This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/38392e3138372e36382e302f32342d3332203d3e20323035383438.roa File: 38392e3138372e36382e302f32342d3332203d3e20323035383438.roa (raw, json) Hash identifier: BDGbr95VQ36FR9Tfnaz/+ZZ7HPpklQMInwdbSElUj64= Subject key identifier: 3F:88:B3:3F:56:D2:E1:50:22:B0:CA:38:9B:7B:38:11:4F:1C:31:E1 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 0468A4BB4D6DFB557FB4B835F817960717FCBB34 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/38392e3138372e36382e302f32342d3332203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:17:59 +0000 ROA not before: Wed 31 Dec 2025 21:12:59 +0000 ROA not after: Wed 30 Dec 2026 21:17:59 +0000 asID: 205848 IP address blocks: 89.187.68.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:68:a4:bb:4d:6d:fb:55:7f:b4:b8:35:f8:17:96:07:17:fc:bb:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:12:59 2025 GMT Not After : Dec 30 21:17:59 2026 GMT Subject: CN=3F88B33F56D2E15022B0CA389B7B38114F1C31E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:52:94:f7:6d:9f:34:67:ad:80:33:5e:69: 69:df:07:9a:70:d3:03:ad:ff:a9:77:d9:46:57:22: b5:a6:62:5c:96:3d:9f:9f:d4:51:e7:3e:04:b5:af: 68:c5:de:55:c9:91:58:da:0d:21:d6:2f:6f:a8:81: 99:03:b9:c5:f5:3c:70:ce:b3:4c:ee:71:24:bd:95: ad:3b:03:2a:68:5d:fd:0d:05:7e:f0:9c:b6:97:f8: 80:9f:f9:58:74:97:f4:44:58:08:b0:50:7f:f9:23: 69:f7:90:9b:d1:cd:12:ae:94:df:71:78:0c:46:3a: 1e:f5:36:12:7a:94:5f:0b:3b:15:9d:af:6d:be:e5: 02:14:88:37:1d:67:02:4b:19:32:0b:f1:67:08:f2: da:73:34:0f:8c:fc:92:ea:d9:4a:f4:1d:51:be:e5: 6e:2c:9b:ab:28:17:81:44:38:d6:89:ad:77:d7:68: 6f:33:a0:fd:af:db:60:d1:6d:03:16:76:ff:f4:f5: 84:b6:c1:3e:b3:4e:26:d3:65:74:4b:37:02:af:6d: b7:9c:e4:49:53:57:60:f9:ce:a0:42:2a:79:cc:02: 56:83:71:61:de:1f:b1:27:5a:9a:46:06:c2:58:3b: 77:7e:dc:8a:09:d6:5e:b0:65:84:5d:40:d5:9e:7c: 80:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:B3:3F:56:D2:E1:50:22:B0:CA:38:9B:7B:38:11:4F:1C:31:E1 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/38392e3138372e36382e302f32342d3332203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.68.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:ca:1f:75:70:34:38:64:ee:1c:b8:c5:82:a0:a5:70:78:a5: 28:06:27:8a:9b:12:71:bc:51:a6:2e:8e:1d:df:9a:ac:33:f1: a6:8b:d8:7f:09:ef:98:d7:45:aa:06:e3:3e:92:a7:ff:8a:38: f4:80:78:c3:72:75:ef:c8:d0:34:32:49:21:ae:49:58:4a:db: cb:95:5c:23:ca:c6:13:60:d7:4b:2d:cf:d6:64:bc:f4:5d:72: 7f:59:ee:03:f6:ab:b0:44:b1:32:c8:f7:d2:c0:71:02:f3:1f: a6:77:95:86:41:a3:57:24:99:bc:cb:58:c5:f6:bc:91:d0:df: 75:ff:ce:2d:a7:2b:17:76:df:d0:45:e2:d7:72:91:76:1e:ba: be:0a:d7:60:61:d6:a2:3e:5a:50:70:fa:d1:81:90:c1:a7:a2: b0:1f:74:0d:c8:52:b5:2c:70:c5:08:6b:d7:4c:04:53:21:5e: e0:a5:5c:b8:fd:11:59:0d:a2:4f:36:a1:0c:f7:db:47:45:a6: 20:0d:6c:0c:78:36:bd:bf:aa:e8:1e:a1:36:50:21:4b:60:ca: ed:17:90:99:65:a6:a1:99:96:4d:19:31:52:d3:48:16:64:86: 3a:04:e9:ed:6b:07:bd:70:c4:a4:9d:38:06:c6:2e:4b:01:23: 9c:57:81:b6 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUBGiku01t+1V/tLg1+BeWBxf8uzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTEyNTlaFw0yNjEyMzAyMTE3NTlaMDMxMTAvBgNV BAMTKDNGODhCMzNGNTZEMkUxNTAyMkIwQ0EzODlCN0IzODExNEYxQzMxRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCni1KU922fNGetgDNeaWnfB5pw 0wOt/6l32UZXIrWmYlyWPZ+f1FHnPgS1r2jF3lXJkVjaDSHWL2+ogZkDucX1PHDO s0zucSS9la07AypoXf0NBX7wnLaX+ICf+Vh0l/REWAiwUH/5I2n3kJvRzRKulN9x eAxGOh71NhJ6lF8LOxWdr22+5QIUiDcdZwJLGTIL8WcI8tpzNA+M/JLq2Ur0HVG+ 5W4sm6soF4FEONaJrXfXaG8zoP2v22DRbQMWdv/09YS2wT6zTibTZXRLNwKvbbec 5ElTV2D5zqBCKnnMAlaDcWHeH7EnWppGBsJYO3d+3IoJ1l6wZYRdQNWefIBPAgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUP4izP1bS4VAisMo4m3s4EU8cMeEwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzgzOTJlMzEzODM3MmUzNjM4 MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzMDM1MzgzNDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbtEMA0GCSqGSIb3DQEBCwUAA4IBAQBtyh91cDQ4ZO4cuMWCoKVweKUoBieKmxJx vFGmLo4d35qsM/Gmi9h/Ce+Y10WqBuM+kqf/ijj0gHjDcnXvyNA0MkkhrklYStvL lVwjysYTYNdLLc/WZLz0XXJ/We4D9quwRLEyyPfSwHEC8x+md5WGQaNXJJm8y1jF 9ryR0N91/84tpysXdt/QReLXcpF2Hrq+CtdgYdaiPlpQcPrRgZDBp6KwH3QNyFK1 LHDFCGvXTARTIV7gpVy4/RFZDaJPNqEM99tHRaYgDWwMeDa9v6roHqE2UCFLYMrt F5CZZaahmZZNGTFS00gWZIY6BOntawe9cMSknTgGxi5LASOcV4G2 -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:43 2026 by rpki-client