This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa File: 38352e3233392e3233302e302f32332d3332203d3e203430303231.roa (raw, json) Hash identifier: fXwwUB4milOWAdGon6UE5zix7i5m7Bz6cc5HjdfPKYs= Subject key identifier: 14:0A:D1:B4:95:E6:55:0F:98:9B:9D:01:B1:BC:77:52:67:9F:C6:F7 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4E6104166F60C050B003E33D0A0A3478978856EC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa Signing time: Mon 29 Dec 2025 09:51:05 +0000 ROA not before: Mon 29 Dec 2025 09:46:05 +0000 ROA not after: Mon 28 Dec 2026 09:51:05 +0000 asID: 40021 IP address blocks: 85.239.230.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:61:04:16:6f:60:c0:50:b0:03:e3:3d:0a:0a:34:78:97:88:56:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:05 2025 GMT Not After : Dec 28 09:51:05 2026 GMT Subject: CN=140AD1B495E6550F989B9D01B1BC7752679FC6F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8d:ff:cc:03:2d:62:2e:a6:31:6e:ee:04:dd: 5f:e5:4e:6d:df:c9:ce:b6:24:33:ee:f5:1e:54:74: 71:3e:4c:87:61:e8:f7:69:54:3a:9c:23:16:f4:ec: 24:cf:0f:75:75:db:17:95:a0:dd:f8:8e:d2:05:7b: be:14:a3:d1:ee:13:e5:74:6a:f0:26:8d:d5:05:29: 4c:66:b4:4d:d5:67:a9:37:68:46:13:9a:98:50:14: 4d:0d:9c:4e:96:1a:98:23:88:3b:87:53:90:40:43: 6b:d8:12:6b:0d:55:6b:61:d2:4d:bb:67:4d:02:8d: 88:63:55:55:d6:5d:ad:95:64:4c:a2:0a:91:22:e2: 43:58:cb:be:2d:4e:40:62:3e:6b:d1:e1:89:9e:80: 64:bb:70:3b:ad:43:23:fe:2a:7b:87:35:8a:93:d0: 88:f2:10:16:66:f8:63:11:03:9d:27:06:0c:3c:15: 03:93:8a:47:19:35:76:bb:ff:53:ca:bd:f2:22:d6: 00:51:37:d1:d9:2f:7e:92:f4:10:71:3b:91:d1:34: 81:2d:9b:07:b8:b0:2c:b0:af:92:33:da:5a:e4:ff: 2b:15:27:de:4a:b4:7e:3b:7b:6a:d9:6a:cd:bd:27: 40:4a:02:b7:02:94:04:a5:97:c6:be:a3:6e:cb:0a: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0A:D1:B4:95:E6:55:0F:98:9B:9D:01:B1:BC:77:52:67:9F:C6:F7 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3233302e302f32332d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.230.0/23 Signature Algorithm: sha256WithRSAEncryption 9d:1d:52:67:82:4e:47:3d:48:2e:a6:ab:63:12:6d:c3:c6:60: 49:28:10:d1:22:89:1e:98:1e:d6:d4:35:67:81:e6:3a:46:29: df:a1:dc:4f:72:99:08:2c:60:ae:10:e3:6e:9c:6e:f6:82:f5: 7a:3a:45:db:99:4a:ac:dc:d4:ff:c0:3b:8d:31:c0:05:08:f3: 4b:52:5f:22:fd:6a:e1:b6:36:19:2e:87:37:b9:35:40:db:1c: 2f:8a:af:b1:58:6b:a1:d2:fc:ea:dd:f1:76:eb:8b:c8:aa:e0: a3:9d:bd:6c:05:87:a6:53:dc:39:99:9f:3f:4c:bf:8e:fc:45: 2c:c3:ef:ff:c0:9c:e6:ae:7f:b7:94:6e:3d:41:54:cd:d1:1a: 22:98:8d:b7:3a:c2:5f:6b:52:18:92:89:ff:53:c5:d8:59:0f: 1a:d4:92:7a:6d:41:49:19:ca:68:ad:f5:cd:de:9e:cd:88:2d: 6f:86:e3:60:ef:81:72:8a:99:15:4a:54:38:67:5b:7a:77:e3: e5:50:37:be:a3:4d:e4:e7:7d:9c:68:6e:01:a9:23:da:a7:f8: df:4b:9e:09:4a:8c:9b:94:78:d5:80:74:3c:1a:9c:27:8d:ea: 48:7f:c4:2f:33:0a:98:cd:fb:85:69:6f:eb:d1:42:e1:cf:08: 1f:09:9f:b7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTmEEFm9gwFCwA+M9Cgo0eJeIVuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDVaFw0yNjEyMjgwOTUxMDVaMDMxMTAvBgNV BAMTKDE0MEFEMUI0OTVFNjU1MEY5ODlCOUQwMUIxQkM3NzUyNjc5RkM2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCjf/MAy1iLqYxbu4E3V/lTm3f yc62JDPu9R5UdHE+TIdh6PdpVDqcIxb07CTPD3V12xeVoN34jtIFe74Uo9HuE+V0 avAmjdUFKUxmtE3VZ6k3aEYTmphQFE0NnE6WGpgjiDuHU5BAQ2vYEmsNVWth0k27 Z00CjYhjVVXWXa2VZEyiCpEi4kNYy74tTkBiPmvR4YmegGS7cDutQyP+KnuHNYqT 0IjyEBZm+GMRA50nBgw8FQOTikcZNXa7/1PKvfIi1gBRN9HZL36S9BBxO5HRNIEt mwe4sCywr5Iz2lrk/ysVJ95KtH47e2rZas29J0BKArcClASll8a+o27LCu59AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFArRtJXmVQ+Ym50Bsbx3UmefxvcwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjMz MzAyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Ve/mMA0GCSqGSIb3DQEBCwUAA4IBAQCdHVJngk5HPUgupqtjEm3DxmBJKBDRIoke mB7W1DVngeY6RinfodxPcpkILGCuEONunG72gvV6OkXbmUqs3NT/wDuNMcAFCPNL Ul8i/WrhtjYZLoc3uTVA2xwviq+xWGuh0vzq3fF264vIquCjnb1sBYemU9w5mZ8/ TL+O/EUsw+//wJzmrn+3lG49QVTN0RoimI23OsJfa1IYkon/U8XYWQ8a1JJ6bUFJ GcporfXN3p7NiC1vhuNg74FyipkVSlQ4Z1t6d+PlUDe+o03k532caG4BqSPap/jf S54JSoyblHjVgHQ8GpwnjepIf8QvMwqYzfuFaW/r0ULhzwgfCZ+3 -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:21 2026 by rpki-client