This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa File: 38322e3134392e37382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: tjRBGQ6oLKDAvnwQzdVaHLYOJ7Rj+cJaWMFh1WtRsnk= Subject key identifier: 89:92:5A:C2:3B:BB:00:5D:96:46:96:C8:5F:F6:B9:3B:EE:40:4D:F5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 26421BABDA854190BE00057670F712DD013E14E5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa Signing time: Tue 02 Dec 2025 19:50:12 +0000 ROA not before: Tue 02 Dec 2025 19:45:12 +0000 ROA not after: Tue 01 Dec 2026 19:50:12 +0000 asID: 136787 IP address blocks: 82.149.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:42:1b:ab:da:85:41:90:be:00:05:76:70:f7:12:dd:01:3e:14:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 2 19:45:12 2025 GMT Not After : Dec 1 19:50:12 2026 GMT Subject: CN=89925AC23BBB005D964696C85FF6B93BEE404DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c6:88:68:43:e0:b7:5e:ab:a1:6d:53:9d:fc: 6b:7f:0e:75:7a:af:1f:3b:3c:0b:d2:b4:8e:c1:8a: 8d:17:89:26:30:e9:65:44:27:44:8f:d9:72:be:36: 22:ac:1b:78:43:1e:fb:92:61:31:2d:fc:a5:99:f4: bf:19:56:05:a8:38:4e:4c:9f:92:bb:3a:83:33:82: 62:d7:5c:b2:c8:bf:cc:c5:86:5e:b1:90:ec:61:e6: 8d:43:03:fd:f4:8b:02:36:76:11:fd:74:bf:61:f5: 08:38:e5:19:33:05:9a:6a:f1:6a:ec:69:0b:93:16: e3:a7:3e:8e:6e:b0:bd:f7:42:92:97:56:34:d2:3e: da:9a:30:ab:e9:c6:a5:3b:91:d2:7d:bb:e1:64:6f: 24:44:fb:66:c1:28:e8:9c:36:de:a7:bb:1e:9f:41: 44:22:66:21:ba:7c:a8:4f:c1:5b:b6:6f:1c:1f:7e: 9d:18:49:89:0f:f2:3e:b3:b1:aa:a4:52:6b:6e:8f: 61:53:60:09:bf:39:05:ed:e2:da:8d:90:57:cd:f5: 08:d8:51:aa:a2:ab:71:46:d8:53:e3:0c:7f:a8:17: 8b:55:89:78:54:e2:20:68:95:fe:c3:0c:1f:e6:fe: 9c:5d:c8:57:69:15:a3:13:54:62:ab:7b:26:88:7a: 60:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:92:5A:C2:3B:BB:00:5D:96:46:96:C8:5F:F6:B9:3B:EE:40:4D:F5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.149.78.0/24 Signature Algorithm: sha256WithRSAEncryption 29:8e:b4:18:e6:e7:5c:9a:21:3c:e9:2a:1d:6d:9f:1c:d9:96: eb:56:9d:5e:c6:33:b8:1e:88:a7:f8:87:83:89:b2:46:9d:d5: 07:9f:97:17:30:3c:12:e5:cd:d8:89:a9:4a:4a:8a:db:51:9d: 55:fc:bc:bd:31:01:2f:35:28:9d:c3:ba:df:f4:1c:e4:27:d4: ee:62:48:b8:c7:c1:6d:94:ba:e4:98:9e:bd:61:58:b1:20:2d: f7:84:b9:1c:b0:6a:1e:00:15:fd:f6:f1:3b:a7:86:33:9d:2b: c1:8e:39:e5:6b:2f:37:e8:f7:ae:6d:70:e3:27:f5:bb:61:42: 08:0b:75:f0:7b:1b:38:63:d1:60:c5:eb:47:e9:cf:3c:0e:73: a1:ae:99:08:07:22:a4:cc:5e:2e:7e:5a:92:e1:17:57:ed:74: e4:c6:76:87:6f:d1:66:7a:81:f3:91:23:f7:74:6b:1d:7f:c0: e6:6d:45:8d:74:53:19:7f:12:ea:e7:13:4d:7a:74:f1:48:36: 28:81:91:2f:dd:ec:8e:0c:bf:85:9a:7b:a0:4c:f0:4d:fe:5c: 6a:62:36:24:05:6f:25:74:2f:76:53:e3:0b:54:76:6f:3d:4b: 22:98:9d:61:01:0f:8f:fb:69:cf:93:f1:cb:f1:33:e2:b9:26: 2f:01:5e:04 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJkIbq9qFQZC+AAV2cPcS3QE+FOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDIxOTQ1MTJaFw0yNjEyMDExOTUwMTJaMDMxMTAvBgNV BAMTKDg5OTI1QUMyM0JCQjAwNUQ5NjQ2OTZDODVGRjZCOTNCRUU0MDRERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxohoQ+C3XquhbVOd/Gt/DnV6 rx87PAvStI7Bio0XiSYw6WVEJ0SP2XK+NiKsG3hDHvuSYTEt/KWZ9L8ZVgWoOE5M n5K7OoMzgmLXXLLIv8zFhl6xkOxh5o1DA/30iwI2dhH9dL9h9Qg45RkzBZpq8Wrs aQuTFuOnPo5usL33QpKXVjTSPtqaMKvpxqU7kdJ9u+FkbyRE+2bBKOicNt6nux6f QUQiZiG6fKhPwVu2bxwffp0YSYkP8j6zsaqkUmtuj2FTYAm/OQXt4tqNkFfN9QjY Uaqiq3FG2FPjDH+oF4tViXhU4iBolf7DDB/m/pxdyFdpFaMTVGKreyaIemArAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUiZJawju7AF2WRpbIX/a5O+5ATfUwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UpVOMA0GCSqGSIb3DQEBCwUAA4IBAQApjrQY5udcmiE86SodbZ8c2ZbrVp1exjO4 Hoin+IeDibJGndUHn5cXMDwS5c3YialKSorbUZ1V/Ly9MQEvNSidw7rf9BzkJ9Tu Yki4x8FtlLrkmJ69YVixIC33hLkcsGoeABX99vE7p4YznSvBjjnlay836PeubXDj J/W7YUIIC3Xwexs4Y9FgxetH6c88DnOhrpkIByKkzF4uflqS4RdX7XTkxnaHb9Fm eoHzkSP3dGsdf8DmbUWNdFMZfxLq5xNNenTxSDYogZEv3eyODL+FmnugTPBN/lxq YjYkBW8ldC92U+MLVHZvPUsimJ1hAQ+P+2nPk/HL8TPiuSYvAV4E -----END CERTIFICATE-----Generated at Sat Dec 6 15:11:30 2025 by rpki-client