This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139322e302f32332d3233203d3e203536353430.roa File: 38352e3233372e3139322e302f32332d3233203d3e203536353430.roa (raw, json) Hash identifier: ChwcW4lypvbhejdJlAd3Qq162qCjBT+HQ6oODkylzuw= Subject key identifier: 55:5F:E9:51:4E:01:E7:E1:1E:37:91:8F:B4:A4:AE:2E:DB:EA:68:13 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 48B07D28282F351EADC55CF96F8954F951E1AFE7 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139322e302f32332d3233203d3e203536353430.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 56540 IP address blocks: 85.237.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b0:7d:28:28:2f:35:1e:ad:c5:5c:f9:6f:89:54:f9:51:e1:af:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=555FE9514E01E7E11E37918FB4A4AE2EDBEA6813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:52:37:e5:1b:97:e5:58:41:4f:d0:01:16:71: 65:05:ee:8b:c0:5b:fb:ca:4c:42:74:b4:20:c2:92: 5e:59:53:46:9f:39:c6:1f:f6:5f:50:98:45:ec:f3: 39:ba:41:8c:3c:4a:fd:e5:72:0f:0c:dd:e7:40:31: 58:00:15:5b:40:db:8c:cf:9e:cf:96:fd:ef:77:5f: 31:50:fc:6c:2f:28:28:40:22:db:99:00:c2:00:dc: 2b:e6:32:d6:74:89:ae:4f:9f:d8:a9:ef:b5:eb:22: 1a:49:b9:78:0d:75:53:32:0c:ba:c0:8c:c3:c1:d4: 11:76:cb:e3:c1:0d:6b:e5:e4:0f:31:fd:c7:47:34: a4:0a:64:5d:97:8d:48:62:98:a7:8f:a7:36:9b:95: c4:66:0c:d5:cd:81:1b:b8:59:f7:bb:f7:87:02:98: 90:f8:17:2b:8b:29:86:58:b8:c3:40:df:60:a7:dc: c5:fd:be:a0:0b:b0:92:78:60:39:b7:99:51:9a:63: c2:b9:b4:0c:db:57:a0:8d:ac:e2:a8:35:9f:05:39: fb:fe:4a:85:45:26:0b:f9:84:29:42:f7:68:d0:31: 8c:df:03:40:84:16:81:5a:5f:4b:3d:c6:d1:56:09: a0:a2:ea:8c:8d:62:c2:54:22:da:dc:1d:f6:87:d8: e4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:5F:E9:51:4E:01:E7:E1:1E:37:91:8F:B4:A4:AE:2E:DB:EA:68:13 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139322e302f32332d3233203d3e203536353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.192.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:41:53:78:fa:a6:c2:5a:ee:63:86:49:3a:c2:a0:d3:da:e6: 9a:57:f1:32:41:2a:71:28:9a:89:62:45:58:75:10:57:71:3a: 16:11:2d:01:06:ed:51:cd:f8:e9:03:56:ae:10:d2:f2:5f:23: ad:a5:d1:79:78:63:1e:cc:ce:a3:9f:7a:48:12:99:59:48:64: 72:55:42:16:13:a7:a5:f2:a5:9e:46:27:1a:05:9c:03:23:fe: 58:ea:5e:5b:18:fc:4c:95:72:45:69:18:0f:3b:ec:59:21:63: 51:3b:9e:2f:f5:be:88:0a:02:b5:40:e3:f5:a2:e7:b1:e6:1b: 6c:cf:35:4e:85:27:e9:31:29:ce:4e:dd:80:b6:a5:ba:25:02: bf:13:c6:eb:e9:7e:7c:b8:41:15:d0:18:2c:e0:ce:cd:c2:ca: ab:f7:bb:f6:de:d5:0f:6b:57:5e:37:26:71:2d:2c:68:ad:6e: 18:f1:87:7c:44:32:b5:df:f7:f9:0d:d0:d0:47:97:85:74:50: 0a:0f:82:34:17:56:90:ce:c3:e8:1d:d5:27:bf:1d:6d:61:e0: 5b:f2:5c:c0:dc:3a:2b:d2:31:30:27:79:13:69:74:6b:42:4b: 8d:0b:dc:de:2e:0d:f9:64:3b:cb:01:79:5f:83:52:43:88:8a: 99:f1:95:cb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSLB9KCgvNR6txVz5b4lU+VHhr+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKDU1NUZFOTUxNEUwMUU3RTExRTM3OTE4RkI0QTRBRTJFREJFQTY4MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUjflG5flWEFP0AEWcWUF7ovA W/vKTEJ0tCDCkl5ZU0afOcYf9l9QmEXs8zm6QYw8Sv3lcg8M3edAMVgAFVtA24zP ns+W/e93XzFQ/GwvKChAItuZAMIA3CvmMtZ0ia5Pn9ip77XrIhpJuXgNdVMyDLrA jMPB1BF2y+PBDWvl5A8x/cdHNKQKZF2XjUhimKePpzablcRmDNXNgRu4Wfe794cC mJD4FyuLKYZYuMNA32Cn3MX9vqALsJJ4YDm3mVGaY8K5tAzbV6CNrOKoNZ8FOfv+ SoVFJgv5hClC92jQMYzfA0CEFoFaX0s9xtFWCaCi6oyNYsJUItrcHfaH2OQDAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUVV/pUU4B5+EeN5GPtKSuLtvqaBMwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMTM5 MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNTM2MzUzNDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Ve3AMA0GCSqGSIb3DQEBCwUAA4IBAQBNQVN4+qbCWu5jhkk6wqDT2uaaV/EyQSpx KJqJYkVYdRBXcToWES0BBu1RzfjpA1auENLyXyOtpdF5eGMezM6jn3pIEplZSGRy VUIWE6el8qWeRicaBZwDI/5Y6l5bGPxMlXJFaRgPO+xZIWNRO54v9b6ICgK1QOP1 ouex5htszzVOhSfpMSnOTt2AtqW6JQK/E8br6X58uEEV0Bgs4M7Nwsqr97v23tUP a1deNyZxLSxorW4Y8Yd8RDK13/f5DdDQR5eFdFAKD4I0F1aQzsPoHdUnvx1tYeBb 8lzA3Dor0jEwJ3kTaXRrQkuNC9zeLg35ZDvLAXlfg1JDiIqZ8ZXL -----END CERTIFICATE-----Generated at Tue Dec 16 16:18:46 2025 by rpki-client