This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa File: 38312e302e3232302e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: 4lVfHEuRnwLBqx9+QLcmucvrNcl72DZm4kx+sBqsHg8= Subject key identifier: 37:5D:25:49:3D:AC:76:3E:E0:92:D7:4E:09:C9:0E:D0:AA:36:53:EA Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 380E560A8B34D53F4E7A3F4F01CC30990FA904F9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:34 +0000 ROA not before: Mon 29 Dec 2025 09:45:34 +0000 ROA not after: Mon 28 Dec 2026 09:50:34 +0000 asID: 51167 IP address blocks: 81.0.220.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0e:56:0a:8b:34:d5:3f:4e:7a:3f:4f:01:cc:30:99:0f:a9:04:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:34 2025 GMT Not After : Dec 28 09:50:34 2026 GMT Subject: CN=375D25493DAC763EE092D74E09C90ED0AA3653EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:eb:58:f8:64:f6:02:85:ca:4f:63:f7:b3: 0e:64:8c:57:5e:88:ab:68:5d:3f:d3:b4:ba:e1:af: e3:09:c7:00:84:ca:de:77:6d:02:f2:db:cc:35:9c: 3d:c2:ba:c4:d3:d2:75:8b:79:e8:39:ce:12:62:07: 5d:78:4b:67:5a:fb:d2:25:59:39:b2:ba:c9:8b:1e: 34:11:70:05:b8:d2:61:75:00:bb:24:17:6d:f8:7e: 37:b6:5d:b6:75:81:a0:19:20:c2:13:d5:bf:95:8b: 24:79:ec:11:36:51:59:ad:63:80:a8:78:85:c6:eb: a5:5a:f7:02:88:19:04:d6:d1:9e:d1:38:a0:87:87: 48:e2:29:47:e7:29:5d:f9:63:25:53:33:40:89:d2: dd:10:41:57:1c:b5:a9:e0:f3:28:55:4b:5e:ef:06: a9:38:a6:c1:8f:16:df:5c:93:1e:01:66:ac:c7:d2: 36:fe:d3:a4:bb:e2:dd:f8:46:c3:02:8a:15:39:2a: 31:4c:fd:f3:b7:ec:87:9b:0e:36:eb:f2:95:7e:31: 3f:7a:9a:fd:d6:be:3a:12:fa:6e:44:65:2e:09:3f: eb:4f:fb:6d:02:65:34:8d:86:37:3a:0c:64:5a:d8: 2a:cf:49:31:c8:10:b7:f5:da:0a:51:a1:f1:44:6e: d4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5D:25:49:3D:AC:76:3E:E0:92:D7:4E:09:C9:0E:D0:AA:36:53:EA X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e302e3232302e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.0.220.0/23 Signature Algorithm: sha256WithRSAEncryption 71:b8:ec:b7:e5:57:a8:6e:2c:23:47:d5:17:fd:62:ba:63:e3: 94:0b:82:2c:1b:9f:af:db:7b:16:d5:9a:3b:5f:7f:21:a8:1d: 7b:06:6c:78:a9:43:60:f0:74:bd:b8:0f:cf:94:4e:10:e5:2a: 6c:54:af:71:5d:44:40:d7:35:31:42:3a:9f:15:f7:ae:2c:7b: 45:bf:fa:a5:3d:6f:c0:97:7f:e4:c1:f0:62:74:82:55:0f:ff: 60:7c:08:c5:e8:a9:6f:98:08:ef:65:aa:71:2b:1b:e1:65:9e: e8:45:90:e8:75:cb:fb:9a:18:d4:85:6d:5d:1b:40:ce:fa:6d: 17:70:d1:a0:9a:81:33:06:bc:c4:78:dd:43:11:48:79:54:ce: 5e:0f:e0:6a:6f:ae:4b:55:23:f4:a5:e2:f8:8b:3f:b3:90:df: 18:a8:e8:66:37:76:be:bb:3f:87:5a:f6:b6:90:ce:0e:0b:11: 64:47:30:46:c1:4f:af:ac:60:3a:e9:25:85:0e:ad:64:26:dc: e4:81:ae:97:d5:5d:ce:88:9c:7f:9a:36:fb:d7:6d:d8:2b:c5: a5:ea:8a:57:52:e0:96:b6:20:47:a6:0f:6e:70:6a:60:d6:79: c6:83:3e:91:40:19:45:41:50:76:3f:a2:2d:64:6c:f8:df:b1: 17:0c:84:b1 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUOA5WCos01T9Oej9PAcwwmQ+pBPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzRaFw0yNjEyMjgwOTUwMzRaMDMxMTAvBgNV BAMTKDM3NUQyNTQ5M0RBQzc2M0VFMDkyRDc0RTA5QzkwRUQwQUEzNjUzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYOtY+GT2AoXKT2P3sw5kjFde iKtoXT/TtLrhr+MJxwCEyt53bQLy28w1nD3CusTT0nWLeeg5zhJiB114S2da+9Il WTmyusmLHjQRcAW40mF1ALskF234fje2XbZ1gaAZIMIT1b+ViyR57BE2UVmtY4Co eIXG66Va9wKIGQTW0Z7ROKCHh0jiKUfnKV35YyVTM0CJ0t0QQVcctang8yhVS17v Bqk4psGPFt9ckx4BZqzH0jb+06S74t34RsMCihU5KjFM/fO37IebDjbr8pV+MT96 mv3WvjoS+m5EZS4JP+tP+20CZTSNhjc6DGRa2CrPSTHIELf12gpRofFEbtSpAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUN10lST2sdj7gktdOCckO0Ko2U+owHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMTJlMzAyZTMyMzIzMDJl MzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFRANww DQYJKoZIhvcNAQELBQADggEBAHG47LflV6huLCNH1Rf9Yrpj45QLgiwbn6/bexbV mjtffyGoHXsGbHipQ2DwdL24D8+UThDlKmxUr3FdREDXNTFCOp8V964se0W/+qU9 b8CXf+TB8GJ0glUP/2B8CMXoqW+YCO9lqnErG+FlnuhFkOh1y/uaGNSFbV0bQM76 bRdw0aCagTMGvMR43UMRSHlUzl4P4GpvrktVI/Sl4viLP7OQ3xio6GY3dr67P4da 9raQzg4LEWRHMEbBT6+sYDrpJYUOrWQm3OSBrpfVXc6InH+aNvvXbdgrxaXqildS 4Ja2IEemD25wamDWecaDPpFAGUVBUHY/oi1kbPjfsRcMhLE= -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:33 2026 by rpki-client