This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37382e302f32342d3234203d3e20313336373837.roa File: 38322e3139372e37382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: fovSRns16f3+fSPUh3YhFwrAhevUwuOCsGyefBd2BjI= Subject key identifier: EA:0B:BD:7E:60:16:42:C5:B1:38:0F:4B:9A:2C:BA:65:4C:B5:B6:C0 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 385AB3B4C85FFF267BEFCE12511A3F4D65AE8207 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:50:00 +0000 ROA not before: Fri 28 Nov 2025 19:45:00 +0000 ROA not after: Fri 27 Nov 2026 19:50:00 +0000 asID: 136787 IP address blocks: 82.197.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:19:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5a:b3:b4:c8:5f:ff:26:7b:ef:ce:12:51:1a:3f:4d:65:ae:82:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:45:00 2025 GMT Not After : Nov 27 19:50:00 2026 GMT Subject: CN=EA0BBD7E601642C5B1380F4B9A2CBA654CB5B6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e6:e2:20:af:f1:c9:e9:1b:51:ef:4e:74:62: 37:f3:4c:56:01:01:5b:52:bb:7d:4a:79:c5:aa:ee: 55:1e:81:77:86:49:71:e5:fe:e5:70:64:01:64:2a: 17:0d:50:be:64:7b:77:71:2a:7e:fa:08:c0:4e:1f: 72:40:db:b7:76:3e:8e:6a:bd:0d:e6:46:2b:f4:8d: 80:2c:cf:e2:6b:48:b8:6f:5c:66:b5:ac:4a:75:ab: f8:d3:76:3d:6b:7d:ca:0c:2b:eb:bf:d4:2c:d8:48: af:00:94:62:2e:d4:94:12:47:c8:51:65:8f:d9:cd: 0a:c9:e0:94:9f:0b:f2:d1:a8:87:83:90:a4:f4:12: c3:a2:69:34:6b:df:8b:88:4d:42:1a:3b:c8:bb:54: c0:7e:9c:0c:ea:a1:ac:3b:33:2a:1d:b7:c1:54:fb: 25:ec:57:28:83:e2:4f:6c:de:bf:2a:a3:29:79:ad: 9a:18:e5:0d:fe:e8:55:14:47:0f:08:12:07:65:52: 90:56:9b:5f:0d:87:ae:ff:97:d9:08:05:22:8b:74: 75:33:22:3f:85:25:e1:39:88:3d:59:9a:56:cf:7d: e2:3d:a1:e8:c6:80:02:b9:1f:55:4f:09:5b:c5:ed: c0:f7:58:61:c1:61:a4:0c:10:90:3a:b0:40:bc:92: 27:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0B:BD:7E:60:16:42:C5:B1:38:0F:4B:9A:2C:BA:65:4C:B5:B6:C0 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.197.78.0/24 Signature Algorithm: sha256WithRSAEncryption 66:1b:43:b0:86:02:f2:44:f7:c7:46:64:c6:56:53:1f:6c:50: 5e:9d:53:d8:99:d8:9e:af:db:c9:c3:52:7e:5d:55:0a:d1:aa: 6f:b2:10:87:dd:97:01:74:ea:49:22:8d:1c:2f:41:d8:95:e3: b3:b6:fc:92:4a:60:db:65:82:68:82:91:cc:0b:ed:c6:13:de: a9:fd:60:ae:2d:3b:52:47:80:3f:51:41:7d:9e:42:f2:4a:0c: 7d:26:bf:be:3e:5d:0e:ee:3d:be:84:91:ba:52:85:2e:57:85: 11:75:f3:f8:1c:c5:a8:6a:a5:3c:37:18:54:44:8e:ca:67:9b: 12:16:2a:b8:05:fa:e5:61:2f:25:74:61:29:06:7a:1e:80:5b: 86:65:4f:09:62:95:8c:da:cc:7c:de:2a:66:e5:45:e5:db:74: 07:14:2b:7d:d4:dd:52:76:85:74:73:d5:69:ec:e1:64:36:14: a8:9e:ae:8f:ab:1f:c7:bd:f2:ec:f0:f4:86:01:38:54:96:6a: a3:7f:d7:55:ad:20:ec:e3:74:16:fa:63:a6:e9:e8:dc:8f:20: bd:0b:55:4e:53:09:2a:88:44:1b:6d:22:b1:e4:be:87:b8:06: d7:16:44:d7:c7:29:55:ee:f9:3d:0c:79:2f:3c:37:28:67:4b: 67:0e:8e:23 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOFqztMhf/yZ7784SURo/TWWuggcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ1MDBaFw0yNjExMjcxOTUwMDBaMDMxMTAvBgNV BAMTKEVBMEJCRDdFNjAxNjQyQzVCMTM4MEY0QjlBMkNCQTY1NENCNUI2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY5uIgr/HJ6RtR7050YjfzTFYB AVtSu31KecWq7lUegXeGSXHl/uVwZAFkKhcNUL5ke3dxKn76CMBOH3JA27d2Po5q vQ3mRiv0jYAsz+JrSLhvXGa1rEp1q/jTdj1rfcoMK+u/1CzYSK8AlGIu1JQSR8hR ZY/ZzQrJ4JSfC/LRqIeDkKT0EsOiaTRr34uITUIaO8i7VMB+nAzqoaw7Myodt8FU +yXsVyiD4k9s3r8qoyl5rZoY5Q3+6FUURw8IEgdlUpBWm18Nh67/l9kIBSKLdHUz Ij+FJeE5iD1ZmlbPfeI9oejGgAK5H1VPCVvF7cD3WGHBYaQMEJA6sEC8kiedAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6gu9fmAWQsWxOA9Lmiy6ZUy1tsAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM3MmUzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UsVOMA0GCSqGSIb3DQEBCwUAA4IBAQBmG0OwhgLyRPfHRmTGVlMfbFBenVPYmdie r9vJw1J+XVUK0apvshCH3ZcBdOpJIo0cL0HYleOztvySSmDbZYJogpHMC+3GE96p /WCuLTtSR4A/UUF9nkLySgx9Jr++Pl0O7j2+hJG6UoUuV4URdfP4HMWoaqU8NxhU RI7KZ5sSFiq4BfrlYS8ldGEpBnoegFuGZU8JYpWM2sx83ipm5UXl23QHFCt91N1S doV0c9Vp7OFkNhSonq6Pqx/HvfLs8PSGAThUlmqjf9dVrSDs43QW+mOm6ejcjyC9 C1VOUwkqiEQbbSKx5L6HuAbXFkTXxylV7vk9DHkvPDcoZ0tnDo4j -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:32 2025 by rpki-client