This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e37322e39362e302f32302d3332203d3e203531313637.roa File: 39342e37322e39362e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: zQ3pzdZbJboFm6MdUejWn3c+XQtpGrrq+mzyygrLui4= Subject key identifier: 16:9C:E2:26:84:85:6C:E2:C3:49:B3:51:D5:D6:04:57:2B:BB:CC:08 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 38441D9C0C87C261B873DE9B1DBD36651868A715 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e37322e39362e302f32302d3332203d3e203531313637.roa Signing time: Wed 17 Dec 2025 12:50:18 +0000 ROA not before: Wed 17 Dec 2025 12:45:18 +0000 ROA not after: Wed 16 Dec 2026 12:50:18 +0000 asID: 51167 IP address blocks: 94.72.96.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 15:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:44:1d:9c:0c:87:c2:61:b8:73:de:9b:1d:bd:36:65:18:68:a7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 17 12:45:18 2025 GMT Not After : Dec 16 12:50:18 2026 GMT Subject: CN=169CE22684856CE2C349B351D5D604572BBBCC08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e8:6a:9a:d0:4a:e3:2a:14:e0:ed:89:a9:2e: 69:f0:e6:ae:48:e9:7a:b6:86:d6:63:b8:70:66:be: 32:a0:26:2d:9f:81:f4:86:c9:52:79:48:84:40:41: a9:f9:5a:03:bb:24:c0:50:60:86:3a:94:db:29:97: 7c:ab:0e:ef:b5:be:6a:5f:e4:69:39:e9:72:22:2b: 93:2e:12:fc:c9:64:d8:b9:5c:4e:c0:d4:b5:83:e6: f2:a1:3f:a8:bb:e9:1d:59:91:88:07:97:72:99:1e: 52:02:58:2d:26:91:59:37:d2:e5:e3:75:d1:34:65: e9:ad:a1:f5:45:99:4a:5e:0a:8e:01:08:10:e4:47: 3a:26:df:58:33:19:79:7b:af:15:dd:17:21:e5:d2: 2f:07:09:7a:83:b8:69:a8:56:78:77:aa:fb:ca:90: 11:ea:b6:ef:8d:3b:77:41:e7:d9:c1:19:a7:39:cc: 17:e1:d9:d8:59:fb:df:2a:3e:e7:34:8c:90:ad:e3: 8f:0e:b0:8c:ac:1c:cd:59:e1:7b:2e:12:e8:f5:58: 6e:2a:ee:44:82:8c:da:88:55:b0:5c:5b:0d:13:26: 4e:0c:f0:30:22:f2:55:51:d5:a0:5c:85:24:6d:6a: de:c5:e9:87:e0:a0:a5:ec:7b:dc:3c:f8:65:f2:a3: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:E2:26:84:85:6C:E2:C3:49:B3:51:D5:D6:04:57:2B:BB:CC:08 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e37322e39362e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.72.96.0/20 Signature Algorithm: sha256WithRSAEncryption 83:b9:7a:59:87:1d:ea:97:b0:5a:9e:01:9f:81:e6:87:cd:17: 2e:e6:02:6b:ac:8b:39:c7:9a:3c:1b:66:94:56:00:18:d4:56: 7d:0b:26:f5:ed:19:9f:64:d6:92:25:61:d0:2a:fe:1b:0b:d5: e2:10:74:35:68:a0:9d:c1:11:df:30:ae:c4:41:ad:a7:6a:45: 3c:fc:10:99:cf:c5:3c:07:d5:59:3c:99:32:f3:7d:a3:e3:9f: 50:1d:f1:27:37:75:55:50:6e:9b:10:46:75:f4:96:68:bf:7c: a3:1e:fc:ca:fa:20:1d:a1:df:b5:f3:63:e4:94:8c:fe:7a:af: 2e:41:14:d7:83:d5:82:e0:80:df:34:6d:11:94:81:c4:f2:ac: 1a:b0:25:5e:fb:b8:53:50:40:eb:03:7d:50:81:41:4e:55:43: 95:be:f8:3b:e2:c8:81:d7:97:f6:b4:79:ac:19:cd:a0:57:78: cb:d7:1d:e0:90:f0:56:ce:b0:4d:24:0e:6c:c2:73:e5:40:c4: 1c:0d:6f:2a:c0:0c:87:6d:5c:1b:da:a7:b5:f1:6d:f6:cd:1d: b9:34:c8:0c:17:ec:38:d3:b9:a2:1c:77:6c:2e:5d:de:71:5a: 75:38:81:f5:17:5e:f7:bf:18:02:f2:23:89:a3:16:c4:e4:95: 8f:92:1e:ec -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOEQdnAyHwmG4c96bHb02ZRhopxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTcxMjQ1MThaFw0yNjEyMTYxMjUwMThaMDMxMTAvBgNV BAMTKDE2OUNFMjI2ODQ4NTZDRTJDMzQ5QjM1MUQ1RDYwNDU3MkJCQkNDMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC26Gqa0ErjKhTg7YmpLmnw5q5I 6Xq2htZjuHBmvjKgJi2fgfSGyVJ5SIRAQan5WgO7JMBQYIY6lNspl3yrDu+1vmpf 5Gk56XIiK5MuEvzJZNi5XE7A1LWD5vKhP6i76R1ZkYgHl3KZHlICWC0mkVk30uXj ddE0ZemtofVFmUpeCo4BCBDkRzom31gzGXl7rxXdFyHl0i8HCXqDuGmoVnh3qvvK kBHqtu+NO3dB59nBGac5zBfh2dhZ+98qPuc0jJCt448OsIysHM1Z4XsuEuj1WG4q 7kSCjNqIVbBcWw0TJk4M8DAi8lVR1aBchSRtat7F6YfgoKXse9w8+GXyo28TAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUFpziJoSFbOLDSbNR1dYEVyu7zAgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzczMjJlMzkzNjJl MzAyZjMyMzAyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAReSGAw DQYJKoZIhvcNAQELBQADggEBAIO5elmHHeqXsFqeAZ+B5ofNFy7mAmusiznHmjwb ZpRWABjUVn0LJvXtGZ9k1pIlYdAq/hsL1eIQdDVooJ3BEd8wrsRBradqRTz8EJnP xTwH1Vk8mTLzfaPjn1Ad8Sc3dVVQbpsQRnX0lmi/fKMe/Mr6IB2h37XzY+SUjP56 ry5BFNeD1YLggN80bRGUgcTyrBqwJV77uFNQQOsDfVCBQU5VQ5W++DviyIHXl/a0 eawZzaBXeMvXHeCQ8FbOsE0kDmzCc+VAxBwNbyrADIdtXBvap7XxbfbNHbk0yAwX 7DjTuaIcd2wuXd5xWnU4gfUXXve/GALyI4mjFsTklY+SHuw= -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:11 2025 by rpki-client