This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa File: 38322e3138302e3135342e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: 2tmeECRb8RzoJnDPUjjy8j2i5CKEEsJWkMmgTqHT9gM= Subject key identifier: 39:EC:31:AB:49:C6:BD:57:50:A6:13:91:18:3D:14:A3:5D:63:57:8D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 776D64594326146847BE0FAD449A6E84FC516F98 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:51:04 +0000 ROA not before: Mon 29 Dec 2025 09:46:04 +0000 ROA not after: Mon 28 Dec 2026 09:51:04 +0000 asID: 47583 IP address blocks: 82.180.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6d:64:59:43:26:14:68:47:be:0f:ad:44:9a:6e:84:fc:51:6f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:04 2025 GMT Not After : Dec 28 09:51:04 2026 GMT Subject: CN=39EC31AB49C6BD5750A61391183D14A35D63578D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:77:f9:f7:01:61:ce:29:13:c7:31:90:c6: b5:8c:d3:9d:b3:df:e4:33:10:9b:0f:28:15:76:9a: 52:b6:1d:3e:a4:c3:95:31:10:5a:c3:8e:ff:b0:ac: b5:75:00:28:4a:15:74:69:d7:5a:1b:39:4f:38:10: 44:8e:1e:23:0f:9a:5b:e3:2d:39:c2:53:1d:fe:70: 79:3f:02:f1:70:6a:8b:87:b2:bc:72:2b:ca:4a:61: 22:fa:4b:c0:69:4e:4b:eb:7e:29:4f:08:16:01:a5: cb:de:e1:0a:5c:58:d6:dc:38:7b:c5:bc:6f:ba:be: 5e:20:ad:48:1c:18:7d:0f:74:b7:92:72:96:6c:00: 0b:98:f9:68:35:c4:b0:71:1b:c0:6d:10:9d:ea:7e: e6:bb:6a:3f:6c:fe:46:3e:26:fa:6e:9b:44:f5:c7: ee:02:0c:fd:8e:02:fd:55:35:09:59:a4:36:d3:16: 61:cb:10:a9:05:f1:a3:5a:e3:32:68:7f:6d:a1:fd: c9:f3:c5:e7:69:cf:2f:71:81:79:a5:cb:48:c6:ca: 5c:f3:8a:5a:a0:c8:a6:62:30:77:de:95:d6:d2:41: 44:af:e3:22:96:96:17:95:87:98:f0:4e:ff:ff:5c: 52:2a:9e:7d:cb:cb:ea:3f:2a:4d:11:48:99:eb:3d: ed:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EC:31:AB:49:C6:BD:57:50:A6:13:91:18:3D:14:A3:5D:63:57:8D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3135342e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.154.0/24 Signature Algorithm: sha256WithRSAEncryption 61:2e:00:35:b3:7c:46:48:ad:fd:4c:7f:f5:90:70:ed:f3:f6: 6f:a2:f6:05:59:3e:f7:8f:ad:cb:e2:14:0b:01:91:f1:9e:9c: 83:45:83:0f:4a:33:a3:79:f7:37:5d:6b:ad:2e:e4:6b:6b:d1: a5:b5:a8:84:8e:0b:13:30:2a:81:83:3c:5d:27:61:da:ce:4e: 82:19:3f:34:42:18:9d:74:d5:2c:3a:60:23:e4:17:8f:d7:48: 98:d6:c5:3b:6a:9d:ea:e3:16:6e:f5:a3:13:94:c7:8c:01:2c: dd:43:9a:66:58:2a:a9:d7:1f:b5:a3:0d:e0:8b:60:6f:ab:19: 1a:9a:4d:67:06:c9:07:19:ac:8a:33:e8:18:4a:37:b6:51:1d: 29:e4:b0:55:e6:5b:96:18:df:68:a3:d5:e6:ac:d6:04:3b:78: 53:c2:e7:31:94:e6:38:71:aa:66:b9:98:fb:38:37:01:e6:05: b8:b8:e1:2d:9d:ff:41:96:94:b8:ad:b6:bb:88:94:44:cb:db: 6b:fd:ee:04:59:e3:ab:55:8f:ba:1b:e2:d3:62:75:af:d5:47: ef:e7:a2:8f:d2:c0:1b:85:06:76:5d:95:78:d6:b0:aa:91:61: eb:82:c5:7d:5c:a4:6e:5b:07:6e:ca:67:1c:0a:86:34:a0:cd: 25:d7:06:ed -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUd21kWUMmFGhHvg+tRJpuhPxRb5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDRaFw0yNjEyMjgwOTUxMDRaMDMxMTAvBgNV BAMTKDM5RUMzMUFCNDlDNkJENTc1MEE2MTM5MTE4M0QxNEEzNUQ2MzU3OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNHf59wFhzikTxzGQxrWM052z 3+QzEJsPKBV2mlK2HT6kw5UxEFrDjv+wrLV1AChKFXRp11obOU84EESOHiMPmlvj LTnCUx3+cHk/AvFwaouHsrxyK8pKYSL6S8BpTkvrfilPCBYBpcve4QpcWNbcOHvF vG+6vl4grUgcGH0PdLeScpZsAAuY+Wg1xLBxG8BtEJ3qfua7aj9s/kY+Jvpum0T1 x+4CDP2OAv1VNQlZpDbTFmHLEKkF8aNa4zJof22h/cnzxedpzy9xgXmly0jGylzz ilqgyKZiMHfeldbSQUSv4yKWlheVh5jwTv//XFIqnn3Ly+o/Kk0RSJnrPe2JAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUOewxq0nGvVdQphORGD0Uo11jV40wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM1 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UrSaMA0GCSqGSIb3DQEBCwUAA4IBAQBhLgA1s3xGSK39TH/1kHDt8/ZvovYFWT73 j63L4hQLAZHxnpyDRYMPSjOjefc3XWutLuRra9GltaiEjgsTMCqBgzxdJ2Hazk6C GT80QhiddNUsOmAj5BeP10iY1sU7ap3q4xZu9aMTlMeMASzdQ5pmWCqp1x+1ow3g i2Bvqxkamk1nBskHGayKM+gYSje2UR0p5LBV5luWGN9oo9XmrNYEO3hTwucxlOY4 capmuZj7ODcB5gW4uOEtnf9BlpS4rba7iJREy9tr/e4EWeOrVY+6G+LTYnWv1Ufv 56KP0sAbhQZ2XZV41rCqkWHrgsV9XKRuWwduymccCoY0oM0l1wbt -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:52 2026 by rpki-client