This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa File: 38352e3233392e3234382e302f32332d3332203d3e203430303231.roa (raw, json) Hash identifier: d91vbzWK33m3DmrT6B+SgjzXfpdCIZibYQY9JuGCtMs= Subject key identifier: 6E:6B:D2:8D:AF:6D:82:B1:87:14:86:EC:CE:BE:4C:27:6C:38:6E:6F Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4E7B73027515635BF440C5BB863FD0ED92E68D62 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa Signing time: Mon 29 Dec 2025 09:50:51 +0000 ROA not before: Mon 29 Dec 2025 09:45:51 +0000 ROA not after: Mon 28 Dec 2026 09:50:51 +0000 asID: 40021 IP address blocks: 85.239.248.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:7b:73:02:75:15:63:5b:f4:40:c5:bb:86:3f:d0:ed:92:e6:8d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:51 2025 GMT Not After : Dec 28 09:50:51 2026 GMT Subject: CN=6E6BD28DAF6D82B1871486ECCEBE4C276C386E6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:30:ae:39:a5:72:41:96:54:a1:44:be:bd:d5: b4:1d:59:8e:d7:a0:b9:b6:4d:1e:3b:80:36:45:89: 17:0d:74:8c:af:94:60:d4:ae:ee:30:a7:6a:3b:6b: c8:1c:e7:e7:14:fa:58:70:1f:80:d3:a6:1f:07:0f: bc:b7:d1:6f:f5:ec:61:88:54:64:ed:1a:09:03:c4: a6:97:e5:86:d4:17:5e:30:67:76:24:80:1c:e4:b5: e1:db:a9:6d:2d:f9:31:11:af:27:76:59:b9:85:d6: c2:b6:84:87:37:02:01:ba:27:5b:86:fb:09:ab:c9: e4:7d:d1:35:66:b6:94:f7:73:0b:d6:28:f3:e2:dd: d9:6a:9a:66:77:4c:c6:aa:e4:44:a5:0b:a2:df:37: db:2e:07:69:dc:5b:20:38:59:89:40:a8:b8:41:9d: 7d:fb:60:35:74:95:1a:3b:88:00:37:f4:f2:9b:5e: e4:15:06:82:21:e3:e8:ef:7d:f8:a7:f3:78:1c:12: c9:55:3f:55:f7:1d:9d:c7:dd:a2:3d:6c:4a:4b:4f: 84:aa:58:d7:3d:7a:82:b2:b5:4a:89:59:b2:cc:61: 96:90:8e:83:fe:89:46:46:55:dc:b7:ef:80:d2:28: 0a:a1:4d:cb:41:44:8a:e3:3c:47:4d:ef:94:93:2a: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:6B:D2:8D:AF:6D:82:B1:87:14:86:EC:CE:BE:4C:27:6C:38:6E:6F X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3234382e302f32332d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.248.0/23 Signature Algorithm: sha256WithRSAEncryption 78:b3:61:c5:cf:fa:60:1d:13:dd:a9:42:7f:fc:1d:a5:4c:60: 5a:6a:52:87:4d:0e:55:4a:36:2b:3e:86:69:e9:29:c0:ea:d6: 3d:55:92:19:70:43:98:48:97:21:16:8a:ee:0e:e8:89:42:6c: a5:14:8e:ad:1b:6f:f9:19:1f:8e:53:bd:e4:4a:23:93:d4:59: 74:52:46:4a:75:f5:bf:f2:e7:38:b9:af:fa:c2:b9:73:9a:05: 64:76:50:56:97:bd:c3:30:27:1f:23:28:56:b9:2d:fb:eb:fa: 8b:57:7d:13:87:37:b3:85:0c:ff:93:4d:a7:8b:de:46:20:4a: 53:3e:61:b7:b8:e8:98:87:fb:50:ac:2a:16:a9:61:41:71:bb: 88:1c:5d:a8:c1:a7:86:cd:d6:37:21:13:3a:2a:e8:49:4e:ba: 23:80:2c:ab:dc:8c:a2:77:c3:55:84:ff:bf:52:09:b5:95:55: da:00:15:1e:ba:8b:01:4a:79:29:dc:a0:84:63:8d:6b:67:53: d1:ac:3f:f1:b9:6f:19:ea:8d:20:05:c2:f1:20:c8:1e:5d:53: 02:c7:b4:54:7a:e9:cd:e2:ec:bd:11:51:ea:1e:a1:4a:d2:36: 96:22:be:0e:bc:66:2f:f3:fb:88:df:0e:26:18:f1:5c:ca:bb: 82:dc:47:1c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTntzAnUVY1v0QMW7hj/Q7ZLmjWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTFaFw0yNjEyMjgwOTUwNTFaMDMxMTAvBgNV BAMTKDZFNkJEMjhEQUY2RDgyQjE4NzE0ODZFQ0NFQkU0QzI3NkMzODZFNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMK45pXJBllShRL691bQdWY7X oLm2TR47gDZFiRcNdIyvlGDUru4wp2o7a8gc5+cU+lhwH4DTph8HD7y30W/17GGI VGTtGgkDxKaX5YbUF14wZ3YkgBzkteHbqW0t+TERryd2WbmF1sK2hIc3AgG6J1uG +wmryeR90TVmtpT3cwvWKPPi3dlqmmZ3TMaq5ESlC6LfN9suB2ncWyA4WYlAqLhB nX37YDV0lRo7iAA39PKbXuQVBoIh4+jvffin83gcEslVP1X3HZ3H3aI9bEpLT4Sq WNc9eoKytUqJWbLMYZaQjoP+iUZGVdy374DSKAqhTctBRIrjPEdN75STKrjTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbmvSja9tgrGHFIbszr5MJ2w4bm8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjM0 MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Ve/4MA0GCSqGSIb3DQEBCwUAA4IBAQB4s2HFz/pgHRPdqUJ//B2lTGBaalKHTQ5V SjYrPoZp6SnA6tY9VZIZcEOYSJchForuDuiJQmylFI6tG2/5GR+OU73kSiOT1Fl0 UkZKdfW/8uc4ua/6wrlzmgVkdlBWl73DMCcfIyhWuS376/qLV30ThzezhQz/k02n i95GIEpTPmG3uOiYh/tQrCoWqWFBcbuIHF2owaeGzdY3IRM6KuhJTrojgCyr3Iyi d8NVhP+/Ugm1lVXaABUeuosBSnkp3KCEY41rZ1PRrD/xuW8Z6o0gBcLxIMgeXVMC x7RUeunN4uy9EVHqHqFK0jaWIr4OvGYv8/uI3w4mGPFcyruC3Ecc -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:55 2026 by rpki-client