This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa File: 38322e3138302e3136342e302f32322d3234203d3e203437353833.roa (raw, json) Hash identifier: ojN3XIPNPCbhSrA4Efvf8cVOP78uu/R3AhqwjUSy6Lo= Subject key identifier: 0B:2B:4F:1D:F5:F6:64:81:92:17:8B:A5:A5:C9:50:8C:DE:01:EB:BB Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5442885EF44134FCD72C1044AFAB54CBC88B9BD8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:49 +0000 ROA not before: Mon 29 Dec 2025 09:45:49 +0000 ROA not after: Mon 28 Dec 2026 09:50:49 +0000 asID: 47583 IP address blocks: 82.180.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:42:88:5e:f4:41:34:fc:d7:2c:10:44:af:ab:54:cb:c8:8b:9b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:49 2025 GMT Not After : Dec 28 09:50:49 2026 GMT Subject: CN=0B2B4F1DF5F6648192178BA5A5C9508CDE01EBBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:d3:82:ff:29:9d:eb:86:4c:3b:5c:a2:4f: 63:bf:37:7e:8c:b6:b1:5d:e9:90:30:fd:80:8c:24: 1e:2b:4f:b9:19:2a:06:38:1d:b3:f9:ac:67:e9:6c: 9d:07:04:81:82:c5:ad:04:7e:17:4a:7a:0e:95:5e: d3:0e:69:6e:12:78:69:d3:64:09:52:fa:49:4d:64: 09:df:45:2b:c6:d9:7c:57:29:5d:92:a9:8d:58:91: 6c:81:7d:9e:24:fb:36:c0:d4:fe:99:68:89:1e:f0: ee:f5:7b:15:58:4d:bd:5f:ac:ef:46:89:01:db:4b: fa:0b:87:31:38:07:65:c9:6f:d2:1a:79:ec:f9:ae: b3:19:e9:56:ad:2a:0e:f8:f9:80:de:58:bc:69:36: 30:03:04:d7:4e:9b:76:32:ab:48:13:2b:b5:f3:8e: 42:b6:2d:c6:f2:5c:89:68:d5:9d:04:e8:7f:e9:2b: d7:64:b6:e0:bd:29:b3:00:86:3d:ee:7c:90:4e:c2: d0:e7:99:7d:33:80:be:e9:95:6d:eb:f6:eb:4e:de: 45:82:b6:99:5e:51:83:47:20:58:d4:e9:e9:03:32: c1:02:e2:1d:83:20:9a:d6:37:d2:db:ae:99:08:44: 33:4f:54:c8:a0:2e:c7:19:cb:36:2f:79:6c:fe:cc: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2B:4F:1D:F5:F6:64:81:92:17:8B:A5:A5:C9:50:8C:DE:01:EB:BB X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3136342e302f32322d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.164.0/22 Signature Algorithm: sha256WithRSAEncryption 48:66:91:e2:d9:a6:f2:7e:15:8e:dd:5a:23:5f:62:fe:b8:8c: cb:8b:fa:9b:c4:b1:e9:0d:a3:df:0d:3a:dd:ae:34:59:47:dd: 6e:82:54:97:39:3c:78:61:c3:5c:04:eb:3d:9f:fe:b7:33:2b: d9:47:5e:77:6a:ca:af:2b:7c:e8:88:fa:13:73:82:c4:9d:b0: 6d:19:7b:62:ed:70:6e:4d:be:7f:b8:14:57:84:6f:e3:95:d5: 2b:0d:e9:8e:20:25:8c:b1:62:1c:05:fe:7c:1c:15:c5:f5:fa: 9b:0a:ce:a4:d7:60:bd:39:c3:5b:fa:b9:e5:2b:23:cb:17:c6: 50:60:12:bb:8c:22:00:24:03:99:f6:9e:81:0e:62:ba:a4:81: bb:14:d5:d1:bf:ec:b3:09:8a:b9:46:94:67:58:d4:8f:93:09: 2d:38:42:72:32:91:5b:24:09:ef:6a:c9:a2:e3:22:8f:ed:70: e2:b7:73:81:17:5a:3b:5c:69:1e:37:6f:f9:1a:44:95:94:93: b8:96:25:f8:c0:f6:7e:06:51:bd:ac:12:bc:dc:ab:68:0d:47: 8a:e4:c1:f6:a4:cd:04:d5:f0:21:c1:ad:88:6d:19:1a:6c:70: cf:23:2d:53:d0:39:f2:a3:6d:15:6b:f3:05:a8:c0:82:86:c8: 7d:ea:25:64 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUVEKIXvRBNPzXLBBEr6tUy8iLm9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDlaFw0yNjEyMjgwOTUwNDlaMDMxMTAvBgNV BAMTKDBCMkI0RjFERjVGNjY0ODE5MjE3OEJBNUE1Qzk1MDhDREUwMUVCQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm4dOC/ymd64ZMO1yiT2O/N36M trFd6ZAw/YCMJB4rT7kZKgY4HbP5rGfpbJ0HBIGCxa0EfhdKeg6VXtMOaW4SeGnT ZAlS+klNZAnfRSvG2XxXKV2SqY1YkWyBfZ4k+zbA1P6ZaIke8O71exVYTb1frO9G iQHbS/oLhzE4B2XJb9Iaeez5rrMZ6VatKg74+YDeWLxpNjADBNdOm3Yyq0gTK7Xz jkK2LcbyXIlo1Z0E6H/pK9dktuC9KbMAhj3ufJBOwtDnmX0zgL7plW3r9utO3kWC tpleUYNHIFjU6ekDMsEC4h2DIJrWN9LbrpkIRDNPVMigLscZyzYveWz+zIvDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUCytPHfX2ZIGSF4ulpclQjN4B67swHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM2 MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM3MzUzODMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC UrSkMA0GCSqGSIb3DQEBCwUAA4IBAQBIZpHi2abyfhWO3VojX2L+uIzLi/qbxLHp DaPfDTrdrjRZR91uglSXOTx4YcNcBOs9n/63MyvZR153asqvK3zoiPoTc4LEnbBt GXti7XBuTb5/uBRXhG/jldUrDemOICWMsWIcBf58HBXF9fqbCs6k12C9OcNb+rnl KyPLF8ZQYBK7jCIAJAOZ9p6BDmK6pIG7FNXRv+yzCYq5RpRnWNSPkwktOEJyMpFb JAnvasmi4yKP7XDit3OBF1o7XGkeN2/5GkSVlJO4liX4wPZ+BlG9rBK83KtoDUeK 5MH2pM0E1fAhwa2IbRkabHDPIy1T0Dnyo20Va/MFqMCChsh96iVk -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:56 2026 by rpki-client