This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33322e302f32342d3234203d3e203536353430.roa File: 3138352e39332e33322e302f32342d3234203d3e203536353430.roa (raw, json) Hash identifier: mT8N6QtY2OFOlQxlMjjXCerYSmY3ucckJags5CldTkY= Subject key identifier: FA:7F:56:18:4C:A7:6E:88:60:D5:38:C7:74:AA:CE:22:1D:99:14:40 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 30D291E80D8EE0922EC261107F5D875D7E93F065 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33322e302f32342d3234203d3e203536353430.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 56540 IP address blocks: 185.93.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:d2:91:e8:0d:8e:e0:92:2e:c2:61:10:7f:5d:87:5d:7e:93:f0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=FA7F56184CA76E8860D538C774AACE221D991440 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a9:67:42:cb:ae:e6:23:52:a2:38:0b:57:d7: 3a:84:72:33:4e:b4:e1:02:0c:be:b1:1b:e7:56:aa: 59:68:6e:e6:7d:0a:28:a6:f1:bf:bb:b5:10:6e:64: 6c:8b:aa:a7:1f:e5:23:fd:f4:75:1c:24:93:34:52: 1b:0f:11:bf:47:d0:c5:c8:6a:8f:32:96:50:2c:75: b5:8a:c7:04:3f:b4:80:74:c4:ac:7b:6a:fc:11:08: 25:aa:aa:50:62:ae:e8:51:bf:f8:8b:55:cf:de:fc: d6:6d:3b:b3:27:fe:37:d7:d8:c2:1a:5a:7a:74:9b: 6c:79:0c:d8:37:a7:18:b2:a4:80:d5:4c:60:f6:98: fc:d6:a3:8f:45:7c:f6:fa:1d:ef:da:98:40:a8:17: cd:eb:73:a0:7c:1b:f0:d4:c0:e0:d4:10:36:92:a7: d0:ad:ad:ca:29:82:62:db:85:df:b8:1a:a0:8d:2a: f0:ad:f1:10:87:e6:6f:e8:0a:e9:b5:2f:17:65:e5: 68:94:db:3d:78:a5:4f:2c:af:c3:fe:ff:76:00:bd: 40:7a:27:21:92:58:0f:c8:06:18:a2:5e:2a:d2:7f: de:fa:09:cd:95:1d:cd:0c:ba:b1:1d:05:21:25:7e: 4f:8e:a7:cb:ec:c0:d2:e5:14:ae:c4:c1:af:f4:b4: a6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:56:18:4C:A7:6E:88:60:D5:38:C7:74:AA:CE:22:1D:99:14:40 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33322e302f32342d3234203d3e203536353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.32.0/24 Signature Algorithm: sha256WithRSAEncryption 28:04:d6:97:03:62:44:45:f3:77:ee:1d:96:26:24:38:61:87: c9:4f:cf:5d:76:78:00:a4:d8:9f:8d:ad:6d:aa:0b:36:bb:18: fc:9f:09:0b:5b:dd:c6:ef:34:fb:f1:95:1c:3e:73:e3:cf:74: a4:39:10:aa:a8:96:d6:a4:9f:81:54:7b:d0:76:d7:bb:93:a4: f5:d6:04:2b:81:46:3a:95:bf:12:a3:ce:b3:f7:81:13:4b:27: 84:48:51:9f:2b:e9:81:ca:1f:1a:a9:c5:9c:ac:21:f2:df:10: b5:af:3f:6f:59:c8:e0:4a:7b:b3:a6:fb:9b:08:7c:ad:c8:0e: 80:94:25:d3:3d:06:66:7b:8b:91:50:88:b3:12:0d:ea:ea:92: 7f:21:83:de:4d:ab:ff:c5:ce:04:55:f0:ed:51:a1:31:be:c9: 64:72:a8:da:c7:46:22:a4:3b:cd:91:90:55:3b:c0:33:27:99: f8:35:1e:a2:2d:d2:4f:d3:eb:53:f1:33:3d:05:32:0e:2c:88: 56:33:75:9f:c5:89:ff:8f:9c:db:57:f7:c5:59:7d:3f:e5:ee: 76:b2:4f:b9:0c:96:2e:f3:bd:bf:de:7c:31:56:46:5f:d3:c4: 5c:1e:0a:4c:83:7d:f3:be:2f:29:a3:d5:f7:df:dd:6c:f9:b2: 0c:2d:5e:53 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUMNKR6A2O4JIuwmEQf12HXX6T8GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEZBN0Y1NjE4NENBNzZFODg2MEQ1MzhDNzc0QUFDRTIyMUQ5OTE0NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfqWdCy67mI1KiOAtX1zqEcjNO tOECDL6xG+dWqllobuZ9Ciim8b+7tRBuZGyLqqcf5SP99HUcJJM0UhsPEb9H0MXI ao8yllAsdbWKxwQ/tIB0xKx7avwRCCWqqlBiruhRv/iLVc/e/NZtO7Mn/jfX2MIa Wnp0m2x5DNg3pxiypIDVTGD2mPzWo49FfPb6He/amECoF83rc6B8G/DUwODUEDaS p9CtrcopgmLbhd+4GqCNKvCt8RCH5m/oCum1Lxdl5WiU2z14pU8sr8P+/3YAvUB6 JyGSWA/IBhiiXirSf976Cc2VHc0MurEdBSElfk+Op8vswNLlFK7Ewa/0tKa/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU+n9WGEynbohg1TjHdKrOIh2ZFEAwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzOTMzMmUzMzMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjM1MzQzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALld IDANBgkqhkiG9w0BAQsFAAOCAQEAKATWlwNiREXzd+4dliYkOGGHyU/PXXZ4AKTY n42tbaoLNrsY/J8JC1vdxu80+/GVHD5z4890pDkQqqiW1qSfgVR70HbXu5Ok9dYE K4FGOpW/EqPOs/eBE0snhEhRnyvpgcofGqnFnKwh8t8Qta8/b1nI4Ep7s6b7mwh8 rcgOgJQl0z0GZnuLkVCIsxIN6uqSfyGD3k2r/8XOBFXw7VGhMb7JZHKo2sdGIqQ7 zZGQVTvAMyeZ+DUeoi3ST9PrU/EzPQUyDiyIVjN1n8WJ/4+c21f3xVl9P+XudrJP uQyWLvO9v958MVZGX9PEXB4KTIN9874vKaPV99/dbPmyDC1eUw== -----END CERTIFICATE-----Generated at Tue Dec 16 16:18:46 2025 by rpki-client