This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230322e302f32342d3234203d3e203534323532.roa File: 38352e3233372e3230322e302f32342d3234203d3e203534323532.roa (raw, json) Hash identifier: Wlmbvk7/cHT5OZ44llMufulh/3+TsFMjnSHcuE+BjVc= Subject key identifier: AC:26:20:F9:19:E0:B4:20:74:FD:4B:BB:32:7B:A7:BC:44:5B:3F:9D Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 0C972F543DCA42322E2538CC5147FCEC2D63F7A0 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230322e302f32342d3234203d3e203534323532.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 54252 IP address blocks: 85.237.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:97:2f:54:3d:ca:42:32:2e:25:38:cc:51:47:fc:ec:2d:63:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=AC2620F919E0B42074FD4BBB327BA7BC445B3F9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fe:5b:37:7d:5e:76:28:42:6b:eb:34:65:f5: 28:0d:1a:f8:95:02:dd:e1:85:95:ae:a3:92:da:75: 58:9c:c7:03:f3:bb:95:1a:a6:81:a9:cd:f2:b8:ef: 85:7d:48:84:e5:61:9d:63:3f:fd:86:02:03:3e:1d: ee:91:6f:a2:2c:59:e3:e4:61:ff:35:85:1b:08:76: 72:ad:e6:a2:b9:a7:e5:71:35:5d:06:fa:eb:72:75: 7d:11:a7:0f:0e:07:4a:33:63:ac:37:9e:6c:b8:22: 23:19:1b:8f:23:c6:ad:29:2a:6f:e4:85:f5:dc:04: 2c:2b:d2:bd:39:fa:a4:ef:77:11:35:b6:f3:f5:bc: b2:e3:94:b7:1b:62:79:0b:5f:2a:0c:4a:15:ff:25: 7d:0e:18:2e:f6:6d:72:fd:d0:fc:d8:c8:8c:0d:94: f0:3c:fb:a7:85:5c:e6:0e:fe:12:47:50:2f:c2:13: 82:f5:a2:7e:ae:9e:a7:99:d6:57:9c:a8:41:c1:93: 8b:cd:e3:8d:8e:78:05:51:80:9e:29:2a:d0:55:94: a1:4a:0f:22:6b:2f:a8:8b:4d:b3:f5:ea:cb:ba:81: f2:42:44:47:dc:11:47:4b:95:df:6e:cb:86:09:e0: 3c:85:d1:3c:cd:e6:6d:a7:90:1e:10:55:ba:df:c9: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:26:20:F9:19:E0:B4:20:74:FD:4B:BB:32:7B:A7:BC:44:5B:3F:9D X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230322e302f32342d3234203d3e203534323532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.202.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:c8:fb:7b:cd:b1:ac:d4:f0:56:0b:d5:9e:77:9f:23:24:e5: 2e:24:20:0d:1a:23:bd:9e:5d:08:c8:2d:91:d7:d0:08:38:9c: e1:fb:4b:ef:77:4d:24:61:89:40:ab:96:89:64:fa:57:49:9b: 0e:5d:8a:9b:8b:00:3a:8f:e4:0f:cb:fa:5a:40:c1:5b:44:ff: ca:8a:d6:32:64:44:55:2d:a7:c4:86:38:a8:da:30:b9:07:4b: 11:d2:f0:3e:7b:73:42:22:46:b6:05:aa:88:0e:bb:50:a7:9b: b9:23:c9:25:43:05:12:11:70:6e:6c:02:d2:c2:cd:7b:02:e3: 01:c3:57:3a:e9:d4:1c:7f:a8:6f:0a:ec:7c:69:1f:48:41:ed: 76:75:77:70:af:33:59:17:bc:ee:76:b9:79:fe:57:52:59:4b: d3:df:6b:5b:14:77:c5:bc:53:1a:a2:74:fa:7c:1d:4e:10:7e: 92:0f:b5:ad:35:37:16:a0:04:f3:84:47:8a:98:35:80:5d:53: 45:29:58:1a:38:3b:23:22:65:75:db:67:82:50:ab:37:5d:2b: 71:25:9e:31:c7:4a:aa:b3:78:e7:fc:45:56:01:c9:58:86:99: 26:de:bd:1e:53:b2:f3:2f:53:37:9b:93:c0:80:cb:87:88:08: f2:7b:ad:f7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUDJcvVD3KQjIuJTjMUUf87C1j96AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEFDMjYyMEY5MTlFMEI0MjA3NEZENEJCQjMyN0JBN0JDNDQ1QjNGOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ/ls3fV52KEJr6zRl9SgNGviV At3hhZWuo5LadVicxwPzu5UapoGpzfK474V9SITlYZ1jP/2GAgM+He6Rb6IsWePk Yf81hRsIdnKt5qK5p+VxNV0G+utydX0Rpw8OB0ozY6w3nmy4IiMZG48jxq0pKm/k hfXcBCwr0r05+qTvdxE1tvP1vLLjlLcbYnkLXyoMShX/JX0OGC72bXL90PzYyIwN lPA8+6eFXOYO/hJHUC/CE4L1on6unqeZ1lecqEHBk4vN442OeAVRgJ4pKtBVlKFK DyJrL6iLTbP16su6gfJCREfcEUdLld9uy4YJ4DyF0TzN5m2nkB4QVbrfyZCHAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrCYg+RngtCB0/Uu7MnunvERbP50wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM0MzIzNTMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3KMA0GCSqGSIb3DQEBCwUAA4IBAQBcyPt7zbGs1PBWC9Wed58jJOUuJCANGiO9 nl0IyC2R19AIOJzh+0vvd00kYYlAq5aJZPpXSZsOXYqbiwA6j+QPy/paQMFbRP/K itYyZERVLafEhjio2jC5B0sR0vA+e3NCIka2BaqIDrtQp5u5I8klQwUSEXBubALS ws17AuMBw1c66dQcf6hvCux8aR9IQe12dXdwrzNZF7zudrl5/ldSWUvT32tbFHfF vFMaonT6fB1OEH6SD7WtNTcWoATzhEeKmDWAXVNFKVgaODsjImV122eCUKs3XStx JZ4xx0qqs3jn/EVWAclYhpkm3r0eU7LzL1M3m5PAgMuHiAjye633 -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:38 2025 by rpki-client