This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234392e302f32342d3234203d3e203235313938.roa File: 37382e33312e3234392e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: W7PXAf+RS9jCvalIPddRrVCiJwySDbTRPIOF0Oz7XGM= Subject key identifier: 4E:A9:A8:39:6A:E3:EB:43:41:CB:53:E0:1B:A1:16:9A:44:51:8D:E1 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 35F62E86E1118571D5702F1D88132AD8B7CF30F5 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234392e302f32342d3234203d3e203235313938.roa Signing time: Wed 17 Dec 2025 10:31:07 +0000 ROA not before: Wed 17 Dec 2025 10:26:07 +0000 ROA not after: Wed 16 Dec 2026 10:31:07 +0000 asID: 25198 IP address blocks: 78.31.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:29:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f6:2e:86:e1:11:85:71:d5:70:2f:1d:88:13:2a:d8:b7:cf:30:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 17 10:26:07 2025 GMT Not After : Dec 16 10:31:07 2026 GMT Subject: CN=4EA9A8396AE3EB4341CB53E01BA1169A44518DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:fd:5b:16:19:63:54:39:9b:8e:d8:be:c1: 43:1f:8d:3b:75:dc:9f:2e:af:64:97:dc:06:d8:1d: b3:54:1f:d9:77:dd:24:4d:77:01:cb:e3:1c:18:16: bd:e8:76:4f:38:25:d9:13:3d:87:7b:03:68:49:00: 1b:db:cb:74:e6:03:f8:72:04:32:8c:b0:7d:5a:00: 26:0d:47:de:74:69:c5:59:75:77:a4:f1:65:34:a3: 36:ca:5b:ac:57:4a:0d:93:82:12:61:60:ad:59:86: b5:f7:71:5c:f6:ae:0d:df:4c:10:7f:74:42:c4:db: 84:38:36:fc:a4:55:be:01:e3:10:d3:11:7c:06:52: 8b:b0:16:9d:39:be:ee:e0:4b:e7:fd:de:97:43:20: 0f:18:fb:64:1a:2c:21:6e:f8:9c:f3:02:10:61:0e: 43:4f:98:2c:de:e8:d2:ca:5b:89:0d:1a:73:5b:69: ab:5c:55:ce:ce:6e:a4:fb:b8:d4:30:7f:10:99:cb: 88:ae:ae:8e:7a:82:98:61:0c:f0:90:54:6c:8d:f9: 23:87:fb:40:bf:d6:b5:de:f2:48:ae:59:cd:2a:71: f5:4e:87:05:3b:a6:16:d2:34:f1:01:b4:50:56:00: 8b:f4:1c:fb:36:c1:06:ac:f8:5e:ef:fa:07:8a:39: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:A9:A8:39:6A:E3:EB:43:41:CB:53:E0:1B:A1:16:9A:44:51:8D:E1 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/37382e33312e3234392e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.249.0/24 Signature Algorithm: sha256WithRSAEncryption 73:da:05:8a:fc:81:73:12:62:33:21:a7:b3:77:06:88:4b:c8: 34:e1:92:f2:66:d2:16:33:3e:34:95:43:29:3a:59:96:f1:ca: 7c:ce:e4:34:54:f8:61:04:09:21:58:0a:98:f4:47:d0:9b:13: 8b:20:4f:f9:1f:b7:5a:35:51:ea:fe:ba:75:ce:e0:f1:c7:34: a6:11:cb:61:e7:ef:fc:bb:3b:a2:b6:a0:2b:a7:93:e7:1c:ff: af:7a:86:a7:6e:bb:1a:54:6a:7e:01:87:47:77:d9:6d:ef:50: 35:86:17:7c:80:e1:aa:27:87:fc:9b:6c:69:24:68:e4:7a:1e: ac:0c:fe:a0:65:1e:9c:60:cd:8f:13:f9:6c:78:57:6a:81:70: c9:6e:01:41:02:c6:98:11:78:86:4f:b0:1d:fd:72:e2:a7:59: 75:cc:a7:71:e8:1f:69:f1:fa:2f:66:ba:91:0f:d9:08:91:6e: f9:52:6a:98:d2:28:25:ca:95:fd:4f:d1:4e:1c:b8:8f:ee:51: 04:f3:4b:50:18:e9:fa:de:25:d8:2c:c3:69:0f:a9:80:a3:64: 38:69:4e:f2:56:88:57:e4:19:bf:6b:79:7e:e3:26:23:ec:64: 16:4d:4c:a3:40:2f:9b:56:f5:26:9e:42:5f:74:85:09:51:6c: 42:d5:93:8f -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNfYuhuERhXHVcC8diBMq2LfPMPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMTcxMDI2MDdaFw0yNjEyMTYxMDMxMDdaMDMxMTAvBgNV BAMTKDRFQTlBODM5NkFFM0VCNDM0MUNCNTNFMDFCQTExNjlBNDQ1MThERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEX/1bFhljVDmbjti+wUMfjTt1 3J8ur2SX3AbYHbNUH9l33SRNdwHL4xwYFr3odk84JdkTPYd7A2hJABvby3TmA/hy BDKMsH1aACYNR950acVZdXek8WU0ozbKW6xXSg2TghJhYK1ZhrX3cVz2rg3fTBB/ dELE24Q4NvykVb4B4xDTEXwGUouwFp05vu7gS+f93pdDIA8Y+2QaLCFu+JzzAhBh DkNPmCze6NLKW4kNGnNbaatcVc7ObqT7uNQwfxCZy4iuro56gphhDPCQVGyN+SOH +0C/1rXe8kiuWc0qcfVOhwU7phbSNPEBtFBWAIv0HPs2wQas+F7v+geKOYrdAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUTqmoOWrj60NBy1PgG6EWmkRRjeEwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzczODJlMzMzMTJlMzIzNDM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNTMxMzkzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE4f +TANBgkqhkiG9w0BAQsFAAOCAQEAc9oFivyBcxJiMyGns3cGiEvINOGS8mbSFjM+ NJVDKTpZlvHKfM7kNFT4YQQJIVgKmPRH0JsTiyBP+R+3WjVR6v66dc7g8cc0phHL Yefv/Ls7oragK6eT5xz/r3qGp267GlRqfgGHR3fZbe9QNYYXfIDhqieH/JtsaSRo 5HoerAz+oGUenGDNjxP5bHhXaoFwyW4BQQLGmBF4hk+wHf1y4qdZdcyncegfafH6 L2a6kQ/ZCJFu+VJqmNIoJcqV/U/RThy4j+5RBPNLUBjp+t4l2CzDaQ+pgKNkOGlO 8laIV+QZv2t5fuMmI+xkFk1Mo0Avm1b1Jp5CX3SFCVFsQtWTjw== -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:06 2025 by rpki-client