This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa File: 38352e3139302e3234362e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: M2O39s32OvW1m8jjCUH2ldkXnGLLPCMhtottFJTak9M= Subject key identifier: AA:CF:E1:DB:6C:A8:E2:B3:82:1F:CD:A8:28:B2:9A:35:B1:9B:8A:DE Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 724709C0FAAB93BB843E31F44ADF8F40FE9EE248 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:52 +0000 ROA not before: Mon 29 Dec 2025 09:45:52 +0000 ROA not after: Mon 28 Dec 2026 09:50:52 +0000 asID: 51167 IP address blocks: 85.190.246.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:47:09:c0:fa:ab:93:bb:84:3e:31:f4:4a:df:8f:40:fe:9e:e2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:52 2025 GMT Not After : Dec 28 09:50:52 2026 GMT Subject: CN=AACFE1DB6CA8E2B3821FCDA828B29A35B19B8ADE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0b:7c:91:6b:b4:a3:68:88:cb:22:e7:5b:cf: 8b:ac:e0:83:f8:09:99:e4:c6:be:5b:6d:f8:6c:a1: a0:86:81:cd:20:1e:21:03:26:91:38:79:33:d4:30: de:9e:2c:af:ba:0b:b3:4c:29:ee:14:f4:39:4f:77: 74:a3:a6:82:10:b6:f5:44:a0:9e:d5:aa:08:7a:f0: 13:c9:69:29:71:0d:2d:fd:02:e2:56:24:0c:3f:0d: 78:f2:84:11:c3:0b:29:a5:f0:4c:77:69:69:20:94: ea:8d:29:ca:66:8f:48:e1:bf:12:ab:a5:c0:30:8c: 08:39:de:86:a8:d3:61:d1:97:8b:5e:4b:13:78:ec: 5d:09:28:26:9e:1c:e1:fc:db:05:6c:32:70:a5:55: 02:ed:11:97:39:49:95:f7:0c:be:32:95:d8:61:2c: d0:dc:ff:c8:f0:44:59:c5:7f:1b:b0:5d:15:91:ff: 54:57:fc:77:49:64:20:4e:3a:44:22:19:1e:44:ab: fd:71:7e:3a:16:1e:94:c8:1f:c4:e5:31:00:88:65: 4f:d5:30:29:d1:d5:cd:e8:c8:9a:ce:1c:24:47:49: 87:6a:97:36:6f:c1:f4:54:14:62:e5:38:a7:2a:59: 2b:0f:d8:c8:59:93:3a:b1:ac:89:37:73:b3:d9:0b: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CF:E1:DB:6C:A8:E2:B3:82:1F:CD:A8:28:B2:9A:35:B1:9B:8A:DE X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3139302e3234362e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.190.246.0/24 Signature Algorithm: sha256WithRSAEncryption 39:3b:58:74:a8:26:6b:75:28:1a:60:cf:43:76:38:25:80:4a: 1b:23:67:19:72:3c:47:69:a1:69:25:f4:e4:09:56:9b:8a:d5: 65:00:d6:f0:f9:af:81:a0:f5:1b:8f:d6:a5:31:7a:43:af:7d: 17:db:0e:cd:74:5c:6b:86:fe:24:f8:42:72:68:41:94:4b:6c: d8:4e:d7:d0:75:a9:ac:55:c8:30:35:6f:88:31:86:55:a1:02: 45:50:de:2e:32:d0:e2:b0:66:eb:d6:be:c3:b6:76:d1:30:d3: 46:bf:4b:31:7c:2b:19:30:97:4d:e5:9e:8e:72:c1:b5:a7:0e: cc:88:87:16:d7:8c:7c:ea:19:e9:ef:3a:09:50:b7:83:b9:e7: 33:02:54:b0:2d:4e:c5:0b:91:c4:a6:de:6d:9f:02:50:6b:d9: 69:f6:15:14:50:44:30:88:1c:6d:86:0a:26:82:12:ac:5a:99: 94:d4:ff:8f:b9:bd:e9:cf:bb:73:2c:c9:61:86:eb:42:0f:e7: a3:83:04:24:38:f4:8d:7b:43:83:8f:bd:ca:de:c8:af:b4:bc: 92:0a:45:22:bf:db:91:f9:cf:8a:03:98:10:ef:1d:ea:78:08: 24:ea:e8:9b:dc:cf:f6:17:64:aa:17:b0:28:ff:14:a6:cb:39: 26:57:bc:2d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUckcJwPqrk7uEPjH0St+PQP6e4kgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTJaFw0yNjEyMjgwOTUwNTJaMDMxMTAvBgNV BAMTKEFBQ0ZFMURCNkNBOEUyQjM4MjFGQ0RBODI4QjI5QTM1QjE5QjhBREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeC3yRa7SjaIjLIudbz4us4IP4 CZnkxr5bbfhsoaCGgc0gHiEDJpE4eTPUMN6eLK+6C7NMKe4U9DlPd3SjpoIQtvVE oJ7Vqgh68BPJaSlxDS39AuJWJAw/DXjyhBHDCyml8Ex3aWkglOqNKcpmj0jhvxKr pcAwjAg53oao02HRl4teSxN47F0JKCaeHOH82wVsMnClVQLtEZc5SZX3DL4yldhh LNDc/8jwRFnFfxuwXRWR/1RX/HdJZCBOOkQiGR5Eq/1xfjoWHpTIH8TlMQCIZU/V MCnR1c3oyJrOHCRHSYdqlzZvwfRUFGLlOKcqWSsP2MhZkzqxrIk3c7PZC33BAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqs/h22yo4rOCH82oKLKaNbGbit4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzEzOTMwMmUzMjM0 MzYyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Vb72MA0GCSqGSIb3DQEBCwUAA4IBAQA5O1h0qCZrdSgaYM9DdjglgEobI2cZcjxH aaFpJfTkCVabitVlANbw+a+BoPUbj9alMXpDr30X2w7NdFxrhv4k+EJyaEGUS2zY TtfQdamsVcgwNW+IMYZVoQJFUN4uMtDisGbr1r7DtnbRMNNGv0sxfCsZMJdN5Z6O csG1pw7MiIcW14x86hnp7zoJULeDueczAlSwLU7FC5HEpt5tnwJQa9lp9hUUUEQw iBxthgomghKsWpmU1P+Pub3pz7tzLMlhhutCD+ejgwQkOPSNe0ODj73K3sivtLyS CkUiv9uR+c+KA5gQ7x3qeAgk6uib3M/2F2SqF7Ao/xSmyzkmV7wt -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:24 2026 by rpki-client