This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20313336373837.roa File: 38322e3139372e37372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 2sh81RhlhQtiuDYBfygUDEyv57oz0XsuPvms0lgBfEs= Subject key identifier: 06:C0:FD:71:69:69:36:2A:4C:D2:3B:3F:CC:C2:B9:C0:39:BB:F1:47 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 21EAF47966DD44F6A85DCC16D4099583A941CC67 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:58 +0000 ROA not before: Fri 28 Nov 2025 19:44:58 +0000 ROA not after: Fri 27 Nov 2026 19:49:58 +0000 asID: 136787 IP address blocks: 82.197.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:ea:f4:79:66:dd:44:f6:a8:5d:cc:16:d4:09:95:83:a9:41:cc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:58 2025 GMT Not After : Nov 27 19:49:58 2026 GMT Subject: CN=06C0FD716969362A4CD23B3FCCC2B9C039BBF147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:41:0b:2e:0f:7d:3d:85:09:ce:d8:3a:f8:aa: d9:5c:03:e9:84:81:75:a6:22:85:80:a4:9c:32:15: 12:44:63:32:0f:c4:8b:e8:bc:51:62:23:5b:5d:08: d7:ef:e6:2b:0d:83:40:7f:ef:0d:a1:3a:ad:cd:0f: b1:e7:34:4f:56:dc:e5:65:67:50:50:3d:cd:31:80: b8:d5:d4:45:60:19:cd:0c:e4:88:29:14:65:ef:71: d8:df:0d:82:23:00:cf:0b:73:4a:75:17:7d:f7:b9: eb:01:3e:78:2e:20:c0:b1:3e:c6:d4:25:7f:c6:ce: db:d9:75:ca:4b:75:41:83:83:68:6c:7e:dc:da:21: 7c:67:44:3d:18:49:67:52:c1:6e:ff:15:82:25:e2: 76:52:7d:77:f3:27:4e:5b:b5:05:fe:49:a3:45:db: 62:e0:8a:67:42:76:66:c1:11:48:b3:78:26:cb:6f: 92:0d:6d:3a:72:88:11:77:93:17:c3:b7:38:11:99: 34:20:c6:c2:95:07:1b:c9:ea:34:dc:94:0e:be:da: 33:86:13:90:7e:aa:1d:c7:c7:b6:db:23:04:25:f7: c1:77:7d:f5:65:91:e2:4d:e7:b6:0e:0b:aa:22:a3: 6d:8a:a1:42:77:49:02:12:d1:d2:3b:de:d8:5f:7f: 9b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C0:FD:71:69:69:36:2A:4C:D2:3B:3F:CC:C2:B9:C0:39:BB:F1:47 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139372e37372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.197.77.0/24 Signature Algorithm: sha256WithRSAEncryption 71:68:2c:d8:7f:10:42:32:b4:9a:65:17:6d:42:3b:50:7b:78: b6:c2:50:49:b5:60:0a:25:0b:ee:c6:0c:dc:8e:e1:bb:28:80: ba:20:e2:81:04:9c:b1:9d:b8:2d:d7:ba:fd:f2:83:00:42:81: c3:d6:dc:94:b4:f3:f7:97:82:00:19:50:78:a3:be:14:e1:6d: bb:89:bf:05:99:81:83:69:9f:93:60:d0:59:e6:99:16:6d:94: f7:f1:89:06:d6:0c:51:a2:49:e9:17:a0:a5:22:58:01:c1:07: e8:85:e8:5e:14:7b:ef:39:d9:69:4e:90:f7:aa:88:c0:75:4b: ee:a7:47:aa:49:79:a1:03:02:84:6d:13:e4:85:41:7e:39:a4: 08:4b:c4:9e:d0:96:c0:9e:d1:00:13:1d:7b:28:84:58:6a:81: b2:72:de:f8:54:3f:04:22:c2:51:14:e9:36:e2:97:03:eb:03: a7:b2:aa:b1:f2:b0:60:79:66:0c:e5:01:f8:05:ef:e7:61:fb: fa:83:f2:0b:dd:e2:9f:66:36:31:12:c1:12:2d:72:36:1f:cc: 13:3a:7a:07:3a:74:91:bc:53:09:36:52:05:c9:1a:af:de:31: 8d:0c:88:11:dd:b7:89:97:88:a4:0a:c5:03:2a:1f:5b:b0:41: 8d:12:ad:63 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIer0eWbdRPaoXcwW1AmVg6lBzGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NThaFw0yNjExMjcxOTQ5NThaMDMxMTAvBgNV BAMTKDA2QzBGRDcxNjk2OTM2MkE0Q0QyM0IzRkNDQzJCOUMwMzlCQkYxNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4QQsuD309hQnO2Dr4qtlcA+mE gXWmIoWApJwyFRJEYzIPxIvovFFiI1tdCNfv5isNg0B/7w2hOq3ND7HnNE9W3OVl Z1BQPc0xgLjV1EVgGc0M5IgpFGXvcdjfDYIjAM8Lc0p1F333uesBPnguIMCxPsbU JX/GztvZdcpLdUGDg2hsftzaIXxnRD0YSWdSwW7/FYIl4nZSfXfzJ05btQX+SaNF 22LgimdCdmbBEUizeCbLb5INbTpyiBF3kxfDtzgRmTQgxsKVBxvJ6jTclA6+2jOG E5B+qh3Hx7bbIwQl98F3ffVlkeJN57YOC6oio22KoUJ3SQIS0dI73thff5tBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUBsD9cWlpNipM0js/zMK5wDm78UcwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM3MmUzNzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UsVNMA0GCSqGSIb3DQEBCwUAA4IBAQBxaCzYfxBCMrSaZRdtQjtQe3i2wlBJtWAK JQvuxgzcjuG7KIC6IOKBBJyxnbgt17r98oMAQoHD1tyUtPP3l4IAGVB4o74U4W27 ib8FmYGDaZ+TYNBZ5pkWbZT38YkG1gxRoknpF6ClIlgBwQfoheheFHvvOdlpTpD3 qojAdUvup0eqSXmhAwKEbRPkhUF+OaQIS8Se0JbAntEAEx17KIRYaoGyct74VD8E IsJRFOk24pcD6wOnsqqx8rBgeWYM5QH4Be/nYfv6g/IL3eKfZjYxEsESLXI2H8wT OnoHOnSRvFMJNlIFyRqv3jGNDIgR3beJl4ikCsUDKh9bsEGNEq1j -----END CERTIFICATE-----Generated at Fri Dec 5 05:41:44 2025 by rpki-client