This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e2039333034.roa File: 38332e3135302e3231362e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: SHO6BxDoTVCg+5Db1T6qj1oU+zO9Nrl8AN0Cw80zXoY= Subject key identifier: E0:4C:2F:52:F5:3A:78:22:89:44:58:0A:1A:34:F1:E4:6F:F4:6B:17 Certificate issuer: /CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Certificate serial: 01FFFC0DDAE20831D9F601F902584F232A765034 Authority key identifier: 5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e2039333034.roa Signing time: Sat 17 Jan 2026 13:35:15 +0000 ROA not before: Sat 17 Jan 2026 13:30:15 +0000 ROA not after: Sat 16 Jan 2027 13:35:15 +0000 asID: 9304 IP address blocks: 83.150.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.mft rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:fc:0d:da:e2:08:31:d9:f6:01:f9:02:58:4f:23:2a:76:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e5179bb1757068d7028510feeb1177aa7cc8818 Validity Not Before: Jan 17 13:30:15 2026 GMT Not After : Jan 16 13:35:15 2027 GMT Subject: CN=E04C2F52F53A78228944580A1A34F1E46FF46B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3c:29:ad:22:1a:96:40:be:b4:a5:dd:ea:17: cb:10:87:b9:f0:75:ae:50:8f:89:67:dc:51:bc:12: 4e:33:c9:1f:30:74:48:ea:98:e8:15:50:6b:7a:15: 17:b6:be:7a:5d:3d:48:8a:9d:68:02:cb:cc:81:48: 4a:fc:0e:91:bd:48:da:92:48:85:d2:f9:37:af:df: 54:b5:5f:d4:52:78:c7:96:74:50:e0:3e:b2:d6:14: 77:99:e6:79:69:51:3a:82:b3:3e:ad:b3:cd:eb:e2: 16:49:cf:8f:76:bc:e8:02:ea:dd:03:35:6b:36:10: 95:fd:d1:3d:48:72:67:e0:12:b5:05:07:a8:03:17: 0d:1c:03:ab:ad:f0:09:8f:d6:91:f6:dc:01:3d:bc: 77:48:33:06:22:e4:bc:3f:9a:b4:0c:cb:a8:34:0e: 1c:a5:94:37:db:29:32:a6:a3:cc:fd:e9:77:bd:d5: db:8d:5e:ae:de:1a:2d:cf:26:a7:d2:c6:a4:31:d9: 4f:8b:e5:3a:b1:e4:ed:0a:9e:ef:de:a5:75:0e:b6: 48:bc:ee:b2:2b:d7:15:06:0c:5c:0b:25:5f:8a:ed: ed:e1:af:0e:32:19:80:ee:6c:e7:1c:22:4e:f7:e7: 6f:0d:af:12:0c:15:0d:98:d0:e5:7e:9f:88:9c:bb: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:4C:2F:52:F5:3A:78:22:89:44:58:0A:1A:34:F1:E4:6F:F4:6B:17 X509v3 Authority Key Identifier: keyid:5E:51:79:BB:17:57:06:8D:70:28:51:0F:EE:B1:17:7A:A7:CC:88:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/5E5179BB1757068D7028510FEEB1177AA7CC8818.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlF5uxdXBo1wKFEP7rEXeqfMiBg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/83e4757f-d37f-4fd6-a69b-d74bdd6b87dc/0/38332e3135302e3231362e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.150.216.0/24 Signature Algorithm: sha256WithRSAEncryption 83:4f:74:58:ae:fc:e2:d8:a2:cb:97:45:a4:a2:ca:92:59:96: a4:42:53:e8:34:ed:bd:24:3c:4a:87:a2:29:2b:f1:44:1e:48: 42:1d:23:4a:b4:fc:d4:64:ca:10:27:d0:d2:32:c4:bd:c8:e8: 59:9f:b0:af:b0:c8:f4:7b:96:60:73:c1:51:b9:9c:79:ca:0e: 48:9e:aa:82:b4:ff:a6:af:41:32:52:0f:32:f7:a1:4e:e2:1b: f9:dd:a6:8d:8e:63:bd:c3:20:db:48:0a:a9:f3:a5:87:cf:fe: 2e:0b:04:ce:6a:96:b6:a4:d0:00:5b:a2:3e:94:b4:94:2c:c4: 4e:3c:da:7a:c3:37:c9:3e:be:f0:b3:35:8d:ec:57:c9:0b:f4: e2:51:3f:50:b2:1f:81:fe:38:51:2f:92:4f:ee:74:36:c4:4a: 11:ad:f3:80:88:b9:c7:b1:2f:50:d0:ce:7e:49:fe:e5:7b:3c: 69:09:02:e0:3b:08:6d:89:42:6a:6d:14:56:d3:75:eb:cb:5e: 43:45:c9:c0:db:47:53:7e:2a:a3:b4:d0:e8:f4:b6:9a:9b:48: 95:c3:af:df:b0:46:5d:eb:bd:cb:89:43:cd:c7:fe:46:47:63: c8:31:32:36:0a:fc:d2:81:34:51:b5:69:43:dc:f5:8c:fd:63: ab:33:9e:55 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUAf/8DdriCDHZ9gH5AlhPIyp2UDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWU1MTc5YmIxNzU3MDY4ZDcwMjg1MTBmZWViMTE3N2Fh N2NjODgxODAeFw0yNjAxMTcxMzMwMTVaFw0yNzAxMTYxMzM1MTVaMDMxMTAvBgNV BAMTKEUwNEMyRjUyRjUzQTc4MjI4OTQ0NTgwQTFBMzRGMUU0NkZGNDZCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVPCmtIhqWQL60pd3qF8sQh7nw da5Qj4ln3FG8Ek4zyR8wdEjqmOgVUGt6FRe2vnpdPUiKnWgCy8yBSEr8DpG9SNqS SIXS+Tev31S1X9RSeMeWdFDgPrLWFHeZ5nlpUTqCsz6ts83r4hZJz492vOgC6t0D NWs2EJX90T1IcmfgErUFB6gDFw0cA6ut8AmP1pH23AE9vHdIMwYi5Lw/mrQMy6g0 DhyllDfbKTKmo8z96Xe91duNXq7eGi3PJqfSxqQx2U+L5Tqx5O0Knu/epXUOtki8 7rIr1xUGDFwLJV+K7e3hrw4yGYDubOccIk73528NrxIMFQ2Y0OV+n4icu44XAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU4EwvUvU6eCKJRFgKGjTx5G/0axcwHwYDVR0j BBgwFoAUXlF5uxdXBo1wKFEP7rEXeqfMiBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODNlNDc1N2YtZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4 N2RjLzAvNUU1MTc5QkIxNzU3MDY4RDcwMjg1MTBGRUVCMTE3N0FBN0NDODgxOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hsRjV1eGRYQm8xd0tGRVA3ckVYZXFm TWlCZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODNlNDc1N2Yt ZDM3Zi00ZmQ2LWE2OWItZDc0YmRkNmI4N2RjLzAvMzgzMzJlMzEzNTMwMmUzMjMx MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFOW 2DANBgkqhkiG9w0BAQsFAAOCAQEAg090WK784tiiy5dFpKLKklmWpEJT6DTtvSQ8 SoeiKSvxRB5IQh0jSrT81GTKECfQ0jLEvcjoWZ+wr7DI9HuWYHPBUbmcecoOSJ6q grT/pq9BMlIPMvehTuIb+d2mjY5jvcMg20gKqfOlh8/+LgsEzmqWtqTQAFuiPpS0 lCzETjzaesM3yT6+8LM1jexXyQv04lE/ULIfgf44US+ST+50NsRKEa3zgIi5x7Ev UNDOfkn+5Xs8aQkC4DsIbYlCam0UVtN168teQ0XJwNtHU34qo7TQ6PS2mptIlcOv 37BGXeu9y4lDzcf+RkdjyDEyNgr80oE0UbVpQ9z1jP1jqzOeVQ== -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:56 2026 by rpki-client