This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e203634323637.roa File: 3139332e3130392e3139352e302f32342d3234203d3e203634323637.roa (raw, json) Hash identifier: 9c5iC7V+at6XphPN8IdGqxhRNWYWaZLbxL/DFjlKrOQ= Subject key identifier: 38:4D:80:5A:03:BB:77:60:A5:F9:60:CA:7F:1D:7C:66:DB:F7:87:DD Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 671278567D96A38D9C9AEF6BDF270F1A33B4F233 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e203634323637.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 64267 IP address blocks: 193.109.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:12:78:56:7d:96:a3:8d:9c:9a:ef:6b:df:27:0f:1a:33:b4:f2:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=384D805A03BB7760A5F960CA7F1D7C66DBF787DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:76:d4:81:7f:2d:34:5b:f6:32:2d:d3:49:97: 04:38:3f:3a:7f:57:10:c9:ad:fb:6c:c5:52:5c:05: 2e:4e:59:dc:89:9e:c3:3f:b6:f7:0d:98:17:74:ba: e0:48:1e:ce:d4:01:45:4d:1f:1e:70:ba:aa:ea:2b: 2e:a3:aa:fe:b9:c9:3d:a2:de:8b:e5:0e:6f:fa:fb: 04:58:f3:14:ae:fb:5d:5e:bb:1c:ee:46:c3:e1:a5: bf:4e:a1:ab:18:22:16:93:f2:53:b8:a0:49:a9:43: d9:c5:49:52:44:ef:9f:50:70:c3:0f:66:c9:bd:d2: 7b:3e:c2:3e:08:b0:e3:4d:18:a5:58:08:46:69:b2: fd:54:c4:03:76:21:92:58:7c:41:65:07:ca:e7:73: dc:30:da:0d:93:8b:23:3c:89:af:84:de:91:01:6a: 67:c3:20:16:b3:a2:1a:d7:f6:83:2e:e4:33:c6:09: 47:d5:28:a7:59:83:11:db:fa:82:92:c7:e7:ca:3f: 0c:48:b8:cf:7e:4e:9c:1b:bd:3c:90:5f:79:47:8c: f7:0d:dc:c0:6c:8d:24:f9:0a:d1:16:40:30:8f:e3: b0:1b:d0:2c:8f:fd:02:5b:eb:18:b2:e9:4a:b3:cf: bb:82:01:01:3d:3d:32:03:16:cb:7f:55:58:95:ed: 5d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4D:80:5A:03:BB:77:60:A5:F9:60:CA:7F:1D:7C:66:DB:F7:87:DD X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3139332e3130392e3139352e302f32342d3234203d3e203634323637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.195.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a8:55:d2:0f:15:e5:46:1d:82:b4:61:a7:9d:aa:a2:cd:ae: dd:8a:d5:96:96:c9:d8:09:df:cc:5a:6b:bd:de:7a:1c:b2:0b: ee:a9:97:06:f5:e3:41:ab:73:76:ca:4e:f0:4f:8b:a7:40:dc: 71:72:b4:26:3d:a8:89:f3:f4:31:0f:0c:dc:a3:23:79:a2:cb: 9a:de:55:fd:fb:d2:22:2d:ba:83:9e:47:87:46:27:5d:7e:5e: 71:48:55:8a:19:89:f8:1c:bd:46:f7:12:db:93:ea:40:7f:a1: 46:68:d1:f5:9a:6a:71:57:f9:62:0e:72:ba:b1:90:7d:cb:88: 5b:f3:56:6c:e2:9e:82:6b:3c:61:60:86:37:d7:e6:4a:8a:b3: 0f:2d:b3:71:22:f1:e2:6b:45:80:f1:1a:ea:ca:34:e0:56:53: 46:ad:95:d8:e3:57:b7:ee:66:1b:95:30:04:4a:08:45:2e:ff: 8d:2f:05:3b:7e:5b:d0:c6:4d:a6:17:dc:ff:d0:fb:1c:31:6e: 54:b8:96:84:e6:62:97:aa:51:67:bf:87:72:94:42:9e:c1:80: 90:07:4c:5c:ba:f4:24:81:9a:bf:af:27:40:58:4f:29:00:f7: 97:2b:4b:f7:b9:9b:b6:bf:cb:e5:f7:65:fa:9d:93:34:ee:18: 81:c2:a9:7e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZxJ4Vn2Wo42cmu9r3ycPGjO08jMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDM4NEQ4MDVBMDNCQjc3NjBBNUY5NjBDQTdGMUQ3QzY2REJGNzg3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPdtSBfy00W/YyLdNJlwQ4Pzp/ VxDJrftsxVJcBS5OWdyJnsM/tvcNmBd0uuBIHs7UAUVNHx5wuqrqKy6jqv65yT2i 3ovlDm/6+wRY8xSu+11euxzuRsPhpb9OoasYIhaT8lO4oEmpQ9nFSVJE759QcMMP Zsm90ns+wj4IsONNGKVYCEZpsv1UxAN2IZJYfEFlB8rnc9ww2g2TiyM8ia+E3pEB amfDIBazohrX9oMu5DPGCUfVKKdZgxHb+oKSx+fKPwxIuM9+TpwbvTyQX3lHjPcN 3MBsjST5CtEWQDCP47Ab0CyP/QJb6xiy6Uqzz7uCAQE9PTIDFst/VViV7V0nAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUOE2AWgO7d2Cl+WDKfx18Ztv3h90wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzOTMzMmUzMTMwMzkyZTMx MzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzQzMjM2Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADBbcMwDQYJKoZIhvcNAQELBQADggEBAEqoVdIPFeVGHYK0YaedqqLNrt2K1ZaW ydgJ38xaa73eehyyC+6plwb140Grc3bKTvBPi6dA3HFytCY9qInz9DEPDNyjI3mi y5reVf370iItuoOeR4dGJ11+XnFIVYoZifgcvUb3EtuT6kB/oUZo0fWaanFX+WIO crqxkH3LiFvzVmzinoJrPGFghjfX5kqKsw8ts3Ei8eJrRYDxGurKNOBWU0atldjj V7fuZhuVMARKCEUu/40vBTt+W9DGTaYX3P/Q+xwxblS4loTmYpeqUWe/h3KUQp7B gJAHTFy69CSBmr+vJ0BYTykA95crS/e5m7a/y+X3ZfqdkzTuGIHCqX4= -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:02 2025 by rpki-client