This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa File: 38362e34382e392e302f32342d3332203d3e20313336373837.roa (raw, json) Hash identifier: /eynojvMDRKNN5M9PZge/I2xgTvkhEc/GbCTLEaH74c= Subject key identifier: E1:BF:39:A7:14:03:E8:37:E1:F3:60:7A:6C:80:7A:BB:2E:AD:53:6D Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 6F02C16EE6DE164FEB3187DA0A63A40A14C4A83F Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa Signing time: Mon 29 Dec 2025 09:51:05 +0000 ROA not before: Mon 29 Dec 2025 09:46:05 +0000 ROA not after: Mon 28 Dec 2026 09:51:05 +0000 asID: 136787 IP address blocks: 86.48.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:02:c1:6e:e6:de:16:4f:eb:31:87:da:0a:63:a4:0a:14:c4:a8:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:46:05 2025 GMT Not After : Dec 28 09:51:05 2026 GMT Subject: CN=E1BF39A71403E837E1F3607A6C807ABB2EAD536D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:15:bb:55:a6:48:6c:3f:0c:cc:a6:95:fd: ea:00:bf:01:08:5b:d3:27:df:ed:dc:52:59:cd:51: 5e:00:43:c7:90:6e:42:1d:58:ea:af:36:0f:03:6f: a4:b3:33:b8:4b:fa:e5:4d:92:1b:c5:53:75:3a:a3: f6:aa:27:3d:76:50:06:35:5e:8a:71:44:1f:e3:a8: b5:ad:94:cf:84:78:d3:1e:71:45:13:64:52:24:2a: d8:4c:bb:52:6c:77:be:b0:19:cf:a1:56:99:6b:2c: dd:10:e1:0c:54:55:42:2b:5e:a2:7d:2e:1f:e0:68: bb:73:db:e7:c6:19:42:d2:57:70:80:cb:6a:4b:81: a8:48:1d:16:7e:30:73:57:b2:16:d3:71:7d:6d:67: 9a:94:9a:98:e9:2e:1f:28:a1:66:34:53:64:0a:92: 9d:64:07:1e:b7:d6:4a:6c:b8:10:a0:af:36:4b:cc: 81:a9:ae:98:21:1d:ce:05:38:eb:5d:ba:5e:b1:3b: 5a:f6:77:28:b6:aa:a7:b7:1d:28:32:1e:b9:eb:f5: 0d:52:f7:1a:9b:21:24:5a:fe:fc:62:83:ce:b8:29: ff:e2:cc:f2:72:9a:99:2b:9f:9d:94:32:9d:70:44: 88:28:73:ee:ca:83:40:64:8c:fb:fa:f9:3c:47:1a: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BF:39:A7:14:03:E8:37:E1:F3:60:7A:6C:80:7A:BB:2E:AD:53:6D X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e34382e392e302f32342d3332203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.48.9.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:c2:07:d5:f3:45:88:de:21:8c:55:24:29:d1:5d:00:01:21: b3:bf:9e:73:8c:b6:5b:b9:0f:12:fe:0c:d0:1b:2f:d5:d3:eb: 01:32:49:f2:6a:98:12:0e:cb:dd:83:f8:fa:f4:e8:b1:d1:68: a8:46:48:d9:b8:73:3a:3b:55:49:08:e6:f4:1c:10:56:aa:e5: d7:78:4f:76:fe:36:e3:7d:ba:b2:c8:fd:7f:64:ce:bc:18:29: f7:cb:e8:06:d7:c5:23:e6:7c:66:91:18:52:35:11:21:52:c0: 57:61:36:be:c4:31:49:e7:4a:e2:03:94:a4:af:03:16:d4:f7: e9:ec:7b:b3:b4:6e:3f:fe:ff:3b:fd:37:8a:2e:44:fe:0b:9e: 99:1b:23:ef:55:2c:ba:5f:e9:1c:f1:4c:7a:09:61:b7:a0:e4: 80:0e:d9:e5:49:af:92:db:93:8f:ba:f2:09:4d:e1:e6:3f:2c: 46:20:8a:11:71:e7:2d:4f:58:55:5b:ef:55:71:87:5a:59:1a: b7:00:d5:c7:3f:15:02:2d:55:c8:ca:7c:75:52:2f:6d:6e:2b: b3:1d:fd:5f:f1:3f:51:b6:61:4a:83:d9:4c:bf:11:da:d9:63: 5d:d6:9c:ed:21:4a:0e:61:b2:cd:ad:2e:a8:c1:af:3c:1d:3b: 0a:b8:02:c5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUbwLBbubeFk/rMYfaCmOkChTEqD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ2MDVaFw0yNjEyMjgwOTUxMDVaMDMxMTAvBgNV BAMTKEUxQkYzOUE3MTQwM0U4MzdFMUYzNjA3QTZDODA3QUJCMkVBRDUzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9fBW7VaZIbD8MzKaV/eoAvwEI W9Mn3+3cUlnNUV4AQ8eQbkIdWOqvNg8Db6SzM7hL+uVNkhvFU3U6o/aqJz12UAY1 XopxRB/jqLWtlM+EeNMecUUTZFIkKthMu1Jsd76wGc+hVplrLN0Q4QxUVUIrXqJ9 Lh/gaLtz2+fGGULSV3CAy2pLgahIHRZ+MHNXshbTcX1tZ5qUmpjpLh8ooWY0U2QK kp1kBx631kpsuBCgrzZLzIGprpghHc4FOOtdul6xO1r2dyi2qqe3HSgyHrnr9Q1S 9xqbISRa/vxig864Kf/izPJympkrn52UMp1wRIgoc+7Kg0BkjPv6+TxHGvHjAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU4b85pxQD6Dfh82B6bIB6uy6tU20wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzQzODJlMzkyZTMw MmYzMjM0MmQzMzMyMjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABWMAkw DQYJKoZIhvcNAQELBQADggEBAD/CB9XzRYjeIYxVJCnRXQABIbO/nnOMtlu5DxL+ DNAbL9XT6wEySfJqmBIOy92D+Pr06LHRaKhGSNm4czo7VUkI5vQcEFaq5dd4T3b+ NuN9urLI/X9kzrwYKffL6AbXxSPmfGaRGFI1ESFSwFdhNr7EMUnnSuIDlKSvAxbU 9+nse7O0bj/+/zv9N4ouRP4LnpkbI+9VLLpf6RzxTHoJYbeg5IAO2eVJr5Lbk4+6 8glN4eY/LEYgihFx5y1PWFVb71Vxh1pZGrcA1cc/FQItVcjKfHVSL21uK7Md/V/x P1G2YUqD2Uy/EdrZY13WnO0hSg5hss2tLqjBrzwdOwq4AsU= -----END CERTIFICATE-----Generated at Mon Jan 19 14:28:32 2026 by rpki-client