This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa File: 3138352e3138352e38322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: s4ciY7f9JrueWeMBx3qcJcHWBoSGqkFDJE3y9/syYJ8= Subject key identifier: B4:3F:31:83:7F:37:71:3D:13:92:D6:D0:7F:6E:03:7D:2D:B4:11:E8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 043F46B54B5C8AAACE4971BAE3449A4E8E41B8A1 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:50 +0000 ROA not before: Mon 29 Dec 2025 09:45:50 +0000 ROA not after: Mon 28 Dec 2026 09:50:50 +0000 asID: 51167 IP address blocks: 185.185.82.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:3f:46:b5:4b:5c:8a:aa:ce:49:71:ba:e3:44:9a:4e:8e:41:b8:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:50 2025 GMT Not After : Dec 28 09:50:50 2026 GMT Subject: CN=B43F31837F37713D1392D6D07F6E037D2DB411E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8f:ad:f7:32:df:b6:6e:50:dd:84:5c:af:70: 8b:d9:03:9a:0d:7f:2f:c3:55:97:ea:e8:f7:53:b9: f9:9e:a8:53:3a:92:29:c4:28:79:8c:c3:98:59:5d: fa:eb:6f:86:ef:6d:20:60:c1:6f:fd:f7:0b:bb:50: 47:35:bb:d9:9c:e2:ea:2f:fd:b6:91:9d:98:2b:1b: 93:be:bf:85:f4:30:34:5d:31:ce:ec:c9:60:07:30: 6e:36:bc:76:7f:5e:3c:52:12:1c:fe:11:5c:57:3f: ac:06:70:f4:a9:f5:86:53:e0:a7:80:c4:4e:aa:b3: 9e:6d:66:9a:67:2b:f4:5e:19:a5:46:dc:45:ec:8e: e8:7a:39:93:e8:16:4e:4d:66:15:33:76:9a:97:7e: 76:89:e6:bd:63:23:26:64:a1:0e:74:6e:de:b0:74: 7e:4a:0d:34:dd:26:d1:e9:52:da:33:95:41:32:dc: 3d:1b:8d:2a:4c:a9:eb:07:fa:e6:be:d6:55:4c:29: b7:23:42:6a:18:5d:58:80:36:48:38:f6:93:9b:b9: 3b:f9:34:bb:53:e3:18:c9:d6:27:b1:d2:be:ed:05: b2:62:4e:74:9c:56:87:05:39:74:b1:cf:08:a3:0b: 31:ea:19:e9:72:1a:4d:2c:0a:b8:a3:9a:4b:34:ea: b1:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3F:31:83:7F:37:71:3D:13:92:D6:D0:7F:6E:03:7D:2D:B4:11:E8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/3138352e3138352e38322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.185.82.0/24 Signature Algorithm: sha256WithRSAEncryption 31:5c:93:cf:d9:1d:a8:e0:e7:c8:02:08:7e:09:ef:6a:21:69: 26:4a:31:6c:45:ba:ec:30:f1:99:22:c4:3a:0d:f1:8d:ed:bc: 76:00:21:e3:4c:59:a6:ce:0c:d2:8d:18:09:58:e6:7f:fd:09: 30:80:23:74:fe:54:23:2c:aa:95:29:d5:b5:0e:3f:1e:41:fe: 15:23:b5:2b:db:cc:9b:51:4a:9d:75:9e:b4:03:e1:ee:21:91: 0c:4f:ca:2e:f7:1a:85:e2:ab:a8:64:71:3c:84:9d:15:9f:d5: 9f:ba:7a:05:c1:9e:fa:26:0d:10:5a:ff:6f:3c:c5:d3:47:7e: 1b:f1:c9:b8:27:9d:a3:9c:a9:1b:92:21:70:87:d0:5c:24:ef: 7f:48:c9:7a:78:b6:5e:ae:97:e7:68:8e:24:78:b2:e6:24:f0: f1:ec:5b:c0:5c:88:81:cd:5d:f2:27:d1:6e:62:e8:89:5a:27: 1e:43:be:1f:9f:b1:b9:2f:52:d6:fe:ad:87:10:c5:4e:17:91: dd:f9:78:ac:69:0f:39:00:ec:d7:88:17:56:74:24:e3:7d:e8: 65:0a:dc:f9:a1:e9:c1:57:bd:7e:b9:a2:43:f7:0f:6b:0a:f5: 85:5f:80:e1:c3:f9:a4:3d:0f:07:83:46:78:37:ff:d5:bb:96: 87:f9:0f:e1 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBD9GtUtciqrOSXG640SaTo5BuKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTBaFw0yNjEyMjgwOTUwNTBaMDMxMTAvBgNV BAMTKEI0M0YzMTgzN0YzNzcxM0QxMzkyRDZEMDdGNkUwMzdEMkRCNDExRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfj633Mt+2blDdhFyvcIvZA5oN fy/DVZfq6PdTufmeqFM6kinEKHmMw5hZXfrrb4bvbSBgwW/99wu7UEc1u9mc4uov /baRnZgrG5O+v4X0MDRdMc7syWAHMG42vHZ/XjxSEhz+EVxXP6wGcPSp9YZT4KeA xE6qs55tZppnK/ReGaVG3EXsjuh6OZPoFk5NZhUzdpqXfnaJ5r1jIyZkoQ50bt6w dH5KDTTdJtHpUtozlUEy3D0bjSpMqesH+ua+1lVMKbcjQmoYXViANkg49pObuTv5 NLtT4xjJ1iex0r7tBbJiTnScVocFOXSxzwijCzHqGelyGk0sCrijmks06rEtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUtD8xg383cT0TktbQf24DfS20EegwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzEzODM1MmUzMTM4MzUyZTM4 MzIyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA ublSMA0GCSqGSIb3DQEBCwUAA4IBAQAxXJPP2R2o4OfIAgh+Ce9qIWkmSjFsRbrs MPGZIsQ6DfGN7bx2ACHjTFmmzgzSjRgJWOZ//QkwgCN0/lQjLKqVKdW1Dj8eQf4V I7Ur28ybUUqddZ60A+HuIZEMT8ou9xqF4quoZHE8hJ0Vn9WfunoFwZ76Jg0QWv9v PMXTR34b8cm4J52jnKkbkiFwh9BcJO9/SMl6eLZerpfnaI4keLLmJPDx7FvAXIiB zV3yJ9FuYuiJWiceQ74fn7G5L1LW/q2HEMVOF5Hd+XisaQ85AOzXiBdWdCTjfehl Ctz5oenBV71+uaJD9w9rCvWFX4Dhw/mkPQ8Hg0Z4N//Vu5aH+Q/h -----END CERTIFICATE-----Generated at Mon Jan 19 14:26:22 2026 by rpki-client