This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36332e302f32342d3234203d3e203631333137.roa File: 38352e3135382e36332e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: kisK7hkLOd+8itleV4psDpVb6aExXtenNFOVGsYUn3s= Subject key identifier: 02:BF:38:90:93:A1:E1:96:C2:9B:89:90:5C:3B:3C:25:05:68:16:4F Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 6ACA0075BA548BFAB7897EA56D42E692E3310F16 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36332e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 61317 IP address blocks: 85.158.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ca:00:75:ba:54:8b:fa:b7:89:7e:a5:6d:42:e6:92:e3:31:0f:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=02BF389093A1E196C29B89905C3B3C250568164F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:0e:50:28:f9:d0:79:0a:06:ca:8e:0b:5d: 29:d7:18:6a:04:45:26:49:b7:ae:c7:33:7f:39:49: 6f:49:ef:16:b9:82:66:8f:c3:1d:8c:0d:af:85:21: b5:12:a0:bc:71:03:05:17:f0:68:24:24:d6:57:d8: 2d:12:a5:63:fc:f2:5c:0a:31:1d:2c:41:0f:fb:7d: 9d:fd:47:e0:9e:a2:59:33:62:e6:21:1a:3a:97:af: 01:36:69:6d:40:9a:60:1a:41:ef:22:e8:87:e2:85: ff:ca:da:ec:1f:c4:60:71:e5:c6:99:d0:d2:5b:c6: 3e:ae:98:57:c3:8d:80:0d:86:ce:1a:68:e5:27:96: 03:47:80:39:b4:3a:e6:23:d6:0e:06:b4:cf:f8:02: 13:c9:ae:f0:7f:cd:ea:5e:6c:97:6f:3b:42:f2:f1: fe:40:c7:4b:e6:0a:43:e4:be:ba:55:a3:f9:70:af: 4e:2d:bd:1f:6e:b4:77:e1:a5:32:9a:d8:a7:c8:05: 11:de:5b:d2:2a:41:42:9f:1a:32:63:2d:32:23:fb: c1:ce:e4:30:4c:80:46:d8:c7:1d:17:55:49:50:28: b1:79:d7:20:00:36:b5:c4:b0:a1:f0:94:39:c8:83: a3:6a:4e:56:d0:21:af:f7:40:01:7f:17:d5:d6:e7: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BF:38:90:93:A1:E1:96:C2:9B:89:90:5C:3B:3C:25:05:68:16:4F X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36332e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.63.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:fa:3b:ef:71:4f:fe:e1:0f:84:08:5d:e8:b3:19:a4:ec:2f: 8f:e7:62:9c:08:0d:4a:bb:3b:c5:6a:95:3c:16:0f:44:d7:6a: 85:6d:f0:6c:26:4d:42:64:72:af:d9:d3:bf:9d:fe:72:1e:53: ba:c4:e0:42:fe:cf:91:49:bb:35:bc:20:b5:a1:34:6c:bc:b1: aa:7e:e0:4e:0d:1f:c4:a3:75:4a:2f:4b:47:48:eb:af:ca:31: cf:57:32:4a:27:8b:aa:ee:99:2e:cb:b2:18:18:8a:2e:c1:69: ac:f9:8b:21:18:41:1c:0a:48:d0:8f:51:b2:c4:22:c1:2f:01: 86:24:af:4c:c4:00:5a:26:9d:4b:43:ce:9c:1d:0e:66:b6:db: d0:7c:93:58:da:d9:3b:0e:d8:64:ca:c1:fa:eb:fd:af:a3:3d: b5:c8:a1:60:32:48:de:be:cb:6d:54:fe:e5:e3:6b:90:85:0c: f2:0b:3e:ed:ea:86:d2:56:e6:10:1b:20:c8:1a:89:24:5c:fd: 9f:fd:e4:9e:cc:76:79:bc:df:58:a5:eb:b1:03:79:18:ce:96: 57:49:cc:a7:64:e5:c2:72:dc:b2:cc:1b:cd:29:ed:3c:bf:0b: 11:11:6f:11:e8:f1:b7:17:a4:50:b3:3d:97:df:3c:74:3b:b8: ff:da:8e:a7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUasoAdbpUi/q3iX6lbULmkuMxDxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDAyQkYzODkwOTNBMUUxOTZDMjlCODk5MDVDM0IzQzI1MDU2ODE2NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1g5QKPnQeQoGyo4LXSnXGGoE RSZJt67HM385SW9J7xa5gmaPwx2MDa+FIbUSoLxxAwUX8GgkJNZX2C0SpWP88lwK MR0sQQ/7fZ39R+CeolkzYuYhGjqXrwE2aW1AmmAaQe8i6Ifihf/K2uwfxGBx5caZ 0NJbxj6umFfDjYANhs4aaOUnlgNHgDm0OuYj1g4GtM/4AhPJrvB/zepebJdvO0Ly 8f5Ax0vmCkPkvrpVo/lwr04tvR9utHfhpTKa2KfIBRHeW9IqQUKfGjJjLTIj+8HO 5DBMgEbYxx0XVUlQKLF51yAANrXEsKHwlDnIg6NqTlbQIa/3QAF/F9XW5+IfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUAr84kJOh4ZbCm4mQXDs8JQVoFk8wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNjMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWe PzANBgkqhkiG9w0BAQsFAAOCAQEAPfo773FP/uEPhAhd6LMZpOwvj+dinAgNSrs7 xWqVPBYPRNdqhW3wbCZNQmRyr9nTv53+ch5TusTgQv7PkUm7NbwgtaE0bLyxqn7g Tg0fxKN1Si9LR0jrr8oxz1cySieLqu6ZLsuyGBiKLsFprPmLIRhBHApI0I9RssQi wS8BhiSvTMQAWiadS0POnB0OZrbb0HyTWNrZOw7YZMrB+uv9r6M9tcihYDJI3r7L bVT+5eNrkIUM8gs+7eqG0lbmEBsgyBqJJFz9n/3knsx2ebzfWKXrsQN5GM6WV0nM p2TlwnLcsswbzSntPL8LERFvEejxtxekULM9l988dDu4/9qOpw== -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:53 2025 by rpki-client