This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa File: 38322e3138302e3136302e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: rHF+2XljvsfD7qd2Tg6ahikp/4pgcn2hsKge4KWrelM= Subject key identifier: 84:35:D3:D7:3B:98:20:72:1F:0D:91:B6:BB:AE:E7:EA:1A:6E:77:E8 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 747440C5CE9FA3C1C31B73722AF250CCB6D06174 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:59 +0000 ROA not before: Mon 29 Dec 2025 09:45:59 +0000 ROA not after: Mon 28 Dec 2026 09:50:59 +0000 asID: 47583 IP address blocks: 82.180.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:74:40:c5:ce:9f:a3:c1:c3:1b:73:72:2a:f2:50:cc:b6:d0:61:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:59 2025 GMT Not After : Dec 28 09:50:59 2026 GMT Subject: CN=8435D3D73B9820721F0D91B6BBAEE7EA1A6E77E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:68:b1:14:a3:e3:8e:15:91:7d:b1:27:f3:8d: af:3d:05:8e:2b:f0:f6:ad:81:16:90:eb:07:c2:9f: 9f:39:ea:6a:cf:92:22:84:51:4b:0b:95:1b:58:d8: 8c:e1:11:b0:0c:ba:80:ca:c7:4c:0c:54:ba:f7:86: 08:cd:8d:ae:4b:d9:c6:12:1d:90:3e:94:fd:35:69: 83:4c:5c:86:6d:98:bc:77:aa:91:d3:04:44:87:71: de:08:bd:c0:67:6a:4b:a2:7e:1c:f9:c7:08:86:e4: d0:9c:c5:80:9c:5c:08:a1:14:11:43:8a:4d:09:2d: c0:12:8a:58:0e:f4:3e:6d:a5:b6:62:f9:9a:10:3c: f5:16:9d:2a:39:69:20:d1:1c:bd:3e:74:d9:36:3d: 1c:25:68:80:e3:ed:4b:0f:a1:d1:69:e8:d4:00:32: 91:df:6d:89:31:2d:c3:93:d8:cd:b1:3a:be:af:a3: 3b:80:2a:da:70:68:e9:96:1a:17:e5:55:d5:c8:a3: 02:24:1a:b1:da:23:42:34:0c:c6:2b:dc:aa:82:9a: 2e:bc:5a:d5:26:e1:85:9b:55:c4:6f:b9:31:89:5f: ca:95:5a:8d:06:1e:d5:99:29:75:6c:70:0c:a8:33: e2:9a:db:c0:10:4a:62:ed:93:f6:1b:67:94:06:de: 17:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:35:D3:D7:3B:98:20:72:1F:0D:91:B6:BB:AE:E7:EA:1A:6E:77:E8 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136302e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.160.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:ac:da:06:e3:d4:bf:6d:6e:8d:eb:a4:05:42:8f:ad:3b:c9: c8:6c:21:cd:da:83:26:ab:15:32:33:81:ef:71:39:6d:bb:7d: 76:d8:4a:6e:5e:78:aa:0c:28:3e:04:d7:29:09:16:7d:47:d1: 55:74:e7:48:89:2a:c3:a1:a8:2e:27:4a:2c:28:a8:e7:a6:1e: e8:4e:67:96:17:b9:4e:ca:f1:07:e4:0b:b8:fb:a2:f4:8a:70: 83:f1:4c:43:2b:4d:42:20:15:33:01:fb:04:61:92:d2:34:42: 81:7e:9a:52:ab:d9:14:9b:b0:4f:63:ab:78:53:8a:97:f8:b0: 45:c2:b3:7b:1e:5b:88:d0:33:69:3f:9d:d2:27:a5:27:fd:cd: 6b:a0:56:2b:f1:cd:d1:21:83:a1:10:ae:44:66:2f:94:31:57: 7d:d6:be:9a:fe:ff:e7:33:b1:28:de:5a:55:3c:b5:19:16:2b: f5:80:2d:68:d5:a5:58:a0:4c:2c:e2:91:37:e0:0b:d0:cd:13: 98:ff:ad:f3:df:e3:04:39:7c:6a:73:bb:5b:9a:9c:c7:6b:e3: 7f:8d:17:e9:e0:13:91:4d:44:e6:78:b1:3d:28:5b:f9:f6:b4: f4:05:09:71:5b:7e:d9:16:5d:07:b4:d5:67:89:cd:5e:67:ea: 1f:da:8b:45 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUdHRAxc6fo8HDG3NyKvJQzLbQYXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTlaFw0yNjEyMjgwOTUwNTlaMDMxMTAvBgNV BAMTKDg0MzVEM0Q3M0I5ODIwNzIxRjBEOTFCNkJCQUVFN0VBMUE2RTc3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsaLEUo+OOFZF9sSfzja89BY4r 8PatgRaQ6wfCn5856mrPkiKEUUsLlRtY2IzhEbAMuoDKx0wMVLr3hgjNja5L2cYS HZA+lP01aYNMXIZtmLx3qpHTBESHcd4IvcBnakuifhz5xwiG5NCcxYCcXAihFBFD ik0JLcASilgO9D5tpbZi+ZoQPPUWnSo5aSDRHL0+dNk2PRwlaIDj7UsPodFp6NQA MpHfbYkxLcOT2M2xOr6vozuAKtpwaOmWGhflVdXIowIkGrHaI0I0DMYr3KqCmi68 WtUm4YWbVcRvuTGJX8qVWo0GHtWZKXVscAyoM+Ka28AQSmLtk/YbZ5QG3hcFAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUhDXT1zuYIHIfDZG2u67n6hpud+gwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM2 MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC UrSgMA0GCSqGSIb3DQEBCwUAA4IBAQArrNoG49S/bW6N66QFQo+tO8nIbCHN2oMm qxUyM4HvcTltu3122EpuXniqDCg+BNcpCRZ9R9FVdOdIiSrDoaguJ0osKKjnph7o TmeWF7lOyvEH5Au4+6L0inCD8UxDK01CIBUzAfsEYZLSNEKBfppSq9kUm7BPY6t4 U4qX+LBFwrN7HluI0DNpP53SJ6Un/c1roFYr8c3RIYOhEK5EZi+UMVd91r6a/v/n M7Eo3lpVPLUZFiv1gC1o1aVYoEws4pE34AvQzROY/63z3+MEOXxqc7tbmpzHa+N/ jRfp4BORTUTmeLE9KFv59rT0BQlxW37ZFl0HtNVnic1eZ+of2otF -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:58 2026 by rpki-client