This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e31362e302f32332d3234203d3e203433383437.roa File: 34362e3138322e31362e302f32332d3234203d3e203433383437.roa (raw, json) Hash identifier: F7W4Y0kopCNp9aANYttCzP7MEuweGRC/BEFBXL6atVg= Subject key identifier: 5A:3F:1F:87:D2:83:A5:50:5B:E1:E3:18:4B:BF:45:BE:99:B8:A3:E1 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 4F15F2FE739402C0FBF7E068065281C180879256 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e31362e302f32332d3234203d3e203433383437.roa Signing time: Tue 02 Dec 2025 16:12:56 +0000 ROA not before: Tue 02 Dec 2025 16:07:56 +0000 ROA not after: Tue 01 Dec 2026 16:12:56 +0000 asID: 43847 IP address blocks: 46.182.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:15:f2:fe:73:94:02:c0:fb:f7:e0:68:06:52:81:c1:80:87:92:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Dec 2 16:07:56 2025 GMT Not After : Dec 1 16:12:56 2026 GMT Subject: CN=5A3F1F87D283A5505BE1E3184BBF45BE99B8A3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:1d:5f:dc:a1:7e:b1:d1:8c:75:af:3a:aa: ac:fa:f6:a6:6b:f6:c4:d1:07:0d:79:23:e2:43:d7: d7:fa:eb:d4:1a:17:32:4e:2d:0a:17:3d:48:79:82: 03:68:3c:ec:22:6e:17:5e:80:4a:59:6c:4b:13:f5: 42:23:41:f3:6d:a9:31:f1:e8:b7:2d:00:7f:71:f2: 9e:3a:b3:ec:f9:ac:a5:14:7f:b2:86:f9:1f:ef:5a: bd:cc:74:59:12:90:1d:83:08:56:05:14:ee:f8:a5: 22:eb:d9:ef:dd:df:c6:26:00:92:df:52:ec:46:ee: e9:cb:5a:79:78:03:f8:be:ce:2d:6d:83:41:71:b6: 2e:83:97:57:15:68:b3:2c:d6:7b:24:9b:be:ea:24: 50:70:b8:2e:95:7f:20:9f:c5:29:5b:bf:50:ef:e9: ce:51:77:c7:1a:52:29:aa:4c:e5:77:d9:8a:2c:85: 60:c9:ae:fc:bd:ad:3b:98:96:35:20:94:01:81:49: d1:0b:5d:bf:bf:44:5c:b7:f2:a7:af:c4:f8:20:ec: f3:8d:65:da:ef:c7:d3:16:ef:22:56:52:75:28:3b: 35:0f:9e:15:8d:ab:f5:eb:52:df:3b:b0:c5:89:24: 77:40:b6:5b:16:55:49:87:04:26:2d:7b:d2:f7:f5: 04:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3F:1F:87:D2:83:A5:50:5B:E1:E3:18:4B:BF:45:BE:99:B8:A3:E1 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e31362e302f32332d3234203d3e203433383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.16.0/23 Signature Algorithm: sha256WithRSAEncryption 99:45:1a:f0:bb:1d:bb:f0:1d:d2:f9:8d:39:9e:91:5b:dd:20: fc:2c:bd:59:a2:12:50:f1:a3:bd:d2:0f:c1:b7:e5:f4:50:1c: 87:4c:c9:d5:ee:b4:32:ad:6c:02:e3:e3:54:55:f8:10:fd:f9: 0b:19:31:d8:e2:b5:e0:f9:7c:99:ca:85:80:85:bc:bb:f1:9d: eb:c9:0b:c3:b9:89:6c:f3:2b:a9:cc:aa:fc:9b:83:4b:3a:52: 5c:e0:84:e4:65:26:32:e8:60:76:6e:5f:67:11:50:da:32:53: 1b:75:a1:69:97:3d:d1:68:15:a0:2f:04:53:24:3f:a2:8e:94: b0:ed:ce:ee:53:08:2a:c1:d4:67:7a:8f:f5:98:3c:6b:0f:7a: 68:4f:d4:8b:15:70:8c:de:e9:0e:88:58:63:b7:1d:ff:66:b4: 79:95:17:6c:1b:5f:91:a3:21:87:44:36:03:fb:69:31:d1:9f: 16:7c:6e:e1:48:24:66:b0:0d:0d:e8:ff:f9:62:3e:10:86:93: 1f:f4:4c:58:a5:98:c7:e8:f2:80:d0:7e:78:7a:65:ed:86:10: c2:05:48:14:fa:0a:bf:a9:b8:35:b0:f9:3e:ab:07:b9:f4:7f: ba:e6:27:bb:32:0c:4a:ed:45:a8:04:71:5a:47:90:85:57:cd: f2:32:f8:d1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTxXy/nOUAsD79+BoBlKBwYCHklYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTEyMDIxNjA3NTZaFw0yNjEyMDExNjEyNTZaMDMxMTAvBgNV BAMTKDVBM0YxRjg3RDI4M0E1NTA1QkUxRTMxODRCQkY0NUJFOTlCOEEzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiR1f3KF+sdGMda86qqz69qZr 9sTRBw15I+JD19f669QaFzJOLQoXPUh5ggNoPOwibhdegEpZbEsT9UIjQfNtqTHx 6LctAH9x8p46s+z5rKUUf7KG+R/vWr3MdFkSkB2DCFYFFO74pSLr2e/d38YmAJLf UuxG7unLWnl4A/i+zi1tg0Fxti6Dl1cVaLMs1nskm77qJFBwuC6VfyCfxSlbv1Dv 6c5Rd8caUimqTOV32YoshWDJrvy9rTuYljUglAGBSdELXb+/RFy38qevxPgg7PON Zdrvx9MW7yJWUnUoOzUPnhWNq/XrUt87sMWJJHdAtlsWVUmHBCYte9L39QSpAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUWj8fh9KDpVBb4eMYS79Fvpm4o+EwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzQzNjJlMzEzODMyMmUzMTM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzMzM4MzQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS62 EDANBgkqhkiG9w0BAQsFAAOCAQEAmUUa8Lsdu/Ad0vmNOZ6RW90g/Cy9WaISUPGj vdIPwbfl9FAch0zJ1e60Mq1sAuPjVFX4EP35Cxkx2OK14Pl8mcqFgIW8u/Gd68kL w7mJbPMrqcyq/JuDSzpSXOCE5GUmMuhgdm5fZxFQ2jJTG3WhaZc90WgVoC8EUyQ/ oo6UsO3O7lMIKsHUZ3qP9Zg8aw96aE/UixVwjN7pDohYY7cd/2a0eZUXbBtfkaMh h0Q2A/tpMdGfFnxu4UgkZrANDej/+WI+EIaTH/RMWKWYx+jygNB+eHpl7YYQwgVI FPoKv6m4NbD5PqsHufR/uuYnuzIMSu1FqARxWkeQhVfN8jL40Q== -----END CERTIFICATE-----Generated at Wed Dec 3 20:18:29 2025 by rpki-client