This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa File: 38322e3138302e3133342e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: H1HrVeIHvedS0kmD2qXY5nrfzizmkIAjtb8J0m4UGHY= Subject key identifier: CB:F1:42:46:79:4D:88:37:6B:9C:F2:4C:1B:43:33:7E:33:96:2B:F5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0187B9C1FBC703019A6308BA2F95A590365659CD Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:54 +0000 ROA not before: Mon 29 Dec 2025 09:45:54 +0000 ROA not after: Mon 28 Dec 2026 09:50:54 +0000 asID: 47583 IP address blocks: 82.180.134.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:87:b9:c1:fb:c7:03:01:9a:63:08:ba:2f:95:a5:90:36:56:59:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:54 2025 GMT Not After : Dec 28 09:50:54 2026 GMT Subject: CN=CBF14246794D88376B9CF24C1B43337E33962BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cd:47:04:46:c1:ea:61:2c:ae:bc:0a:12:0e: 5c:f5:bb:69:5b:b3:3b:68:d8:33:b2:50:e2:b4:5d: f2:b4:00:ae:71:26:02:0d:7f:c6:39:d0:ae:63:70: e4:1a:e4:10:e5:91:7b:fc:be:a7:02:14:2f:34:b8: 5a:82:b7:8c:00:62:35:51:fe:f6:a2:51:19:6e:da: f7:4d:87:59:2a:cc:b6:fa:74:03:15:ba:09:a2:99: 7f:79:df:df:12:0c:4b:8c:1d:40:62:6b:95:26:d8: 93:fd:30:5d:7b:66:30:01:fe:79:e0:0a:40:02:58: 80:76:24:2c:cd:11:6c:80:07:ae:6d:39:38:e7:eb: 6b:12:8c:63:6a:5e:a9:78:a3:2a:24:25:a6:d5:89: a2:cf:d6:46:f4:4d:bd:df:9c:73:0e:e6:69:57:17: 69:2c:e2:30:74:71:ab:7d:d1:13:e0:0e:66:92:56: ed:da:b2:1e:e6:a6:1d:f8:86:14:65:59:f9:78:a7: 8b:23:c9:0c:bf:73:3e:c6:5f:36:a3:f7:e5:e3:bc: 06:68:56:73:fe:cc:d3:23:ce:dc:ee:06:63:7d:89: 1a:20:02:9d:db:19:84:98:ff:e8:0a:c3:de:d3:26: c0:5b:db:af:a4:7d:89:99:a7:f5:77:e4:df:c4:2e: 7b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F1:42:46:79:4D:88:37:6B:9C:F2:4C:1B:43:33:7E:33:96:2B:F5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3133342e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.134.0/23 Signature Algorithm: sha256WithRSAEncryption 67:74:84:00:36:e4:69:f5:a4:5c:92:fb:fb:51:1e:ae:7b:c5: c7:42:e0:21:c1:6d:aa:c3:9b:83:ba:07:53:ce:4e:6d:05:82: d6:60:a5:59:58:57:8c:eb:9a:ce:94:b3:ef:91:87:ab:f2:bf: dc:ac:22:b0:05:bc:8f:df:d9:97:96:a3:10:73:33:eb:af:e0: 71:72:b2:01:42:8c:ad:07:6b:56:05:a2:07:e8:c7:fb:86:f0: 11:0a:40:e1:77:dd:d9:64:3d:ba:c1:f2:73:98:84:46:33:89: f4:7b:ec:6d:7b:00:08:d6:67:69:a8:01:10:d6:5e:ec:9f:0d: 98:d3:8c:ff:6e:6b:6e:27:2d:e0:e1:c8:09:bb:39:db:95:60: 4a:95:22:f3:55:52:a7:1c:03:3b:9c:fe:09:aa:3c:0c:52:59: 4b:e1:27:2f:0b:57:b1:1f:b3:00:ee:83:b3:7c:95:98:e2:52: 6e:0b:29:ad:d8:7e:04:58:a5:b6:3a:3b:58:55:6c:3d:d7:8c: 39:45:fe:7b:fa:f8:d7:d8:55:0a:44:1c:88:9c:5a:54:86:28: c3:66:7d:64:4a:d4:f3:86:d1:66:3e:d5:a1:cb:ff:5c:f5:5b: cd:03:98:73:2f:bd:c1:73:af:9e:44:90:45:f6:30:c1:22:5b: d1:29:32:78 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUAYe5wfvHAwGaYwi6L5WlkDZWWc0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTRaFw0yNjEyMjgwOTUwNTRaMDMxMTAvBgNV BAMTKENCRjE0MjQ2Nzk0RDg4Mzc2QjlDRjI0QzFCNDMzMzdFMzM5NjJCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqzUcERsHqYSyuvAoSDlz1u2lb szto2DOyUOK0XfK0AK5xJgINf8Y50K5jcOQa5BDlkXv8vqcCFC80uFqCt4wAYjVR /vaiURlu2vdNh1kqzLb6dAMVugmimX95398SDEuMHUBia5Um2JP9MF17ZjAB/nng CkACWIB2JCzNEWyAB65tOTjn62sSjGNqXql4oyokJabViaLP1kb0Tb3fnHMO5mlX F2ks4jB0cat90RPgDmaSVu3ash7mph34hhRlWfl4p4sjyQy/cz7GXzaj9+XjvAZo VnP+zNMjztzuBmN9iRogAp3bGYSY/+gKw97TJsBb26+kfYmZp/V35N/ELnt1AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUy/FCRnlNiDdrnPJMG0MzfjOWK/UwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTMz MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB UrSGMA0GCSqGSIb3DQEBCwUAA4IBAQBndIQANuRp9aRckvv7UR6ue8XHQuAhwW2q w5uDugdTzk5tBYLWYKVZWFeM65rOlLPvkYer8r/crCKwBbyP39mXlqMQczPrr+Bx crIBQoytB2tWBaIH6Mf7hvARCkDhd93ZZD26wfJzmIRGM4n0e+xtewAI1mdpqAEQ 1l7snw2Y04z/bmtuJy3g4cgJuznblWBKlSLzVVKnHAM7nP4JqjwMUllL4ScvC1ex H7MA7oOzfJWY4lJuCymt2H4EWKW2OjtYVWw914w5Rf57+vjX2FUKRByInFpUhijD Zn1kStTzhtFmPtWhy/9c9VvNA5hzL73Bc6+eRJBF9jDBIlvRKTJ4 -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:08 2026 by rpki-client