This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3133392e32352e302f32342d3234203d3e20323030303838.roa File: 3138352e3133392e32352e302f32342d3234203d3e20323030303838.roa (raw, json) Hash identifier: NqiJf4f5L11jeydpQzGXgfPF0AwZmhJPwnxTR/kHwCs= Subject key identifier: 29:2C:9E:E8:8A:7C:58:4D:BC:06:8F:7D:94:B7:B2:C9:7B:1E:69:C1 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 272FFD9AF57E9302F3FEC62FC9F98EB35C5ABB15 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3133392e32352e302f32342d3234203d3e20323030303838.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 200088 IP address blocks: 185.139.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:2f:fd:9a:f5:7e:93:02:f3:fe:c6:2f:c9:f9:8e:b3:5c:5a:bb:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=292C9EE88A7C584DBC068F7D94B7B2C97B1E69C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:e2:94:a2:e1:4e:fb:c5:10:b9:49:90:f5: 52:87:49:bc:8a:96:51:d1:1e:5e:22:92:df:28:7b: 6a:ab:e4:b7:e6:9f:1f:4f:0e:48:22:2f:b2:c8:f0: 24:62:c9:ac:14:e5:67:25:7e:90:81:0e:31:90:76: 8a:0b:87:c4:0b:c8:37:02:7f:4e:eb:28:1d:88:34: 2a:08:f7:21:05:32:66:a9:65:f1:19:63:1c:1a:9a: 3e:17:d9:19:0f:85:a7:a3:5d:91:b3:3a:fb:3b:7f: 95:4b:ee:25:25:6b:20:65:f9:49:65:81:6d:b1:43: 8b:e8:32:da:de:61:54:5f:f9:42:ea:66:0a:87:1a: 98:03:12:60:d7:a2:fb:7e:24:56:ce:1c:10:bc:fc: 11:f0:d9:92:5c:46:38:c3:bd:8d:d2:f6:87:57:94: cf:8e:8f:6b:7c:af:13:d6:5c:13:b7:ae:ee:3d:35: 06:91:41:7e:07:c2:5f:9d:4a:d3:0f:0a:a2:0a:a2: 49:8a:fc:66:0d:2d:a7:b9:36:fb:08:94:34:8f:e8: e1:7c:b9:f7:cb:a7:16:36:0d:63:b4:42:6d:29:95: 8c:01:56:97:25:bc:33:2d:76:82:19:1b:78:01:76: 4d:16:e6:1c:06:95:22:b7:5f:2f:73:2e:64:dd:28: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2C:9E:E8:8A:7C:58:4D:BC:06:8F:7D:94:B7:B2:C9:7B:1E:69:C1 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3133392e32352e302f32342d3234203d3e20323030303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.139.25.0/24 Signature Algorithm: sha256WithRSAEncryption 23:35:a8:75:71:19:2e:56:5f:a8:0b:c4:c2:b7:70:cf:f0:28: a2:f6:1d:8d:cf:d6:ee:d6:73:59:bd:43:35:f4:6d:8f:db:ca: 7f:f8:b7:3e:67:31:18:f4:9b:ce:d6:44:4c:00:ae:66:c3:6f: bd:08:76:f9:b3:5c:70:a7:af:c4:36:69:aa:8c:58:bd:3d:f2: b4:dd:0c:fc:21:80:fa:c5:8f:19:aa:d9:38:7c:92:30:4a:84: c0:e8:8c:0d:8e:cf:af:5b:32:fa:9d:14:83:2b:b8:8c:ad:8a: 24:b7:59:db:ba:5b:31:4a:d3:e8:71:af:0b:cf:05:f0:3a:ec: 9c:c1:60:11:95:bf:0d:3a:23:fd:4d:2a:8a:55:4f:e4:e5:77: 84:af:40:cc:0a:4e:17:29:eb:20:b1:28:5f:d0:ab:fa:f9:7a: 21:1a:a6:24:0d:2a:0e:c9:cf:60:27:cb:b0:c3:89:01:a3:53: 40:b7:86:52:a1:6d:45:c0:1b:d6:fd:73:d7:fd:12:7a:82:21: a8:c3:ec:97:f7:b4:1c:0f:36:d7:a6:23:e4:3b:b6:55:f7:43: c1:0f:ec:31:b4:1f:80:33:ca:08:e5:00:a1:58:51:da:fa:df: 5b:79:76:a5:a4:ec:2a:c8:8f:68:cc:e7:3a:9d:9f:93:49:a8: 75:92:89:e5 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUJy/9mvV+kwLz/sYvyfmOs1xauxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKDI5MkM5RUU4OEE3QzU4NERCQzA2OEY3RDk0QjdCMkM5N0IxRTY5QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4BOKUouFO+8UQuUmQ9VKHSbyK llHRHl4ikt8oe2qr5Lfmnx9PDkgiL7LI8CRiyawU5WclfpCBDjGQdooLh8QLyDcC f07rKB2INCoI9yEFMmapZfEZYxwamj4X2RkPhaejXZGzOvs7f5VL7iUlayBl+Ull gW2xQ4voMtreYVRf+ULqZgqHGpgDEmDXovt+JFbOHBC8/BHw2ZJcRjjDvY3S9odX lM+Oj2t8rxPWXBO3ru49NQaRQX4Hwl+dStMPCqIKokmK/GYNLae5NvsIlDSP6OF8 uffLpxY2DWO0Qm0plYwBVpclvDMtdoIZG3gBdk0W5hwGlSK3Xy9zLmTdKDMpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUKSye6Ip8WE28Bo99lLeyyXseacEwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMzMzkyZTMy MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDM4Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC5ixkwDQYJKoZIhvcNAQELBQADggEBACM1qHVxGS5WX6gLxMK3cM/wKKL2HY3P 1u7Wc1m9QzX0bY/byn/4tz5nMRj0m87WREwArmbDb70IdvmzXHCnr8Q2aaqMWL09 8rTdDPwhgPrFjxmq2Th8kjBKhMDojA2Oz69bMvqdFIMruIytiiS3Wdu6WzFK0+hx rwvPBfA67JzBYBGVvw06I/1NKopVT+Tld4SvQMwKThcp6yCxKF/Qq/r5eiEapiQN Kg7Jz2Any7DDiQGjU0C3hlKhbUXAG9b9c9f9EnqCIajD7Jf3tBwPNtemI+Q7tlX3 Q8EP7DG0H4AzygjlAKFYUdr631t5dqWk7CrIj2jM5zqdn5NJqHWSieU= -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:02 2025 by rpki-client