This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e3234372e3134342e302f32302d3332203d3e20313431393935.roa File: 38342e3234372e3134342e302f32302d3332203d3e20313431393935.roa (raw, json) Hash identifier: 7Ykf94AWG760l/kHHZ1rdWMFHO+Naxl/ZrNLj6zJzKU= Subject key identifier: EE:F5:FE:C4:10:FB:E7:A0:C1:F2:01:52:E6:5A:8D:A8:1E:61:2B:E5 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 5F3F3587B3CE49D25AF501B10E0FE7266C91AB1E Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e3234372e3134342e302f32302d3332203d3e20313431393935.roa Signing time: Wed 17 Dec 2025 12:50:18 +0000 ROA not before: Wed 17 Dec 2025 12:45:18 +0000 ROA not after: Wed 16 Dec 2026 12:50:18 +0000 asID: 141995 IP address blocks: 84.247.144.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3f:35:87:b3:ce:49:d2:5a:f5:01:b1:0e:0f:e7:26:6c:91:ab:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 17 12:45:18 2025 GMT Not After : Dec 16 12:50:18 2026 GMT Subject: CN=EEF5FEC410FBE7A0C1F20152E65A8DA81E612BE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:c4:df:9b:e5:18:30:0a:80:15:65:8f:75: c9:2e:51:62:88:60:4e:a9:f6:10:20:84:34:59:4a: e3:c8:bb:d1:04:ab:b0:c5:66:a2:33:12:e4:e0:2f: 61:6d:e2:de:03:4f:4a:0d:d6:4f:20:76:a8:09:7b: af:73:4d:be:96:36:c4:e2:fe:37:d8:cd:7d:82:a3: 2e:dd:b8:ed:c2:5f:ed:3c:fe:e9:21:97:8e:84:88: 02:19:a0:52:af:d9:3b:02:bb:6b:e6:96:02:d9:87: 45:37:cf:b3:d4:e8:15:d3:80:ca:bd:53:e1:a6:eb: ae:4d:87:5f:ee:18:d6:cf:de:b4:b8:6f:3a:9a:e7: 44:31:eb:0e:66:66:28:1b:26:8b:7c:56:90:aa:29: 0c:ca:de:94:0b:e0:6e:0a:07:4d:02:e9:03:97:be: 0e:cf:ed:c9:63:b9:c2:37:2a:f2:b6:b9:60:56:74: e8:74:d3:82:d6:dd:d9:be:3d:5e:e5:cc:33:10:ec: 03:03:ff:42:c7:2b:6c:2d:41:22:5c:f5:94:cd:5c: 2c:ac:07:16:72:dd:c7:4b:5a:32:5d:7b:f5:7c:28: cd:03:56:45:28:4a:4c:1f:12:58:4b:60:ca:12:b6: e3:ee:94:08:27:52:41:58:09:2e:2e:5a:48:c6:f5: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F5:FE:C4:10:FB:E7:A0:C1:F2:01:52:E6:5A:8D:A8:1E:61:2B:E5 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38342e3234372e3134342e302f32302d3332203d3e20313431393935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.247.144.0/20 Signature Algorithm: sha256WithRSAEncryption 4b:f7:47:37:25:f1:0f:32:8c:be:66:79:c4:e3:d4:2e:23:db: 01:6e:65:0a:5e:c7:4f:80:f5:56:7e:fd:4a:2a:52:c8:a5:c5: ab:33:6d:f6:20:85:dd:eb:fd:bb:be:77:29:8d:c8:b3:a7:91: f4:0d:f6:ef:f0:62:8f:88:9f:bb:b8:73:f7:1c:b8:c3:2f:50: 13:03:5f:bc:ab:97:88:87:91:19:d5:25:a3:31:c4:89:bd:8d: 9b:8d:50:1b:b3:fa:71:8a:9d:51:7f:4c:66:2d:1c:3e:d2:89: 5f:93:ce:11:24:33:2e:0a:da:b8:dd:b5:08:7a:5f:30:64:d1: 47:05:eb:5d:a3:39:81:74:5e:20:27:8b:cf:84:c0:56:0a:14: 00:76:3c:57:5e:bc:73:e6:c5:4a:43:24:4a:ed:a9:84:cc:c3: c9:6f:10:db:90:5c:45:f9:3b:e5:cb:87:f8:d8:91:8f:f3:e1: c6:aa:c3:a5:e9:e1:6e:e3:c9:bd:cb:43:63:35:8f:77:b4:83: d6:20:ce:ae:2c:6b:15:a9:81:bc:9d:44:11:55:5a:96:20:08: a9:49:80:6c:38:b4:09:9c:5c:e5:e4:bf:94:82:78:20:82:5c: ce:ab:b1:d7:bb:d8:5c:ba:1b:e1:eb:64:12:f2:14:e9:35:5e: 7f:cf:08:fb -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXz81h7POSdJa9QGxDg/nJmyRqx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTcxMjQ1MThaFw0yNjEyMTYxMjUwMThaMDMxMTAvBgNV BAMTKEVFRjVGRUM0MTBGQkU3QTBDMUYyMDE1MkU2NUE4REE4MUU2MTJCRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ68Tfm+UYMAqAFWWPdckuUWKI YE6p9hAghDRZSuPIu9EEq7DFZqIzEuTgL2Ft4t4DT0oN1k8gdqgJe69zTb6WNsTi /jfYzX2Coy7duO3CX+08/ukhl46EiAIZoFKv2TsCu2vmlgLZh0U3z7PU6BXTgMq9 U+Gm665Nh1/uGNbP3rS4bzqa50Qx6w5mZigbJot8VpCqKQzK3pQL4G4KB00C6QOX vg7P7cljucI3KvK2uWBWdOh004LW3dm+PV7lzDMQ7AMD/0LHK2wtQSJc9ZTNXCys BxZy3cdLWjJde/V8KM0DVkUoSkwfElhLYMoStuPulAgnUkFYCS4uWkjG9fHLAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU7vX+xBD756DB8gFS5lqNqB5hK+UwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzNDJlMzIzNDM3MmUzMTM0 MzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMTM0MzEzOTM5MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BARU95AwDQYJKoZIhvcNAQELBQADggEBAEv3Rzcl8Q8yjL5mecTj1C4j2wFuZQpe x0+A9VZ+/UoqUsilxaszbfYghd3r/bu+dymNyLOnkfQN9u/wYo+In7u4c/ccuMMv UBMDX7yrl4iHkRnVJaMxxIm9jZuNUBuz+nGKnVF/TGYtHD7SiV+TzhEkMy4K2rjd tQh6XzBk0UcF612jOYF0XiAni8+EwFYKFAB2PFdevHPmxUpDJErtqYTMw8lvENuQ XEX5O+XLh/jYkY/z4caqw6Xp4W7jyb3LQ2M1j3e0g9Ygzq4saxWpgbydRBFVWpYg CKlJgGw4tAmcXOXkv5SCeCCCXM6rsde72Fy6G+HrZBLyFOk1Xn/PCPs= -----END CERTIFICATE-----Generated at Fri Dec 19 21:24:39 2025 by rpki-client