This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e3136312e38302e302f32302d3234203d3e20323034313730.roa File: 38312e3136312e38302e302f32302d3234203d3e20323034313730.roa (raw, json) Hash identifier: wHlkgu0EPh73c4wVwX/E8dvMsxi5+IyalzisqL8nzKc= Subject key identifier: 90:5F:7B:61:F2:D1:A3:E5:5C:D0:82:BE:40:05:E1:C4:EC:CE:A9:61 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 01AB18F2F6F851C883FDA5889494C63F14151827 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e3136312e38302e302f32302d3234203d3e20323034313730.roa Signing time: Mon 29 Dec 2025 09:50:39 +0000 ROA not before: Mon 29 Dec 2025 09:45:39 +0000 ROA not after: Mon 28 Dec 2026 09:50:39 +0000 asID: 204170 IP address blocks: 81.161.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ab:18:f2:f6:f8:51:c8:83:fd:a5:88:94:94:c6:3f:14:15:18:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:39 2025 GMT Not After : Dec 28 09:50:39 2026 GMT Subject: CN=905F7B61F2D1A3E55CD082BE4005E1C4ECCEA961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:90:f7:7e:a1:49:e6:22:35:2e:14:3f:14: 59:94:d2:b9:ca:56:47:54:00:f1:a5:cb:99:93:1f: 3c:a0:73:51:fe:d9:9f:37:ab:7f:6d:57:33:83:36: 8c:99:30:5b:3d:97:eb:89:bf:95:0c:f6:a2:ec:0b: 7f:a5:a8:c3:02:47:ea:13:75:3e:f4:bd:62:e0:26: 03:31:24:e4:ff:ab:b6:5e:e2:50:2b:3d:1b:3e:1a: 57:fd:e6:78:47:7a:61:10:45:13:87:57:15:3c:fa: 94:5e:a8:66:7d:0b:ad:49:07:a0:07:08:13:f7:59: f1:43:6e:69:e0:24:69:7d:cc:66:85:ff:a1:a7:4c: 68:3e:a7:5d:f0:59:be:a1:ac:7d:7b:06:65:19:b7: 6c:3f:2b:8c:bb:8e:55:c7:4a:92:9e:81:fc:df:18: 11:93:0c:61:05:77:17:f1:92:71:d1:fc:31:63:76: 4e:2d:ae:3c:05:7a:7e:2e:b5:8e:88:bd:5a:bd:f1: e4:fb:ca:ab:9e:d5:44:f8:94:c4:2a:5b:4b:da:c2: 15:8f:34:33:64:1c:33:92:b1:e2:a0:ae:49:d7:06: 2c:7b:ee:ca:a4:82:f5:da:c4:01:5c:56:6a:2e:fa: d5:ec:55:99:a6:01:08:17:bb:4d:75:4e:38:ad:60: c8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:7B:61:F2:D1:A3:E5:5C:D0:82:BE:40:05:E1:C4:EC:CE:A9:61 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38312e3136312e38302e302f32302d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.161.80.0/20 Signature Algorithm: sha256WithRSAEncryption 1c:81:82:bc:58:3f:05:e2:22:d4:15:44:c0:6c:8b:33:22:a9: f7:c2:4e:33:14:3b:92:b8:f4:bb:c0:4d:d8:8d:c4:cc:3e:1f: 36:ef:b0:99:fa:1a:2d:99:c2:66:e6:2a:d0:c3:03:e4:ad:37: fb:a9:b6:83:34:c1:16:76:69:fa:b1:0a:65:64:1d:92:63:99: 81:ce:9e:0f:34:6e:17:a8:4e:aa:3b:cb:68:d9:e4:a1:9d:6e: c1:11:39:1e:f0:c9:04:18:69:bb:09:53:6d:84:89:5d:39:d0: 31:11:9d:16:36:82:3b:b8:69:fc:49:5b:4c:3e:2c:5d:f6:3f: ff:75:b0:77:de:28:44:63:bf:fe:5b:e9:6b:42:b9:a2:df:ea: 44:51:5e:d9:b4:5c:11:0b:40:12:a2:b3:d3:8d:90:8d:2e:44: 3d:de:8f:2a:24:23:71:d3:95:e8:64:fd:03:ba:04:b5:1e:1f: 0c:cc:1d:b7:5e:5f:9a:00:e1:7b:7b:3f:e7:0c:f3:14:a1:06: 81:f7:cb:8c:09:2b:ff:79:2e:11:63:6a:7c:66:49:b6:d2:e9: 85:26:13:58:cd:8d:8c:bb:51:75:0a:75:cb:1b:c9:9a:ea:e2: 0a:40:f9:ed:3e:55:8d:4a:58:0b:32:37:6e:c3:06:18:3f:17: 38:1c:56:60 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAasY8vb4UciD/aWIlJTGPxQVGCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzlaFw0yNjEyMjgwOTUwMzlaMDMxMTAvBgNV BAMTKDkwNUY3QjYxRjJEMUEzRTU1Q0QwODJCRTQwMDVFMUM0RUNDRUE5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZqpD3fqFJ5iI1LhQ/FFmU0rnK VkdUAPGly5mTHzygc1H+2Z83q39tVzODNoyZMFs9l+uJv5UM9qLsC3+lqMMCR+oT dT70vWLgJgMxJOT/q7Ze4lArPRs+Glf95nhHemEQRROHVxU8+pReqGZ9C61JB6AH CBP3WfFDbmngJGl9zGaF/6GnTGg+p13wWb6hrH17BmUZt2w/K4y7jlXHSpKegfzf GBGTDGEFdxfxknHR/DFjdk4trjwFen4utY6IvVq98eT7yque1UT4lMQqW0vawhWP NDNkHDOSseKgrknXBix77sqkgvXaxAFcVmou+tXsVZmmAQgXu011TjitYMjXAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUkF97YfLRo+Vc0IK+QAXhxOzOqWEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMTJlMzEzNjMxMmUzODMw MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzNzMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE UaFQMA0GCSqGSIb3DQEBCwUAA4IBAQAcgYK8WD8F4iLUFUTAbIszIqn3wk4zFDuS uPS7wE3YjcTMPh8277CZ+hotmcJm5irQwwPkrTf7qbaDNMEWdmn6sQplZB2SY5mB zp4PNG4XqE6qO8to2eShnW7BETke8MkEGGm7CVNthIldOdAxEZ0WNoI7uGn8SVtM Pixd9j//dbB33ihEY7/+W+lrQrmi3+pEUV7ZtFwRC0ASorPTjZCNLkQ93o8qJCNx 05XoZP0DugS1Hh8MzB23Xl+aAOF7ez/nDPMUoQaB98uMCSv/eS4RY2p8Zkm20umF JhNYzY2Mu1F1CnXLG8ma6uIKQPntPlWNSlgLMjduwwYYPxc4HFZg -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:30 2026 by rpki-client