This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa File: 38322e3138302e3133322e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: DCpuv4DNe7ucXTpmKAE/Edkngd8zojEa4WtQU38ye/s= Subject key identifier: 09:D4:3C:EF:BE:30:01:38:69:BD:B1:38:4A:AA:0C:FA:BE:12:52:7D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 77A1A7CB4392B1D9A72AE7B59B923CE1D10D9A03 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:37 +0000 ROA not before: Mon 29 Dec 2025 09:45:37 +0000 ROA not after: Mon 28 Dec 2026 09:50:37 +0000 asID: 47583 IP address blocks: 82.180.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:a1:a7:cb:43:92:b1:d9:a7:2a:e7:b5:9b:92:3c:e1:d1:0d:9a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:37 2025 GMT Not After : Dec 28 09:50:37 2026 GMT Subject: CN=09D43CEFBE30013869BDB1384AAA0CFABE12527D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:fd:26:11:e8:31:bf:f8:5a:a7:c4:69:94: dc:a8:de:c5:16:12:37:6d:2a:89:9e:28:cf:1a:34: 96:a1:01:a8:2b:b7:04:72:e6:be:f1:89:97:ac:d1: 84:5b:1f:0d:9f:14:d8:cd:2d:e9:09:bc:80:cb:c1: 11:e2:e5:6c:86:4d:61:80:a3:3e:24:ba:cb:03:25: f4:12:c5:27:c7:9f:1b:66:0a:79:47:7c:13:38:d3: 5f:91:89:3c:cb:12:e5:f3:7a:4c:d2:f8:53:b9:fd: 57:f3:69:9e:00:33:30:a8:71:47:23:39:2f:ac:1a: 9f:b4:83:c2:27:f0:42:af:64:bd:c7:72:36:41:26: 30:0e:72:56:ab:a8:6a:82:04:98:ac:3c:b5:fe:63: 18:64:43:f9:12:a7:23:a9:e0:f5:54:1f:0b:4b:64: 12:3b:20:05:c8:bd:a0:c7:73:36:1a:f5:f9:f1:9e: b3:60:4b:56:2a:e7:4d:12:8f:6a:48:38:99:e8:31: 7a:d3:6c:93:c7:ec:9e:93:5a:5c:07:c3:db:a7:7e: c7:d9:0e:e2:fd:41:83:5d:36:f3:70:5f:5e:b4:02: 3b:4a:80:84:c0:88:d0:1b:0d:8d:aa:33:9f:b3:02: 82:8c:d9:d7:81:ee:d5:40:8c:ac:37:7e:ff:1d:27: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D4:3C:EF:BE:30:01:38:69:BD:B1:38:4A:AA:0C:FA:BE:12:52:7D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133322e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.132.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:4b:3d:97:82:ea:d5:ab:ad:5b:84:52:59:aa:3c:c5:e6:07: 07:ec:3b:5a:85:3e:2f:95:e3:75:ae:bd:cf:7c:e8:ef:26:b2: 58:46:77:b1:77:64:b6:66:78:5b:0c:72:05:6d:e3:8c:71:84: f3:3f:01:6a:1f:ff:79:20:c4:e7:a2:05:75:e1:09:07:99:8c: b5:1f:0c:b2:bb:16:78:70:ea:85:d2:53:83:72:37:07:69:72: e0:62:07:b8:ca:c5:45:14:01:af:65:77:50:46:30:a2:aa:1b: ca:2f:67:cf:f8:38:a5:18:64:d3:a3:44:39:61:98:79:cf:16: 77:dc:89:f9:4f:8a:19:e5:f7:ff:47:b1:4d:a1:52:eb:ea:57: 64:a7:27:8b:9c:a0:57:d8:ec:a1:2a:20:4f:fa:55:04:35:d4: 7c:4b:a8:69:56:61:7f:c1:e8:d9:6a:50:b2:8d:40:e6:d3:62: 28:e6:2f:07:aa:28:2a:8c:fa:59:95:df:0a:df:9a:c3:4a:7f: 87:f2:48:d1:81:d5:4f:5a:54:1b:83:52:2c:ee:6e:ad:d6:97: 98:0d:3d:94:77:99:5c:25:a7:95:5e:b2:cb:04:98:6f:8e:cc: 8d:57:51:19:74:6a:a5:9e:83:11:0c:f0:df:7a:9b:3b:88:fb: 0a:b2:46:e6 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUd6Gny0OSsdmnKue1m5I84dENmgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzdaFw0yNjEyMjgwOTUwMzdaMDMxMTAvBgNV BAMTKDA5RDQzQ0VGQkUzMDAxMzg2OUJEQjEzODRBQUEwQ0ZBQkUxMjUyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVVP0mEegxv/hap8RplNyo3sUW EjdtKomeKM8aNJahAagrtwRy5r7xiZes0YRbHw2fFNjNLekJvIDLwRHi5WyGTWGA oz4kussDJfQSxSfHnxtmCnlHfBM401+RiTzLEuXzekzS+FO5/VfzaZ4AMzCocUcj OS+sGp+0g8In8EKvZL3HcjZBJjAOclarqGqCBJisPLX+YxhkQ/kSpyOp4PVUHwtL ZBI7IAXIvaDHczYa9fnxnrNgS1Yq500Sj2pIOJnoMXrTbJPH7J6TWlwHw9unfsfZ DuL9QYNdNvNwX160AjtKgITAiNAbDY2qM5+zAoKM2deB7tVAjKw3fv8dJ+pZAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCdQ8774wAThpvbE4SqoM+r4SUn0wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTMz MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB UrSEMA0GCSqGSIb3DQEBCwUAA4IBAQBdSz2XgurVq61bhFJZqjzF5gcH7DtahT4v leN1rr3PfOjvJrJYRnexd2S2ZnhbDHIFbeOMcYTzPwFqH/95IMTnogV14QkHmYy1 HwyyuxZ4cOqF0lODcjcHaXLgYge4ysVFFAGvZXdQRjCiqhvKL2fP+DilGGTTo0Q5 YZh5zxZ33In5T4oZ5ff/R7FNoVLr6ldkpyeLnKBX2OyhKiBP+lUENdR8S6hpVmF/ wejZalCyjUDm02Io5i8HqigqjPpZld8K35rDSn+H8kjRgdVPWlQbg1Is7m6t1peY DT2Ud5lcJaeVXrLLBJhvjsyNV1EZdGqlnoMRDPDfeps7iPsKskbm -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:34 2026 by rpki-client