This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3133392e32342e302f32342d3234203d3e20313335333931.roa File: 3138352e3133392e32342e302f32342d3234203d3e20313335333931.roa (raw, json) Hash identifier: 4Wf/f7WN/tVL8aGCOoUWdvtQHJRgOrEK+qazvBdvdPc= Subject key identifier: 41:3D:F3:E4:3D:44:E4:1C:58:E2:60:17:B9:C4:22:94:4C:86:76:CB Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 6D0C1B24B767904454B16E1A690D20933AA0DD46 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3133392e32342e302f32342d3234203d3e20313335333931.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 135391 IP address blocks: 185.139.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0c:1b:24:b7:67:90:44:54:b1:6e:1a:69:0d:20:93:3a:a0:dd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=413DF3E43D44E41C58E26017B9C422944C8676CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8b:75:da:c5:22:47:f1:bd:80:fd:8c:b5:de: aa:6b:37:36:25:d9:84:7c:4c:3c:4c:9c:0b:a5:9c: 70:be:2d:14:d2:44:13:29:3d:7d:bf:0c:9e:ad:11: 0a:d8:87:3e:c8:d9:df:d7:97:4f:8d:74:d7:d4:45: 4a:48:bc:01:69:f3:61:95:a5:be:e2:52:5d:69:1c: 01:4c:07:45:c7:7f:af:ec:0b:f4:aa:b5:ad:8f:04: 66:18:87:20:da:7b:68:d9:aa:b9:35:ec:80:a4:5d: 82:38:9a:8e:41:07:f6:04:80:8a:ec:59:42:ab:b6: c8:75:f8:ac:9f:da:97:9a:eb:22:74:5f:6d:cb:9e: b8:67:60:21:b3:6d:81:ff:c8:c6:0c:a4:84:6b:19: b4:50:6f:0e:c6:51:69:ee:18:92:0e:2d:61:8e:da: 07:d7:66:e8:c7:07:cf:41:7c:94:8f:c7:0f:3e:c1: 4f:d2:1d:ff:39:ca:fc:e0:ed:3b:19:0b:de:a9:93: 91:c6:86:7a:bd:21:5f:25:8f:b1:01:3c:81:c4:7c: ac:cf:ed:63:53:5e:4e:c2:17:eb:6b:e2:65:6c:dc: 10:4e:98:9d:a7:27:b3:98:e6:76:e6:6c:b6:26:72: 8e:c7:a4:18:9e:be:4a:a8:76:25:c7:fe:cd:2c:92: 5b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3D:F3:E4:3D:44:E4:1C:58:E2:60:17:B9:C4:22:94:4C:86:76:CB X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3133392e32342e302f32342d3234203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.24.0/24 Signature Algorithm: sha256WithRSAEncryption 09:a1:61:1d:dc:48:e6:1b:e4:d6:cd:d1:78:e4:c4:d8:89:d6: b2:2d:c4:b8:f6:42:0f:30:70:95:2e:04:1d:2a:75:ca:b9:7b: af:2d:fa:01:7d:4b:67:4b:41:e7:1e:86:8e:76:93:cb:8d:86: b3:2c:e7:6c:65:81:7c:89:6b:bc:f6:22:ae:78:12:f4:0f:dd: 80:c7:ea:81:12:f5:87:e8:ce:46:26:51:80:3e:14:1d:3c:75: 19:ac:44:78:84:33:7e:d8:1a:9a:d8:a9:2b:a2:37:56:af:02: ff:6f:6a:1e:01:a5:b8:8f:0a:5c:aa:44:b3:ea:1c:b1:8c:fc: 3e:fe:88:5d:b1:ba:48:70:e6:8c:40:a8:27:25:f9:26:eb:d8: c4:9f:28:39:81:2c:40:a1:10:e9:f8:e3:ba:66:34:82:30:56: 3b:4c:0e:e9:76:ad:f8:a9:35:b9:ab:8f:33:c9:37:0e:2b:d3: 39:7b:e1:ca:33:57:24:73:b4:e3:8a:5c:95:50:8c:69:27:5a: b8:02:26:ea:5c:c7:28:b6:eb:5d:53:ad:8f:b0:79:0a:52:9c: 42:3b:58:1b:db:4a:0f:86:27:ee:80:39:45:ee:0d:3e:f2:07: f7:de:2b:83:e8:ff:75:c3:ad:95:ef:52:36:5b:02:1f:9b:97: fe:f3:e8:d4 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUbQwbJLdnkERUsW4aaQ0gkzqg3UYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKDQxM0RGM0U0M0Q0NEU0MUM1OEUyNjAxN0I5QzQyMjk0NEM4Njc2Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsi3XaxSJH8b2A/Yy13qprNzYl 2YR8TDxMnAulnHC+LRTSRBMpPX2/DJ6tEQrYhz7I2d/Xl0+NdNfURUpIvAFp82GV pb7iUl1pHAFMB0XHf6/sC/Sqta2PBGYYhyDae2jZqrk17ICkXYI4mo5BB/YEgIrs WUKrtsh1+Kyf2pea6yJ0X23LnrhnYCGzbYH/yMYMpIRrGbRQbw7GUWnuGJIOLWGO 2gfXZujHB89BfJSPxw8+wU/SHf85yvzg7TsZC96pk5HGhnq9IV8lj7EBPIHEfKzP 7WNTXk7CF+tr4mVs3BBOmJ2nJ7OY5nbmbLYmco7HpBievkqodiXH/s0sklvDAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUQT3z5D1E5BxY4mAXucQilEyGdsswHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMzMzkyZTMy MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzMzM5MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5ixgwDQYJKoZIhvcNAQELBQADggEBAAmhYR3cSOYb5NbN0XjkxNiJ1rItxLj2 Qg8wcJUuBB0qdcq5e68t+gF9S2dLQeceho52k8uNhrMs52xlgXyJa7z2Iq54EvQP 3YDH6oES9YfozkYmUYA+FB08dRmsRHiEM37YGprYqSuiN1avAv9vah4BpbiPClyq RLPqHLGM/D7+iF2xukhw5oxAqCcl+Sbr2MSfKDmBLEChEOn447pmNIIwVjtMDul2 rfipNbmrjzPJNw4r0zl74cozVyRztOOKXJVQjGknWrgCJupcxyi2611TrY+weQpS nEI7WBvbSg+GJ+6AOUXuDT7yB/feK4Po/3XDrZXvUjZbAh+bl/7z6NQ= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:49 2025 by rpki-client