This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37392e302f32342d3234203d3e20323030303838.roa File: 3138352e38392e37392e302f32342d3234203d3e20323030303838.roa (raw, json) Hash identifier: EskfFBfTx6QvrbPUTaQ0Xp3Tuqr+VMSoDjFqd5Y408c= Subject key identifier: 45:44:E7:7C:94:20:46:90:23:CE:3F:E5:E3:41:38:A2:6B:29:4B:AD Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 2ED10F79BEB9A4D6BB0D99FDBF2C1E619061ACD0 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37392e302f32342d3234203d3e20323030303838.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 200088 IP address blocks: 185.89.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d1:0f:79:be:b9:a4:d6:bb:0d:99:fd:bf:2c:1e:61:90:61:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=4544E77C9420469023CE3FE5E34138A26B294BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5a:fc:ed:b2:91:51:2e:2e:50:48:06:d0:fc: 56:7b:ac:ee:de:8e:ce:d8:1d:f7:87:33:de:bd:ad: 65:f5:d3:a7:21:57:79:8d:14:8c:ce:a1:b2:c6:41: 61:c2:3d:79:06:6d:ad:4b:68:a8:12:3a:12:e3:e9: 57:89:80:53:de:9f:4d:82:e4:af:09:b5:e4:bb:03: 5e:60:6c:95:13:59:81:0b:98:fe:f9:8f:8c:17:94: 85:fb:5f:79:1c:3b:f1:9a:d4:cd:bc:4e:da:ab:ec: 89:c7:14:cc:c6:17:94:e2:3b:45:cc:72:27:55:02: 07:a1:3e:76:e8:73:8f:00:6b:fa:1b:37:49:0c:5e: 53:99:42:e4:38:bf:40:3a:26:06:8d:c9:ae:4a:95: 19:e4:6d:85:f5:00:3e:70:4c:9a:df:b7:84:e5:2f: 6a:c6:3e:6e:72:c0:6f:eb:f7:2d:0b:13:03:27:fe: e1:04:20:53:d9:73:42:09:ba:14:31:ab:45:eb:66: b6:cc:68:83:6f:90:d5:57:e8:20:7a:d6:fe:01:82: 72:aa:53:c6:d1:43:74:8a:98:2c:56:ec:a0:0e:48: 25:7c:be:c5:d8:9f:1c:4b:3e:9e:77:ea:d7:0e:af: 09:84:6c:53:ae:f4:71:e6:75:6c:2a:a0:ad:5d:54: 91:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:44:E7:7C:94:20:46:90:23:CE:3F:E5:E3:41:38:A2:6B:29:4B:AD X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37392e302f32342d3234203d3e20323030303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.79.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:ac:ce:97:1f:63:1f:ae:53:0a:57:8e:bc:13:4c:23:2b:da: 61:7b:d2:90:c8:e8:f0:39:d9:8d:2f:df:17:a9:aa:7f:f9:13: cb:6b:74:a2:1d:91:f7:b7:ca:42:03:53:a4:dd:a9:c6:9f:f3: f8:8f:58:4a:2f:6c:2b:84:55:f8:b0:80:cc:ed:0b:1f:7a:d9: 4f:99:c4:09:51:3c:eb:f8:aa:55:e9:a3:3f:2e:96:26:a0:b5: 2e:8a:59:02:be:99:6c:91:b1:2b:a8:cd:e9:74:84:cb:6a:23: 31:5b:cf:83:55:6e:a1:d0:2f:63:95:3b:43:4e:35:82:13:64: c2:2b:43:7d:00:5c:f3:0e:07:71:ee:38:fa:1a:ce:82:e1:3b: 87:c7:80:c9:c2:e3:3e:9b:a3:41:d4:fa:c0:c5:7a:02:14:e1: 71:20:48:e8:ee:fc:bf:ac:33:fe:b7:41:df:8d:c0:c9:52:3e: ae:2b:6a:0f:95:a6:c3:17:ec:e4:be:db:46:25:89:b2:e3:d5: 13:6d:06:af:d5:33:f7:c4:aa:e5:86:55:ca:e5:f3:ab:8e:74: 65:64:15:4b:6d:cc:78:c1:a3:06:86:2f:de:90:1b:a4:a2:bb: 4d:b3:6f:d0:0c:71:52:68:66:c4:91:84:74:0e:e8:6e:ee:97: 08:32:ff:0f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULtEPeb65pNa7DZn9vyweYZBhrNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDQ1NDRFNzdDOTQyMDQ2OTAyM0NFM0ZFNUUzNDEzOEEyNkIyOTRCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnWvztspFRLi5QSAbQ/FZ7rO7e js7YHfeHM969rWX106chV3mNFIzOobLGQWHCPXkGba1LaKgSOhLj6VeJgFPen02C 5K8JteS7A15gbJUTWYELmP75j4wXlIX7X3kcO/Ga1M28Ttqr7InHFMzGF5TiO0XM cidVAgehPnboc48Aa/obN0kMXlOZQuQ4v0A6JgaNya5KlRnkbYX1AD5wTJrft4Tl L2rGPm5ywG/r9y0LEwMn/uEEIFPZc0IJuhQxq0XrZrbMaINvkNVX6CB61v4BgnKq U8bRQ3SKmCxW7KAOSCV8vsXYnxxLPp536tcOrwmEbFOu9HHmdWwqoK1dVJE7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURUTnfJQgRpAjzj/l40E4omspS60wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzODM5MmUzNzM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzAzODM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA uVlPMA0GCSqGSIb3DQEBCwUAA4IBAQBMrM6XH2MfrlMKV468E0wjK9phe9KQyOjw OdmNL98Xqap/+RPLa3SiHZH3t8pCA1Ok3anGn/P4j1hKL2wrhFX4sIDM7QsfetlP mcQJUTzr+KpV6aM/LpYmoLUuilkCvplskbErqM3pdITLaiMxW8+DVW6h0C9jlTtD TjWCE2TCK0N9AFzzDgdx7jj6Gs6C4TuHx4DJwuM+m6NB1PrAxXoCFOFxIEjo7vy/ rDP+t0HfjcDJUj6uK2oPlabDF+zkvttGJYmy49UTbQav1TP3xKrlhlXK5fOrjnRl ZBVLbcx4waMGhi/ekBukortNs2/QDHFSaGbEkYR0Duhu7pcIMv8P -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:51 2025 by rpki-client