This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa File: 38362e34382e352e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: 1mIE+2dnBfbD/xuicQmFoH52nw0vBInp2aK67nIZEOw= Subject key identifier: 85:C8:D9:6C:51:E8:F8:B9:D5:66:0C:A7:C0:20:41:55:1B:D7:06:16 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6B68A54648AE6F09F62CAB803FF271EB36C1DAF7 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa Signing time: Mon 29 Dec 2025 09:50:44 +0000 ROA not before: Mon 29 Dec 2025 09:45:44 +0000 ROA not after: Mon 28 Dec 2026 09:50:44 +0000 asID: 51167 IP address blocks: 86.48.5.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:68:a5:46:48:ae:6f:09:f6:2c:ab:80:3f:f2:71:eb:36:c1:da:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:44 2025 GMT Not After : Dec 28 09:50:44 2026 GMT Subject: CN=85C8D96C51E8F8B9D5660CA7C02041551BD70616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:4a:8f:92:fe:70:9d:1c:d4:5f:03:b4:de: 3d:4e:0d:9b:64:17:f9:65:02:69:6c:e1:eb:9a:f3: 5f:51:05:c8:22:a5:09:82:37:c3:a7:c6:b6:18:18: 96:04:a3:75:89:f9:15:2f:9e:e1:a7:74:92:1d:bc: a7:2b:3f:44:50:fa:81:e5:cf:fa:6d:b7:41:fb:07: 64:97:e8:a5:a5:49:89:a9:50:7f:d1:3a:c8:da:27: cc:66:1e:07:29:87:05:1e:08:89:9a:e4:86:02:b0: 68:87:50:c5:bd:5b:12:33:4b:b2:20:4b:74:b9:90: 52:d4:44:c3:c7:60:55:51:9e:d4:a0:60:f8:ca:34: 12:e9:ed:7f:f1:04:bf:c2:11:8e:d2:7b:32:8e:37: 14:5f:ca:a8:3c:53:9e:2b:85:1a:c7:91:d4:30:b7: aa:76:e1:77:f2:ac:58:44:e9:70:be:c2:e0:66:be: 5a:29:f2:fa:44:25:3c:a2:24:b1:50:e6:b0:08:f1: eb:35:c8:61:69:88:e2:a5:3c:7b:b4:1c:a7:61:4f: 10:e6:6a:ab:37:c2:2f:0a:74:ba:cd:a0:cd:77:75: 2c:59:02:f2:16:77:38:1f:bc:d2:0a:3c:85:3e:e2: e6:4d:4a:66:76:07:dc:68:d5:0b:25:77:27:f2:80: 7a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:C8:D9:6C:51:E8:F8:B9:D5:66:0C:A7:C0:20:41:55:1B:D7:06:16 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e352e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.5.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:c0:51:33:bf:28:0e:fc:19:b4:ec:1e:51:30:49:50:04:b5: a9:28:da:14:cd:52:c0:bc:ad:98:fe:40:47:a3:55:1a:4d:99: 9e:9b:b7:0d:00:7c:9b:aa:e8:d2:b7:4d:97:a5:2e:33:98:da: f8:57:45:7a:af:1b:b2:7b:63:c4:93:99:57:50:b8:da:b6:52: 0e:93:f3:fc:5b:be:cc:7a:bb:2b:5d:23:2b:48:ed:f4:81:f3: 04:9a:46:49:96:9f:09:c6:3c:ac:6c:87:d6:cd:fe:bd:dd:93: dc:11:03:48:bc:f0:85:ef:2b:33:93:6f:59:15:55:0d:3e:8f: 24:0e:40:ff:db:9c:de:db:79:65:da:d0:3f:4a:ca:5c:d7:80: 97:7d:cd:d9:61:d7:53:1a:2b:d8:6e:d6:fb:74:d2:77:37:0e: 5c:2e:cf:01:a6:d8:3b:a5:62:ea:a9:ec:6d:bc:88:23:79:be: f9:9d:72:dc:50:7c:54:a6:59:6a:96:99:76:2a:66:ed:15:f1: 99:69:83:eb:41:c3:98:77:4a:36:6f:21:de:2d:7a:e2:2e:7c: 81:0a:53:79:d0:21:8d:4d:b8:c4:71:11:4e:aa:0a:42:77:3c: 9a:da:47:25:b9:02:00:02:c8:ff:ca:4d:59:5e:6f:31:db:78: 40:6e:39:96 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUa2ilRkiubwn2LKuAP/Jx6zbB2vcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDRaFw0yNjEyMjgwOTUwNDRaMDMxMTAvBgNV BAMTKDg1QzhEOTZDNTFFOEY4QjlENTY2MENBN0MwMjA0MTU1MUJENzA2MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC95kqPkv5wnRzUXwO03j1ODZtk F/llAmls4eua819RBcgipQmCN8OnxrYYGJYEo3WJ+RUvnuGndJIdvKcrP0RQ+oHl z/ptt0H7B2SX6KWlSYmpUH/ROsjaJ8xmHgcphwUeCIma5IYCsGiHUMW9WxIzS7Ig S3S5kFLURMPHYFVRntSgYPjKNBLp7X/xBL/CEY7SezKONxRfyqg8U54rhRrHkdQw t6p24XfyrFhE6XC+wuBmvlop8vpEJTyiJLFQ5rAI8es1yGFpiOKlPHu0HKdhTxDm aqs3wi8KdLrNoM13dSxZAvIWdzgfvNIKPIU+4uZNSmZ2B9xo1QsldyfygHpRAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUhcjZbFHo+LnVZgynwCBBVRvXBhYwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzUyZTMw MmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVjAFMA0G CSqGSIb3DQEBCwUAA4IBAQBrwFEzvygO/Bm07B5RMElQBLWpKNoUzVLAvK2Y/kBH o1UaTZmem7cNAHybqujSt02XpS4zmNr4V0V6rxuye2PEk5lXULjatlIOk/P8W77M ersrXSMrSO30gfMEmkZJlp8JxjysbIfWzf693ZPcEQNIvPCF7yszk29ZFVUNPo8k DkD/25ze23ll2tA/Sspc14CXfc3ZYddTGivYbtb7dNJ3Nw5cLs8Bptg7pWLqqext vIgjeb75nXLcUHxUpllqlpl2KmbtFfGZaYPrQcOYd0o2byHeLXriLnyBClN50CGN TbjEcRFOqgpCdzya2kcluQIAAsj/yk1ZXm8x23hAbjmW -----END CERTIFICATE-----Generated at Mon Jan 19 14:23:34 2026 by rpki-client