This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33342e302f32342d3234203d3e203631333137.roa File: 3138352e39332e33342e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: 0b4OPzFpaQTSMBTyUth+kXNLTp32V8fyS0aAoJOsPAw= Subject key identifier: 12:9D:97:5A:C0:92:6A:D3:B9:5B:30:E5:28:E7:15:04:A9:73:CB:C7 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 24B1CC6EB8C1DDF52023FCB6D4998B38B0EB0F00 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33342e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 61317 IP address blocks: 185.93.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b1:cc:6e:b8:c1:dd:f5:20:23:fc:b6:d4:99:8b:38:b0:eb:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=129D975AC0926AD3B95B30E528E71504A973CBC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fc:af:19:e4:20:aa:36:e3:67:e3:55:a9:f2: ad:20:42:61:63:fd:cc:1d:a4:5c:cd:a2:3a:08:0f: 62:eb:0b:f7:c9:44:ab:46:c5:a4:03:09:6f:81:e8: 62:8e:e0:1e:35:4f:69:c5:21:b8:1d:a9:cf:4c:81: 6c:b3:a8:9f:08:ac:2c:25:9e:d8:87:fb:3e:11:cc: 26:98:5b:34:05:59:e3:83:85:74:3c:30:3c:0a:28: e9:f2:7c:89:cf:67:7c:6b:83:7e:14:a6:87:b4:f4: 80:bd:05:77:a4:9d:1e:8b:d2:65:fb:a8:34:3e:ab: 62:95:fe:4d:70:e0:f7:5e:93:dc:b7:d2:35:b2:2c: a7:02:f1:d1:d2:26:36:46:65:18:0d:0f:e7:e2:60: 5a:83:4f:8b:9a:20:23:c8:1a:b1:67:c3:2c:9d:35: 2a:fc:e8:7c:5b:01:40:c9:08:81:63:7c:80:34:f7: 64:bb:3a:f8:3b:ed:8b:69:e9:84:89:27:a3:d7:36: b2:27:d8:45:5d:04:21:f8:89:6b:94:64:a5:0d:72: d5:09:79:ef:99:3d:45:a2:89:54:d9:da:e4:7d:d0: 3c:14:77:4e:cc:27:3e:47:57:8a:6d:04:1f:9d:c4: 92:a5:b3:0d:4d:97:72:4e:ad:0b:06:9a:b4:fa:53: 43:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9D:97:5A:C0:92:6A:D3:B9:5B:30:E5:28:E7:15:04:A9:73:CB:C7 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33342e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.34.0/24 Signature Algorithm: sha256WithRSAEncryption 96:4e:0b:ed:6f:3d:be:f5:12:66:dc:03:47:1e:95:d2:af:b7: cf:aa:d3:fe:b5:a3:76:d5:6a:fa:86:97:86:2c:7a:f1:db:03: 7d:ae:3a:a8:39:15:ef:ac:c0:7b:0d:74:90:a9:f0:7d:e3:24: 75:a5:89:af:b2:4e:06:56:d9:86:16:44:07:d0:5e:26:c3:59: 6d:83:a7:99:2a:7c:26:cd:7a:05:b5:44:c5:48:8c:43:00:58: 47:aa:07:9d:41:e6:02:26:31:a0:73:ac:d3:bb:59:9c:17:3a: e5:02:0c:e4:ff:4c:d1:78:aa:ee:f6:01:3c:60:87:0a:1b:ee: 6b:5a:4f:fe:e0:07:9f:23:d2:58:83:7b:d2:89:29:39:e2:fa: f8:64:bf:18:1b:fc:4a:f2:ff:fc:fc:19:40:d2:0a:3f:25:a5: cc:98:53:9a:dc:34:7d:00:dd:88:2b:b1:fb:a8:cd:ba:fb:de: e3:ba:28:7b:8c:68:5a:3e:1d:84:8d:c9:f7:e5:8f:68:5e:90: 24:ce:bc:ed:9a:ee:9a:06:f9:45:d1:92:26:e6:4a:7e:d9:68: da:6f:f3:d6:ed:5c:95:92:b2:0e:d2:0c:af:ee:3b:0b:9f:8d: 1a:02:a1:9f:17:d5:d9:8f:98:ee:5f:fe:96:63:95:7e:3a:6b: d9:87:de:4e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUJLHMbrjB3fUgI/y21JmLOLDrDwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDEyOUQ5NzVBQzA5MjZBRDNCOTVCMzBFNTI4RTcxNTA0QTk3M0NCQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo/K8Z5CCqNuNn41Wp8q0gQmFj /cwdpFzNojoID2LrC/fJRKtGxaQDCW+B6GKO4B41T2nFIbgdqc9MgWyzqJ8IrCwl ntiH+z4RzCaYWzQFWeODhXQ8MDwKKOnyfInPZ3xrg34Upoe09IC9BXeknR6L0mX7 qDQ+q2KV/k1w4Pdek9y30jWyLKcC8dHSJjZGZRgND+fiYFqDT4uaICPIGrFnwyyd NSr86HxbAUDJCIFjfIA092S7Ovg77Ytp6YSJJ6PXNrIn2EVdBCH4iWuUZKUNctUJ ee+ZPUWiiVTZ2uR90DwUd07MJz5HV4ptBB+dxJKlsw1Nl3JOrQsGmrT6U0P1AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUEp2XWsCSatO5WzDlKOcVBKlzy8cwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzOTMzMmUzMzM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALld IjANBgkqhkiG9w0BAQsFAAOCAQEAlk4L7W89vvUSZtwDRx6V0q+3z6rT/rWjdtVq +oaXhix68dsDfa46qDkV76zAew10kKnwfeMkdaWJr7JOBlbZhhZEB9BeJsNZbYOn mSp8Js16BbVExUiMQwBYR6oHnUHmAiYxoHOs07tZnBc65QIM5P9M0Xiq7vYBPGCH Chvua1pP/uAHnyPSWIN70okpOeL6+GS/GBv8SvL//PwZQNIKPyWlzJhTmtw0fQDd iCux+6jNuvve47ooe4xoWj4dhI3J9+WPaF6QJM687Zrumgb5RdGSJuZKftlo2m/z 1u1clZKyDtIMr+47C5+NGgKhnxfV2Y+Y7l/+lmOVfjpr2YfeTg== -----END CERTIFICATE-----Generated at Tue Dec 16 16:18:45 2025 by rpki-client