This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa File: 39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: Y1y2qpRQvinqueYOtxitAeXBYTaUO7gMlme9Y7vqep4= Subject key identifier: E1:B8:0C:C7:0E:CD:1D:7C:F0:73:51:C7:08:4A:1F:D7:92:33:49:11 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 1F9881EB16BCBDCFC2E02DE53140F76D4461F80C Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 19:49:59 +0000 ROA not before: Fri 28 Nov 2025 19:44:59 +0000 ROA not after: Fri 27 Nov 2026 19:49:59 +0000 asID: 136787 IP address blocks: 95.214.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:98:81:eb:16:bc:bd:cf:c2:e0:2d:e5:31:40:f7:6d:44:61:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 28 19:44:59 2025 GMT Not After : Nov 27 19:49:59 2026 GMT Subject: CN=E1B80CC70ECD1D7CF07351C7084A1FD792334911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:27:d1:c1:72:7d:88:e1:59:be:78:95:ea: f2:6f:6e:b2:fd:f6:f9:05:97:9d:c0:59:01:e9:4f: 96:40:1a:48:32:ea:04:d6:f8:a2:11:69:f5:dd:2e: 66:17:ea:8f:e9:e7:56:26:26:eb:89:c6:a6:cf:7e: 9f:8e:f9:05:d4:da:49:95:36:09:51:33:39:6c:f9: 2d:b0:a9:e3:6d:bf:7b:00:4a:81:c8:b4:0e:70:65: fe:a4:f6:b6:af:74:e6:d6:1d:4b:f2:9c:66:9a:18: 83:96:58:3f:28:4f:59:a5:23:ab:9c:75:db:13:d9: 0c:bc:61:31:98:61:4e:7f:c6:52:b5:b7:35:5c:fe: f1:16:b5:1c:93:88:12:0b:e1:34:f9:d7:61:51:0d: 93:92:d1:4f:0b:be:5e:e6:c8:56:4d:83:83:76:ad: 92:ba:fb:91:56:69:a7:86:55:97:a6:cf:bc:24:6e: f5:f9:8f:81:21:53:d6:14:69:48:5c:69:78:1c:1f: cb:67:79:f1:f6:e3:89:07:cd:a4:bf:3f:8f:8c:02: dd:ea:57:56:40:18:26:a6:2a:4b:3c:f2:c2:70:6b: 5d:2b:ba:15:1e:d3:1a:13:f0:1a:73:2e:0e:cf:d0: 99:1b:b0:ec:6e:10:49:f9:3c:5a:fa:96:7f:bf:3e: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B8:0C:C7:0E:CD:1D:7C:F0:73:51:C7:08:4A:1F:D7:92:33:49:11 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/39352e3231342e3131352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.214.115.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d9:95:3f:61:fe:64:2d:0f:8c:8b:65:4e:92:79:2a:41:3e: b8:da:c2:bc:5f:f5:61:07:a5:a6:83:ad:74:be:b4:9f:2a:7f: fc:81:96:ed:d1:3f:72:aa:74:04:97:78:89:39:5b:bb:6e:8c: 9e:a3:61:0f:e8:d7:30:86:f1:63:c7:44:01:89:3a:c1:b2:cb: c3:6c:05:fc:7b:20:ee:bc:b5:ac:7d:aa:cc:82:e4:1e:67:7b: a7:5c:1f:66:ed:fd:3c:47:a2:00:7c:a2:ff:a7:74:45:1f:30: b6:ba:16:c2:ed:bb:ff:20:b1:6a:2f:1c:83:92:8b:86:58:f2: 17:64:aa:c6:ce:dd:22:01:32:6e:4c:f4:a2:f9:28:13:df:60: 12:3d:6c:e5:b4:ae:f3:02:b3:e1:c4:5b:74:05:79:2e:df:83: 50:39:38:8e:23:be:6c:b7:42:b1:74:69:7b:f6:18:d1:2c:63: da:43:ed:c1:6c:47:63:34:50:72:d7:84:2a:04:41:f3:60:31: 0c:c5:5e:68:68:65:4d:54:43:3e:51:00:92:a7:16:83:f8:f4: 96:0b:1c:1f:52:db:4a:d1:f6:53:c2:24:0f:e2:5f:13:71:21: 20:28:20:da:30:01:aa:d2:19:bf:37:ff:38:50:ec:98:5a:6a: 00:d3:2f:9b -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUH5iB6xa8vc/C4C3lMUD3bURh+AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjgxOTQ0NTlaFw0yNjExMjcxOTQ5NTlaMDMxMTAvBgNV BAMTKEUxQjgwQ0M3MEVDRDFEN0NGMDczNTFDNzA4NEExRkQ3OTIzMzQ5MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgASfRwXJ9iOFZvniV6vJvbrL9 9vkFl53AWQHpT5ZAGkgy6gTW+KIRafXdLmYX6o/p51YmJuuJxqbPfp+O+QXU2kmV NglRMzls+S2wqeNtv3sASoHItA5wZf6k9ravdObWHUvynGaaGIOWWD8oT1mlI6uc ddsT2Qy8YTGYYU5/xlK1tzVc/vEWtRyTiBIL4TT512FRDZOS0U8Lvl7myFZNg4N2 rZK6+5FWaaeGVZemz7wkbvX5j4EhU9YUaUhcaXgcH8tnefH244kHzaS/P4+MAt3q V1ZAGCamKks88sJwa10ruhUe0xoT8BpzLg7P0JkbsOxuEEn5PFr6ln+/PoaJAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU4bgMxw7NHXzwc1HHCEof15IzSREwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzkzNTJlMzIzMTM0MmUzMTMx MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABf1nMwDQYJKoZIhvcNAQELBQADggEBAGnZlT9h/mQtD4yLZU6SeSpBPrjawrxf 9WEHpaaDrXS+tJ8qf/yBlu3RP3KqdASXeIk5W7tujJ6jYQ/o1zCG8WPHRAGJOsGy y8NsBfx7IO68tax9qsyC5B5ne6dcH2bt/TxHogB8ov+ndEUfMLa6FsLtu/8gsWov HIOSi4ZY8hdkqsbO3SIBMm5M9KL5KBPfYBI9bOW0rvMCs+HEW3QFeS7fg1A5OI4j vmy3QrF0aXv2GNEsY9pD7cFsR2M0UHLXhCoEQfNgMQzFXmhoZU1UQz5RAJKnFoP4 9JYLHB9S20rR9lPCJA/iXxNxISAoINowAarSGb83/zhQ7JhaagDTL5s= -----END CERTIFICATE-----Generated at Fri Dec 5 05:40:17 2025 by rpki-client