This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37372e302f32342d3234203d3e20323131333733.roa File: 3138352e38392e37372e302f32342d3234203d3e20323131333733.roa (raw, json) Hash identifier: 2x3o5Z3ybYz6Avv8Yl3fQgze120jmctOGYWRC2YxCQw= Subject key identifier: C0:BE:7E:19:F1:21:02:69:59:23:4B:85:C3:9D:92:47:D2:08:68:77 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 6EDCE1A382E28C539304C36990AF7AEC6BBEECF6 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37372e302f32342d3234203d3e20323131333733.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 211373 IP address blocks: 185.89.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:dc:e1:a3:82:e2:8c:53:93:04:c3:69:90:af:7a:ec:6b:be:ec:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=C0BE7E19F121026959234B85C39D9247D2086877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e8:90:62:c2:31:24:53:a4:b8:ce:c2:f2:d6: d4:da:48:5f:d7:d4:c0:77:0e:7f:c5:a4:98:9b:6f: 7f:5b:1f:8d:73:7a:af:d6:bd:23:1a:0f:e0:7c:0b: 45:1c:0a:f7:5a:8e:fd:b7:0c:64:b4:b3:59:bc:c1: 26:d2:9f:a7:be:eb:e8:a2:43:db:cf:fc:fe:37:84: 68:21:bd:5b:7f:21:ff:0f:b3:34:0e:10:16:66:1d: 3f:33:76:44:c1:14:f0:4d:e3:de:de:52:83:c6:6e: 35:52:5d:ef:19:a8:00:01:6b:72:95:99:b3:84:98: 7c:7e:a2:ad:8b:fe:52:e5:e1:c3:4e:a7:8f:9d:12: 94:d5:cd:88:15:39:04:c6:28:7a:e2:0f:7b:06:0d: c7:c8:aa:27:24:c1:59:36:b3:33:3a:d1:d8:af:09: 84:24:1a:33:ea:3b:95:eb:0a:fb:aa:9d:5a:87:7b: 0f:22:4a:4e:70:cd:ad:16:de:eb:82:4d:28:9c:11: 97:b4:cc:0f:a5:01:16:e0:5f:9c:88:97:75:fd:d9: 58:03:a5:01:b0:dd:45:a5:16:5b:47:08:52:ef:be: 0c:6c:56:e9:32:50:73:21:79:7a:80:2e:c4:39:9f: 87:f3:b6:63:ad:07:2a:49:9c:4f:7b:53:c6:25:e1: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:BE:7E:19:F1:21:02:69:59:23:4B:85:C3:9D:92:47:D2:08:68:77 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37372e302f32342d3234203d3e20323131333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.77.0/24 Signature Algorithm: sha256WithRSAEncryption 24:92:29:99:db:44:06:b8:04:ce:b2:41:96:8b:d5:49:0a:2a: 18:47:b2:6e:ab:4d:2b:32:69:48:10:de:26:47:6c:53:ff:bb: 87:a5:76:23:c3:e4:12:ef:16:78:fb:12:87:42:99:20:38:71: 63:8f:d1:a7:c4:54:2a:7b:e0:61:8e:70:2a:8d:73:ab:a2:e3: f1:20:4e:87:f9:3e:b9:c4:93:17:ab:91:46:c5:2a:b9:02:29: 69:97:78:27:a4:73:f3:55:be:07:ab:d9:07:14:fa:b3:be:c7: 91:23:25:14:6b:c0:e1:72:0d:8f:33:d9:99:36:04:ae:3c:21: 22:20:35:b0:2b:25:14:88:4b:95:f5:96:d6:d6:05:7b:5b:b3: 6b:b2:f8:e2:5b:f7:11:7c:15:68:68:19:3e:30:30:0d:cd:01: fd:41:a9:5d:66:06:57:86:de:11:31:e8:6c:2e:62:69:46:e3: 79:41:83:54:a0:52:2a:90:a2:15:61:14:8d:23:fa:49:56:0b: ae:63:85:8e:c3:90:34:19:59:db:46:85:17:07:f7:31:c7:a4: 8b:5d:7a:1e:fa:d6:5a:18:94:e6:d4:cd:88:1e:b2:bf:b6:e2: f5:76:5e:f5:88:c8:12:d1:8b:23:aa:93:17:1c:66:2e:2a:7e: 2a:cd:c4:fb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbtzho4LijFOTBMNpkK967Gu+7PYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKEMwQkU3RTE5RjEyMTAyNjk1OTIzNEI4NUMzOUQ5MjQ3RDIwODY4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ6JBiwjEkU6S4zsLy1tTaSF/X 1MB3Dn/FpJibb39bH41zeq/WvSMaD+B8C0UcCvdajv23DGS0s1m8wSbSn6e+6+ii Q9vP/P43hGghvVt/If8PszQOEBZmHT8zdkTBFPBN497eUoPGbjVSXe8ZqAABa3KV mbOEmHx+oq2L/lLl4cNOp4+dEpTVzYgVOQTGKHriD3sGDcfIqickwVk2szM60div CYQkGjPqO5XrCvuqnVqHew8iSk5wza0W3uuCTSicEZe0zA+lARbgX5yIl3X92VgD pQGw3UWlFltHCFLvvgxsVukyUHMheXqALsQ5n4fztmOtBypJnE97U8Yl4S53AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwL5+GfEhAmlZI0uFw52SR9IIaHcwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzODM5MmUzNzM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMxMzMzNzMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA uVlNMA0GCSqGSIb3DQEBCwUAA4IBAQAkkimZ20QGuATOskGWi9VJCioYR7Juq00r MmlIEN4mR2xT/7uHpXYjw+QS7xZ4+xKHQpkgOHFjj9GnxFQqe+BhjnAqjXOrouPx IE6H+T65xJMXq5FGxSq5Ailpl3gnpHPzVb4Hq9kHFPqzvseRIyUUa8Dhcg2PM9mZ NgSuPCEiIDWwKyUUiEuV9ZbW1gV7W7NrsvjiW/cRfBVoaBk+MDANzQH9QaldZgZX ht4RMehsLmJpRuN5QYNUoFIqkKIVYRSNI/pJVguuY4WOw5A0GVnbRoUXB/cxx6SL XXoe+tZaGJTm1M2IHrK/tuL1dl71iMgS0YsjqpMXHGYuKn4qzcT7 -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:54 2025 by rpki-client