This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e20383334.roa File: 38322e3139382e3235302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: EVtVydAN0pPaxhv3oFnciXSRJsWe1kLXpmZEjSqh4v0= Subject key identifier: FF:89:BA:33:2F:6E:37:C5:E2:9A:34:2C:28:80:4D:CD:E3:FA:FF:B1 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 08454C498D797DA77C93748A63350C10C20199F5 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e20383334.roa Signing time: Mon 12 Jan 2026 11:36:29 +0000 ROA not before: Mon 12 Jan 2026 11:31:29 +0000 ROA not after: Mon 11 Jan 2027 11:36:29 +0000 asID: 834 IP address blocks: 82.198.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:45:4c:49:8d:79:7d:a7:7c:93:74:8a:63:35:0c:10:c2:01:99:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 12 11:31:29 2026 GMT Not After : Jan 11 11:36:29 2027 GMT Subject: CN=FF89BA332F6E37C5E29A342C28804DCDE3FAFFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:40:88:dc:84:1a:69:3e:67:5a:9a:ae:79:02: 7b:cd:f1:8a:b6:25:69:18:c8:41:4b:f2:18:5e:44: 48:82:c8:d9:03:a7:c6:5f:21:1c:f8:ab:08:64:7e: 90:40:74:3b:a9:94:57:b6:8d:8e:84:15:33:9d:61: 70:eb:37:95:b4:3f:7c:e9:7f:31:40:dd:b6:28:45: 29:cf:ec:b7:4c:b0:1d:f6:e7:43:c4:9c:22:15:ad: f3:f1:fd:d0:b6:2d:b9:44:37:87:06:f9:db:8c:35: 1a:90:55:3e:fb:3b:a8:03:88:8d:3a:35:c9:74:9a: eb:d3:ce:23:30:2b:1c:ea:6f:f3:33:4d:2e:9c:72: c6:3e:64:76:6c:3d:95:08:f3:c6:65:23:d2:ea:cb: 9a:80:5a:a0:2f:51:68:41:71:86:ab:3b:41:0c:72: 70:11:f8:ab:eb:81:c5:6d:85:57:1a:98:24:af:68: 8d:a2:ca:7b:78:80:35:97:ee:f0:11:01:4b:40:51: 81:5b:95:e2:ea:2b:0b:49:30:02:b1:a5:b2:c9:de: 0d:62:97:f1:ac:52:ad:f2:9e:4a:b2:27:b3:e6:59: b8:2a:48:f0:46:26:8a:7c:bc:0d:ad:d2:86:e7:c2: e0:82:0e:2e:80:1f:97:36:19:f6:1a:37:50:a3:17: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:BA:33:2F:6E:37:C5:E2:9A:34:2C:28:80:4D:CD:E3:FA:FF:B1 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3139382e3235302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.198.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:59:96:e4:67:ae:e6:50:cd:d3:40:c0:f7:60:74:93:eb:4a: a5:05:24:40:9f:96:8c:e7:e8:c0:08:bb:47:c1:f7:59:1c:b9: ee:04:82:31:3e:ac:02:4d:bf:30:1d:57:07:14:03:1e:04:bb: 13:71:61:0d:cc:6b:12:c8:ba:95:d7:85:e9:ba:54:bb:5e:3c: 02:a1:e6:5c:b0:17:34:f7:4e:12:50:3d:ff:81:4a:85:9c:41: 2a:1f:44:91:f4:d5:c6:db:df:f5:68:aa:5d:16:36:bc:08:bf: a6:94:17:ef:1b:51:00:92:3c:8c:79:51:32:68:0c:01:43:75: 37:39:82:f0:63:cd:51:a7:d1:68:85:b0:1b:15:b3:d0:71:ce: 97:ca:f3:41:27:5a:e0:c8:bf:34:19:db:b3:ff:3b:e2:fa:bd: 73:8e:9f:ab:c6:a0:c4:26:7f:72:55:0a:b6:a3:fb:f9:8f:2a: 3f:3c:4f:71:8f:91:33:b3:45:e8:9e:07:94:d3:bb:b1:dd:98: 09:86:da:53:87:fd:7c:2b:2c:ba:cb:7e:a6:c0:11:fc:62:9f: 5d:09:f7:f8:f7:ea:58:68:54:fd:5a:dd:6d:c9:96:58:be:bb: 2c:19:ee:17:ea:42:80:95:fd:af:e6:29:67:be:8a:d8:14:09: 97:48:a3:d8 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUCEVMSY15fad8k3SKYzUMEMIBmfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMTIxMTMxMjlaFw0yNzAxMTExMTM2MjlaMDMxMTAvBgNV BAMTKEZGODlCQTMzMkY2RTM3QzVFMjlBMzQyQzI4ODA0RENERTNGQUZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMQIjchBppPmdamq55AnvN8Yq2 JWkYyEFL8hheREiCyNkDp8ZfIRz4qwhkfpBAdDuplFe2jY6EFTOdYXDrN5W0P3zp fzFA3bYoRSnP7LdMsB3250PEnCIVrfPx/dC2LblEN4cG+duMNRqQVT77O6gDiI06 Ncl0muvTziMwKxzqb/MzTS6ccsY+ZHZsPZUI88ZlI9Lqy5qAWqAvUWhBcYarO0EM cnAR+KvrgcVthVcamCSvaI2iynt4gDWX7vARAUtAUYFbleLqKwtJMAKxpbLJ3g1i l/GsUq3ynkqyJ7PmWbgqSPBGJop8vA2t0obnwuCCDi6AH5c2GfYaN1CjF+7FAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/4m6My9uN8XimjQsKIBNzeP6/7EwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzOTM4MmUzMjM1 MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABSxvow DQYJKoZIhvcNAQELBQADggEBAC5ZluRnruZQzdNAwPdgdJPrSqUFJECflozn6MAI u0fB91kcue4EgjE+rAJNvzAdVwcUAx4EuxNxYQ3MaxLIupXXhem6VLtePAKh5lyw FzT3ThJQPf+BSoWcQSofRJH01cbb3/Voql0WNrwIv6aUF+8bUQCSPIx5UTJoDAFD dTc5gvBjzVGn0WiFsBsVs9BxzpfK80EnWuDIvzQZ27P/O+L6vXOOn6vGoMQmf3JV Craj+/mPKj88T3GPkTOzReieB5TTu7HdmAmG2lOH/XwrLLrLfqbAEfxin10J9/j3 6lhoVP1a3W3Jlli+uywZ7hfqQoCV/a/mKWe+itgUCZdIo9g= -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:34 2026 by rpki-client