This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa File: 38392e3138372e36392e302f32342d3332203d3e20323035383438.roa (raw, json) Hash identifier: kzFIPBC46TZNAynPGWUoS4YA8aSHjAgWh6LKaHRaEWE= Subject key identifier: BD:02:BF:64:44:1C:85:F7:30:F5:70:8F:3A:E5:43:41:7A:77:21:FE Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 3ABB5BDCCD973A23C31315BD3AD40BE23FE67970 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:18:11 +0000 ROA not before: Wed 31 Dec 2025 21:13:11 +0000 ROA not after: Wed 30 Dec 2026 21:18:11 +0000 asID: 205848 IP address blocks: 89.187.69.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:bb:5b:dc:cd:97:3a:23:c3:13:15:bd:3a:d4:0b:e2:3f:e6:79:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:13:11 2025 GMT Not After : Dec 30 21:18:11 2026 GMT Subject: CN=BD02BF64441C85F730F5708F3AE543417A7721FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:66:41:12:80:79:08:44:7e:ee:1a:58:2b: 8e:5a:8c:b1:72:5c:a8:94:fa:73:c7:6f:2d:ba:03: 17:d3:ea:f8:2c:56:45:72:8f:d0:88:0d:2a:76:7f: 61:7d:c1:02:f7:08:57:a4:43:10:9c:2e:ad:92:e1: b8:32:34:6c:1d:96:91:02:22:15:9e:90:bf:fc:b1: 5b:7c:f6:28:d4:25:5b:08:2c:42:34:f9:66:e4:8a: db:7b:c5:d9:fd:3e:8b:90:9c:80:49:13:9b:21:83: 97:67:e8:ce:f9:3e:ef:86:89:71:5c:bb:58:83:81: 51:c8:be:ad:b4:73:c9:24:cb:32:93:72:9c:c2:34: c0:60:2f:46:33:57:9e:ba:de:b9:3b:85:ca:21:65: 55:99:e2:9e:1a:8f:90:40:1f:7b:e5:26:2f:ac:62: 57:37:41:aa:fe:34:da:3a:1d:84:1f:0a:b0:9e:7d: 20:56:49:05:f7:6c:25:cc:20:ae:26:c1:2f:14:96: 7f:c7:c3:69:ef:04:ea:49:b6:3e:56:ce:38:49:24: 14:0e:c5:49:1d:4d:9e:69:7b:8f:c6:1e:9d:fc:a5: 9c:e3:7c:98:9d:d3:58:70:d1:45:3e:22:4e:ec:f9: 64:6b:da:f3:31:c0:1d:a8:fe:7b:87:c9:98:c7:43: e8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:02:BF:64:44:1C:85:F7:30:F5:70:8F:3A:E5:43:41:7A:77:21:FE X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/38392e3138372e36392e302f32342d3332203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.69.0/24 Signature Algorithm: sha256WithRSAEncryption 96:4c:8f:57:29:20:0f:d5:e9:a6:82:ef:bf:7c:14:45:df:95: 1d:ce:a3:37:b6:ea:13:93:4f:fe:a1:30:45:cc:91:84:e3:96: fd:dc:f4:e6:f2:8d:d0:53:e2:2b:8a:a6:83:0e:e1:04:71:ef: 7f:5c:9d:9a:6b:e5:c8:a4:c4:d8:f1:4a:a4:37:73:5e:4a:8a: 90:74:8c:cb:f9:26:d7:6d:ff:9a:56:03:70:11:2f:97:b5:e1: ba:79:45:2d:fb:35:54:28:97:de:f7:ce:79:a1:6c:f9:b3:71: f8:3c:fb:7c:d0:4d:65:73:b2:7b:33:8c:7a:be:c0:f9:8a:47: d9:68:6e:9c:55:49:46:fb:e2:21:05:89:c2:26:20:fc:1d:8b: 6a:d2:b5:14:af:5b:f8:cf:84:30:58:cb:43:37:6e:a2:82:57: f9:8d:fe:f3:5a:68:dc:c3:da:7a:7f:5a:87:f9:d0:a6:0f:c2: 9a:10:28:00:34:f9:71:65:a2:e0:58:c8:9c:4a:1f:0a:09:2a: 50:dc:c4:2b:34:66:e4:04:e4:fa:92:4c:49:90:24:c3:2f:7c: e5:fc:7c:01:6b:a8:a5:b8:08:5a:48:d4:54:24:03:32:48:4f: 23:61:1c:84:b6:95:05:0b:15:ee:25:91:11:04:f4:8a:1e:eb: a0:eb:c5:77 -----BEGIN CERTIFICATE----- MIIFYzCCBEugAwIBAgIUOrtb3M2XOiPDExW9OtQL4j/meXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTEzMTFaFw0yNjEyMzAyMTE4MTFaMDMxMTAvBgNV BAMTKEJEMDJCRjY0NDQxQzg1RjczMEY1NzA4RjNBRTU0MzQxN0E3NzIxRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChx2ZBEoB5CER+7hpYK45ajLFy XKiU+nPHby26AxfT6vgsVkVyj9CIDSp2f2F9wQL3CFekQxCcLq2S4bgyNGwdlpEC IhWekL/8sVt89ijUJVsILEI0+Wbkitt7xdn9PouQnIBJE5shg5dn6M75Pu+GiXFc u1iDgVHIvq20c8kkyzKTcpzCNMBgL0YzV5663rk7hcohZVWZ4p4aj5BAH3vlJi+s Ylc3Qar+NNo6HYQfCrCefSBWSQX3bCXMIK4mwS8Uln/Hw2nvBOpJtj5WzjhJJBQO xUkdTZ5pe4/GHp38pZzjfJid01hw0UU+Ik7s+WRr2vMxwB2o/nuHyZjHQ+hXAgMB AAGjggJtMIICaTAdBgNVHQ4EFgQUvQK/ZEQchfcw9XCPOuVDQXp3If4wHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzgzOTJlMzEzODM3MmUzNjM5 MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzMDM1MzgzNDM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA WbtFMA0GCSqGSIb3DQEBCwUAA4IBAQCWTI9XKSAP1emmgu+/fBRF35UdzqM3tuoT k0/+oTBFzJGE45b93PTm8o3QU+IriqaDDuEEce9/XJ2aa+XIpMTY8UqkN3NeSoqQ dIzL+SbXbf+aVgNwES+XteG6eUUt+zVUKJfe9855oWz5s3H4PPt80E1lc7J7M4x6 vsD5ikfZaG6cVUlG++IhBYnCJiD8HYtq0rUUr1v4z4QwWMtDN26iglf5jf7zWmjc w9p6f1qH+dCmD8KaECgANPlxZaLgWMicSh8KCSpQ3MQrNGbkBOT6kkxJkCTDL3zl /HwBa6iluAhaSNRUJAMySE8jYRyEtpUFCxXuJZERBPSKHuug68V3 -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:39 2026 by rpki-client