This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa File: 38362e34382e31322e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: ei85lVP5iBFyiYIkjjhV5RKBIokZw8caujmQiqZtSbk= Subject key identifier: ED:F8:1A:F6:1F:5B:4C:98:B1:00:C5:4A:B4:85:C9:D6:12:F0:3E:6A Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 46EC06BCBF848FB556C148B2925027EE79CAA838 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:50:56 +0000 ROA not before: Mon 29 Dec 2025 09:45:56 +0000 ROA not after: Mon 28 Dec 2026 09:50:56 +0000 asID: 136787 IP address blocks: 86.48.12.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ec:06:bc:bf:84:8f:b5:56:c1:48:b2:92:50:27:ee:79:ca:a8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:56 2025 GMT Not After : Dec 28 09:50:56 2026 GMT Subject: CN=EDF81AF61F5B4C98B100C54AB485C9D612F03E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:aa:d3:6d:1d:9c:b5:67:43:de:d9:46:7c: b8:5f:27:c1:db:e4:33:13:bc:42:0d:c3:ed:b1:c7: ed:36:3f:a4:df:67:77:f8:cc:e5:03:e7:80:8b:8d: 55:e8:26:02:06:c8:bd:b0:5a:3b:ec:59:df:2f:e7: c1:8f:f4:e2:3f:8e:a8:c3:7d:c3:4e:a7:34:e0:9f: 0e:5c:4c:81:7f:2e:69:9a:dc:c6:05:fb:36:0d:35: 40:4a:93:62:ef:ff:09:b4:e4:93:a8:2d:9d:12:46: 00:b0:8c:02:ef:09:0a:21:a7:e3:95:83:6e:e5:a2: f9:bb:22:d3:2f:6e:a6:a1:95:18:15:58:59:79:e7: 7d:44:21:03:bd:a9:fd:9b:38:5b:f6:c7:68:62:70: 51:90:1f:b3:b5:2b:53:86:ae:86:98:7a:eb:71:e0: 2f:eb:18:c7:28:57:2a:cf:d7:ec:4f:12:95:13:ea: 3e:85:b5:64:ee:fc:1f:c2:74:32:f1:a3:c0:05:c8: bf:5e:be:54:58:fd:5a:e1:94:87:45:e8:ad:b1:6d: 14:48:33:1a:ac:47:a2:d0:2c:24:83:04:91:f1:fb: a1:f8:5d:39:32:7e:68:94:e3:10:0a:cb:c0:21:30: a9:95:5e:62:be:d3:86:18:ac:e2:23:aa:22:ee:56: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F8:1A:F6:1F:5B:4C:98:B1:00:C5:4A:B4:85:C9:D6:12:F0:3E:6A X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31322e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.12.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:cb:a8:6f:fb:13:45:0d:b3:29:68:67:c6:31:81:9a:fe:2c: 2e:c9:ab:ba:2c:f2:9c:da:2d:1a:15:b5:c5:33:aa:03:a1:0e: 7f:3d:e2:62:f0:c9:a9:dd:4a:35:93:51:0f:f0:d8:e0:1e:a6: 08:32:b4:b7:5e:e3:5a:97:dd:c7:a3:f6:a5:09:e9:01:16:d9: 5b:41:c8:66:d4:28:09:0a:69:b0:cf:3d:f8:3a:03:9f:c6:d7: 85:e2:4b:83:84:6c:0b:d8:93:be:24:a5:a4:4d:07:09:da:6f: 46:bc:fb:e1:32:52:b5:fc:26:42:05:31:e2:46:83:24:2b:87: 66:9e:c6:10:e6:7d:ad:96:65:8e:33:37:c3:40:1b:65:cd:38: 97:f3:0e:5d:ad:f4:df:1d:78:c9:d3:6e:07:24:cf:9e:9d:42: d1:25:2d:22:46:30:84:9a:b3:24:96:76:d3:ce:f3:3c:b0:7b: fb:e8:72:7f:5f:74:51:4d:fd:e7:c2:78:a4:23:a9:e3:4d:19: f6:19:ea:33:87:cf:a0:b1:24:e3:8f:64:09:70:2d:aa:98:79: 1b:f7:f5:55:b7:fd:7c:ad:70:96:ae:27:74:e7:c0:64:d6:66: 96:5e:f3:45:6e:fc:7a:6f:2e:28:ca:1c:e2:71:31:d9:b1:53: e3:b2:bd:75 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIURuwGvL+Ej7VWwUiyklAn7nnKqDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTZaFw0yNjEyMjgwOTUwNTZaMDMxMTAvBgNV BAMTKEVERjgxQUY2MUY1QjRDOThCMTAwQzU0QUI0ODVDOUQ2MTJGMDNFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCisqrTbR2ctWdD3tlGfLhfJ8Hb 5DMTvEINw+2xx+02P6TfZ3f4zOUD54CLjVXoJgIGyL2wWjvsWd8v58GP9OI/jqjD fcNOpzTgnw5cTIF/Lmma3MYF+zYNNUBKk2Lv/wm05JOoLZ0SRgCwjALvCQohp+OV g27lovm7ItMvbqahlRgVWFl5531EIQO9qf2bOFv2x2hicFGQH7O1K1OGroaYeutx 4C/rGMcoVyrP1+xPEpUT6j6FtWTu/B/CdDLxo8AFyL9evlRY/VrhlIdF6K2xbRRI MxqsR6LQLCSDBJHx+6H4XTkyfmiU4xAKy8AhMKmVXmK+04YYrOIjqiLuVlDZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU7fga9h9bTJixAMVKtIXJ1hLwPmowHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzEzMjJl MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYw DDANBgkqhkiG9w0BAQsFAAOCAQEAD8uob/sTRQ2zKWhnxjGBmv4sLsmruizynNot GhW1xTOqA6EOfz3iYvDJqd1KNZNRD/DY4B6mCDK0t17jWpfdx6P2pQnpARbZW0HI ZtQoCQppsM89+DoDn8bXheJLg4RsC9iTviSlpE0HCdpvRrz74TJStfwmQgUx4kaD JCuHZp7GEOZ9rZZljjM3w0AbZc04l/MOXa303x14ydNuByTPnp1C0SUtIkYwhJqz JJZ2087zPLB7++hyf190UU3958J4pCOp400Z9hnqM4fPoLEk449kCXAtqph5G/f1 Vbf9fK1wlq4ndOfAZNZmll7zRW78em8uKMoc4nEx2bFT47K9dQ== -----END CERTIFICATE-----Generated at Mon Jan 19 14:25:54 2026 by rpki-client