This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa File: 38302e37352e32342e302f32312d3234203d3e20313938303930.roa (raw, json) Hash identifier: RtVVtvTlsk1RoLFVYiQngKUf0F9CZLc2zLn64auSXrM= Subject key identifier: EF:65:A2:30:D6:97:40:8B:EF:FE:F9:62:D8:F2:95:C0:E0:90:DD:CF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6E434522D9C34D461749D29479DC8B8336E99EBF Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa Signing time: Mon 29 Dec 2025 09:50:56 +0000 ROA not before: Mon 29 Dec 2025 09:45:56 +0000 ROA not after: Mon 28 Dec 2026 09:50:56 +0000 asID: 198090 IP address blocks: 80.75.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:43:45:22:d9:c3:4d:46:17:49:d2:94:79:dc:8b:83:36:e9:9e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:56 2025 GMT Not After : Dec 28 09:50:56 2026 GMT Subject: CN=EF65A230D697408BEFFEF962D8F295C0E090DDCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:55:5a:17:f3:6d:0e:89:4c:74:29:85:19:c0: 7d:d0:17:bf:c7:88:a5:5f:63:15:d6:32:af:b2:08: 30:9f:8e:f5:c7:42:3b:8c:c8:99:a6:60:d7:10:aa: 42:d3:18:23:65:aa:d9:ac:93:4f:d1:43:e0:04:85: 59:8b:69:28:c0:5e:9b:6f:04:b4:79:4c:1b:81:36: d5:eb:f3:92:09:64:54:22:15:2a:61:d3:c9:58:f7: 38:36:9b:13:f3:08:0c:c1:6c:e9:ac:c5:bc:cc:89: 39:80:01:32:23:b4:5f:13:f3:fe:8a:83:31:22:dc: 74:fa:6a:ed:59:0a:8c:8b:3c:9f:64:7b:aa:96:85: 43:d5:d1:7f:91:ed:69:70:6e:2e:47:9c:53:51:15: 5a:e0:b5:35:8d:26:f9:48:aa:21:61:f1:03:bf:42: 39:19:22:0a:46:5b:69:a7:f2:23:00:b1:fe:0e:6d: be:ba:6c:97:eb:c9:80:3d:46:b1:7f:91:bc:b1:f3: cd:14:1e:4d:8d:d1:cb:98:13:89:2c:4a:9b:b4:d3: 80:31:c5:eb:eb:a5:e1:9b:b8:55:ba:9b:c2:2a:a0: 0c:d0:c2:15:09:f5:0e:38:8c:b7:b6:0b:c7:da:28: af:d3:35:72:da:d9:a5:3e:b0:84:52:c1:23:e2:41: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:65:A2:30:D6:97:40:8B:EF:FE:F9:62:D8:F2:95:C0:E0:90:DD:CF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38302e37352e32342e302f32312d3234203d3e20313938303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.75.24.0/21 Signature Algorithm: sha256WithRSAEncryption 7f:9e:e7:5e:2e:26:2f:09:5e:8f:01:25:f7:1f:b9:6b:8a:de: c6:95:74:66:d4:1b:c7:28:c1:d4:fe:e5:14:f6:e8:62:45:6a: 54:bd:bc:fe:0e:1f:b2:ac:37:0d:29:a8:b9:a2:78:c4:83:a4: 00:15:32:6d:d5:19:5f:8f:ef:c6:e0:13:0e:70:3d:c0:22:bc: b2:fa:b4:28:73:b5:31:d8:59:3e:c0:85:7a:6e:e1:68:c4:ed: fd:96:54:9c:d8:ad:c9:2a:1b:ad:92:64:96:d3:98:b6:4e:9f: 0b:8f:fb:97:f0:e9:5e:ae:66:bb:96:e2:a2:87:3e:2e:d0:53: 2b:f3:71:d1:79:19:ea:09:e3:15:0a:4d:9f:fa:26:86:cc:15: b3:39:17:5f:f1:51:b6:8e:af:d9:e1:f5:e5:c6:39:f0:51:63: 01:c5:fc:9e:5a:e9:d4:9a:da:a4:42:d5:7e:fb:e9:4d:68:53: ab:69:7f:e5:c8:c6:c0:4c:a3:82:c8:63:e1:f4:fa:be:ef:00: bf:f7:43:86:04:9f:43:87:5a:68:2a:5b:cc:4e:54:73:01:7a: 2e:88:a1:dc:26:05:33:38:0f:92:32:59:f2:0c:03:e9:0d:8d: 5d:9c:30:ef:4e:a5:25:b6:7d:c2:7d:83:61:64:19:05:0d:38: 12:fd:6e:b1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUbkNFItnDTUYXSdKUedyLgzbpnr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTZaFw0yNjEyMjgwOTUwNTZaMDMxMTAvBgNV BAMTKEVGNjVBMjMwRDY5NzQwOEJFRkZFRjk2MkQ4RjI5NUMwRTA5MEREQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiVVoX820OiUx0KYUZwH3QF7/H iKVfYxXWMq+yCDCfjvXHQjuMyJmmYNcQqkLTGCNlqtmsk0/RQ+AEhVmLaSjAXptv BLR5TBuBNtXr85IJZFQiFSph08lY9zg2mxPzCAzBbOmsxbzMiTmAATIjtF8T8/6K gzEi3HT6au1ZCoyLPJ9ke6qWhUPV0X+R7Wlwbi5HnFNRFVrgtTWNJvlIqiFh8QO/ QjkZIgpGW2mn8iMAsf4Obb66bJfryYA9RrF/kbyx880UHk2N0cuYE4ksSpu004Ax xevrpeGbuFW6m8IqoAzQwhUJ9Q44jLe2C8faKK/TNXLa2aU+sIRSwSPiQbA1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU72WiMNaXQIvv/vli2PKVwOCQ3c8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMDJlMzczNTJlMzIzNDJl MzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMxMzkzODMwMzkzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA1BL GDANBgkqhkiG9w0BAQsFAAOCAQEAf57nXi4mLwlejwEl9x+5a4rexpV0ZtQbxyjB 1P7lFPboYkVqVL28/g4fsqw3DSmouaJ4xIOkABUybdUZX4/vxuATDnA9wCK8svq0 KHO1MdhZPsCFem7haMTt/ZZUnNitySobrZJkltOYtk6fC4/7l/DpXq5mu5biooc+ LtBTK/Nx0XkZ6gnjFQpNn/omhswVszkXX/FRto6v2eH15cY58FFjAcX8nlrp1Jra pELVfvvpTWhTq2l/5cjGwEyjgshj4fT6vu8Av/dDhgSfQ4daaCpbzE5UcwF6Loih 3CYFMzgPkjJZ8gwD6Q2NXZww706lJbZ9wn2DYWQZBQ04Ev1usQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:13 2026 by rpki-client