This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230352e302f32342d3234203d3e20313437303439.roa File: 39342e3135362e3230352e302f32342d3234203d3e20313437303439.roa (raw, json) Hash identifier: cb9bF7b6LJhBfPPiwDySVUln1HqX80CVPTsydN72EYs= Subject key identifier: AE:3D:EC:A3:74:1D:D2:97:5F:7F:5F:77:96:9B:41:98:3D:CB:20:AB Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1411A5BA14B31D0895A2A48BDC5A78774FE1085A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230352e302f32342d3234203d3e20313437303439.roa Signing time: Tue 18 Nov 2025 01:51:48 +0000 ROA not before: Tue 18 Nov 2025 01:46:48 +0000 ROA not after: Tue 17 Nov 2026 01:51:48 +0000 asID: 147049 IP address blocks: 94.156.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:11:a5:ba:14:b3:1d:08:95:a2:a4:8b:dc:5a:78:77:4f:e1:08:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 18 01:46:48 2025 GMT Not After : Nov 17 01:51:48 2026 GMT Subject: CN=AE3DECA3741DD2975F7F5F77969B41983DCB20AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:43:47:fa:3a:ea:94:56:eb:b8:50:df:d6:d0: 15:7f:d6:bf:e7:4c:27:de:cc:fd:16:9d:e1:39:77: 20:ea:81:ab:f1:16:8c:56:49:4f:4c:cd:78:54:d7: 1f:07:51:8d:82:d7:49:c5:70:10:af:b4:7d:ae:a5: 86:ef:31:f9:a8:b0:5d:95:59:89:a6:85:cc:3a:aa: 38:1b:91:b3:0f:69:a0:e6:41:07:2f:5f:4a:68:3a: cf:30:4c:0b:b6:7c:9f:f2:ed:75:96:2b:6f:11:26: 04:55:2a:0a:91:0c:ba:2b:86:ba:8f:a8:83:6c:35: 04:86:13:de:ca:2e:bd:72:91:12:b5:58:03:49:3c: 5b:6c:71:4d:4e:36:48:6a:8d:c7:6c:57:92:49:9b: d0:9d:2a:a2:ec:48:91:c2:47:55:87:c1:11:7c:d5: af:a0:45:90:67:5d:a3:69:91:4d:c5:c2:d9:e0:9a: fd:95:0b:cd:5a:bc:ee:eb:e8:40:11:71:98:4d:d4: 2e:a5:bf:4d:0e:8f:a0:8a:9b:4a:9c:fe:91:14:d1: a4:99:b4:d0:67:e6:28:80:c1:be:e7:08:e7:5f:d3: ff:37:dd:9c:eb:72:c9:6d:11:51:2b:66:a9:d0:59: 19:73:65:88:d8:c0:b5:f6:5b:73:da:f8:29:78:5d: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3D:EC:A3:74:1D:D2:97:5F:7F:5F:77:96:9B:41:98:3D:CB:20:AB X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39342e3135362e3230352e302f32342d3234203d3e20313437303439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.205.0/24 Signature Algorithm: sha256WithRSAEncryption 70:0f:ff:c6:c8:ab:71:28:ce:a9:08:1b:3b:71:12:87:61:13: 89:bf:e7:6a:67:b5:f1:72:c9:88:6c:6d:35:b1:93:86:7a:62: 20:ff:2e:d0:4b:ec:fb:4e:83:42:aa:18:66:53:3d:5e:48:08: 9a:6d:21:30:a4:81:7e:c4:6e:42:93:48:da:d0:32:2e:cd:f6: 90:37:9b:f3:44:2e:53:1b:6f:2f:b3:4a:99:a7:f9:76:60:fe: 37:6a:b6:c5:11:05:b3:09:64:30:db:08:81:e0:94:8a:a4:b8: 59:70:a8:75:da:20:59:ef:d2:4a:8e:76:a1:74:8b:12:a6:35: 3e:c1:8f:87:ac:33:85:63:15:79:aa:d1:10:65:85:b8:d3:dd: b6:6d:64:11:83:61:3f:f2:3c:60:55:31:47:5e:ed:99:d6:34: 27:e0:6e:fb:dd:e1:b5:a0:30:74:a3:5b:41:5a:19:bf:af:51: c1:3e:de:bf:12:38:b5:08:a4:c8:37:96:03:f2:49:22:5b:08: b5:23:43:f0:d8:68:d9:38:1a:37:4b:31:62:a0:d5:df:09:f2: e1:bd:24:58:2a:8c:2c:3c:8c:63:2b:57:46:11:4c:26:2d:06: 2f:d5:44:22:34:3d:22:be:92:11:51:4f:84:c5:73:af:3d:07: 77:27:31:72 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUFBGluhSzHQiVoqSL3Fp4d0/hCFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMTgwMTQ2NDhaFw0yNjExMTcwMTUxNDhaMDMxMTAvBgNV BAMTKEFFM0RFQ0EzNzQxREQyOTc1RjdGNUY3Nzk2OUI0MTk4M0RDQjIwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyQ0f6OuqUVuu4UN/W0BV/1r/n TCfezP0WneE5dyDqgavxFoxWSU9MzXhU1x8HUY2C10nFcBCvtH2upYbvMfmosF2V WYmmhcw6qjgbkbMPaaDmQQcvX0poOs8wTAu2fJ/y7XWWK28RJgRVKgqRDLorhrqP qINsNQSGE97KLr1ykRK1WANJPFtscU1ONkhqjcdsV5JJm9CdKqLsSJHCR1WHwRF8 1a+gRZBnXaNpkU3Fwtngmv2VC81avO7r6EARcZhN1C6lv00Oj6CKm0qc/pEU0aSZ tNBn5iiAwb7nCOdf0/833ZzrcsltEVErZqnQWRlzZYjYwLX2W3Pa+Cl4XdJLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUrj3so3Qd0pdff193lptBmD3LIKswHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNDJlMzEzNTM2MmUzMjMw MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMDM0Mzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABenM0wDQYJKoZIhvcNAQELBQADggEBAHAP/8bIq3EozqkIGztxEodhE4m/52pn tfFyyYhsbTWxk4Z6YiD/LtBL7PtOg0KqGGZTPV5ICJptITCkgX7EbkKTSNrQMi7N 9pA3m/NELlMbby+zSpmn+XZg/jdqtsURBbMJZDDbCIHglIqkuFlwqHXaIFnv0kqO dqF0ixKmNT7Bj4esM4VjFXmq0RBlhbjT3bZtZBGDYT/yPGBVMUde7ZnWNCfgbvvd 4bWgMHSjW0FaGb+vUcE+3r8SOLUIpMg3lgPySSJbCLUjQ/DYaNk4GjdLMWKg1d8J 8uG9JFgqjCw8jGMrV0YRTCYtBi/VRCI0PSK+khFRT4TFc689B3cnMXI= -----END CERTIFICATE-----Generated at Fri Dec 5 05:36:24 2025 by rpki-client