This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa File: 38302e3139302e38302e302f32312d3332203d3e203430303231.roa (raw, json) Hash identifier: SVjtzvJhGT3IHygUw5w6etPbVmRrUtvRkUUg3/j/O9U= Subject key identifier: B7:07:84:C3:65:1E:0D:6F:EA:12:DB:06:3F:26:70:E2:E7:23:07:DB Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1D38ED53037F77208CE9FDBC4FCA8DEC0EDBC2D9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa Signing time: Tue 20 Jan 2026 11:23:10 +0000 ROA not before: Tue 20 Jan 2026 11:18:10 +0000 ROA not after: Tue 19 Jan 2027 11:23:10 +0000 asID: 40021 IP address blocks: 80.190.80.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:38:ed:53:03:7f:77:20:8c:e9:fd:bc:4f:ca:8d:ec:0e:db:c2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 20 11:18:10 2026 GMT Not After : Jan 19 11:23:10 2027 GMT Subject: CN=B70784C3651E0D6FEA12DB063F2670E2E72307DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:fe:64:94:c9:53:ac:4a:10:30:f6:cb:9e: fe:5d:f4:7e:09:b4:90:d0:9d:be:b9:2d:c6:5a:1e: a2:f8:d1:fb:83:5e:c1:bd:d0:da:5c:c6:4d:3e:db: 94:a6:b5:a1:99:eb:50:6a:4c:62:40:62:fd:2e:c3: 88:54:23:0e:cf:1e:72:85:50:57:e3:15:5c:ba:ba: 32:45:3a:96:ed:38:18:9b:6c:11:d4:03:a0:1f:38: 6e:08:c0:73:32:f0:49:84:f2:64:97:33:0c:37:dc: 36:66:63:01:cd:5b:61:f0:7f:90:01:31:e5:be:d8: 6c:cb:8f:46:92:2e:b2:7a:df:5a:dd:85:ca:d5:84: e4:6a:e1:61:c0:46:b7:c0:bc:7a:b9:7a:a2:3f:ad: 8e:33:47:ed:07:0c:e4:d8:7d:61:50:eb:3b:07:43: 25:f5:14:4d:65:7c:19:08:b5:b2:e0:5d:5c:e1:7f: 31:35:2b:b3:48:34:79:07:77:a7:75:93:f8:79:cc: 1b:a0:e9:c3:ab:f2:9b:8a:2b:c1:20:8a:4a:44:1a: 09:c9:c3:c2:28:88:cb:a4:bc:3e:66:aa:40:fd:6c: 5e:14:8f:f0:f4:08:ed:24:66:57:15:ed:a1:1d:ce: 88:0a:99:df:4a:ee:5a:2b:ef:5c:1e:be:11:69:6c: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:07:84:C3:65:1E:0D:6F:EA:12:DB:06:3F:26:70:E2:E7:23:07:DB X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e3139302e38302e302f32312d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.190.80.0/21 Signature Algorithm: sha256WithRSAEncryption 6f:03:6a:8b:1e:9a:38:46:9f:5d:ff:40:a6:ed:96:a6:6c:e4: 08:bd:a5:ad:4a:59:e2:8d:47:89:69:ea:16:04:e0:df:89:47: 4a:e5:28:3a:77:b1:48:23:5f:04:53:b0:26:31:23:b4:4a:24: 6e:5a:62:52:b9:1b:5c:a7:f9:7b:0f:d6:4b:5c:f3:8e:28:29: 9a:22:66:04:4f:42:cc:eb:d7:9d:d9:d8:17:12:60:c9:dc:3d: 61:99:f5:26:9c:d9:71:39:5c:40:f2:7f:2c:2d:d6:ef:ce:df: 05:9f:d4:49:5d:ec:fd:3b:62:c7:bc:67:6f:c3:ea:3c:2c:f1: 14:ad:7c:12:78:8e:7f:ea:3f:7a:eb:9c:e2:b3:c4:a0:19:ad: 8b:9b:f8:10:6e:81:d6:5a:ec:1c:e9:d3:15:d7:95:27:a1:ae: de:27:af:5f:2b:2e:b4:e8:55:2d:7e:f5:28:d5:42:77:7c:75: 05:39:63:7c:ae:8f:15:77:d5:07:f1:b2:22:be:8b:bb:1e:ec: d0:62:c0:79:13:46:11:7f:37:e7:5a:de:73:45:34:fc:07:e3: 63:fe:8e:da:60:03:8b:5d:af:6c:14:f4:06:02:1a:7c:9c:01: e3:ca:ff:40:9e:71:fc:ef:1b:a8:9a:fd:da:bd:06:12:bd:c7: 47:6a:2f:0e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUHTjtUwN/dyCM6f28T8qN7A7bwtkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjAxMTE4MTBaFw0yNzAxMTkxMTIzMTBaMDMxMTAvBgNV BAMTKEI3MDc4NEMzNjUxRTBENkZFQTEyREIwNjNGMjY3MEUyRTcyMzA3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUVP5klMlTrEoQMPbLnv5d9H4J tJDQnb65LcZaHqL40fuDXsG90Npcxk0+25SmtaGZ61BqTGJAYv0uw4hUIw7PHnKF UFfjFVy6ujJFOpbtOBibbBHUA6AfOG4IwHMy8EmE8mSXMww33DZmYwHNW2Hwf5AB MeW+2GzLj0aSLrJ631rdhcrVhORq4WHARrfAvHq5eqI/rY4zR+0HDOTYfWFQ6zsH QyX1FE1lfBkItbLgXVzhfzE1K7NINHkHd6d1k/h5zBug6cOr8puKK8EgikpEGgnJ w8IoiMukvD5mqkD9bF4Uj/D0CO0kZlcV7aEdzogKmd9K7lor71wevhFpbPZPAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUtweEw2UeDW/qEtsGPyZw4ucjB9swHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMDJlMzEzOTMwMmUzODMw MmUzMDJmMzIzMTJkMzMzMjIwM2QzZTIwMzQzMDMwMzIzMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1C+ UDANBgkqhkiG9w0BAQsFAAOCAQEAbwNqix6aOEafXf9Apu2WpmzkCL2lrUpZ4o1H iWnqFgTg34lHSuUoOnexSCNfBFOwJjEjtEokblpiUrkbXKf5ew/WS1zzjigpmiJm BE9CzOvXndnYFxJgydw9YZn1JpzZcTlcQPJ/LC3W787fBZ/USV3s/Ttix7xnb8Pq PCzxFK18EniOf+o/euuc4rPEoBmti5v4EG6B1lrsHOnTFdeVJ6Gu3ievXysutOhV LX71KNVCd3x1BTljfK6PFXfVB/GyIr6Lux7s0GLAeRNGEX8351rec0U0/AfjY/6O 2mADi12vbBT0BgIafJwB48r/QJ5x/O8bqJr92r0GEr3HR2ovDg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:43:29 2026 by rpki-client