This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231332e302f32342d3234203d3e20323038393439.roa File: 3138352e3130302e3231332e302f32342d3234203d3e20323038393439.roa (raw, json) Hash identifier: MCU5PRozcVs5izP0Ex+dlWyErn7HRzuQBYBlZWIbvZw= Subject key identifier: 4E:BC:B5:23:33:57:05:E9:24:2F:F4:BC:0B:28:02:76:5B:66:6D:37 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 7FE0F4D9B8CFCEEBD39F64647504D7F8BCDD2832 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231332e302f32342d3234203d3e20323038393439.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 208949 IP address blocks: 185.100.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:e0:f4:d9:b8:cf:ce:eb:d3:9f:64:64:75:04:d7:f8:bc:dd:28:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=4EBCB523335705E9242FF4BC0B2802765B666D37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9a:96:7b:8e:51:68:f7:b4:73:61:be:5a:1e: c9:ea:b9:8f:25:8f:29:47:c0:73:6f:ff:18:13:2e: 41:45:d8:ca:d5:e3:27:74:f7:80:06:79:44:19:96: f5:e3:dd:3b:2c:f2:0e:5f:f4:ad:29:ac:55:e8:80: 11:f0:18:63:f9:45:24:21:e1:d4:32:0e:f9:f5:89: c3:58:61:8d:0a:9c:20:a9:cd:1d:a7:39:ee:45:3e: a3:55:e9:d7:52:f3:52:fe:8b:02:0b:67:26:3a:fb: 50:10:1c:dc:7b:ae:30:3e:fd:90:b5:fb:1c:89:06: 54:bf:e7:2f:96:6f:d3:b8:cd:26:5f:0a:01:49:fc: 24:b9:f2:d1:66:d9:8a:21:12:ed:ac:f4:aa:f3:0a: 1f:76:48:0c:d2:41:92:05:c7:ef:cc:8d:41:83:f9: 25:c3:3b:76:4f:e7:a4:3f:d1:c7:38:47:63:66:d3: 93:cd:b2:5e:f7:06:79:22:16:8b:18:3e:84:b2:cb: 67:9d:1d:02:9a:1a:95:12:68:e8:d3:ee:b0:a8:0f: 06:4a:27:11:1f:53:c5:f5:fd:f2:b2:26:04:5e:df: a9:74:49:44:fc:b5:5e:84:e5:08:6a:cc:cd:36:44: c9:49:63:dc:5c:dc:09:2e:1c:42:25:d8:ac:6d:02: 08:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BC:B5:23:33:57:05:E9:24:2F:F4:BC:0B:28:02:76:5B:66:6D:37 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231332e302f32342d3234203d3e20323038393439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.213.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:23:31:cf:4d:47:68:19:79:31:44:50:29:20:6d:b3:af:0d: 81:92:11:66:12:a9:1f:59:bc:68:0f:e5:5c:99:8a:02:5f:fa: 1f:b1:c9:23:74:f5:2f:f5:bc:8b:48:1c:3f:5d:da:59:48:5f: 2b:56:7e:c3:4a:6e:3a:a8:62:45:f7:2a:a3:fb:a4:48:8c:3b: 3b:6b:a5:00:d7:a1:e7:27:8c:33:1d:6b:0a:b9:82:31:ef:52: a1:0d:3f:53:1e:2f:6b:a8:ce:05:25:f3:cd:9e:ef:85:ed:e8: 05:0a:dd:91:4d:55:1b:2d:01:a2:cf:d9:e8:4e:b1:da:0a:0e: ae:f0:4f:30:3d:47:60:7d:9d:52:a7:34:07:36:62:10:07:3d: 21:0b:68:d3:0a:f6:60:53:70:19:13:18:b0:e7:28:e3:9e:82: 54:46:ad:0f:f2:31:63:5b:82:cc:30:38:ed:f4:b6:44:2b:47: fd:6a:6d:b9:ae:90:4f:80:e6:83:e9:e1:67:41:dc:26:84:10: d4:59:dc:10:07:8f:31:e5:45:4c:c4:21:ca:f9:ee:bb:6f:b2: a4:a3:b5:31:88:65:c9:35:05:0e:19:28:52:7e:e2:f2:00:c9: cc:f5:53:54:14:cc:bd:65:50:12:62:13:4e:71:12:13:e6:8e: 64:b8:47:c6 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUf+D02bjPzuvTn2RkdQTX+LzdKDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKDRFQkNCNTIzMzM1NzA1RTkyNDJGRjRCQzBCMjgwMjc2NUI2NjZEMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNmpZ7jlFo97RzYb5aHsnquY8l jylHwHNv/xgTLkFF2MrV4yd094AGeUQZlvXj3Tss8g5f9K0prFXogBHwGGP5RSQh 4dQyDvn1icNYYY0KnCCpzR2nOe5FPqNV6ddS81L+iwILZyY6+1AQHNx7rjA+/ZC1 +xyJBlS/5y+Wb9O4zSZfCgFJ/CS58tFm2YohEu2s9KrzCh92SAzSQZIFx+/MjUGD +SXDO3ZP56Q/0cc4R2Nm05PNsl73BnkiFosYPoSyy2edHQKaGpUSaOjT7rCoDwZK JxEfU8X1/fKyJgRe36l0SUT8tV6E5QhqzM02RMlJY9xc3AkuHEIl2KxtAgiHAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUTry1IzNXBekkL/S8CygCdltmbTcwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMwMzAyZTMy MzEzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzODM5MzQzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALlk1TANBgkqhkiG9w0BAQsFAAOCAQEAbyMxz01HaBl5MURQKSBts68NgZIR ZhKpH1m8aA/lXJmKAl/6H7HJI3T1L/W8i0gcP13aWUhfK1Z+w0puOqhiRfcqo/uk SIw7O2ulANeh5yeMMx1rCrmCMe9SoQ0/Ux4va6jOBSXzzZ7vhe3oBQrdkU1VGy0B os/Z6E6x2goOrvBPMD1HYH2dUqc0BzZiEAc9IQto0wr2YFNwGRMYsOco456CVEat D/IxY1uCzDA47fS2RCtH/Wptua6QT4Dmg+nhZ0HcJoQQ1FncEAePMeVFTMQhyvnu u2+ypKO1MYhlyTUFDhkoUn7i8gDJzPVTVBTMvWVQEmITTnESE+aOZLhHxg== -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:01 2025 by rpki-client