This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e31312e302f32342d3234203d3e20323037313337.roa File: 38392e34362e31312e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: V+FPR/rwLTNb90wT3MU8mcBCASe3nX1Y77I5GOlxRVo= Subject key identifier: 82:69:B8:95:68:A5:AE:30:94:AC:42:FF:15:63:4E:1B:A6:4A:05:01 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 058E2F271932BEF9B32CF332EC5777DFAF4709F4 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e31312e302f32342d3234203d3e20323037313337.roa Signing time: Thu 18 Dec 2025 10:50:19 +0000 ROA not before: Thu 18 Dec 2025 10:45:19 +0000 ROA not after: Thu 17 Dec 2026 10:50:19 +0000 asID: 207137 IP address blocks: 89.46.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8e:2f:27:19:32:be:f9:b3:2c:f3:32:ec:57:77:df:af:47:09:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:19 2025 GMT Not After : Dec 17 10:50:19 2026 GMT Subject: CN=8269B89568A5AE3094AC42FF15634E1BA64A0501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bb:58:4e:34:4f:25:1a:e2:a7:bf:44:cb:7a: d9:1d:49:8f:08:ad:e1:db:ab:be:0c:76:31:fa:67: f3:20:1e:f9:09:91:6e:18:d4:89:c7:c9:09:71:b7: 99:da:d3:7a:9b:be:b5:30:05:1f:a5:83:19:56:cd: ec:32:16:c9:ec:15:5e:c7:18:bc:f2:b5:02:b5:d5: 0a:9d:6e:0a:89:47:70:45:0e:f5:ab:c4:f0:c5:1e: eb:ff:7d:67:56:9e:3d:e8:6d:79:13:8e:57:f9:38: c4:3b:8d:3c:e6:39:cf:3f:47:a6:5e:9c:31:80:a2: 28:bd:d1:c2:07:82:eb:09:be:bc:b9:37:2c:d7:b7: 0e:0b:bc:5f:05:a8:b6:cd:3f:32:7c:c9:be:1e:ef: 15:df:86:5e:0a:7e:e4:14:c4:74:1d:95:81:eb:cd: a7:cf:42:d4:7e:dc:8c:88:9d:1a:b4:d1:0b:05:8b: 58:5d:44:1a:c9:10:a5:0f:19:df:c4:7a:f0:c2:e2: bf:a9:0a:46:65:a4:a3:71:d8:04:87:c3:1d:c4:74: 75:b0:7d:df:f5:25:08:60:ff:cb:2a:1e:07:3e:79: 05:0a:68:8e:23:f7:76:b2:06:cc:f2:a1:f6:32:40: 9e:c1:f3:21:85:c5:fa:79:c0:aa:e6:f5:96:e8:b9: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:69:B8:95:68:A5:AE:30:94:AC:42:FF:15:63:4E:1B:A6:4A:05:01 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e31312e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.11.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:69:f6:60:5c:7c:71:84:7b:22:67:7a:9c:ad:b3:b2:92:18: 6d:bf:62:5a:9b:d5:7a:22:c5:02:33:f1:7a:8a:43:6d:80:ad: ab:c7:ca:12:92:3f:0d:98:41:6d:51:4c:f2:d7:76:e2:38:97: 86:03:b8:ae:b2:24:83:bb:98:10:8c:da:21:5d:49:85:d7:05: c5:46:8e:ae:ba:ff:40:c7:b7:3a:72:96:9d:98:37:27:c7:80: 70:9d:8f:e1:31:bf:2d:a1:7a:41:c9:68:54:a4:d0:be:e6:91: da:66:1b:bf:ff:90:d6:9f:65:1d:ce:1a:b1:8f:71:e7:58:7a: 4f:33:d3:14:e7:c3:72:45:11:11:be:f7:84:6d:95:00:17:e0: 60:8d:38:89:06:75:21:f8:99:fa:60:97:36:a9:48:3e:d5:52: d0:52:ba:f9:86:17:ae:a0:36:cd:96:2f:34:b2:7a:07:7c:9a: 7a:e7:3c:a0:77:d7:00:d8:d8:f3:f9:ff:0d:89:39:51:6d:0b: 1c:7b:c8:43:79:e4:f8:af:7d:bd:9b:c9:af:9b:4e:68:34:6c: fd:eb:c6:54:ce:03:af:b2:c7:ab:25:76:82:26:7d:f4:ed:7a: 7e:06:70:1e:51:01:9d:9d:1a:55:13:28:74:27:a3:73:aa:58: 2a:fc:f8:ad -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUBY4vJxkyvvmzLPMy7Fd3369HCfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MTlaFw0yNjEyMTcxMDUwMTlaMDMxMTAvBgNV BAMTKDgyNjlCODk1NjhBNUFFMzA5NEFDNDJGRjE1NjM0RTFCQTY0QTA1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeu1hONE8lGuKnv0TLetkdSY8I reHbq74MdjH6Z/MgHvkJkW4Y1InHyQlxt5na03qbvrUwBR+lgxlWzewyFsnsFV7H GLzytQK11QqdbgqJR3BFDvWrxPDFHuv/fWdWnj3obXkTjlf5OMQ7jTzmOc8/R6Ze nDGAoii90cIHgusJvry5NyzXtw4LvF8FqLbNPzJ8yb4e7xXfhl4KfuQUxHQdlYHr zafPQtR+3IyInRq00QsFi1hdRBrJEKUPGd/EevDC4r+pCkZlpKNx2ASHwx3EdHWw fd/1JQhg/8sqHgc+eQUKaI4j93ayBszyofYyQJ7B8yGFxfp5wKrm9ZbouZeLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUgmm4lWilrjCUrEL/FWNOG6ZKBQEwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzOTJlMzQzNjJlMzEzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNzMxMzMzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFku CzANBgkqhkiG9w0BAQsFAAOCAQEAamn2YFx8cYR7Imd6nK2zspIYbb9iWpvVeiLF AjPxeopDbYCtq8fKEpI/DZhBbVFM8td24jiXhgO4rrIkg7uYEIzaIV1JhdcFxUaO rrr/QMe3OnKWnZg3J8eAcJ2P4TG/LaF6QcloVKTQvuaR2mYbv/+Q1p9lHc4asY9x 51h6TzPTFOfDckUREb73hG2VABfgYI04iQZ1IfiZ+mCXNqlIPtVS0FK6+YYXrqA2 zZYvNLJ6B3yaeuc8oHfXANjY8/n/DYk5UW0LHHvIQ3nk+K99vZvJr5tOaDRs/evG VM4Dr7LHqyV2giZ99O16fgZwHlEBnZ0aVRModCejc6pYKvz4rQ== -----END CERTIFICATE-----Generated at Fri Dec 19 21:24:13 2025 by rpki-client