This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa File: 38352e3233392e3235302e302f32342d3332203d3e203430303231.roa (raw, json) Hash identifier: gJqnolhBKZTF8njz0NPC6CqILrSoPONWE7u2mt/U5/4= Subject key identifier: 16:F0:BC:F3:80:8D:EC:34:E2:57:B9:E3:26:3A:14:F5:8E:C6:D6:8A Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 2F4BC3BD6FD159FCD82559E6552B60086CE994D8 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa Signing time: Mon 29 Dec 2025 09:50:42 +0000 ROA not before: Mon 29 Dec 2025 09:45:42 +0000 ROA not after: Mon 28 Dec 2026 09:50:42 +0000 asID: 40021 IP address blocks: 85.239.250.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:4b:c3:bd:6f:d1:59:fc:d8:25:59:e6:55:2b:60:08:6c:e9:94:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:42 2025 GMT Not After : Dec 28 09:50:42 2026 GMT Subject: CN=16F0BCF3808DEC34E257B9E3263A14F58EC6D68A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:cc:e7:1a:33:14:e2:2c:fe:1d:20:27:66: 5a:a6:7a:08:45:49:9a:0a:c6:5f:e2:e0:03:84:7c: 10:9c:86:ab:0b:3d:7d:68:a7:c5:38:5a:5c:07:b7: 54:09:c9:4f:db:d7:5b:08:4a:e2:4e:5c:65:8a:e9: f6:42:1d:08:ca:8c:e9:c0:01:03:83:42:df:65:d5: 12:83:ca:76:90:31:5c:41:b3:1b:25:af:5b:4f:3e: 18:93:e4:6a:dd:3a:ad:a8:04:c6:33:33:03:f8:95: 5c:23:31:be:90:ba:e5:22:9b:b3:d2:03:77:91:70: 04:fb:55:c4:f9:c2:df:37:91:58:a8:4b:9f:44:d6: 78:5a:eb:98:e7:3f:0b:eb:e5:35:49:40:92:5a:2b: 1b:3e:06:61:10:d2:10:44:f9:2b:6d:08:7b:f7:f1: 56:82:0a:ec:61:bd:1e:33:22:32:c2:49:15:35:0f: 43:76:72:51:f9:f0:64:86:4d:c9:ec:80:ae:ce:bd: c5:8d:b7:75:78:c2:22:ae:75:4f:d3:7a:6d:c9:1e: d0:ec:0f:2e:11:29:a1:64:62:c9:93:79:f0:08:29: 64:88:e4:30:65:a3:1a:c4:a2:a4:bf:bc:f8:ad:3a: 0a:62:1c:8e:96:d1:10:77:a7:7a:bd:c8:b3:53:db: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F0:BC:F3:80:8D:EC:34:E2:57:B9:E3:26:3A:14:F5:8E:C6:D6:8A X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38352e3233392e3235302e302f32342d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.239.250.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:93:e4:13:ca:3f:40:5c:4d:40:49:67:9c:22:96:22:3d:26: 06:c1:f1:ed:2b:26:27:a3:04:2f:60:f5:cd:a7:5f:f3:d4:40: d4:b2:6c:5b:af:09:ea:9b:10:07:eb:17:12:20:75:6c:27:79: 01:e3:22:c6:a2:db:7f:96:43:c0:c1:7c:66:90:f5:a2:fc:89: 96:32:79:42:9c:a9:c6:3f:a3:8c:ef:11:97:f2:bf:3c:c3:35: ab:29:ae:4a:c0:0d:78:62:cd:7c:19:b8:ff:9e:5e:b7:15:37: 38:54:9d:9b:f9:85:2b:b0:16:cd:65:5a:d2:82:4f:62:b4:ff: 9c:4f:21:c7:6b:79:46:a6:97:93:a4:74:de:8d:79:da:d5:37: ec:ee:72:ce:69:6d:5b:a9:b5:0a:b2:84:84:e4:17:d2:45:49: 71:28:e1:33:dc:f7:0e:81:65:11:8f:47:f4:4a:32:31:ce:42: 6f:20:64:14:37:37:f3:03:22:14:ab:64:e0:9e:cf:04:ad:cd: e5:04:3c:ec:6f:2e:4d:41:f8:be:ab:bc:20:c4:fd:1d:ca:be: 0b:94:09:6a:b0:fe:24:86:d1:f9:52:e6:0e:c0:a5:c6:8b:cd: 1f:2c:57:59:75:27:3a:c8:08:cd:44:9e:b5:83:dc:8e:22:a3: 7a:d0:bc:95 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUL0vDvW/RWfzYJVnmVStgCGzplNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDJaFw0yNjEyMjgwOTUwNDJaMDMxMTAvBgNV BAMTKDE2RjBCQ0YzODA4REVDMzRFMjU3QjlFMzI2M0ExNEY1OEVDNkQ2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChzsznGjMU4iz+HSAnZlqmeghF SZoKxl/i4AOEfBCchqsLPX1op8U4WlwHt1QJyU/b11sISuJOXGWK6fZCHQjKjOnA AQODQt9l1RKDynaQMVxBsxslr1tPPhiT5GrdOq2oBMYzMwP4lVwjMb6QuuUim7PS A3eRcAT7VcT5wt83kVioS59E1nha65jnPwvr5TVJQJJaKxs+BmEQ0hBE+SttCHv3 8VaCCuxhvR4zIjLCSRU1D0N2clH58GSGTcnsgK7OvcWNt3V4wiKudU/Tem3JHtDs Dy4RKaFkYsmTefAIKWSI5DBloxrEoqS/vPitOgpiHI6W0RB3p3q9yLNT255hAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUFvC884CN7DTiV7njJjoU9Y7G1oowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNTJlMzIzMzM5MmUzMjM1 MzAyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve/6MA0GCSqGSIb3DQEBCwUAA4IBAQAqk+QTyj9AXE1ASWecIpYiPSYGwfHtKyYn owQvYPXNp1/z1EDUsmxbrwnqmxAH6xcSIHVsJ3kB4yLGott/lkPAwXxmkPWi/ImW MnlCnKnGP6OM7xGX8r88wzWrKa5KwA14Ys18Gbj/nl63FTc4VJ2b+YUrsBbNZVrS gk9itP+cTyHHa3lGppeTpHTejXna1Tfs7nLOaW1bqbUKsoSE5BfSRUlxKOEz3PcO gWURj0f0SjIxzkJvIGQUNzfzAyIUq2Tgns8Erc3lBDzsby5NQfi+q7wgxP0dyr4L lAlqsP4khtH5UuYOwKXGi80fLFdZdSc6yAjNRJ61g9yOIqN60LyV -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:20 2026 by rpki-client