This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230342e302f32342d3234203d3e203631333137.roa File: 38352e3233372e3230342e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: AjyfUywuja3gSnfqIipTNDPjmBXT7jhcBzgkojmvX/o= Subject key identifier: B2:9A:B9:07:64:34:C5:2C:D9:79:00:BE:DF:6F:85:0C:68:07:5B:4C Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 6735FFCB6D6409F26056E6162400026EDFE3039F Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230342e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 61317 IP address blocks: 85.237.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:35:ff:cb:6d:64:09:f2:60:56:e6:16:24:00:02:6e:df:e3:03:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=B29AB9076434C52CD97900BEDF6F850C68075B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:e6:bd:d8:08:9d:17:26:dd:e9:5a:4a:53: 79:72:59:e0:58:21:c9:47:7e:b3:02:cc:fc:4f:55: bf:a1:89:ca:93:92:1a:d2:90:ca:f7:43:f0:6a:a9: c5:65:78:53:cd:93:d8:de:64:42:bf:c6:fc:92:85: 40:e5:9e:c7:97:3f:91:f1:15:33:47:a8:a3:fb:f7: 7d:16:19:3a:8c:ce:e2:bc:4f:1f:56:ed:cf:e2:77: 43:b1:69:23:2c:7a:38:01:e5:cf:bc:0b:f9:9c:ba: 52:b7:c1:f6:1d:46:d8:b9:4b:f2:69:d8:2a:53:54: 47:f6:ca:0c:7c:dd:84:94:0e:e8:b6:39:ae:e0:24: 02:94:2a:7f:0c:cb:79:d3:25:18:71:ab:01:ff:52: 73:d5:30:cd:13:34:07:8f:96:fd:fc:f1:2a:e7:d3: b7:b6:34:72:4b:b1:f3:e3:2b:57:5b:eb:de:1f:a3: 7d:03:a8:19:8b:ad:20:52:01:27:f2:78:8c:9b:46: ff:85:83:c3:b7:bf:6f:94:a9:7c:2e:ed:32:d6:57: eb:65:fc:98:a3:e9:6a:67:d7:11:34:9b:0c:4e:8c: 8a:69:fd:78:1c:06:3a:d8:db:7f:cf:7d:9c:ea:b9: 3b:c0:19:8a:54:f5:f8:39:e3:f9:8f:fb:49:04:26: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9A:B9:07:64:34:C5:2C:D9:79:00:BE:DF:6F:85:0C:68:07:5B:4C X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230342e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.204.0/24 Signature Algorithm: sha256WithRSAEncryption 33:9d:f6:59:24:a3:43:82:41:63:e4:7a:ba:9c:9a:9a:be:4a: 38:34:65:7d:90:db:d4:8a:73:2c:db:e1:a4:d0:48:c0:ab:eb: 76:22:db:e9:19:0b:84:5d:5f:46:51:be:57:d8:87:4f:b2:2a: 0e:5a:dc:16:6a:a8:91:6c:4d:3c:59:d5:e1:79:6e:33:f8:fa: 73:cb:d6:59:1c:8f:c5:a5:82:19:4f:61:34:67:54:2e:af:17: c0:bf:21:f6:b1:2f:fa:81:31:46:90:34:a7:8e:53:09:33:50: 80:49:e7:47:96:1a:2e:d4:c3:14:2e:d0:a4:4b:14:fd:97:06: 98:f1:72:b5:bf:d9:d0:eb:e8:79:42:bb:b9:70:69:f7:a7:fc: 9b:cd:81:66:a9:74:3d:91:bc:cc:44:54:19:6b:78:f1:8c:5f: aa:85:ef:ae:6c:13:73:f2:48:bd:c4:f0:c7:af:b1:01:7d:63: e5:c8:23:c0:d7:c4:0c:2a:e0:47:8f:f6:22:bf:a9:1b:55:93: 18:f1:ea:5a:6c:2b:fa:c7:59:eb:62:a2:8a:2c:04:cb:41:87: 60:7e:18:50:b6:6e:ea:1a:bd:f7:1d:0d:8d:ef:db:68:b3:d2: 7e:3d:12:ef:c8:8e:11:cd:37:c5:d7:4c:43:fd:b1:38:da:e0: 28:2b:f1:9a -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZzX/y21kCfJgVuYWJAACbt/jA58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEIyOUFCOTA3NjQzNEM1MkNEOTc5MDBCRURGNkY4NTBDNjgwNzVCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCinea92AidFybd6VpKU3lyWeBY IclHfrMCzPxPVb+hicqTkhrSkMr3Q/BqqcVleFPNk9jeZEK/xvyShUDlnseXP5Hx FTNHqKP7930WGTqMzuK8Tx9W7c/id0OxaSMsejgB5c+8C/mculK3wfYdRti5S/Jp 2CpTVEf2ygx83YSUDui2Oa7gJAKUKn8My3nTJRhxqwH/UnPVMM0TNAePlv388Srn 07e2NHJLsfPjK1db694fo30DqBmLrSBSASfyeIybRv+Fg8O3v2+UqXwu7TLWV+tl /Jij6Wpn1xE0mwxOjIpp/XgcBjrY23/PfZzquTvAGYpU9fg54/mP+0kEJkaBAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUspq5B2Q0xSzZeQC+32+FDGgHW0wwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3MMA0GCSqGSIb3DQEBCwUAA4IBAQAznfZZJKNDgkFj5Hq6nJqavko4NGV9kNvU inMs2+Gk0EjAq+t2ItvpGQuEXV9GUb5X2IdPsioOWtwWaqiRbE08WdXheW4z+Ppz y9ZZHI/FpYIZT2E0Z1QurxfAvyH2sS/6gTFGkDSnjlMJM1CASedHlhou1MMULtCk SxT9lwaY8XK1v9nQ6+h5Qru5cGn3p/ybzYFmqXQ9kbzMRFQZa3jxjF+qhe+ubBNz 8ki9xPDHr7EBfWPlyCPA18QMKuBHj/Yiv6kbVZMY8epabCv6x1nrYqKKLATLQYdg fhhQtm7qGr33HQ2N79tos9J+PRLvyI4RzTfF10xD/bE42uAoK/Ga -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:52 2025 by rpki-client