZElEIar4BSB+/wMDY9UwuAEXQHm 9x+FNxGu6wjKjwsox8hZ4QOiiwrKXud9CyC/rJv1v7qhZGvEpqZj -----END CERTIFICATE-----Generated at Sun Jan 25 11:49:19 2026 by rpki-client