This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20313336373837.roa File: 38322e3134392e37372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: hNQZG8O3opce7gOqC/pd9lf8f0ZD8onTi1nVMPjuV0E= Subject key identifier: 30:C7:70:A6:94:8B:6C:1B:0A:FF:D7:1E:7D:C8:41:DB:0D:1A:F6:53 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2FC37BFCE183CA2CA0B29F2FCD3E40063BA53AE2 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20313336373837.roa Signing time: Tue 02 Dec 2025 19:50:13 +0000 ROA not before: Tue 02 Dec 2025 19:45:13 +0000 ROA not after: Tue 01 Dec 2026 19:50:13 +0000 asID: 136787 IP address blocks: 82.149.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c3:7b:fc:e1:83:ca:2c:a0:b2:9f:2f:cd:3e:40:06:3b:a5:3a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 2 19:45:13 2025 GMT Not After : Dec 1 19:50:13 2026 GMT Subject: CN=30C770A6948B6C1B0AFFD71E7DC841DB0D1AF653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b8:52:32:bc:b1:08:c8:2e:c5:37:c1:ea:fd: 2f:45:5d:4e:c6:8a:71:ae:52:e9:87:89:d7:ee:21: 51:46:12:7b:af:c8:13:73:cb:d9:ba:cb:f3:f6:b0: 96:0a:1f:93:79:4f:59:1a:47:98:11:c0:06:57:61: d6:53:c8:00:f7:8a:5a:31:28:20:0c:20:e5:b2:91: b4:c3:27:db:99:8a:c8:16:d3:7f:da:7b:a6:06:40: c5:8c:6d:66:ec:27:91:2f:81:0a:54:c8:9d:c3:9c: ff:4a:52:5f:f6:ce:c8:48:1f:5d:1b:a8:1b:2e:dd: ee:8c:c2:1a:55:23:32:67:2f:70:9e:47:55:30:b1: 77:9a:51:27:2d:a8:dd:93:87:3d:72:da:af:12:3d: 93:72:88:96:90:a8:c3:bd:c0:16:9d:07:63:52:64: 75:32:71:d9:11:1e:b3:15:48:44:ef:4f:50:b5:0a: 85:75:c1:c8:a1:93:4c:f8:84:7c:4c:f9:f2:d6:23: 27:84:0b:ee:6d:0e:fd:72:e2:7a:7f:ab:a6:f4:f2: 88:db:17:75:e9:c5:7e:6f:54:d9:5c:c9:eb:2e:46: 60:d0:7b:b2:58:d3:e0:a6:d9:b5:ec:48:fc:20:c3: 09:34:66:97:1b:30:9b:12:68:4f:b3:21:6e:8c:d9: e5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:70:A6:94:8B:6C:1B:0A:FF:D7:1E:7D:C8:41:DB:0D:1A:F6:53 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.149.77.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c0:52:1f:01:18:15:e0:a0:25:e6:d2:60:6b:a4:a7:d8:e6: 85:88:65:fa:49:61:1f:06:cb:bc:36:38:d3:98:b6:24:b2:30: 97:ff:af:06:fb:a5:f6:cf:56:f5:8f:74:63:92:fe:a1:1e:15: 75:62:45:a6:19:f3:01:b5:94:ef:1c:bf:2f:e6:9f:6f:14:ff: 5f:aa:c6:f3:8b:c3:f8:90:c6:55:7c:94:31:39:b2:b8:25:6a: 77:ff:47:3a:72:49:ad:32:e1:90:b7:67:a2:6f:e1:5f:c7:d8: 9d:4d:fd:c4:11:f6:4d:52:2a:49:4c:22:ec:aa:28:f6:7e:ab: fe:4e:5b:4a:39:13:43:49:18:16:13:49:5b:8b:93:0f:5b:76: 0f:85:1f:b6:70:66:19:b6:95:6c:8d:ed:31:03:9f:d4:f8:52: 23:7d:57:65:2f:10:f4:89:dd:b7:0a:61:2e:b2:e5:a1:4e:bc: 60:ad:05:2a:b8:88:5e:01:f6:b3:c4:36:5e:19:52:43:2d:7b: 73:c3:20:b7:d4:aa:5e:38:f0:df:5c:d4:10:cc:4e:d4:24:6d: f1:ba:5c:63:36:b7:d6:b3:d1:4b:4a:af:fd:0d:89:35:5c:84: dd:d8:ae:f4:78:52:d0:5a:44:30:dc:93:85:7d:74:3b:83:be: 7f:76:fb:6d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUL8N7/OGDyiygsp8vzT5ABjulOuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMDIxOTQ1MTNaFw0yNjEyMDExOTUwMTNaMDMxMTAvBgNV BAMTKDMwQzc3MEE2OTQ4QjZDMUIwQUZGRDcxRTdEQzg0MURCMEQxQUY2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguFIyvLEIyC7FN8Hq/S9FXU7G inGuUumHidfuIVFGEnuvyBNzy9m6y/P2sJYKH5N5T1kaR5gRwAZXYdZTyAD3ilox KCAMIOWykbTDJ9uZisgW03/ae6YGQMWMbWbsJ5EvgQpUyJ3DnP9KUl/2zshIH10b qBsu3e6MwhpVIzJnL3CeR1UwsXeaUSctqN2Thz1y2q8SPZNyiJaQqMO9wBadB2NS ZHUycdkRHrMVSETvT1C1CoV1wcihk0z4hHxM+fLWIyeEC+5tDv1y4np/q6b08ojb F3XpxX5vVNlcyesuRmDQe7JY0+Cm2bXsSPwgwwk0ZpcbMJsSaE+zIW6M2eUFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMMdwppSLbBsK/9cefchB2w0a9lMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UpVNMA0GCSqGSIb3DQEBCwUAA4IBAQCbwFIfARgV4KAl5tJga6Sn2OaFiGX6SWEf Bsu8NjjTmLYksjCX/68G+6X2z1b1j3Rjkv6hHhV1YkWmGfMBtZTvHL8v5p9vFP9f qsbzi8P4kMZVfJQxObK4JWp3/0c6ckmtMuGQt2eib+Ffx9idTf3EEfZNUipJTCLs qij2fqv+TltKORNDSRgWE0lbi5MPW3YPhR+2cGYZtpVsje0xA5/U+FIjfVdlLxD0 id23CmEusuWhTrxgrQUquIheAfazxDZeGVJDLXtzwyC31KpeOPDfXNQQzE7UJG3x ulxjNrfWs9FLSq/9DYk1XITd2K70eFLQWkQw3JOFfXQ7g75/dvtt -----END CERTIFICATE-----Generated at Fri Dec 5 05:41:31 2025 by rpki-client