This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3231382e302f32332d3332203d3e203531313637.roa File: 38312e302e3231382e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: v7obYN/iun6h9X4Sp4nVl6zNZ1TIxWOUEhMLUci8Ogc= Subject key identifier: 93:01:EB:45:0F:2E:1D:DD:7F:92:98:D1:D5:A1:E8:63:0D:20:CA:91 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4E93A94D62F30300520DBFFB28006E654DEE5634 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3231382e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:50 +0000 ROA not before: Mon 29 Dec 2025 09:45:50 +0000 ROA not after: Mon 28 Dec 2026 09:50:50 +0000 asID: 51167 IP address blocks: 81.0.218.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:93:a9:4d:62:f3:03:00:52:0d:bf:fb:28:00:6e:65:4d:ee:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:50 2025 GMT Not After : Dec 28 09:50:50 2026 GMT Subject: CN=9301EB450F2E1DDD7F9298D1D5A1E8630D20CA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:ad:03:d0:3b:46:24:91:c4:05:66:df:7e: b9:df:be:a9:e2:cd:b1:fe:b0:76:18:1b:9d:6d:24: 11:e3:b5:46:11:1e:f6:82:42:31:e0:26:db:60:4d: f4:8b:08:4f:f2:54:8e:95:6c:f4:08:38:50:8d:0b: 7b:5b:e4:8a:91:39:98:15:6f:0c:bd:7c:58:84:b1: c3:61:63:21:c2:f7:43:2a:4f:a4:a7:8c:e2:8f:a8: c8:6a:4f:a8:4d:3f:af:93:e8:bd:db:14:e4:da:b0: 77:f5:b9:bc:84:87:57:6b:ee:d0:0f:8a:07:89:20: 81:52:f5:c0:9b:81:61:98:96:9f:9a:99:26:aa:c1: de:8b:85:dd:7b:06:b8:8c:9c:db:17:b8:1d:12:19: 3e:02:dd:9b:9f:d3:bd:53:d4:21:d1:d9:ab:89:5a: 9a:f2:91:36:78:db:61:60:f1:9a:9a:d7:98:38:28: 2c:a2:b4:77:9a:c2:13:6d:c0:69:ca:21:3e:5e:52: d1:a0:49:5d:b2:0d:f4:dd:cc:14:cd:0f:21:48:e6: 4d:5f:28:5f:62:df:0d:e8:0c:3b:ba:87:e1:bd:05: 88:cf:1d:6a:b9:ef:84:11:12:6e:2e:57:09:5f:9a: 31:45:6b:43:2f:ca:3b:67:45:a3:8c:66:18:a7:70: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:01:EB:45:0F:2E:1D:DD:7F:92:98:D1:D5:A1:E8:63:0D:20:CA:91 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3231382e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.0.218.0/23 Signature Algorithm: sha256WithRSAEncryption 03:6a:b3:fd:95:37:94:20:40:09:37:a3:e5:1e:15:da:d9:f3: fd:20:2b:74:5a:88:e6:48:a6:79:10:92:77:b5:de:23:d0:c4: 6c:a6:02:cf:d2:53:17:72:31:97:b5:b9:48:63:af:d9:bb:01: e1:95:d7:ec:5b:34:56:9f:43:36:b5:a8:16:c4:93:a5:42:77: 45:ae:4b:81:1e:fc:70:46:63:b6:29:b7:c6:c0:51:02:ba:88: 5b:37:21:68:c1:7b:ba:b0:ac:08:30:ee:51:0d:a7:85:98:40: 3c:f4:47:7d:8c:70:d7:47:55:07:bf:4d:96:35:89:d4:03:df: ad:c2:35:c4:82:10:db:ec:ce:6e:41:0e:d8:53:f3:8c:95:31: e1:d1:e1:66:5c:6a:9d:ed:d7:c8:7b:b9:66:0b:a9:89:ca:2c: 08:12:d8:4d:52:f3:83:6f:99:0e:26:6e:c6:83:c5:97:b8:0d: af:b0:be:b0:db:0f:49:06:f1:74:18:e3:8b:5c:21:30:ee:4e: 6b:bf:5b:26:5d:60:11:67:84:e6:e3:21:6a:b3:ea:d9:bc:3f: a4:2d:34:3e:b9:95:98:49:8c:43:a4:2c:97:95:71:46:3b:57: d8:fa:08:bb:1e:4e:d9:7b:bf:be:71:ef:43:ce:41:4d:ff:d6: 5d:45:54:55 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUTpOpTWLzAwBSDb/7KABuZU3uVjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTBaFw0yNjEyMjgwOTUwNTBaMDMxMTAvBgNV BAMTKDkzMDFFQjQ1MEYyRTFEREQ3RjkyOThEMUQ1QTFFODYzMEQyMENBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqOq0D0DtGJJHEBWbffrnfvqni zbH+sHYYG51tJBHjtUYRHvaCQjHgJttgTfSLCE/yVI6VbPQIOFCNC3tb5IqROZgV bwy9fFiEscNhYyHC90MqT6SnjOKPqMhqT6hNP6+T6L3bFOTasHf1ubyEh1dr7tAP igeJIIFS9cCbgWGYlp+amSaqwd6Lhd17BriMnNsXuB0SGT4C3Zuf071T1CHR2auJ WprykTZ422Fg8Zqa15g4KCyitHeawhNtwGnKIT5eUtGgSV2yDfTdzBTNDyFI5k1f KF9i3w3oDDu6h+G9BYjPHWq574QREm4uVwlfmjFFa0MvyjtnRaOMZhincP/LAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUkwHrRQ8uHd1/kpjR1aHoYw0gypEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMTJlMzAyZTMyMzEzODJl MzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFRANow DQYJKoZIhvcNAQELBQADggEBAANqs/2VN5QgQAk3o+UeFdrZ8/0gK3RaiOZIpnkQ kne13iPQxGymAs/SUxdyMZe1uUhjr9m7AeGV1+xbNFafQza1qBbEk6VCd0WuS4Ee /HBGY7Ypt8bAUQK6iFs3IWjBe7qwrAgw7lENp4WYQDz0R32McNdHVQe/TZY1idQD 363CNcSCENvszm5BDthT84yVMeHR4WZcap3t18h7uWYLqYnKLAgS2E1S84NvmQ4m bsaDxZe4Da+wvrDbD0kG8XQY44tcITDuTmu/WyZdYBFnhObjIWqz6tm8P6QtND65 lZhJjEOkLJeVcUY7V9j6CLseTtl7v75x70POQU3/1l1FVFU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:13 2026 by rpki-client