This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e3234372e3132382e302f32302d3332203d3e203531313637.roa File: 38342e3234372e3132382e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: kj13Yulr7tY8QN/yZSmD/KN8o6Ln9ZJb3k90kegbJHk= Subject key identifier: 7C:46:2E:3A:D3:06:FF:AD:7A:FD:EE:10:23:14:00:C8:40:FE:FD:63 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 139D072A04641320853606123A10AF5854140220 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e3234372e3132382e302f32302d3332203d3e203531313637.roa Signing time: Thu 13 Nov 2025 16:48:50 +0000 ROA not before: Thu 13 Nov 2025 16:43:50 +0000 ROA not after: Thu 12 Nov 2026 16:48:50 +0000 asID: 51167 IP address blocks: 84.247.128.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:9d:07:2a:04:64:13:20:85:36:06:12:3a:10:af:58:54:14:02:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 13 16:43:50 2025 GMT Not After : Nov 12 16:48:50 2026 GMT Subject: CN=7C462E3AD306FFAD7AFDEE10231400C840FEFD63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:8e:f5:b5:5d:df:3e:9b:f2:8c:48:ec:66: 9d:7e:ca:ca:d7:ae:04:12:e9:c3:b5:b1:4b:81:9a: 10:fa:c6:47:0f:9c:1d:1c:8c:eb:58:c8:46:f8:fd: cb:36:ba:50:bf:f3:97:e4:29:4c:de:96:7a:05:07: a3:9f:dc:39:d5:38:64:b9:56:05:52:7f:f4:24:36: 50:46:cb:24:c4:44:14:35:b6:ad:bb:93:6e:13:b2: 92:5c:05:6b:ce:05:70:f6:62:2a:84:66:c0:92:e8: 57:55:c7:25:d7:64:c8:b8:b6:4a:72:fb:20:27:7f: 04:c5:0f:b0:fa:0c:ca:fe:2c:76:83:16:cf:ed:84: 50:2b:7e:4b:2f:be:1e:fd:9b:5e:05:06:ff:81:de: b5:57:35:89:05:99:58:66:38:b1:8c:8e:d4:24:f3: 11:92:a6:46:df:40:63:21:e8:9a:6e:f4:c3:75:cd: 5c:87:dc:38:82:0d:da:8c:a6:7e:fb:66:af:7b:e9: 4e:20:bb:ed:68:ba:e6:e4:3c:6e:d2:89:c5:b4:49: 17:33:4c:b5:43:f1:ed:e0:77:45:ee:a2:d6:8c:b1: 36:6f:97:de:77:70:e3:ad:e1:d1:1e:fa:9c:f8:a6: fc:ee:22:fd:49:94:bc:10:59:0d:2f:59:ff:e6:a0: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:46:2E:3A:D3:06:FF:AD:7A:FD:EE:10:23:14:00:C8:40:FE:FD:63 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e3234372e3132382e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:d6:96:9d:0e:88:0a:ab:43:16:ae:d2:a9:0f:8b:f0:f1:a6: e4:8c:2c:c1:81:46:ee:cf:02:94:94:f3:05:1a:8c:ae:6c:29: 29:c2:8a:fe:96:ee:69:55:fa:41:10:30:52:aa:b1:65:b7:e7: 08:cd:5a:26:a3:4f:7d:06:a7:da:0b:6c:1c:5a:da:49:03:9f: 77:58:c1:ea:9c:65:e7:08:4b:16:26:97:8d:b8:30:58:60:2f: a3:0d:48:f3:03:0e:1c:aa:74:ca:6b:f4:fd:8c:e2:87:81:21: 87:13:23:d2:f3:37:f0:bb:d4:89:fd:5b:a0:30:bc:9b:23:98: e8:e8:95:a8:59:6f:66:da:9e:b1:f2:1e:a7:b3:e2:86:35:67: e6:b9:af:11:e6:d4:66:2f:da:b6:77:37:ec:43:92:9c:f4:fb: 92:1a:a3:e9:f7:8d:4a:29:84:99:85:37:10:87:32:12:72:58: 42:e4:29:7d:6a:2b:2e:71:f6:de:21:24:49:38:a8:bd:19:1c: 8a:7f:dd:54:dc:e3:84:1b:fc:a7:07:3d:12:e6:e6:f1:c4:79: ae:60:8e:c7:e1:e5:cd:fb:86:02:7a:72:f2:69:f4:08:9d:af: 7b:aa:8e:96:45:21:fe:ee:00:3b:f6:6e:34:1d:93:0e:69:a5: 93:25:d5:70 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUE50HKgRkEyCFNgYSOhCvWFQUAiAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTMxNjQzNTBaFw0yNjExMTIxNjQ4NTBaMDMxMTAvBgNV BAMTKDdDNDYyRTNBRDMwNkZGQUQ3QUZERUUxMDIzMTQwMEM4NDBGRUZENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHW471tV3fPpvyjEjsZp1+ysrX rgQS6cO1sUuBmhD6xkcPnB0cjOtYyEb4/cs2ulC/85fkKUzelnoFB6Of3DnVOGS5 VgVSf/QkNlBGyyTERBQ1tq27k24TspJcBWvOBXD2YiqEZsCS6FdVxyXXZMi4tkpy +yAnfwTFD7D6DMr+LHaDFs/thFArfksvvh79m14FBv+B3rVXNYkFmVhmOLGMjtQk 8xGSpkbfQGMh6Jpu9MN1zVyH3DiCDdqMpn77Zq976U4gu+1ouubkPG7SicW0SRcz TLVD8e3gd0XuotaMsTZvl953cOOt4dEe+pz4pvzuIv1JlLwQWQ0vWf/moMiBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUfEYuOtMG/616/e4QIxQAyED+/WMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNDJlMzIzNDM3MmUzMTMy MzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE VPeAMA0GCSqGSIb3DQEBCwUAA4IBAQAL1padDogKq0MWrtKpD4vw8abkjCzBgUbu zwKUlPMFGoyubCkpwor+lu5pVfpBEDBSqrFlt+cIzVomo099BqfaC2wcWtpJA593 WMHqnGXnCEsWJpeNuDBYYC+jDUjzAw4cqnTKa/T9jOKHgSGHEyPS8zfwu9SJ/Vug MLybI5jo6JWoWW9m2p6x8h6ns+KGNWfmua8R5tRmL9q2dzfsQ5Kc9PuSGqPp941K KYSZhTcQhzISclhC5Cl9aisucfbeISRJOKi9GRyKf91U3OOEG/ynBz0S5ubxxHmu YI7H4eXN+4YCenLyafQIna97qo6WRSH+7gA79m40HZMOaaWTJdVw -----END CERTIFICATE-----Generated at Fri Dec 5 06:23:14 2025 by rpki-client