This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38362e35342e3137322e302f32342d3234203d3e20323134343332.roa File: 38362e35342e3137322e302f32342d3234203d3e20323134343332.roa (raw, json) Hash identifier: +6HuSGy13PoSBfdgi660PmTLE8Z52TLvw+ru7fcB7AI= Subject key identifier: A6:04:84:9C:DE:A7:35:59:0E:FD:D8:09:6F:53:F8:FD:14:8D:C4:60 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 5CBFBF94633611C667CEF56EB38FD24405D78921 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38362e35342e3137322e302f32342d3234203d3e20323134343332.roa Signing time: Tue 30 Dec 2025 07:03:55 +0000 ROA not before: Tue 30 Dec 2025 06:58:55 +0000 ROA not after: Tue 29 Dec 2026 07:03:55 +0000 asID: 214432 IP address blocks: 86.54.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:22:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bf:bf:94:63:36:11:c6:67:ce:f5:6e:b3:8f:d2:44:05:d7:89:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Dec 30 06:58:55 2025 GMT Not After : Dec 29 07:03:55 2026 GMT Subject: CN=A604849CDEA735590EFDD8096F53F8FD148DC460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e5:6a:61:54:0e:9f:25:f8:72:ce:95:83:fb: 45:c3:0c:97:5e:03:64:c3:da:1e:57:95:e8:65:b5: 0b:c1:9d:a9:e5:16:28:e5:23:d0:16:38:ec:14:a0: 95:c1:d4:6c:c4:c6:d9:54:50:3c:ae:2d:54:86:9c: b1:8b:a3:18:18:30:b2:f4:30:58:e2:6e:45:fc:65: ac:a0:75:e8:b5:35:af:eb:d4:7b:09:9b:65:cf:0a: 48:92:65:30:dc:db:ea:9d:5d:fe:12:36:31:8f:24: 87:8e:c1:e8:2b:45:be:eb:31:02:54:db:64:37:a9: d5:bb:ed:b4:06:70:02:67:f4:09:a8:c0:0b:21:cd: a2:82:4b:ef:2f:a3:59:b0:2b:dd:b8:4a:bd:ac:b6: 03:86:de:1d:6f:23:bc:bc:1d:f7:8a:38:1d:30:da: 7e:2b:af:ec:c7:27:8b:82:1b:8b:a3:a9:9e:1e:49: f0:e3:74:75:40:2c:3a:ab:ab:1c:e6:64:19:3f:f5: 04:56:6f:f7:d9:00:63:89:ea:2d:60:4b:ea:ee:d2: be:f7:03:8f:98:cf:84:ab:9a:d1:07:87:eb:f8:fe: 7d:e3:10:2c:b1:99:e2:72:60:bc:0e:28:d3:e3:a8: 7d:39:d9:f0:b7:e9:23:41:a7:35:d7:84:2a:9f:1f: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:04:84:9C:DE:A7:35:59:0E:FD:D8:09:6F:53:F8:FD:14:8D:C4:60 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/38362e35342e3137322e302f32342d3234203d3e20323134343332.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.54.172.0/24 Signature Algorithm: sha256WithRSAEncryption 16:0d:05:fb:53:2e:e0:70:bf:3d:35:02:46:1f:4e:8b:40:44: 1a:91:1f:6a:88:c9:8b:b6:0c:cd:a3:4d:11:69:99:de:fb:28: 4f:03:48:22:85:1c:99:5e:ad:9c:0c:a6:37:f1:bc:d7:c0:38: 22:8a:27:3e:46:d1:7a:91:cd:00:73:7a:70:d9:e7:5e:38:1c: a7:4a:c4:99:56:bb:ab:40:fb:4d:e5:3e:4c:0a:41:66:7b:54: 50:95:b7:9f:48:e1:fd:29:f6:cc:37:ea:fd:95:93:7d:3b:4a: 78:51:b1:5a:2c:73:06:eb:bd:a9:14:61:e1:0f:9e:99:cf:01: 8e:18:1c:09:be:b9:32:c7:d6:c0:88:09:21:04:1e:3e:a9:16: 3e:bb:5b:f5:55:78:81:98:d0:b4:b3:bf:a6:17:6c:f9:2b:01: 76:cf:27:49:7e:53:44:6e:e7:99:e1:f7:ec:4a:c1:b2:a5:b3: 4a:cc:05:e2:d5:cd:af:2a:3a:52:fc:75:f8:b7:2e:d4:e8:7a: da:20:42:ba:e9:cd:c5:a0:f2:87:9b:b7:68:2a:3f:eb:17:97: 65:45:0c:2f:ba:7e:31:1c:5e:40:d0:7b:b4:20:a0:98:e4:e3: 8f:92:d4:3c:b8:22:be:96:cb:1e:e6:2d:c9:2c:5e:10:40:37: 40:4c:3e:fe -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXL+/lGM2EcZnzvVus4/SRAXXiSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNTEyMzAwNjU4NTVaFw0yNjEyMjkwNzAzNTVaMDMxMTAvBgNV BAMTKEE2MDQ4NDlDREVBNzM1NTkwRUZERDgwOTZGNTNGOEZEMTQ4REM0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5WphVA6fJfhyzpWD+0XDDJde A2TD2h5XlehltQvBnanlFijlI9AWOOwUoJXB1GzExtlUUDyuLVSGnLGLoxgYMLL0 MFjibkX8Zaygdei1Na/r1HsJm2XPCkiSZTDc2+qdXf4SNjGPJIeOwegrRb7rMQJU 22Q3qdW77bQGcAJn9AmowAshzaKCS+8vo1mwK924Sr2stgOG3h1vI7y8HfeKOB0w 2n4rr+zHJ4uCG4ujqZ4eSfDjdHVALDqrqxzmZBk/9QRWb/fZAGOJ6i1gS+ru0r73 A4+Yz4SrmtEHh+v4/n3jECyxmeJyYLwOKNPjqH052fC36SNBpzXXhCqfH04NAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUpgSEnN6nNVkO/dgJb1P4/RSNxGAwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgt YmZlMC00MjM1LWFmYjQtZDUzZWRmYmFjZGQyLzAvMzgzNjJlMzUzNDJlMzEzNzMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM0MzQzMzMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA VjasMA0GCSqGSIb3DQEBCwUAA4IBAQAWDQX7Uy7gcL89NQJGH06LQEQakR9qiMmL tgzNo00RaZne+yhPA0gihRyZXq2cDKY38bzXwDgiiic+RtF6kc0Ac3pw2edeOByn SsSZVrurQPtN5T5MCkFme1RQlbefSOH9KfbMN+r9lZN9O0p4UbFaLHMG672pFGHh D56ZzwGOGBwJvrkyx9bAiAkhBB4+qRY+u1v1VXiBmNC0s7+mF2z5KwF2zydJflNE bueZ4ffsSsGypbNKzAXi1c2vKjpS/HX4ty7U6HraIEK66c3FoPKHm7doKj/rF5dl RQwvun4xHF5A0Hu0IKCY5OOPktQ8uCK+lsse5i3JLF4QQDdATD7+ -----END CERTIFICATE-----Generated at Wed Jan 21 16:36:27 2026 by rpki-client