This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3232382e302f32342d3234203d3e2036353937.roa File: 38352e3139302e3232382e302f32342d3234203d3e2036353937.roa (raw, json) Hash identifier: b+j5vkbTqIiGUk+wKgF2m9Ju8gkhv/PL0ET1eJ9vsbI= Subject key identifier: 66:79:F6:41:CD:BB:D4:06:37:E8:8A:34:70:A4:19:61:99:D9:49:44 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 29BCFA250FBE67F94F26E40E44F60F7333436CBB Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3232382e302f32342d3234203d3e2036353937.roa Signing time: Mon 29 Dec 2025 09:50:36 +0000 ROA not before: Mon 29 Dec 2025 09:45:36 +0000 ROA not after: Mon 28 Dec 2026 09:50:36 +0000 asID: 6597 IP address blocks: 85.190.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:bc:fa:25:0f:be:67:f9:4f:26:e4:0e:44:f6:0f:73:33:43:6c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:36 2025 GMT Not After : Dec 28 09:50:36 2026 GMT Subject: CN=6679F641CDBBD40637E88A3470A4196199D94944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f2:ae:6f:b0:84:ad:d1:39:61:31:43:b1:86: 9f:26:ea:af:76:d3:0c:58:e4:5e:66:7f:80:1b:72: 9c:2b:73:9c:89:50:64:bd:22:62:d8:79:15:b0:7c: 85:9e:47:c8:38:41:2d:85:b4:bb:8e:97:f6:47:8f: af:41:fe:cf:4f:82:f9:31:19:33:8c:f2:8d:62:07: 96:7f:69:c7:94:9a:f9:bd:7a:69:bf:21:f8:25:10: 18:24:b1:49:98:73:f4:a4:71:8d:d3:6f:84:8c:58: c0:67:3a:35:7e:ff:83:4b:93:56:b2:1e:31:19:46: c0:f0:5d:a0:0a:68:64:3b:8d:05:35:20:6c:ad:77: 5e:0a:11:9c:09:23:1e:45:8e:55:2a:d9:61:60:dc: 69:61:bb:99:f2:16:05:f8:40:46:e0:f6:71:bc:17: c8:96:72:2f:a2:0e:a8:32:ac:98:e2:e8:b2:df:f4: e4:fb:11:82:ea:55:67:34:9c:b8:5e:64:4f:53:f3: 68:70:86:14:c6:7a:f5:30:23:49:c9:b0:c7:58:99: b9:59:47:ad:d8:7b:c9:63:71:43:26:fb:d7:f4:09: dc:a7:8e:48:5e:78:b7:42:c1:ca:89:f8:40:eb:b2: 2b:f1:c2:f6:80:0c:0f:e9:58:e3:1c:62:63:e0:b1: 45:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:F6:41:CD:BB:D4:06:37:E8:8A:34:70:A4:19:61:99:D9:49:44 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3232382e302f32342d3234203d3e2036353937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.190.228.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:fb:01:2d:53:63:bd:de:33:5d:ca:04:36:d9:e6:a3:48:f9: 96:35:5e:43:85:f4:a3:2a:5c:19:9b:1c:c8:bc:97:01:29:25: 57:1b:8a:50:19:d9:ee:24:b3:a8:2f:e6:98:40:8b:78:95:22: aa:34:5b:37:a1:9b:84:88:48:60:e3:9a:94:9e:5a:84:a1:ee: ce:69:b5:01:fd:84:79:e5:aa:87:8e:31:d7:57:48:2c:04:dd: 76:d2:75:85:74:a4:c1:c8:1b:11:a3:c0:5c:31:ba:6a:0b:5f: ea:e4:dd:66:55:e8:e1:63:66:3d:6e:3c:ca:33:25:db:b0:13: e3:bf:d5:59:77:7f:5e:96:ad:52:4b:8b:4c:9c:92:1b:c9:94: 3d:93:2a:fe:4c:25:bd:31:f0:3c:ac:21:85:67:24:80:03:43: f5:16:27:8d:94:20:89:23:67:0a:07:64:73:63:99:a5:2c:2b: 72:af:62:db:c1:fb:d2:fe:f6:7e:db:b3:ad:21:ec:df:c4:7d: da:e6:39:36:9d:02:e9:40:d4:48:dd:05:31:bc:61:1a:bb:43: e7:c6:23:0f:7e:ba:dd:3e:4d:e7:0d:f5:a8:eb:4b:85:c8:a0: f9:e6:fa:7c:9c:74:06:20:85:3a:45:8b:5f:15:d1:af:ea:93: f2:24:27:24 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUKbz6JQ++Z/lPJuQORPYPczNDbLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1MzZaFw0yNjEyMjgwOTUwMzZaMDMxMTAvBgNV BAMTKDY2NzlGNjQxQ0RCQkQ0MDYzN0U4OEEzNDcwQTQxOTYxOTlEOTQ5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz8q5vsISt0TlhMUOxhp8m6q92 0wxY5F5mf4Abcpwrc5yJUGS9ImLYeRWwfIWeR8g4QS2FtLuOl/ZHj69B/s9Pgvkx GTOM8o1iB5Z/aceUmvm9emm/IfglEBgksUmYc/SkcY3Tb4SMWMBnOjV+/4NLk1ay HjEZRsDwXaAKaGQ7jQU1IGytd14KEZwJIx5FjlUq2WFg3Glhu5nyFgX4QEbg9nG8 F8iWci+iDqgyrJji6LLf9OT7EYLqVWc0nLheZE9T82hwhhTGevUwI0nJsMdYmblZ R63Ye8ljcUMm+9f0CdynjkheeLdCwcqJ+EDrsivxwvaADA/pWOMcYmPgsUVBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUZnn2Qc271AY36Io0cKQZYZnZSUQwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzEzOTMwMmUzMjMy MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjM1MzkzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFW+ 5DANBgkqhkiG9w0BAQsFAAOCAQEAP/sBLVNjvd4zXcoENtnmo0j5ljVeQ4X0oypc GZscyLyXASklVxuKUBnZ7iSzqC/mmECLeJUiqjRbN6GbhIhIYOOalJ5ahKHuzmm1 Af2EeeWqh44x11dILATddtJ1hXSkwcgbEaPAXDG6agtf6uTdZlXo4WNmPW48yjMl 27AT47/VWXd/XpatUkuLTJySG8mUPZMq/kwlvTHwPKwhhWckgAND9RYnjZQgiSNn Cgdkc2OZpSwrcq9i28H70v72ftuzrSHs38R92uY5Np0C6UDUSN0FMbxhGrtD58Yj D3663T5N5w31qOtLhcig+eb6fJx0BiCFOkWLXxXRr+qT8iQnJA== -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:00 2026 by rpki-client