This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32332e302f32342d3234203d3e203433383437.roa File: 34362e3138322e32332e302f32342d3234203d3e203433383437.roa (raw, json) Hash identifier: Oi2IQdPDXNgENY6RArFV2X9hiizOz4Z+Sr1U4VYXBoc= Subject key identifier: 88:B4:24:2D:1A:5A:6A:0A:3F:6E:28:12:21:DB:A0:23:A8:21:A0:23 Certificate issuer: /CN=38a93c81ecd308e6a7632717045b3d35150120f8 Certificate serial: 6C927FE6A4F4FD85A0C099DF9FC537B39FC24116 Authority key identifier: 38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32332e302f32342d3234203d3e203433383437.roa Signing time: Wed 31 Dec 2025 13:55:33 +0000 ROA not before: Wed 31 Dec 2025 13:50:33 +0000 ROA not after: Wed 30 Dec 2026 13:55:33 +0000 asID: 43847 IP address blocks: 46.182.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.mft rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:92:7f:e6:a4:f4:fd:85:a0:c0:99:df:9f:c5:37:b3:9f:c2:41:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a93c81ecd308e6a7632717045b3d35150120f8 Validity Not Before: Dec 31 13:50:33 2025 GMT Not After : Dec 30 13:55:33 2026 GMT Subject: CN=88B4242D1A5A6A0A3F6E281221DBA023A821A023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c1:03:16:d9:3c:4f:c8:15:13:8c:5b:eb:4e: 16:98:f7:ca:c7:36:4b:0d:49:1c:18:1d:e3:f3:ab: cc:8f:ab:06:17:da:ff:0d:82:ee:f6:75:05:41:a9: 71:4a:ff:7b:d7:8d:7c:29:8d:a4:a4:82:1e:b6:47: fb:4a:7e:27:cf:ec:2c:58:5b:27:1a:ea:79:8d:ae: 2d:3b:c1:cc:f4:71:b8:91:d9:68:ca:7d:13:5f:5e: 0c:ca:4f:61:cd:7e:4e:d0:0e:1e:ae:6f:d0:13:5b: ca:91:3e:79:3a:61:eb:f5:b1:d8:15:56:90:d4:98: 2b:f4:fc:bf:08:40:ff:72:ef:35:7c:ed:18:a4:65: a9:d6:dd:16:ef:5e:3f:f0:65:f4:5b:50:bb:16:28: e6:29:29:e9:af:b0:c9:17:74:42:33:8c:b9:d6:30: db:91:7f:56:b6:34:24:26:43:ba:9b:1b:0d:00:a0: 79:2d:fb:c4:8c:e8:bf:47:bc:3b:fd:02:71:e4:e4: 54:2c:0e:8d:bc:e0:e8:13:00:6d:4b:51:a4:b7:00: 8f:cf:b3:36:b9:57:df:91:9f:eb:ba:e7:8e:ce:12: 1e:bb:e0:a0:31:9e:5a:90:41:21:0e:d0:bb:c0:33: a9:f8:35:fb:a7:6e:1d:ac:94:d3:ed:a0:b3:af:80: 73:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:24:2D:1A:5A:6A:0A:3F:6E:28:12:21:DB:A0:23:A8:21:A0:23 X509v3 Authority Key Identifier: keyid:38:A9:3C:81:EC:D3:08:E6:A7:63:27:17:04:5B:3D:35:15:01:20:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/38A93C81ECD308E6A7632717045B3D35150120F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKk8gezTCOanYycXBFs9NRUBIPg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982c65b9-725d-4bb0-a216-8e77191ff9b8/0/34362e3138322e32332e302f32342d3234203d3e203433383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.23.0/24 Signature Algorithm: sha256WithRSAEncryption 09:d6:fc:94:6f:a1:57:ab:b5:1c:df:70:d6:99:94:f7:52:74: 19:f1:67:99:5c:f5:4a:91:3f:35:f8:2e:2b:3d:fe:da:90:5c: 44:0d:dc:5a:ea:4a:2e:00:16:da:70:eb:92:b8:e9:40:aa:6f: ff:89:d6:b4:70:25:2a:5f:0c:ef:e5:95:0f:2a:c6:bd:c3:e5: bc:2a:61:fc:00:5a:35:db:68:11:f6:33:7c:4c:31:18:4b:e4: 21:5e:5d:ab:1a:a2:18:f1:c4:51:52:fc:61:18:79:aa:8a:eb: 45:4f:ae:17:ba:aa:1e:28:dd:f4:13:c8:69:ac:91:77:ce:7d: 8d:7d:31:f4:f8:ef:61:df:3b:90:be:e1:41:b7:05:d7:7f:dc: 0a:d7:03:71:7a:a1:60:5b:da:ed:11:79:d6:33:3d:a4:34:8e: b9:77:61:8c:8c:55:8b:f2:f4:a4:58:68:1b:a4:48:aa:08:68: 5e:5a:ed:8a:e0:91:88:b5:a2:db:99:49:dc:03:ae:d1:a2:8a: 0e:77:f3:7b:24:9e:ab:88:d1:e7:18:ae:66:06:cb:31:56:ba: 66:33:6d:3f:dc:83:ee:9c:ac:5e:12:2f:5b:2e:7d:20:5e:c1: 4f:23:bd:d1:32:6d:d9:e2:1a:27:1e:2f:4f:e4:07:26:b8:f0: 05:f5:6b:a2 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbJJ/5qT0/YWgwJnfn8U3s5/CQRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhhOTNjODFlY2QzMDhlNmE3NjMyNzE3MDQ1YjNkMzUx NTAxMjBmODAeFw0yNTEyMzExMzUwMzNaFw0yNjEyMzAxMzU1MzNaMDMxMTAvBgNV BAMTKDg4QjQyNDJEMUE1QTZBMEEzRjZFMjgxMjIxREJBMDIzQTgyMUEwMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwQMW2TxPyBUTjFvrThaY98rH NksNSRwYHePzq8yPqwYX2v8Ngu72dQVBqXFK/3vXjXwpjaSkgh62R/tKfifP7CxY Wyca6nmNri07wcz0cbiR2WjKfRNfXgzKT2HNfk7QDh6ub9ATW8qRPnk6Yev1sdgV VpDUmCv0/L8IQP9y7zV87RikZanW3RbvXj/wZfRbULsWKOYpKemvsMkXdEIzjLnW MNuRf1a2NCQmQ7qbGw0AoHkt+8SM6L9HvDv9AnHk5FQsDo284OgTAG1LUaS3AI/P sza5V9+Rn+u6547OEh674KAxnlqQQSEO0LvAM6n4Nfunbh2slNPtoLOvgHN3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUiLQkLRpaago/bigSIdugI6ghoCMwHwYDVR0j BBgwFoAUOKk8gezTCOanYycXBFs9NRUBIPgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyYzY1YjktNzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZm OWI4LzAvMzhBOTNDODFFQ0QzMDhFNkE3NjMyNzE3MDQ1QjNEMzUxNTAxMjBGOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL09LazhnZXpUQ09hbll5Y1hCRnM5TlJV QklQZy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTgyYzY1Yjkt NzI1ZC00YmIwLWEyMTYtOGU3NzE5MWZmOWI4LzAvMzQzNjJlMzEzODMyMmUzMjMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMzM4MzQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC62 FzANBgkqhkiG9w0BAQsFAAOCAQEACdb8lG+hV6u1HN9w1pmU91J0GfFnmVz1SpE/ NfguKz3+2pBcRA3cWupKLgAW2nDrkrjpQKpv/4nWtHAlKl8M7+WVDyrGvcPlvCph /ABaNdtoEfYzfEwxGEvkIV5dqxqiGPHEUVL8YRh5qorrRU+uF7qqHijd9BPIaayR d859jX0x9PjvYd87kL7hQbcF13/cCtcDcXqhYFva7RF51jM9pDSOuXdhjIxVi/L0 pFhoG6RIqghoXlrtiuCRiLWi25lJ3AOu0aKKDnfzeySeq4jR5xiuZgbLMVa6ZjNt P9yD7pysXhIvWy59IF7BTyO90TJt2eIaJx4vT+QHJrjwBfVrog== -----END CERTIFICATE-----Generated at Sun Jan 18 13:15:34 2026 by rpki-client