This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa File: 3138352e3138332e38352e302f32342d3332203d3e2039303039.roa (raw, json) Hash identifier: sdzOlU/JXhOoHQkIZEKnzGPf1g+daTkWyO0LjgoxZ6E= Subject key identifier: 4E:D5:9D:EC:9B:EC:FE:15:6C:2F:8C:17:09:0E:72:83:6D:40:BA:A3 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 48A4F4A7F0173E4A39FAD3746D4545D8B88D62D5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa Signing time: Mon 29 Dec 2025 09:50:39 +0000 ROA not before: Mon 29 Dec 2025 09:45:39 +0000 ROA not after: Mon 28 Dec 2026 09:50:39 +0000 asID: 9009 IP address blocks: 185.183.85.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a4:f4:a7:f0:17:3e:4a:39:fa:d3:74:6d:45:45:d8:b8:8d:62:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:39 2025 GMT Not After : Dec 28 09:50:39 2026 GMT Subject: CN=4ED59DEC9BECFE156C2F8C17090E72836D40BAA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:bd:ad:01:e0:24:f3:12:48:db:4f:fa:6c: b0:88:2d:f8:96:28:56:2a:9b:6d:01:b3:6b:e2:d2: 42:13:9f:f3:56:35:e6:b4:18:42:30:42:41:da:12: ac:93:70:87:bb:98:72:6a:85:ec:e4:65:40:2c:29: 58:69:11:4d:30:31:2b:7d:2e:b7:bf:c7:f6:61:70: 78:c4:fd:16:0b:ba:0b:c8:2b:a2:28:30:06:c4:01: 4f:6c:76:b1:1c:8a:a3:54:87:ab:c0:82:e8:90:7b: c4:cc:bf:c8:97:50:13:a4:8d:ad:82:11:9e:05:7d: 85:80:8f:f8:3f:b1:e2:52:af:a3:da:2a:1c:61:1b: 62:19:d7:e0:cd:03:90:f7:e9:53:4b:38:5f:01:af: 08:0d:8b:3c:fd:dc:4a:89:f6:b7:68:54:88:e3:89: dc:62:ac:38:2b:4a:7c:13:ad:0b:30:f2:52:73:0a: 76:af:2e:9e:92:83:38:16:5a:cd:a7:dc:22:aa:a5: e4:68:8f:97:9b:9c:23:de:ec:e3:f8:20:f4:6e:01: f1:e2:50:2c:cf:56:8e:e2:68:20:f2:99:69:4b:2b: b4:ce:b6:7e:b0:1b:4f:bf:ac:6e:7e:1d:56:09:d8: 83:0b:1b:3e:9b:e4:74:e6:9a:91:1c:72:20:60:80: 78:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D5:9D:EC:9B:EC:FE:15:6C:2F:8C:17:09:0E:72:83:6D:40:BA:A3 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138332e38352e302f32342d3332203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.183.85.0/24 Signature Algorithm: sha256WithRSAEncryption 12:31:41:4e:30:66:66:84:98:7b:39:aa:a5:d3:cf:57:78:02: a6:81:36:6f:8f:7b:26:0a:ee:9c:ba:0c:31:03:2d:b6:78:6c: 52:5f:ae:d6:97:a7:ad:4c:35:6c:e0:45:8c:4d:b1:78:e1:e6: 6d:63:83:0b:2d:07:d9:ee:32:13:67:d4:05:d8:56:9b:67:e9: ee:f8:e2:05:cc:3f:84:27:4f:cf:b9:4f:87:d2:54:f6:d1:24: 2f:e0:4e:f3:79:e1:37:b4:c6:72:1d:9e:10:6b:3e:5d:89:15: 03:e7:9c:29:db:16:a8:bc:99:37:88:3b:e6:95:c2:52:a8:4e: 7c:9a:dc:42:40:9d:78:08:94:e2:15:81:bc:53:59:68:1e:09: 44:34:02:87:22:79:45:f5:d5:e2:a1:d9:a2:31:98:13:87:04: 6b:0b:e8:56:f5:61:79:a7:9e:80:ea:87:bf:c8:5f:a5:68:d6: 18:9c:12:4a:e1:28:c2:5e:32:9a:9c:e6:84:4b:54:19:b8:36: 60:99:52:c2:95:91:cc:32:5a:90:14:f9:e4:89:9c:fa:58:36: 1d:2e:fe:5f:71:6c:43:24:83:6b:dc:4e:4a:51:f1:f0:05:21: 70:62:dc:b6:57:e4:92:ee:07:cf:c6:9c:8a:ab:0c:d0:35:41: 24:12:cb:82 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSKT0p/AXPko5+tN0bUVF2LiNYtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzlaFw0yNjEyMjgwOTUwMzlaMDMxMTAvBgNV BAMTKDRFRDU5REVDOUJFQ0ZFMTU2QzJGOEMxNzA5MEU3MjgzNkQ0MEJBQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mr2tAeAk8xJI20/6bLCILfiW KFYqm20Bs2vi0kITn/NWNea0GEIwQkHaEqyTcIe7mHJqhezkZUAsKVhpEU0wMSt9 Lre/x/ZhcHjE/RYLugvIK6IoMAbEAU9sdrEciqNUh6vAguiQe8TMv8iXUBOkja2C EZ4FfYWAj/g/seJSr6PaKhxhG2IZ1+DNA5D36VNLOF8BrwgNizz93EqJ9rdoVIjj idxirDgrSnwTrQsw8lJzCnavLp6SgzgWWs2n3CKqpeRoj5ebnCPe7OP4IPRuAfHi UCzPVo7iaCDymWlLK7TOtn6wG0+/rG5+HVYJ2IMLGz6b5HTmmpEcciBggHjPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUTtWd7Jvs/hVsL4wXCQ5yg21AuqMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzMyZTM4 MzUyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALm3 VTANBgkqhkiG9w0BAQsFAAOCAQEAEjFBTjBmZoSYezmqpdPPV3gCpoE2b497Jgru nLoMMQMttnhsUl+u1penrUw1bOBFjE2xeOHmbWODCy0H2e4yE2fUBdhWm2fp7vji Bcw/hCdPz7lPh9JU9tEkL+BO83nhN7TGch2eEGs+XYkVA+ecKdsWqLyZN4g75pXC UqhOfJrcQkCdeAiU4hWBvFNZaB4JRDQChyJ5RfXV4qHZojGYE4cEawvoVvVheaee gOqHv8hfpWjWGJwSSuEowl4ympzmhEtUGbg2YJlSwpWRzDJakBT55Imc+lg2HS7+ X3FsQySDa9xOSlHx8AUhcGLctlfkku4Hz8aciqsM0DVBJBLLgg== -----END CERTIFICATE-----Generated at Sun Jan 25 07:23:22 2026 by rpki-client