This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa File: 38362e34382e31352e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: EdIjzboXdQ+UvxA6MG7I/o0c11iIHYMnW3YDlFP3yj4= Subject key identifier: 20:7A:D8:EE:BD:06:71:30:6D:29:5F:77:A7:DA:16:1C:03:3B:69:C3 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 385EF0F27E81915FE3BB22F7AD5D32AEBC204154 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:55 +0000 ROA not before: Mon 29 Dec 2025 09:45:55 +0000 ROA not after: Mon 28 Dec 2026 09:50:55 +0000 asID: 136787 IP address blocks: 86.48.15.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5e:f0:f2:7e:81:91:5f:e3:bb:22:f7:ad:5d:32:ae:bc:20:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:55 2025 GMT Not After : Dec 28 09:50:55 2026 GMT Subject: CN=207AD8EEBD0671306D295F77A7DA161C033B69C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:77:aa:e8:b7:b5:42:ad:44:6c:44:85:c8:fb: 12:81:fe:d0:40:c6:71:cd:4b:80:d8:37:0a:d4:ab: 65:3f:34:9e:96:d1:af:4c:41:5a:fe:1e:f3:b8:1e: a0:a7:95:c1:6c:4e:04:f2:0c:05:7a:cb:72:c0:f0: 6c:64:8b:75:d3:e9:a1:9d:68:fb:33:05:8d:15:09: 08:7e:91:ff:87:05:cc:8f:c0:8c:96:6b:5b:86:a2: 13:43:11:4d:76:54:74:0c:20:36:f3:05:ee:e9:28: 72:10:52:3f:3c:0c:b5:38:fb:27:44:97:ac:02:bf: 49:24:4b:01:80:7d:45:57:6b:51:a5:80:b4:e8:4a: 57:2b:65:54:ab:67:80:8d:a4:90:f7:06:aa:06:4d: cd:8d:63:ff:e3:a3:09:50:11:ed:2f:4f:75:a9:2c: de:34:46:f7:ba:5b:e4:43:61:a6:aa:a4:c8:9d:60: fd:e2:03:47:a5:70:78:1f:a8:0a:a6:e7:3d:bb:97: ba:a8:e6:f3:15:ec:13:b5:a4:23:30:0c:ce:4c:a8: 0f:9d:a0:4a:c5:5a:64:1f:3c:a4:be:ed:11:17:53: f3:49:99:a1:30:c9:48:b8:20:cb:93:4c:75:cc:82: f3:2b:59:b2:5d:ff:d8:64:5a:01:3f:2b:be:f9:b7: 7f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:D8:EE:BD:06:71:30:6D:29:5F:77:A7:DA:16:1C:03:3B:69:C3 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.15.0/24 Signature Algorithm: sha256WithRSAEncryption 67:e8:83:12:b0:85:c5:31:02:37:6a:05:14:69:4e:f1:c0:1e: 26:2f:c5:d7:16:34:be:d2:28:ea:81:1c:66:0c:70:2b:2e:6f: dd:82:c9:3a:c3:ee:b7:f1:0f:7e:fe:7c:2f:13:e7:fd:5b:17: 9f:06:2b:c6:24:0f:89:7c:2f:12:92:60:af:8e:72:0c:87:d0: 00:ec:06:cb:d7:a9:4f:ae:1e:15:52:03:e6:48:19:06:d8:05: f2:78:23:39:c8:53:64:83:44:d9:87:16:0e:1e:54:2e:09:96: a9:74:01:dd:17:70:05:52:67:90:09:f0:24:ee:a6:77:78:e2: 0b:f5:b6:72:43:22:c7:3b:59:d4:83:f2:88:c5:d4:c9:05:46: b0:ee:e9:da:30:4b:89:78:62:df:1f:5d:cd:76:22:45:80:ed: f6:65:8c:26:2e:62:7b:a6:4f:d2:9b:c0:37:ab:f3:ed:6c:4e: 14:6f:1a:48:6f:b5:c4:4d:07:2e:a4:70:34:d6:33:75:32:ba: 85:c7:23:d3:1f:9d:f3:77:72:1a:5f:29:46:c8:ea:45:e9:08: 03:00:f0:bc:55:7a:d3:76:d7:11:2b:28:f4:90:ef:68:42:3d: 14:23:56:77:a6:0c:3b:f5:f0:65:9d:ba:38:2b:91:a7:04:5c: 4f:f9:ed:18 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUOF7w8n6BkV/juyL3rV0yrrwgQVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTVaFw0yNjEyMjgwOTUwNTVaMDMxMTAvBgNV BAMTKDIwN0FEOEVFQkQwNjcxMzA2RDI5NUY3N0E3REExNjFDMDMzQjY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcd6rot7VCrURsRIXI+xKB/tBA xnHNS4DYNwrUq2U/NJ6W0a9MQVr+HvO4HqCnlcFsTgTyDAV6y3LA8Gxki3XT6aGd aPszBY0VCQh+kf+HBcyPwIyWa1uGohNDEU12VHQMIDbzBe7pKHIQUj88DLU4+ydE l6wCv0kkSwGAfUVXa1GlgLToSlcrZVSrZ4CNpJD3BqoGTc2NY//jowlQEe0vT3Wp LN40Rve6W+RDYaaqpMidYP3iA0elcHgfqAqm5z27l7qo5vMV7BO1pCMwDM5MqA+d oErFWmQfPKS+7REXU/NJmaEwyUi4IMuTTHXMgvMrWbJd/9hkWgE/K775t39tAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUIHrY7r0GcTBtKV93p9oWHAM7acMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzEzNTJl MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYw DzANBgkqhkiG9w0BAQsFAAOCAQEAZ+iDErCFxTECN2oFFGlO8cAeJi/F1xY0vtIo 6oEcZgxwKy5v3YLJOsPut/EPfv58LxPn/VsXnwYrxiQPiXwvEpJgr45yDIfQAOwG y9epT64eFVID5kgZBtgF8ngjOchTZINE2YcWDh5ULgmWqXQB3RdwBVJnkAnwJO6m d3jiC/W2ckMixztZ1IPyiMXUyQVGsO7p2jBLiXhi3x9dzXYiRYDt9mWMJi5ie6ZP 0pvAN6vz7WxOFG8aSG+1xE0HLqRwNNYzdTK6hccj0x+d83dyGl8pRsjqRekIAwDw vFV603bXESso9JDvaEI9FCNWd6YMO/XwZZ26OCuRpwRcT/ntGA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:22:54 2026 by rpki-client