This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20323132323338.roa File: 38322e3134392e37372e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: 8LuX4QarZqc0FF1gSxcXvXOeq2r4YQqK0XNjtvveHVY= Subject key identifier: 99:E3:F2:E0:A0:82:B0:72:51:16:3D:59:28:12:07:00:02:0C:44:F8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0A17F2F91A5D9A8AF85FC32C106697DBCDCBC199 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:53 +0000 ROA not before: Tue 21 Oct 2025 13:17:53 +0000 ROA not after: Tue 20 Oct 2026 13:22:53 +0000 asID: 212238 IP address blocks: 82.149.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:17:f2:f9:1a:5d:9a:8a:f8:5f:c3:2c:10:66:97:db:cd:cb:c1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:53 2025 GMT Not After : Oct 20 13:22:53 2026 GMT Subject: CN=99E3F2E0A082B07251163D5928120700020C44F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:21:ce:0a:23:0f:37:2f:1c:10:a6:60:a1:d6: b6:3f:7b:0f:e2:05:6e:b0:c9:f9:d7:53:fe:ab:9d: 5b:31:7d:f0:ac:dd:0f:8a:4a:5f:c6:77:26:96:57: f6:a4:77:03:61:bc:8f:22:4d:a3:4f:7d:8f:3b:ea: 1c:a2:57:32:92:bc:12:2f:83:3c:09:39:2d:fd:84: 08:a9:a5:2c:56:8c:63:1c:0f:d6:3a:35:88:5c:04: a5:b6:d6:1b:f3:b7:cf:7f:67:5a:76:b2:31:58:93: 3b:d8:bc:e1:6a:8f:50:a7:d6:96:17:6d:a8:b2:2e: d2:5e:b7:21:06:4e:0f:e1:35:43:4e:d9:b2:7c:ac: f8:96:c9:d8:94:8e:e1:cc:3d:24:f8:fa:f5:16:53: 0a:ea:27:ae:a0:1e:3c:98:de:94:ff:76:a7:bd:37: d8:39:ac:79:8f:38:7e:e7:fd:e6:b7:b5:2a:1c:50: f9:bf:db:76:b4:68:1c:8e:9b:88:b5:bb:ec:36:1e: e5:d1:dc:03:22:4b:eb:1d:f0:f6:c9:60:b3:f4:70: fe:0a:4d:61:40:a8:fa:a8:b4:cb:05:a6:37:4f:e7: 71:10:f9:da:12:3d:c7:ad:f8:0b:47:ca:86:9d:c5: 12:2e:04:ca:1f:0c:c6:fb:ff:c9:57:0d:08:84:35: 5d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E3:F2:E0:A0:82:B0:72:51:16:3D:59:28:12:07:00:02:0C:44:F8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e37372e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.149.77.0/24 Signature Algorithm: sha256WithRSAEncryption 14:0d:5d:77:18:66:c1:95:db:52:f7:16:fc:61:40:ff:8a:37: 73:39:e1:7e:aa:31:62:59:32:06:33:83:61:ad:c8:e8:29:62: 62:55:b4:84:84:e0:16:6f:b5:11:38:52:12:fd:42:0b:95:16: 99:50:c6:36:36:76:f4:bb:ef:b5:54:c9:3d:3a:af:b2:07:c3: fe:5f:d1:61:81:1e:90:ee:0b:9b:fa:de:58:1c:b9:b3:3c:c3: 46:79:1f:ff:2c:62:bc:14:88:e5:6b:fc:e4:77:eb:47:15:00: 9a:50:32:bb:36:e1:d1:d9:f7:62:14:34:be:2f:5a:01:6b:30: b4:28:79:14:24:4b:72:8c:ce:82:c0:7f:b7:a5:3f:36:21:7f: b1:d7:b8:7e:bc:cb:48:e3:db:4e:fe:ca:64:65:f9:c8:f6:76: 45:4a:4d:ca:3c:ea:4c:d3:b1:1a:fe:e3:59:42:7d:25:33:1f: 03:22:fa:be:d8:18:96:cf:31:a8:4f:be:63:f7:aa:6a:73:80: 0a:a7:70:58:5f:68:d9:05:6a:cc:40:c3:53:b9:0d:c7:96:3a: 25:69:18:bd:ef:78:f8:ed:c2:0b:78:b2:31:c8:04:de:83:98: 59:ae:b4:b6:15:b9:bb:74:f9:bc:c1:eb:9a:5a:39:4c:ce:a5: fc:b2:5e:c3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUChfy+Rpdmor4X8MsEGaX283LwZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NTNaFw0yNjEwMjAxMzIyNTNaMDMxMTAvBgNV BAMTKDk5RTNGMkUwQTA4MkIwNzI1MTE2M0Q1OTI4MTIwNzAwMDIwQzQ0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaIc4KIw83LxwQpmCh1rY/ew/i BW6wyfnXU/6rnVsxffCs3Q+KSl/GdyaWV/akdwNhvI8iTaNPfY876hyiVzKSvBIv gzwJOS39hAippSxWjGMcD9Y6NYhcBKW21hvzt89/Z1p2sjFYkzvYvOFqj1Cn1pYX baiyLtJetyEGTg/hNUNO2bJ8rPiWydiUjuHMPST4+vUWUwrqJ66gHjyY3pT/dqe9 N9g5rHmPOH7n/ea3tSocUPm/23a0aByOm4i1u+w2HuXR3AMiS+sd8PbJYLP0cP4K TWFAqPqotMsFpjdP53EQ+doSPcet+AtHyoadxRIuBMofDMb7/8lXDQiENV37AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUmePy4KCCsHJRFj1ZKBIHAAIMRPgwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzNzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UpVNMA0GCSqGSIb3DQEBCwUAA4IBAQAUDV13GGbBldtS9xb8YUD/ijdzOeF+qjFi WTIGM4NhrcjoKWJiVbSEhOAWb7UROFIS/UILlRaZUMY2Nnb0u++1VMk9Oq+yB8P+ X9FhgR6Q7gub+t5YHLmzPMNGeR//LGK8FIjla/zkd+tHFQCaUDK7NuHR2fdiFDS+ L1oBazC0KHkUJEtyjM6CwH+3pT82IX+x17h+vMtI49tO/spkZfnI9nZFSk3KPOpM 07Ea/uNZQn0lMx8DIvq+2BiWzzGoT75j96pqc4AKp3BYX2jZBWrMQMNTuQ3Hljol aRi973j47cILeLIxyATeg5hZrrS2Fbm7dPm8weuaWjlMzqX8sl7D -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:06 2025 by rpki-client