This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230312e302f32342d3234203d3e20313335333931.roa File: 38352e3233372e3230312e302f32342d3234203d3e20313335333931.roa (raw, json) Hash identifier: OZJI+eE1BK02K4YtmVXTLdQw23zWAzWvKbqwH/9iGzo= Subject key identifier: 8C:61:C8:FF:32:B8:A5:71:CD:D9:C2:7F:F0:39:3B:D1:11:54:15:7C Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 5EF122791131AA6D1ADD0946F5A8D4A74E7D3DBE Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230312e302f32342d3234203d3e20313335333931.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 135391 IP address blocks: 85.237.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f1:22:79:11:31:aa:6d:1a:dd:09:46:f5:a8:d4:a7:4e:7d:3d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=8C61C8FF32B8A571CDD9C27FF0393BD11154157C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0b:fa:df:dc:04:fd:c0:9c:c9:f6:40:cd:3f: a2:ed:ea:50:32:1d:bb:e9:85:61:75:58:d7:8b:8c: 0c:24:0e:bd:7a:93:dd:cf:c2:3d:bb:be:75:fe:68: 58:f6:3a:eb:1f:d5:12:6d:ae:56:ca:09:d4:2b:a1: 4c:6e:63:64:f6:52:d9:4e:0e:fd:3a:82:30:62:eb: 4b:3c:14:42:a9:41:2a:8b:76:75:0e:6e:1d:56:2e: 3f:e1:cd:26:70:e8:bb:27:a5:33:a2:dd:32:0b:e6: 11:63:ef:bf:b1:37:4e:d1:94:d7:79:3a:05:a8:03: 57:b1:be:bf:f8:61:bc:f3:4b:6f:e4:1e:82:22:fe: c1:0a:97:47:74:1b:2a:bf:c1:d8:2c:1b:a2:98:43: 17:f3:0a:21:7a:5e:18:2e:c8:55:a3:0f:74:dc:8f: 5c:b8:dd:f0:f4:0a:6b:de:51:40:51:1d:fe:ef:93: e4:f6:ec:52:7b:d7:cb:ac:aa:4b:7f:b6:18:6d:20: 06:d5:47:56:6b:a8:e1:d7:7c:ab:12:a3:ba:e9:4e: 06:6a:ca:a8:78:a2:c9:c3:68:d0:ce:16:09:8d:01: 5a:71:50:bf:8b:62:e9:68:1e:f0:b3:bc:f2:1e:f3: 2d:bf:d3:55:b4:ae:30:24:62:fb:f2:38:27:96:c9: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:61:C8:FF:32:B8:A5:71:CD:D9:C2:7F:F0:39:3B:D1:11:54:15:7C X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230312e302f32342d3234203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.201.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:f5:de:0c:5c:85:57:20:cb:a8:36:ce:47:48:3b:ae:6b:07: c1:d0:8e:c2:2a:53:24:3a:96:d8:d1:d4:51:de:da:ff:bd:fd: 97:63:26:bb:b1:de:15:3d:a0:5f:b3:cb:73:cf:59:a1:3f:1b: 7c:85:c8:68:c8:ea:c3:3d:f0:d6:fe:4e:11:3b:f0:74:a2:86: 57:66:01:77:fa:d0:ca:92:f7:6b:f3:63:be:56:eb:5a:2c:a2: 0e:e7:c5:5f:19:94:88:76:21:05:51:dc:ad:2c:44:82:f9:38: a7:f1:cd:8c:33:bb:f7:8d:49:76:c1:ea:ed:14:fd:28:dd:7e: 9a:41:dd:66:b9:3e:c5:55:36:73:be:71:09:5a:51:d1:ca:96: 2e:19:00:7b:74:20:83:45:33:8b:eb:92:42:6b:c0:1d:13:68: 81:4b:84:a3:2d:f7:ab:25:b2:eb:58:81:5d:f1:01:e0:45:99: b1:12:eb:bf:4b:81:6c:86:5a:f6:09:b6:06:54:ee:24:39:8c: 7c:cf:75:f8:b7:92:ea:d0:50:e5:dd:13:e5:e5:58:21:45:bf: 7c:f9:75:b2:b4:a3:f9:7b:aa:9d:cf:44:7a:f3:3d:e9:09:23: 34:f1:40:b9:92:17:40:3f:d5:78:88:be:21:f3:51:16:5c:d5: c2:00:33:f7 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUXvEieRExqm0a3QlG9ajUp059Pb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDhDNjFDOEZGMzJCOEE1NzFDREQ5QzI3RkYwMzkzQkQxMTE1NDE1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2C/rf3AT9wJzJ9kDNP6Lt6lAy HbvphWF1WNeLjAwkDr16k93Pwj27vnX+aFj2Ousf1RJtrlbKCdQroUxuY2T2UtlO Dv06gjBi60s8FEKpQSqLdnUObh1WLj/hzSZw6LsnpTOi3TIL5hFj77+xN07RlNd5 OgWoA1exvr/4YbzzS2/kHoIi/sEKl0d0Gyq/wdgsG6KYQxfzCiF6XhguyFWjD3Tc j1y43fD0CmveUUBRHf7vk+T27FJ718usqkt/thhtIAbVR1ZrqOHXfKsSo7rpTgZq yqh4osnDaNDOFgmNAVpxUL+LYuloHvCzvPIe8y2/01W0rjAkYvvyOCeWyanxAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUjGHI/zK4pXHN2cJ/8Dk70RFUFXwwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzMzM5MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7ckwDQYJKoZIhvcNAQELBQADggEBAFr13gxchVcgy6g2zkdIO65rB8HQjsIq UyQ6ltjR1FHe2v+9/ZdjJrux3hU9oF+zy3PPWaE/G3yFyGjI6sM98Nb+ThE78HSi hldmAXf60MqS92vzY75W61osog7nxV8ZlIh2IQVR3K0sRIL5OKfxzYwzu/eNSXbB 6u0U/SjdfppB3Wa5PsVVNnO+cQlaUdHKli4ZAHt0IINFM4vrkkJrwB0TaIFLhKMt 96slsutYgV3xAeBFmbES679LgWyGWvYJtgZU7iQ5jHzPdfi3kurQUOXdE+XlWCFF v3z5dbK0o/l7qp3PRHrzPekJIzTxQLmSF0A/1XiIviHzURZc1cIAM/c= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:47 2025 by rpki-client