This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa File: 38322e3139372e37392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: JtqQT1rXdPDfJ7RFHgjKZswBoB1wah3AwgpBqTq/i9Y= Subject key identifier: 65:C6:2A:A2:AA:79:48:8F:70:DD:A5:EC:F8:0C:33:35:00:82:A6:1E Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 163AB4A4FACD172A4E8B1765B1013802BAB84A7E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:56 +0000 ROA not before: Fri 28 Nov 2025 19:44:56 +0000 ROA not after: Fri 27 Nov 2026 19:49:56 +0000 asID: 136787 IP address blocks: 82.197.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:3a:b4:a4:fa:cd:17:2a:4e:8b:17:65:b1:01:38:02:ba:b8:4a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:56 2025 GMT Not After : Nov 27 19:49:56 2026 GMT Subject: CN=65C62AA2AA79488F70DDA5ECF80C33350082A61E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:25:2a:da:8e:c2:05:da:9e:78:6b:99:f1: 85:88:21:52:c3:6b:9a:09:c4:8a:9d:75:0a:98:c9: 3c:fc:a9:02:f9:08:da:4e:8b:df:ea:ba:a1:90:73: 37:d0:0f:0a:a6:02:d4:be:32:9a:a5:a0:ba:e4:fb: a4:d7:1f:87:b1:b7:22:86:d2:41:93:2a:d8:b9:58: 4a:7e:eb:8b:46:ce:c3:ca:4b:d7:d6:61:a4:55:83: 75:01:ec:0e:1b:95:bc:5f:38:fd:1b:6a:3b:8a:02: 75:6c:12:84:7e:10:b0:de:b4:5c:04:79:db:4b:8b: 94:da:65:06:68:dd:c9:42:bb:1c:26:7b:6e:56:7d: 4d:71:da:5b:ee:5d:25:12:cc:54:99:78:6f:92:e6: 16:ea:18:c8:8d:4c:4f:2a:8f:ea:cc:dc:ba:1b:7d: 04:8b:3f:f1:0a:26:3f:c1:6d:77:36:2a:45:be:54: f4:2e:53:da:18:f2:8a:9c:cd:25:d1:4f:60:f7:35: 7d:75:6f:fc:3c:0d:af:0e:6c:8f:5a:e4:e2:6c:e9: e4:ea:f3:ea:61:ee:20:bd:2c:06:c0:9b:9b:e2:cb: e3:97:ce:ef:66:f4:93:3f:74:9f:5f:0c:cb:08:9f: 4c:cb:e1:08:b3:7e:19:f6:f6:3e:28:8e:8e:ca:46: 99:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C6:2A:A2:AA:79:48:8F:70:DD:A5:EC:F8:0C:33:35:00:82:A6:1E X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.197.79.0/24 Signature Algorithm: sha256WithRSAEncryption 48:52:d1:f1:00:89:1d:3d:78:4e:27:d1:d9:83:14:09:c5:71: 8f:ba:d1:89:9a:93:53:aa:02:0d:f4:10:bf:86:d4:2b:f9:85: 90:76:72:79:f4:ba:46:d3:c8:95:3f:ea:75:cd:3c:b3:9f:ef: 27:8c:55:92:36:ee:8b:6c:70:39:16:2e:17:7e:0e:f3:5a:fe: f0:e9:e6:a1:62:d8:b6:72:2d:77:e6:ec:ee:92:7f:c9:2b:68: 99:a1:0c:dc:90:89:73:18:95:53:c4:8a:0e:10:34:6f:f6:1a: b6:b3:e7:47:dc:ad:f6:cc:8c:a8:b6:ea:6c:ee:4b:31:09:fb: 42:3a:78:0e:b6:00:6e:93:88:d9:62:b5:af:07:31:1b:36:ff: ff:a7:84:bd:3d:2c:e6:22:c9:a3:e1:d7:9f:b8:45:51:fa:b8: b5:d4:63:27:1d:98:e7:4d:57:82:ad:74:81:f9:6c:78:0a:c8: 2b:3d:04:5f:36:3d:99:1b:12:e0:29:6a:b9:ff:26:9f:c2:3c: ad:77:92:e3:c1:74:0a:10:2e:5d:33:4b:00:83:78:bb:c1:7e: a1:db:89:ff:22:2d:23:35:63:78:1c:b8:49:8a:1a:6f:ea:ef: bf:fd:d0:7c:53:f5:7c:0e:45:9c:38:1d:17:61:8e:fe:db:14: 43:66:ca:61 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFjq0pPrNFypOixdlsQE4Arq4Sn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTZaFw0yNjExMjcxOTQ5NTZaMDMxMTAvBgNV BAMTKDY1QzYyQUEyQUE3OTQ4OEY3MEREQTVFQ0Y4MEMzMzM1MDA4MkE2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYGyUq2o7CBdqeeGuZ8YWIIVLD a5oJxIqddQqYyTz8qQL5CNpOi9/quqGQczfQDwqmAtS+MpqloLrk+6TXH4extyKG 0kGTKti5WEp+64tGzsPKS9fWYaRVg3UB7A4blbxfOP0bajuKAnVsEoR+ELDetFwE edtLi5TaZQZo3clCuxwme25WfU1x2lvuXSUSzFSZeG+S5hbqGMiNTE8qj+rM3Lob fQSLP/EKJj/BbXc2KkW+VPQuU9oY8oqczSXRT2D3NX11b/w8Da8ObI9a5OJs6eTq 8+ph7iC9LAbAm5viy+OXzu9m9JM/dJ9fDMsIn0zL4Qizfhn29j4ojo7KRpkdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUZcYqoqp5SI9w3aXs+AwzNQCCph4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM3MmUzNzM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UsVPMA0GCSqGSIb3DQEBCwUAA4IBAQBIUtHxAIkdPXhOJ9HZgxQJxXGPutGJmpNT qgIN9BC/htQr+YWQdnJ59LpG08iVP+p1zTyzn+8njFWSNu6LbHA5Fi4Xfg7zWv7w 6eahYti2ci135uzukn/JK2iZoQzckIlzGJVTxIoOEDRv9hq2s+dH3K32zIyotups 7ksxCftCOngOtgBuk4jZYrWvBzEbNv//p4S9PSzmIsmj4defuEVR+ri11GMnHZjn TVeCrXSB+Wx4CsgrPQRfNj2ZGxLgKWq5/yafwjytd5LjwXQKEC5dM0sAg3i7wX6h 24n/Ii0jNWN4HLhJihpv6u+//dB8U/V8DkWcOB0XYY7+2xRDZsph -----END CERTIFICATE-----Generated at Sat Dec 6 13:02:56 2025 by rpki-client