This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e32382e302f32342d3234203d3e20323132323338.roa File: 38362e36322e32382e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: qJaGt83fczAW5qhC4aEUz9U65bYLofxWeyvVf3U/v0c= Subject key identifier: 3A:D6:62:1A:C7:2C:EE:BC:EF:41:CE:8B:97:E7:CE:FE:53:8E:1C:41 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4135F9A0243F532DCBF48771200590CA944E7F76 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e32382e302f32342d3234203d3e20323132323338.roa Signing time: Tue 21 Oct 2025 13:22:39 +0000 ROA not before: Tue 21 Oct 2025 13:17:39 +0000 ROA not after: Tue 20 Oct 2026 13:22:39 +0000 asID: 212238 IP address blocks: 86.62.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Dec 2025 22:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:35:f9:a0:24:3f:53:2d:cb:f4:87:71:20:05:90:ca:94:4e:7f:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Oct 21 13:17:39 2025 GMT Not After : Oct 20 13:22:39 2026 GMT Subject: CN=3AD6621AC72CEEBCEF41CE8B97E7CEFE538E1C41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:b5:e2:97:39:f2:29:25:73:54:c6:07:d0: ef:1f:fa:1a:b8:6b:b1:69:42:5b:d6:c8:c5:9c:25: 60:9f:dc:ba:5f:4e:38:7f:88:5b:7e:88:e6:6d:df: c8:06:14:24:09:7d:68:70:6c:ae:c7:14:3b:48:f3: f4:c9:be:a8:38:bf:0b:1b:39:29:10:c9:72:d0:15: 18:03:4c:e6:e6:53:5d:0d:f4:31:19:14:75:91:60: 64:02:5b:15:17:ac:08:56:c4:9a:7c:56:b8:42:8c: fc:1b:89:60:4f:ee:c2:67:40:7c:91:9e:8e:eb:3a: 16:29:73:f8:42:e7:a1:f1:d8:0c:02:b2:bc:4d:80: e8:44:70:01:6d:bc:8d:30:af:90:30:ef:ca:29:1f: 25:23:91:80:3a:72:fd:b9:33:dd:ab:74:31:9e:88: bc:e4:d5:7f:8c:52:2a:a8:01:88:f2:7e:99:ec:cf: 97:07:8e:f9:3d:91:17:29:c7:a5:2f:52:08:23:3f: 41:ed:4d:b1:fd:56:16:d5:d5:3b:43:84:8f:29:cb: 9a:7a:1e:f4:25:ca:44:18:cf:1a:0e:02:63:79:be: 5d:55:bc:bd:ce:52:6c:d4:e2:8e:df:b4:38:24:ba: 1b:0d:4d:d0:e3:e9:d3:15:44:61:6a:ab:2e:04:b1: 91:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D6:62:1A:C7:2C:EE:BC:EF:41:CE:8B:97:E7:CE:FE:53:8E:1C:41 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38362e36322e32382e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.62.28.0/24 Signature Algorithm: sha256WithRSAEncryption 90:6f:ee:58:13:3f:86:bf:2d:3b:47:0e:e5:79:0d:d7:57:53: 73:7f:d8:ee:c1:33:2d:be:ee:33:b3:ae:1e:4c:90:76:dc:a4: 49:58:63:82:10:a2:d5:d6:40:24:74:6d:a6:0d:ab:59:d2:cb: 57:1e:eb:20:ed:58:e3:1f:9f:ed:19:f6:b5:da:c0:ac:a6:7a: 4d:db:9b:94:0d:b7:35:15:8b:0c:5a:c2:e8:18:6b:1c:52:6c: 41:b9:cc:99:c1:65:e8:18:0c:21:2b:6b:ee:93:e0:98:14:9e: 55:57:a6:b0:4a:b4:43:d6:e4:fc:cb:4a:b6:a4:5c:8e:8a:b7: 80:43:b3:02:bc:f7:0c:35:9d:79:6c:1e:8d:1b:41:a0:5b:d1: 6c:26:33:70:d0:38:0c:14:03:0c:84:b5:a9:8f:23:a2:35:ce: af:bd:4c:29:c7:71:51:ae:12:2b:ec:58:c0:7d:fb:2c:1c:4b: 71:fa:29:4b:1a:ee:a7:68:54:ee:55:a5:79:54:81:4a:34:c6: fb:01:7d:1c:66:57:71:9d:9e:e7:06:02:a1:66:30:f1:10:49: f8:86:8a:a2:c0:29:5e:c1:ce:8e:24:05:c3:72:0d:a3:43:24: cc:88:06:f6:fd:d4:25:ce:19:f1:1a:ed:7b:f8:9f:74:90:15: 1d:1b:f8:a6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQTX5oCQ/Uy3L9IdxIAWQypROf3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEwMjExMzE3MzlaFw0yNjEwMjAxMzIyMzlaMDMxMTAvBgNV BAMTKDNBRDY2MjFBQzcyQ0VFQkNFRjQxQ0U4Qjk3RTdDRUZFNTM4RTFDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ibXilznyKSVzVMYH0O8f+hq4 a7FpQlvWyMWcJWCf3LpfTjh/iFt+iOZt38gGFCQJfWhwbK7HFDtI8/TJvqg4vwsb OSkQyXLQFRgDTObmU10N9DEZFHWRYGQCWxUXrAhWxJp8VrhCjPwbiWBP7sJnQHyR no7rOhYpc/hC56Hx2AwCsrxNgOhEcAFtvI0wr5Aw78opHyUjkYA6cv25M92rdDGe iLzk1X+MUiqoAYjyfpnsz5cHjvk9kRcpx6UvUggjP0HtTbH9VhbV1TtDhI8py5p6 HvQlykQYzxoOAmN5vl1VvL3OUmzU4o7ftDgkuhsNTdDj6dMVRGFqqy4EsZHBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUOtZiGscs7rzvQc6Ll+fO/lOOHEEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNjJlMzYzMjJlMzIzODJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMjMyMzMzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFY+ HDANBgkqhkiG9w0BAQsFAAOCAQEAkG/uWBM/hr8tO0cO5XkN11dTc3/Y7sEzLb7u M7OuHkyQdtykSVhjghCi1dZAJHRtpg2rWdLLVx7rIO1Y4x+f7Rn2tdrArKZ6Tdub lA23NRWLDFrC6BhrHFJsQbnMmcFl6BgMIStr7pPgmBSeVVemsEq0Q9bk/MtKtqRc joq3gEOzArz3DDWdeWwejRtBoFvRbCYzcNA4DBQDDIS1qY8jojXOr71MKcdxUa4S K+xYwH37LBxLcfopSxrup2hU7lWleVSBSjTG+wF9HGZXcZ2e5wYCoWYw8RBJ+IaK osApXsHOjiQFw3INo0MkzIgG9v3UJc4Z8Rrte/ifdJAVHRv4pg== -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:07 2025 by rpki-client