This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e31382e302f32332d3234203d3e203433383437.roa File: 34362e3138322e31382e302f32332d3234203d3e203433383437.roa (raw, json) Hash identifier: DgeeTdS1cV2ARBxXa3eeMqv+51T6WTIRd1T4HPr/8JQ= Subject key identifier: A7:C2:6F:D8:C7:9B:A8:AA:5C:11:D9:5B:92:31:CF:7C:BE:75:D0:EB Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 65A671B2FB7564EC9DC51B004569E3040AADB293 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e31382e302f32332d3234203d3e203433383437.roa Signing time: Tue 02 Dec 2025 06:14:09 +0000 ROA not before: Tue 02 Dec 2025 06:09:09 +0000 ROA not after: Tue 01 Dec 2026 06:14:09 +0000 asID: 43847 IP address blocks: 46.182.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 09:39:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a6:71:b2:fb:75:64:ec:9d:c5:1b:00:45:69:e3:04:0a:ad:b2:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Dec 2 06:09:09 2025 GMT Not After : Dec 1 06:14:09 2026 GMT Subject: CN=A7C26FD8C79BA8AA5C11D95B9231CF7CBE75D0EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:53:a3:39:4b:81:ff:86:f2:46:ae:ea:af:1e: e3:e4:62:77:6b:a7:c0:43:26:01:92:d2:87:93:7f: da:3a:0b:cf:8f:b6:0e:18:fd:c1:a4:e9:bd:88:c3: 02:cf:f9:2a:46:4b:a5:9c:47:91:7c:6c:e5:c0:7a: 21:e7:0c:3c:f1:e6:de:3f:28:9d:d8:b9:cf:c5:b9: fa:0a:90:ed:0d:26:fc:d0:9a:34:41:06:71:14:7e: 8e:ef:d3:b2:8d:9c:a8:6c:1e:fb:53:37:d6:2b:cb: e7:b3:10:57:f1:fb:5b:76:ca:1e:56:6a:1e:a9:f1: 7f:ef:fe:6f:d6:18:fe:62:3a:34:4d:f9:7c:1c:ca: b7:0b:3a:f4:9a:92:d9:4a:ca:63:2c:c2:b0:85:28: 55:f8:1f:cd:ca:b0:5b:ce:41:75:4b:a5:99:b1:58: 99:a2:2e:fb:ca:98:ac:19:50:c1:cb:f2:33:d1:65: 7b:c2:41:ec:17:a2:3c:87:50:63:60:1e:3c:a3:23: 3f:7a:c6:38:a5:dd:5a:a8:81:1e:fd:98:88:ab:6d: 01:1e:d4:78:dc:6d:42:e5:d7:82:b0:d5:72:1d:a7: 42:d1:ef:0b:41:e1:78:48:03:ed:a6:ac:83:9d:f6: e7:ea:f9:48:75:c2:1c:e9:c2:4a:38:81:c5:2c:e7: c3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C2:6F:D8:C7:9B:A8:AA:5C:11:D9:5B:92:31:CF:7C:BE:75:D0:EB X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e31382e302f32332d3234203d3e203433383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.18.0/23 Signature Algorithm: sha256WithRSAEncryption 81:bf:61:b0:a0:53:5c:1a:0d:6a:75:03:29:e8:df:cb:fc:4f: ae:a2:0a:2c:1b:6f:01:7b:89:a4:4a:cb:43:99:6a:9d:b1:57: 50:f2:e7:5a:96:30:53:2e:17:13:5a:20:1c:41:d6:53:94:2a: 59:c6:21:96:48:79:9c:36:76:85:b6:c4:9b:e2:8a:29:9e:af: f0:04:ae:be:f4:c5:46:48:52:4b:0d:54:58:be:50:09:52:4d: 0f:dc:e5:34:87:e9:52:a7:62:0e:3c:3e:2a:85:b2:79:27:8f: c2:43:3c:65:82:03:82:6b:67:de:f3:05:57:fa:16:be:2f:28: 19:d0:dd:8e:5e:5a:20:d0:24:01:48:04:e6:90:c5:c9:81:06: 13:e0:95:3e:d0:d6:3a:9e:0b:46:38:f4:b0:2d:db:67:82:a6: a9:03:6e:c5:e5:70:ed:e4:a9:17:36:2a:ad:b2:5f:d4:5a:d0: c9:a9:a5:07:d5:83:ce:82:54:d9:6c:94:0a:be:91:bf:f8:e4: 35:40:88:fc:a3:7f:8d:ff:3b:2e:f4:ae:99:61:75:a7:1b:28: 48:0b:02:15:b9:49:51:24:d3:ba:b4:8c:42:f5:3e:49:33:ef: 43:a1:81:08:41:30:ff:7d:bb:35:5b:90:3d:3f:0a:84:4e:93: 99:48:44:a2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZaZxsvt1ZOydxRsARWnjBAqtspMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTEyMDIwNjA5MDlaFw0yNjEyMDEwNjE0MDlaMDMxMTAvBgNV BAMTKEE3QzI2RkQ4Qzc5QkE4QUE1QzExRDk1QjkyMzFDRjdDQkU3NUQwRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoU6M5S4H/hvJGruqvHuPkYndr p8BDJgGS0oeTf9o6C8+Ptg4Y/cGk6b2IwwLP+SpGS6WcR5F8bOXAeiHnDDzx5t4/ KJ3Yuc/FufoKkO0NJvzQmjRBBnEUfo7v07KNnKhsHvtTN9Yry+ezEFfx+1t2yh5W ah6p8X/v/m/WGP5iOjRN+XwcyrcLOvSaktlKymMswrCFKFX4H83KsFvOQXVLpZmx WJmiLvvKmKwZUMHL8jPRZXvCQewXojyHUGNgHjyjIz96xjil3VqogR79mIirbQEe 1HjcbULl14Kw1XIdp0LR7wtB4XhIA+2mrIOd9ufq+Uh1whzpwko4gcUs58ORAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUp8Jv2MebqKpcEdlbkjHPfL510OswHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzQzNjJlMzEzODMyMmUzMTM4 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzMzM4MzQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS62 EjANBgkqhkiG9w0BAQsFAAOCAQEAgb9hsKBTXBoNanUDKejfy/xPrqIKLBtvAXuJ pErLQ5lqnbFXUPLnWpYwUy4XE1ogHEHWU5QqWcYhlkh5nDZ2hbbEm+KKKZ6v8ASu vvTFRkhSSw1UWL5QCVJND9zlNIfpUqdiDjw+KoWyeSePwkM8ZYIDgmtn3vMFV/oW vi8oGdDdjl5aINAkAUgE5pDFyYEGE+CVPtDWOp4LRjj0sC3bZ4KmqQNuxeVw7eSp FzYqrbJf1FrQyamlB9WDzoJU2WyUCr6Rv/jkNUCI/KN/jf87LvSumWF1pxsoSAsC FblJUSTTurSMQvU+STPvQ6GBCEEw/327NVuQPT8KhE6TmUhEog== -----END CERTIFICATE-----Generated at Wed Dec 3 20:18:29 2025 by rpki-client