This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3234203d3e203633343733.roa File: 38322e3138302e3134392e302f32342d3234203d3e203633343733.roa (raw, json) Hash identifier: 9dHRc72zwLBEvd1+RUgu43mmoP3FxLliXcnjt7UtIhw= Subject key identifier: 41:14:6F:B4:BF:ED:4C:9C:1F:4F:1E:A0:3F:FD:04:5B:2A:2F:24:90 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 73AC2D06ACFB0EB114D490B80E200117956046F9 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3234203d3e203633343733.roa Signing time: Sat 13 Dec 2025 20:50:16 +0000 ROA not before: Sat 13 Dec 2025 20:45:16 +0000 ROA not after: Sat 12 Dec 2026 20:50:16 +0000 asID: 63473 IP address blocks: 82.180.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ac:2d:06:ac:fb:0e:b1:14:d4:90:b8:0e:20:01:17:95:60:46:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 13 20:45:16 2025 GMT Not After : Dec 12 20:50:16 2026 GMT Subject: CN=41146FB4BFED4C9C1F4F1EA03FFD045B2A2F2490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e1:48:56:5e:da:11:28:55:ea:66:47:cc:b0: 74:40:b0:09:2e:60:25:59:62:d4:3e:e7:06:55:eb: e9:47:1b:d4:52:c5:df:ed:61:f8:ed:1c:06:eb:91: ee:7d:f5:62:63:6a:7e:26:f5:81:be:06:fe:c1:8c: c8:51:1f:25:99:c8:51:b2:7f:e1:ed:7a:d3:ca:c3: 82:3c:70:1d:f0:59:7d:3a:1c:1f:84:b4:72:a1:1d: c8:7f:0c:13:37:15:81:f3:bf:3c:3e:2f:e8:c5:52: 65:26:9a:91:f0:de:f3:fb:dd:8e:c4:01:28:9d:e6: b3:89:7d:fe:e6:f2:24:76:d1:4e:b5:c0:4b:64:8d: 52:4a:6b:da:e9:71:08:1d:96:e4:f6:9f:a7:90:63: 2c:9f:6f:a8:e9:bf:ec:7e:41:84:b0:25:cb:58:45: 99:17:f6:e2:b1:dd:66:82:13:a0:09:5e:4b:f3:2f: a2:31:91:37:73:75:1d:af:16:b3:f7:c7:c2:62:20: f9:ad:b2:f3:b7:cf:62:7e:eb:f6:6f:59:d9:1b:63: eb:ec:c0:48:fb:4c:ff:5d:a3:fb:77:24:40:af:e8: fb:d5:59:29:07:d9:53:73:45:43:90:52:3d:70:42: a2:d1:8a:de:63:dd:be:68:a3:34:48:af:cb:4c:22: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:6F:B4:BF:ED:4C:9C:1F:4F:1E:A0:3F:FD:04:5B:2A:2F:24:90 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38322e3138302e3134392e302f32342d3234203d3e203633343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.180.149.0/24 Signature Algorithm: sha256WithRSAEncryption 66:8e:f2:8a:95:cd:86:58:95:4c:be:ea:0a:e8:b8:75:94:14: 4d:23:d4:82:80:bf:88:09:39:62:eb:52:3f:c3:b1:ed:cf:e7: b2:8b:cb:38:18:bd:4b:69:03:d9:2e:7d:57:01:cf:a1:a1:95: 7d:e0:3d:64:4a:d8:2c:33:05:c6:88:11:76:bb:e9:e6:b3:8b: af:da:a8:1b:40:21:b7:64:49:4e:90:02:2d:f8:d4:ee:b0:de: da:b9:fb:1c:53:19:2a:bd:50:4c:06:96:3e:2a:5e:90:fd:fe: f3:8c:bb:81:b0:d7:05:ac:fa:a3:f1:f3:a2:3e:e1:87:dd:77: fb:86:e9:35:92:cd:ec:96:c0:2b:52:3d:5d:14:1c:29:bc:90: dc:84:94:55:8b:de:a5:d7:a9:3f:7c:d1:c7:30:ae:6e:86:fa: 72:82:6f:56:c3:45:16:32:13:45:85:20:c6:55:00:84:ff:9a: f4:d7:e5:37:41:ec:88:2c:d2:ae:e2:fd:4a:63:07:c8:d6:fb: a8:f3:3a:dc:61:b4:c4:dd:e9:d4:07:58:34:29:81:d5:43:fd: 62:a4:ca:83:08:31:2d:40:7b:63:a2:be:b7:8a:e6:99:84:de: 12:9d:eb:3e:ad:0e:92:a9:ca:dc:9a:08:b6:cf:e6:b4:70:db: 4d:e1:83:fb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUc6wtBqz7DrEU1JC4DiABF5VgRvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTMyMDQ1MTZaFw0yNjEyMTIyMDUwMTZaMDMxMTAvBgNV BAMTKDQxMTQ2RkI0QkZFRDRDOUMxRjRGMUVBMDNGRkQwNDVCMkEyRjI0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC44UhWXtoRKFXqZkfMsHRAsAku YCVZYtQ+5wZV6+lHG9RSxd/tYfjtHAbrke599WJjan4m9YG+Bv7BjMhRHyWZyFGy f+HtetPKw4I8cB3wWX06HB+EtHKhHch/DBM3FYHzvzw+L+jFUmUmmpHw3vP73Y7E ASid5rOJff7m8iR20U61wEtkjVJKa9rpcQgdluT2n6eQYyyfb6jpv+x+QYSwJctY RZkX9uKx3WaCE6AJXkvzL6IxkTdzdR2vFrP3x8JiIPmtsvO3z2J+6/ZvWdkbY+vs wEj7TP9do/t3JECv6PvVWSkH2VNzRUOQUj1wQqLRit5j3b5oozRIr8tMIm5rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQRRvtL/tTJwfTx6gP/0EWyovJJAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzMjJlMzEzODMwMmUzMTM0 MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA UrSVMA0GCSqGSIb3DQEBCwUAA4IBAQBmjvKKlc2GWJVMvuoK6Lh1lBRNI9SCgL+I CTli61I/w7Htz+eyi8s4GL1LaQPZLn1XAc+hoZV94D1kStgsMwXGiBF2u+nms4uv 2qgbQCG3ZElOkAIt+NTusN7aufscUxkqvVBMBpY+Kl6Q/f7zjLuBsNcFrPqj8fOi PuGH3Xf7huk1ks3slsArUj1dFBwpvJDchJRVi96l16k/fNHHMK5uhvpygm9Ww0UW MhNFhSDGVQCE/5r01+U3QeyILNKu4v1KYwfI1vuo8zrcYbTE3enUB1g0KYHVQ/1i pMqDCDEtQHtjor63iuaZhN4Snes+rQ6Sqcrcmgi2z+a0cNtN4YP7 -----END CERTIFICATE-----Generated at Fri Dec 19 21:28:08 2025 by rpki-client