This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3234203d3e20323132323338.roa File: 38362e34382e31352e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: uZfkAziuw6CVstro4+1OXZIIzkJiVGAhWV9JrZC6e+g= Subject key identifier: D8:76:AD:4A:6A:88:78:9B:62:8D:99:22:83:05:46:F9:8C:BF:35:90 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 0C7536AF68F5CB596F90E4CB61E7F9229FBAD5EC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:45 +0000 ROA not before: Tue 21 Oct 2025 13:17:45 +0000 ROA not after: Tue 20 Oct 2026 13:22:45 +0000 asID: 212238 IP address blocks: 86.48.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:75:36:af:68:f5:cb:59:6f:90:e4:cb:61:e7:f9:22:9f:ba:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:45 2025 GMT Not After : Oct 20 13:22:45 2026 GMT Subject: CN=D876AD4A6A88789B628D9922830546F98CBF3590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:03:6d:35:ac:11:25:db:a3:02:98:0a:1d:4b: 5c:5b:31:e1:e5:36:25:bf:d0:b0:aa:5e:67:05:ad: fe:7c:7f:ba:50:00:41:e4:08:50:6a:25:51:63:4e: d3:6d:3f:df:8e:bc:c1:36:7a:d7:88:61:d7:8e:d3: ce:0e:f2:17:50:63:f1:94:53:36:ad:19:3a:7c:69: dd:14:b8:a6:10:34:2b:f1:ec:fe:51:5b:e2:1a:d2: c1:a9:d8:48:9e:ac:b5:45:0a:03:d1:ad:fa:99:e1: 20:28:3d:cf:17:24:19:e0:64:3d:ad:6a:08:48:21: 32:eb:7d:15:2d:03:bb:f6:3a:a2:6c:eb:00:c2:9a: 13:90:d4:c7:e8:31:d2:7d:9d:65:10:cb:e8:53:82: 3c:cd:95:f3:4b:f4:c8:19:72:2c:bc:43:92:29:92: ef:05:3e:41:09:74:44:b9:0d:ce:9d:81:9a:64:8a: e6:7a:9a:e1:8f:73:f5:6e:be:b5:49:de:0e:0b:86: 26:e8:c8:25:56:7f:6a:0e:43:f7:5b:68:3c:d8:20: 1d:ae:23:13:4e:13:c0:f4:94:94:37:a6:54:13:b8: 6d:5b:a0:87:c4:6e:a3:db:47:89:b8:af:8d:f7:ef: 38:73:f4:dd:51:2f:e4:f1:07:e6:c5:01:d0:b9:a0: f6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:76:AD:4A:6A:88:78:9B:62:8D:99:22:83:05:46:F9:8C:BF:35:90 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e31352e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.15.0/24 Signature Algorithm: sha256WithRSAEncryption 80:79:c3:ba:b3:28:64:1b:65:08:e1:13:6d:f1:c7:8a:00:ea: 6c:0f:d6:34:f0:30:a5:d8:64:98:34:6e:8f:c2:6b:d5:ca:89: bc:3c:53:01:6c:61:fa:87:93:76:83:50:98:b7:90:46:ae:0c: 0b:5f:c6:3c:ca:46:c4:53:7b:df:e1:2e:9d:26:20:35:97:94: ca:d4:88:73:3d:4c:d9:58:a1:8d:18:0d:3f:89:7c:dc:77:93: 2d:97:9d:b2:23:9a:59:4a:00:f1:3f:07:35:26:a0:7e:1e:db: 65:1d:cc:f7:cd:1b:7b:63:c0:28:98:95:df:48:e0:b7:39:96: 2f:d7:0e:b1:c4:9c:da:44:0b:46:b9:59:22:e2:1d:5b:35:dd: 14:77:95:a4:22:40:af:bb:df:5d:4b:82:6d:49:ee:79:33:4c: d2:4e:71:f2:e1:4f:a2:00:3f:8c:b8:7a:c5:e2:5f:ea:91:96: 2f:5c:d6:3a:80:da:6a:b4:0b:3c:6c:b1:33:19:79:81:98:a4: 71:29:bb:ee:d7:fe:49:65:51:4d:41:61:70:d4:6a:44:c3:46: 6a:68:55:13:5a:33:9c:93:ae:06:43:9a:5a:cd:68:16:f4:f2: 02:01:79:c7:76:dc:7a:f8:5f:9a:49:6c:7f:25:f3:47:f6:1d: 08:fb:a8:69 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUDHU2r2j1y1lvkOTLYef5Ip+61ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3NDVaFw0yNjEwMjAxMzIyNDVaMDMxMTAvBgNV BAMTKEQ4NzZBRDRBNkE4ODc4OUI2MjhEOTkyMjgzMDU0NkY5OENCRjM1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsA201rBEl26MCmAodS1xbMeHl NiW/0LCqXmcFrf58f7pQAEHkCFBqJVFjTtNtP9+OvME2eteIYdeO084O8hdQY/GU UzatGTp8ad0UuKYQNCvx7P5RW+Ia0sGp2EierLVFCgPRrfqZ4SAoPc8XJBngZD2t aghIITLrfRUtA7v2OqJs6wDCmhOQ1MfoMdJ9nWUQy+hTgjzNlfNL9MgZciy8Q5Ip ku8FPkEJdES5Dc6dgZpkiuZ6muGPc/VuvrVJ3g4LhiboyCVWf2oOQ/dbaDzYIB2u IxNOE8D0lJQ3plQTuG1boIfEbqPbR4m4r4337zhz9N1RL+TxB+bFAdC5oPYZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2HatSmqIeJtijZkigwVG+Yy/NZAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzEzNTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFYw DzANBgkqhkiG9w0BAQsFAAOCAQEAgHnDurMoZBtlCOETbfHHigDqbA/WNPAwpdhk mDRuj8Jr1cqJvDxTAWxh+oeTdoNQmLeQRq4MC1/GPMpGxFN73+EunSYgNZeUytSI cz1M2VihjRgNP4l83HeTLZedsiOaWUoA8T8HNSagfh7bZR3M980be2PAKJiV30jg tzmWL9cOscSc2kQLRrlZIuIdWzXdFHeVpCJAr7vfXUuCbUnueTNM0k5x8uFPogA/ jLh6xeJf6pGWL1zWOoDaarQLPGyxMxl5gZikcSm77tf+SWVRTUFhcNRqRMNGamhV E1oznJOuBkOaWs1oFvTyAgF5x3bcevhfmklsfyXzR/YdCPuoaQ== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:06 2025 by rpki-client