This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e203631333137.roa File: 38352e3135382e36322e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: uu3nrqCZfFBNmBipwbdWEDoGayUYCAKwL6OYRIJ6/pQ= Subject key identifier: 37:B9:18:53:82:AA:B9:78:0D:D6:80:4A:B3:E1:24:E2:4D:8B:C5:F4 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 1BD3D01BD909AE1C641FE3CE53C35EFD3921A978 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 61317 IP address blocks: 85.158.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:d0:1b:d9:09:ae:1c:64:1f:e3:ce:53:c3:5e:fd:39:21:a9:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=37B9185382AAB9780DD6804AB3E124E24D8BC5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:3a:05:40:50:21:07:8a:a6:a0:53:5d:1d: c8:d2:8e:c3:01:ba:da:41:0c:66:a5:3d:08:46:78: 51:ca:0a:5b:e1:4c:f8:c4:78:78:74:68:8e:d9:58: 35:21:7b:66:05:9d:9a:55:af:35:a3:de:e4:24:f3: 69:69:0e:51:d6:58:dc:77:b1:94:f2:c1:2e:82:88: b8:a3:20:e7:32:e8:53:3c:48:15:ee:81:8f:46:63: 51:d0:1c:40:3e:a3:1a:af:e6:12:6d:e7:e9:d5:d2: 54:ee:ca:ee:68:4b:32:e6:5d:5c:88:b3:05:df:3e: 10:4d:f7:5c:f9:d5:0b:8e:3c:69:5c:eb:f5:4a:7b: c6:6b:36:cb:f8:42:44:aa:3b:1f:0e:53:74:4c:25: e5:bf:22:12:5e:91:7f:bd:ca:20:cc:bc:60:8b:14: 33:15:14:ff:a1:06:9a:a2:a0:a7:9c:00:9f:2a:66: 26:8d:54:d1:c5:b9:e1:aa:15:5b:26:d8:5b:67:4f: 55:f0:67:7c:a1:f5:af:d4:db:b4:e7:9c:1a:6d:38: 78:b6:e9:6c:8d:d9:7b:24:39:11:61:d3:20:d9:49: 09:81:e8:fb:f3:98:89:5a:61:cf:26:c8:c4:1a:1c: 11:a0:f1:94:78:3f:df:bc:0d:25:06:b7:32:79:d5: d9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:B9:18:53:82:AA:B9:78:0D:D6:80:4A:B3:E1:24:E2:4D:8B:C5:F4 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36322e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.62.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:8c:d9:b6:f6:54:21:55:f5:be:a6:6d:bb:36:b9:c0:97:52: b0:66:88:2c:25:b9:f8:d9:d0:c0:c2:87:c6:e2:c7:a2:2c:12: c7:02:74:b6:07:39:30:be:8c:15:a2:dd:85:4f:23:f3:3a:86: ed:a8:eb:9e:8a:53:53:5d:52:ee:23:6f:82:10:fe:aa:f1:99: ab:72:59:cf:43:67:7e:e6:f3:18:b5:64:50:6e:7a:10:7a:cc: 30:d9:47:6a:9d:6f:d1:c1:54:4e:db:6e:38:37:1b:5a:30:ca: e4:73:12:65:73:5c:19:12:47:ff:2c:2d:87:f8:69:cc:86:db: da:ef:9d:24:c8:97:7e:db:40:f6:aa:58:de:75:6e:8a:2b:95: 7f:34:ba:4f:52:bc:ae:79:01:10:21:68:63:5a:94:13:6b:ca: 7b:7f:d6:40:36:7d:7d:67:fd:7a:4e:4e:36:8e:a6:78:da:4e: ee:d0:63:42:40:17:29:e0:67:d0:9b:03:5a:ca:43:be:5b:58: bf:84:bd:cd:f1:0a:c4:f5:1d:3d:eb:e5:6d:2d:93:f1:24:9c: 4d:1b:7a:f9:a8:5c:47:41:e7:ca:4a:c2:91:f7:f5:07:bc:dc: 6e:bc:47:55:16:ec:87:19:bb:f1:4a:8e:b7:e9:43:3c:48:b4: c7:83:d4:02 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUG9PQG9kJrhxkH+POU8Ne/TkhqXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKDM3QjkxODUzODJBQUI5NzgwREQ2ODA0QUIzRTEyNEUyNEQ4QkM1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEXToFQFAhB4qmoFNdHcjSjsMB utpBDGalPQhGeFHKClvhTPjEeHh0aI7ZWDUhe2YFnZpVrzWj3uQk82lpDlHWWNx3 sZTywS6CiLijIOcy6FM8SBXugY9GY1HQHEA+oxqv5hJt5+nV0lTuyu5oSzLmXVyI swXfPhBN91z51QuOPGlc6/VKe8ZrNsv4QkSqOx8OU3RMJeW/IhJekX+9yiDMvGCL FDMVFP+hBpqioKecAJ8qZiaNVNHFueGqFVsm2FtnT1XwZ3yh9a/U27TnnBptOHi2 6WyN2XskORFh0yDZSQmB6PvzmIlaYc8myMQaHBGg8ZR4P9+8DSUGtzJ51dl7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUN7kYU4KquXgN1oBKs+Ek4k2LxfQwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNjMy MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWe PjANBgkqhkiG9w0BAQsFAAOCAQEAXIzZtvZUIVX1vqZtuza5wJdSsGaILCW5+NnQ wMKHxuLHoiwSxwJ0tgc5ML6MFaLdhU8j8zqG7ajrnopTU11S7iNvghD+qvGZq3JZ z0NnfubzGLVkUG56EHrMMNlHap1v0cFUTttuODcbWjDK5HMSZXNcGRJH/ywth/hp zIbb2u+dJMiXfttA9qpY3nVuiiuVfzS6T1K8rnkBECFoY1qUE2vKe3/WQDZ9fWf9 ek5ONo6meNpO7tBjQkAXKeBn0JsDWspDvltYv4S9zfEKxPUdPevlbS2T8SScTRt6 +ahcR0HnykrCkff1B7zcbrxHVRbshxm78UqOt+lDPEi0x4PUAg== -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:38 2025 by rpki-client