This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e382e302f32342d3234203d3e20323037313337.roa File: 38392e34362e382e302f32342d3234203d3e20323037313337.roa (raw, json) Hash identifier: mXBWBYVSheylL72tsAufVFls0tAJtjdUnKtr5+bEAyg= Subject key identifier: AF:23:35:2B:2C:01:F7:89:54:DA:4D:62:22:C2:90:DC:5D:7C:44:03 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 30E9D54164C7B2F286B2C1283F80B69FF4B19E2A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e382e302f32342d3234203d3e20323037313337.roa Signing time: Thu 18 Dec 2025 10:50:20 +0000 ROA not before: Thu 18 Dec 2025 10:45:20 +0000 ROA not after: Thu 17 Dec 2026 10:50:20 +0000 asID: 207137 IP address blocks: 89.46.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:13:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e9:d5:41:64:c7:b2:f2:86:b2:c1:28:3f:80:b6:9f:f4:b1:9e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 18 10:45:20 2025 GMT Not After : Dec 17 10:50:20 2026 GMT Subject: CN=AF23352B2C01F78954DA4D6222C290DC5D7C4403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:9f:bc:c2:a0:66:8c:48:35:ad:98:c8:d3: 35:be:0b:ae:5b:50:b8:3d:30:87:00:0a:4f:de:3c: 5f:23:4a:2e:a4:bc:c8:f9:9c:7f:70:81:95:62:b5: 9a:b2:b1:b5:83:94:ea:58:89:8e:d4:18:1e:ab:f7: 41:b4:4c:4b:88:f5:39:b7:cb:d1:18:59:a0:5a:4a: 24:a1:81:ef:55:35:c0:93:4c:06:5a:d9:3e:51:c8: de:93:03:fe:8e:10:23:2a:ab:4c:5b:cc:f4:08:a3: b0:f5:83:f8:7e:e3:5b:8d:08:73:ad:3d:04:6f:d2: 04:c5:26:65:21:c4:fb:d7:84:5a:76:0d:b4:a1:b2: 78:14:79:68:63:17:86:5a:58:be:cf:c9:7f:a0:c9: 7d:35:c2:5f:ae:37:a3:1e:44:55:13:ce:8d:bb:19: 83:cd:1b:b3:85:e1:5f:d4:14:82:15:2d:90:81:49: 76:71:2d:72:2e:81:0c:f4:4a:00:88:b4:86:65:99: 23:18:9c:bc:0b:ca:45:fd:0e:73:ab:1e:c8:85:a9: 75:70:6d:bc:5b:13:8c:b4:4d:3f:2d:e7:6a:01:5e: 98:ee:82:30:3a:2f:77:b3:20:5b:1a:30:b2:58:e1: 5a:44:b9:d4:bb:68:ca:f8:c8:12:d5:14:fe:d9:60: 3c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:23:35:2B:2C:01:F7:89:54:DA:4D:62:22:C2:90:DC:5D:7C:44:03 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/38392e34362e382e302f32342d3234203d3e20323037313337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.46.8.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:34:b2:6b:c5:3a:34:2f:58:2b:42:c0:ef:f9:10:5f:ce:e8: 37:48:fb:d8:b4:93:db:76:6c:c7:11:86:bd:a5:5a:d2:3d:6b: 84:3a:95:a6:4c:67:74:70:0d:67:ec:83:3f:52:b0:0a:86:cb: c8:de:a4:fc:5c:d5:17:6f:b8:0a:b1:fc:53:cc:82:cd:38:e4: c0:44:1d:23:b2:af:12:e9:8f:11:b8:e8:9b:2c:ea:b9:91:f9: 41:b6:b7:bd:52:40:64:59:ae:a6:b2:9c:7b:c7:88:ab:9e:50: 13:7e:2f:f4:40:33:db:76:42:1c:dd:8f:f7:2e:de:2a:89:bb: fd:48:62:c4:d5:7b:ac:ac:d8:b0:ec:f9:e2:0f:a6:bb:b0:0d: 18:34:37:00:79:54:00:96:cd:b6:89:80:a6:01:0e:7c:77:4a: ed:ee:0d:60:71:f8:e5:e8:e9:76:77:70:0c:7e:a5:00:ac:3c: 99:ad:6e:69:e8:af:42:da:11:78:fe:ef:23:fc:c1:9c:87:ec: 20:aa:75:e1:fd:39:9c:09:08:d6:de:1d:23:ee:97:24:09:b6: 72:ab:be:da:7b:e8:6c:bf:c7:a8:24:37:83:ba:34:40:76:6e: a3:36:7c:e4:95:2c:ac:db:ed:45:85:b0:22:96:8d:d4:eb:93: e8:bd:ca:c2 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUMOnVQWTHsvKGssEoP4C2n/SxniowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTgxMDQ1MjBaFw0yNjEyMTcxMDUwMjBaMDMxMTAvBgNV BAMTKEFGMjMzNTJCMkMwMUY3ODk1NERBNEQ2MjIyQzI5MERDNUQ3QzQ0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJuZ+8wqBmjEg1rZjI0zW+C65b ULg9MIcACk/ePF8jSi6kvMj5nH9wgZVitZqysbWDlOpYiY7UGB6r90G0TEuI9Tm3 y9EYWaBaSiShge9VNcCTTAZa2T5RyN6TA/6OECMqq0xbzPQIo7D1g/h+41uNCHOt PQRv0gTFJmUhxPvXhFp2DbShsngUeWhjF4ZaWL7PyX+gyX01wl+uN6MeRFUTzo27 GYPNG7OF4V/UFIIVLZCBSXZxLXIugQz0SgCItIZlmSMYnLwLykX9DnOrHsiFqXVw bbxbE4y0TT8t52oBXpjugjA6L3ezIFsaMLJY4VpEudS7aMr4yBLVFP7ZYDyJAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUryM1KywB94lU2k1iIsKQ3F18RAMwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzgzOTJlMzQzNjJlMzgyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzczMTMzMzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZLggw DQYJKoZIhvcNAQELBQADggEBAEo0smvFOjQvWCtCwO/5EF/O6DdI+9i0k9t2bMcR hr2lWtI9a4Q6laZMZ3RwDWfsgz9SsAqGy8jepPxc1RdvuAqx/FPMgs045MBEHSOy rxLpjxG46Jss6rmR+UG2t71SQGRZrqaynHvHiKueUBN+L/RAM9t2Qhzdj/cu3iqJ u/1IYsTVe6ys2LDs+eIPpruwDRg0NwB5VACWzbaJgKYBDnx3Su3uDWBx+OXo6XZ3 cAx+pQCsPJmtbmnor0LaEXj+7yP8wZyH7CCqdeH9OZwJCNbeHSPulyQJtnKrvtp7 6Gy/x6gkN4O6NEB2bqM2fOSVLKzb7UWFsCKWjdTrk+i9ysI= -----END CERTIFICATE-----Generated at Fri Dec 19 21:24:40 2025 by rpki-client