This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138382e3234342e3131342e302f32342d3234203d3e203536353430.roa File: 3138382e3234342e3131342e302f32342d3234203d3e203536353430.roa (raw, json) Hash identifier: P/0hM5rAWeJ/yq46OyWMczFK5U1YTf1k93H+UzHC6rw= Subject key identifier: 66:70:4F:34:A4:14:9D:8A:B3:1E:63:E9:56:06:22:28:EC:9E:83:62 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4F309A8884C4D96EAD67733A84CAFE9D254165B0 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138382e3234342e3131342e302f32342d3234203d3e203536353430.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 56540 IP address blocks: 188.244.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:30:9a:88:84:c4:d9:6e:ad:67:73:3a:84:ca:fe:9d:25:41:65:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=66704F34A4149D8AB31E63E956062228EC9E8362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:e2:44:3e:62:7c:32:8c:c4:17:be:02:5e: 60:8f:f6:1b:be:49:eb:8f:57:7d:65:2f:e6:75:e5: 05:e7:be:d6:8b:62:77:70:b8:2f:e4:6e:25:80:5b: 49:e9:67:41:a3:b3:46:ab:cb:c0:f3:b1:41:d0:f3: 01:ee:ea:5a:86:30:bc:26:c9:6d:f2:f5:fb:d4:69: 6c:3f:e4:18:b4:1e:73:c9:52:06:a4:62:3c:f9:32: c9:36:cb:e8:16:29:d3:32:6a:58:ad:f3:e7:5e:c4: a7:6d:03:50:5a:de:e8:6b:a7:9e:de:a1:5c:f6:d1: 38:ae:aa:30:2b:17:22:5b:a9:99:8e:44:0a:ab:2b: 01:27:ad:4b:fc:38:95:6d:b8:fe:12:6d:f5:14:26: be:d9:3d:c1:07:6e:c1:5e:31:ca:a8:03:1e:f1:5e: 63:9b:4c:aa:99:c8:98:46:e3:88:bb:d0:cc:48:e3: 08:0b:4d:14:15:0b:5e:5e:59:d0:96:fa:f7:12:1d: 08:76:79:28:ed:71:41:43:4f:58:ed:e4:52:b0:bb: b1:93:7d:f7:88:00:c9:63:3b:b2:c2:b7:59:fa:1a: fe:3f:cb:f7:b0:a8:17:32:f6:c4:1c:fd:18:a6:3c: 5f:ec:ff:e8:53:ce:7c:69:f1:21:fb:ab:2a:b6:f5: bc:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:70:4F:34:A4:14:9D:8A:B3:1E:63:E9:56:06:22:28:EC:9E:83:62 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138382e3234342e3131342e302f32342d3234203d3e203536353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.244.114.0/24 Signature Algorithm: sha256WithRSAEncryption 63:f5:1b:ed:f3:b5:04:ca:77:17:48:9b:2f:e6:52:7c:33:ec: 65:73:e6:b1:32:11:85:a9:87:83:5b:58:e9:9c:9d:2b:26:62: f2:51:82:8c:f4:bb:1e:85:c5:23:d3:79:57:c3:63:e6:61:91: ef:96:21:46:12:a7:65:b2:34:61:42:cb:e4:d3:98:a0:4d:e0: 15:1a:32:df:d0:fd:6f:b6:0e:bc:4f:50:df:3d:00:06:08:e5: bd:b0:35:c6:de:2b:d0:cf:af:cd:96:31:8c:3e:08:36:4e:76: d2:54:cb:26:be:14:b6:69:65:02:46:0c:89:b7:74:9c:d6:c5: 22:83:af:95:a7:b9:6b:ac:aa:1f:6c:7d:09:97:af:ec:e1:41: 34:e4:e5:50:d4:8f:7d:86:dc:16:c6:b1:b6:51:30:d3:41:82: c8:14:70:d8:2a:a0:14:2c:d2:fc:15:06:ed:e4:6b:96:d7:4c: cd:36:89:11:ab:b6:a2:15:80:79:1d:ae:84:6d:f2:21:4d:97: f3:5b:53:88:13:9e:a7:45:76:95:d4:f2:6c:e6:83:91:7c:71: bc:48:cd:fd:89:45:47:84:7f:ea:bf:e1:6e:1b:20:20:27:f1: d5:a8:92:8a:39:bd:a6:44:ec:a5:7f:06:3b:b6:0c:e0:f8:b7: 53:5e:09:58 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUTzCaiITE2W6tZ3M6hMr+nSVBZbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKDY2NzA0RjM0QTQxNDlEOEFCMzFFNjNFOTU2MDYyMjI4RUM5RTgzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgYeJEPmJ8MozEF74CXmCP9hu+ SeuPV31lL+Z15QXnvtaLYndwuC/kbiWAW0npZ0Gjs0ary8DzsUHQ8wHu6lqGMLwm yW3y9fvUaWw/5Bi0HnPJUgakYjz5Msk2y+gWKdMyalit8+dexKdtA1Ba3uhrp57e oVz20TiuqjArFyJbqZmORAqrKwEnrUv8OJVtuP4SbfUUJr7ZPcEHbsFeMcqoAx7x XmObTKqZyJhG44i70MxI4wgLTRQVC15eWdCW+vcSHQh2eSjtcUFDT1jt5FKwu7GT ffeIAMljO7LCt1n6Gv4/y/ewqBcy9sQc/RimPF/s/+hTznxp8SH7qyq29bzHAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUZnBPNKQUnYqzHmPpVgYiKOyeg2IwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM4MmUzMjM0MzQyZTMx MzEzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzNTM0MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAC89HIwDQYJKoZIhvcNAQELBQADggEBAGP1G+3ztQTKdxdImy/mUnwz7GVz5rEy EYWph4NbWOmcnSsmYvJRgoz0ux6FxSPTeVfDY+Zhke+WIUYSp2WyNGFCy+TTmKBN 4BUaMt/Q/W+2DrxPUN89AAYI5b2wNcbeK9DPr82WMYw+CDZOdtJUyya+FLZpZQJG DIm3dJzWxSKDr5WnuWusqh9sfQmXr+zhQTTk5VDUj32G3BbGsbZRMNNBgsgUcNgq oBQs0vwVBu3ka5bXTM02iRGrtqIVgHkdroRt8iFNl/NbU4gTnqdFdpXU8mzmg5F8 cbxIzf2JRUeEf+q/4W4bICAn8dWokoo5vaZE7KV/Bju2DOD4t1NeCVg= -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:52 2025 by rpki-client