This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3132382e302f32332d3234203d3e203437353833.roa File: 38322e3138302e3132382e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: yc8HstWhQ8jbyHilk1gZ3cwVmJ2HgiQBVTjxNP+zyJ0= Subject key identifier: 72:E4:68:2A:4C:49:1D:DD:B1:0B:A7:FC:F8:36:B5:24:32:17:86:1B Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2F23B44DC320C84578AFFE66916FB1FE6643394C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3132382e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:57 +0000 ROA not before: Mon 29 Dec 2025 09:45:57 +0000 ROA not after: Mon 28 Dec 2026 09:50:57 +0000 asID: 47583 IP address blocks: 82.180.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:23:b4:4d:c3:20:c8:45:78:af:fe:66:91:6f:b1:fe:66:43:39:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:57 2025 GMT Not After : Dec 28 09:50:57 2026 GMT Subject: CN=72E4682A4C491DDDB10BA7FCF836B5243217861B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:35:55:aa:4b:81:42:38:ae:9e:be:35:75: 3f:f5:04:5f:f5:68:83:ff:93:e5:ce:ed:d1:bb:3a: 73:ba:b5:46:76:b8:40:90:88:ca:8f:33:51:2b:06: b1:9b:97:13:e1:3e:4a:4e:b2:69:b5:b5:6c:b9:b4: 94:ba:9e:19:1c:a1:a5:98:af:0e:70:27:10:d0:87: b7:c1:24:2b:bd:c1:be:27:f7:44:1f:4a:a1:d5:75: 1d:5f:9e:55:29:32:79:7f:59:ba:6b:9f:df:8d:ff: 1e:b0:62:11:ee:85:33:a8:1e:d6:39:7a:78:44:33: d8:22:76:c6:55:0a:2f:ff:4e:ca:91:80:10:18:2d: 86:99:56:15:9f:ba:14:92:32:94:fc:50:ee:60:4e: 1c:3c:7f:a4:02:51:35:17:4d:e9:18:2b:57:ad:39: 95:2e:f9:bc:f0:45:af:ca:c0:d4:50:1b:7a:c3:12: 5b:b5:ef:76:ee:32:11:17:49:fd:09:2c:71:a1:9b: c7:b2:c5:c3:78:ef:a2:57:fc:7a:b8:d5:aa:7e:7f: aa:39:33:ae:26:cb:2a:62:52:ef:dc:1c:dc:8d:c6: d3:0a:db:4b:80:ee:a0:0a:16:b5:ea:7a:36:28:56: 8c:3f:df:c8:e3:51:c0:3f:21:31:dd:ed:a9:a3:e7: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E4:68:2A:4C:49:1D:DD:B1:0B:A7:FC:F8:36:B5:24:32:17:86:1B X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3132382e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.128.0/23 Signature Algorithm: sha256WithRSAEncryption 55:55:59:b2:21:6d:61:98:bd:de:f5:c9:b2:72:62:12:5d:f8: fc:d5:fe:61:d5:6d:97:b3:2c:b6:fa:07:c0:54:3c:36:59:e6: b3:86:f9:bf:3d:92:c8:fd:45:0c:cb:49:e6:18:04:5b:5c:a3: 69:fa:56:c9:24:47:dc:cf:75:71:ae:d7:a1:bb:1a:f3:79:6c: ab:25:bd:fe:12:9b:20:18:e1:b0:b0:3a:6b:be:8a:60:1c:b5: 29:7a:53:68:9d:75:dc:68:e0:35:f1:41:ec:3c:eb:95:29:ba: d7:44:cf:d5:8f:eb:53:3b:41:f9:42:b5:39:e0:8f:70:7a:41: b4:be:d7:db:dc:6c:e8:fd:30:4c:f0:97:e9:ec:f2:a4:e2:bd: e8:c7:9f:86:f6:d7:92:ef:b1:97:6b:dc:af:28:f8:72:40:4f: 9d:54:4b:0f:24:4c:3f:8f:fc:9a:e0:94:f1:e0:79:a3:55:a5: c3:bb:bf:db:67:38:a4:61:46:0a:0c:a6:fb:19:62:25:ac:31: 23:28:6d:e5:a1:00:15:ef:f2:f9:94:53:ea:f5:82:f4:6e:5b: 69:23:14:18:e4:80:2a:e6:5e:1e:2b:97:eb:a3:a8:6e:da:54: 3e:6a:16:7c:21:28:21:c9:f5:ce:d6:55:2e:b9:08:a7:45:5f: 5e:de:4f:08 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULyO0TcMgyEV4r/5mkW+x/mZDOUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTdaFw0yNjEyMjgwOTUwNTdaMDMxMTAvBgNV BAMTKDcyRTQ2ODJBNEM0OTFERERCMTBCQTdGQ0Y4MzZCNTI0MzIxNzg2MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKTVVqkuBQjiunr41dT/1BF/1 aIP/k+XO7dG7OnO6tUZ2uECQiMqPM1ErBrGblxPhPkpOsmm1tWy5tJS6nhkcoaWY rw5wJxDQh7fBJCu9wb4n90QfSqHVdR1fnlUpMnl/Wbprn9+N/x6wYhHuhTOoHtY5 enhEM9gidsZVCi//TsqRgBAYLYaZVhWfuhSSMpT8UO5gThw8f6QCUTUXTekYK1et OZUu+bzwRa/KwNRQG3rDElu173buMhEXSf0JLHGhm8eyxcN476JX/Hq41ap+f6o5 M64myypiUu/cHNyNxtMK20uA7qAKFrXqejYoVow/38jjUcA/ITHd7amj54jrAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcuRoKkxJHd2xC6f8+Da1JDIXhhswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTMy MzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB UrSAMA0GCSqGSIb3DQEBCwUAA4IBAQBVVVmyIW1hmL3e9cmycmISXfj81f5h1W2X syy2+gfAVDw2Weazhvm/PZLI/UUMy0nmGARbXKNp+lbJJEfcz3VxrtehuxrzeWyr Jb3+EpsgGOGwsDprvopgHLUpelNonXXcaOA18UHsPOuVKbrXRM/Vj+tTO0H5QrU5 4I9wekG0vtfb3Gzo/TBM8Jfp7PKk4r3ox5+G9teS77GXa9yvKPhyQE+dVEsPJEw/ j/ya4JTx4HmjVaXDu7/bZzikYUYKDKb7GWIlrDEjKG3loQAV7/L5lFPq9YL0bltp IxQY5IAq5l4eK5fro6hu2lQ+ahZ8ISghyfXO1lUuuQinRV9e3k8I -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:34 2026 by rpki-client