This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa File: 38322e3134392e38322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: dkHFqiHN89Aqs9gqLHw6D7FWqAh2Xvw95SNfanUxfE0= Subject key identifier: EB:CE:7D:B2:41:3C:64:FB:70:C0:55:E7:8B:F8:F3:67:A5:2F:4A:9C Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 024DEC67F7F042BFF4B8546DAAAEC02EF5C0124A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:59 +0000 ROA not before: Fri 28 Nov 2025 19:44:59 +0000 ROA not after: Fri 27 Nov 2026 19:49:59 +0000 asID: 136787 IP address blocks: 82.149.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4d:ec:67:f7:f0:42:bf:f4:b8:54:6d:aa:ae:c0:2e:f5:c0:12:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:59 2025 GMT Not After : Nov 27 19:49:59 2026 GMT Subject: CN=EBCE7DB2413C64FB70C055E78BF8F367A52F4A9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2c:9b:62:24:0d:7c:53:29:20:9b:25:28:64: c1:2e:6b:39:40:28:2d:45:3e:64:a8:f5:d9:c2:18: 47:58:7e:98:95:de:c4:b5:cf:b0:72:7c:ef:bb:eb: 4c:d6:77:71:3c:99:43:8a:e2:95:ef:78:7a:0d:b9: bc:15:62:f4:48:db:0c:b1:c1:32:15:4f:2e:9f:2d: e2:15:0c:8c:08:03:b5:21:9d:6b:a0:1b:5f:8f:94: a9:6d:eb:f2:67:57:f1:82:f6:18:c6:d6:fe:55:f3: bd:3f:70:b8:c3:cb:eb:48:92:e9:ee:cd:1d:e4:6f: 95:51:a8:11:79:19:18:7a:08:3c:d1:f1:cf:18:52: 34:df:8d:bb:dc:7c:2c:7f:2a:dd:ae:13:69:0f:a6: 1f:c1:58:e9:8e:cb:c4:70:f2:e7:8d:8a:84:01:80: 7d:47:96:1b:96:82:22:cb:f7:8f:73:1c:3e:ea:3f: 03:81:1d:14:fb:42:33:7f:73:31:e0:1f:3c:92:1d: f5:61:24:8d:74:fd:f0:09:7b:61:d2:84:c2:5f:98: ed:b2:c5:ce:95:c3:4b:b1:6f:10:6c:50:d9:06:d4: 1d:77:be:5a:0a:bc:f5:eb:1e:4a:69:0c:b1:94:b4: 1e:90:54:e4:43:cd:50:6f:bb:d9:a5:8f:e5:b3:cc: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:CE:7D:B2:41:3C:64:FB:70:C0:55:E7:8B:F8:F3:67:A5:2F:4A:9C X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3134392e38322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.149.82.0/24 Signature Algorithm: sha256WithRSAEncryption 48:84:f1:e5:a7:1d:e3:cc:8c:41:39:0a:be:f8:b6:91:fb:31: ca:a2:85:08:aa:ae:90:03:b9:aa:8b:ab:c3:bc:2a:2c:f6:d9: b0:a8:01:d8:94:99:0f:45:03:b9:8c:43:ba:eb:1d:16:91:99: ba:a6:cd:c0:b5:ff:5c:20:19:ee:0d:16:b5:95:0b:90:5c:be: df:a2:93:7d:f9:74:97:f9:6a:7d:c7:d8:69:36:42:80:44:54: f0:87:c5:40:e6:5c:58:79:ce:2f:ce:76:23:c9:99:7d:78:69: de:9d:20:2e:f8:bc:94:95:4f:aa:be:c3:6e:31:d7:8d:4e:65: fe:55:c2:39:85:01:71:aa:6a:5f:39:a6:3c:ee:a4:bd:eb:0b: 8d:17:d6:6e:d1:65:7e:51:66:30:b0:c3:0a:59:be:09:29:91: d0:d0:db:cf:84:d5:29:be:70:ff:1e:aa:62:8f:9a:29:47:96: fe:eb:de:5c:5b:13:3c:ba:8d:14:05:dc:ca:d5:0f:c7:17:24: 65:1c:49:67:f6:55:56:8f:a1:c6:73:2d:57:39:a3:e8:1a:97: f9:69:df:3d:a4:e7:9b:31:09:a1:bd:df:51:46:0d:de:db:ce: c9:70:6f:07:66:2d:88:b5:5a:0c:7d:9d:b5:e9:93:90:56:dd: c4:ff:da:93 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAk3sZ/fwQr/0uFRtqq7ALvXAEkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTlaFw0yNjExMjcxOTQ5NTlaMDMxMTAvBgNV BAMTKEVCQ0U3REIyNDEzQzY0RkI3MEMwNTVFNzhCRjhGMzY3QTUyRjRBOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4LJtiJA18UykgmyUoZMEuazlA KC1FPmSo9dnCGEdYfpiV3sS1z7ByfO+760zWd3E8mUOK4pXveHoNubwVYvRI2wyx wTIVTy6fLeIVDIwIA7UhnWugG1+PlKlt6/JnV/GC9hjG1v5V870/cLjDy+tIkunu zR3kb5VRqBF5GRh6CDzR8c8YUjTfjbvcfCx/Kt2uE2kPph/BWOmOy8Rw8ueNioQB gH1HlhuWgiLL949zHD7qPwOBHRT7QjN/czHgHzySHfVhJI10/fAJe2HShMJfmO2y xc6Vw0uxbxBsUNkG1B13vloKvPXrHkppDLGUtB6QVORDzVBvu9mlj+WzzD2HAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6859skE8ZPtwwFXni/jzZ6UvSpwwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzNDM5MmUzODMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UpVSMA0GCSqGSIb3DQEBCwUAA4IBAQBIhPHlpx3jzIxBOQq++LaR+zHKooUIqq6Q A7mqi6vDvCos9tmwqAHYlJkPRQO5jEO66x0WkZm6ps3Atf9cIBnuDRa1lQuQXL7f opN9+XSX+Wp9x9hpNkKARFTwh8VA5lxYec4vznYjyZl9eGnenSAu+LyUlU+qvsNu MdeNTmX+VcI5hQFxqmpfOaY87qS96wuNF9Zu0WV+UWYwsMMKWb4JKZHQ0NvPhNUp vnD/Hqpij5opR5b+695cWxM8uo0UBdzK1Q/HFyRlHEln9lVWj6HGcy1XOaPoGpf5 ad89pOebMQmhvd9RRg3e287JcG8HZi2ItVoMfZ216ZOQVt3E/9qT -----END CERTIFICATE-----Generated at Fri Dec 5 05:40:20 2025 by rpki-client