This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230362e302f32332d3233203d3e20343031343433.roa File: 38352e3233372e3230362e302f32332d3233203d3e20343031343433.roa (raw, json) Hash identifier: tLC9jeCzmws8kHvR+cUVsq9zJjnuGMcEorpuV1bgScI= Subject key identifier: F3:38:AC:BF:5B:E7:1D:E6:36:1F:85:CA:95:2B:92:45:91:BD:62:2A Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 2B389D502BCDDD72D028E0BAAA6F0011219F55D2 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230362e302f32332d3233203d3e20343031343433.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 401443 IP address blocks: 85.237.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:38:9d:50:2b:cd:dd:72:d0:28:e0:ba:aa:6f:00:11:21:9f:55:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=F338ACBF5BE71DE6361F85CA952B924591BD622A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:27:3c:94:55:36:04:74:4b:a1:18:e7:4d:aa: e0:48:08:a8:7e:7e:cd:06:be:fa:65:10:cb:ff:40: 2f:74:aa:0e:a7:c2:a9:f7:b8:62:ea:5b:a2:53:7c: e6:68:c5:63:f3:05:5d:7f:a4:03:83:c8:f5:1a:48: b8:c7:cc:24:85:15:8b:63:cd:ec:b0:8e:03:a4:72: cb:94:aa:74:74:2e:b3:06:4b:a7:18:2a:31:bf:88: 34:48:a8:19:45:10:ec:5c:52:5d:42:3f:88:e3:0d: e0:b6:98:8b:1f:07:97:d9:28:47:af:ef:c9:c8:39: 41:0c:8a:2b:18:f0:0b:bc:05:bf:05:0e:84:60:70: 2f:78:97:b1:cf:60:74:d5:ad:3e:2d:28:ef:b2:bf: 7b:7a:1b:5a:9c:f8:de:a7:7e:b3:d4:a0:20:b2:d0: de:eb:7e:3b:20:b8:b5:09:23:fa:06:03:8b:30:60: 6d:4f:30:fb:55:f6:38:10:fd:bc:4f:4c:76:51:06: 10:f9:fe:67:53:d9:e4:e1:76:60:bf:26:fc:aa:a4: e4:23:7e:e4:23:70:e3:50:9e:02:cd:bc:d6:c1:3d: d0:1a:90:63:79:8f:47:65:21:f7:06:a5:e9:fa:fa: 2f:3f:1b:d3:a6:31:dd:18:f7:ea:eb:da:54:1d:8b: 7d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:38:AC:BF:5B:E7:1D:E6:36:1F:85:CA:95:2B:92:45:91:BD:62:2A X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230362e302f32332d3233203d3e20343031343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.206.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:db:ae:8e:44:22:0f:8f:eb:25:c3:6a:ef:d0:f3:17:2c:72: b1:9f:ea:c6:51:7b:88:68:34:5b:d3:11:c1:8b:ee:4a:cd:9c: ea:a4:5f:1b:36:99:04:84:e2:58:27:3a:51:d3:94:0d:1d:c5: 5f:ea:5a:2e:9a:c7:f7:90:db:80:63:22:df:a8:ad:fb:e3:ec: 17:b3:f3:63:db:de:cb:e1:ce:f2:74:6e:5b:3b:ea:4c:be:6e: 72:5b:aa:a6:60:94:62:dc:ee:f2:08:f5:25:2d:63:de:25:39: fd:7c:f6:07:69:f6:a9:3a:40:02:59:f7:95:0b:fa:47:95:5f: 20:56:fa:01:50:ba:91:97:13:10:e6:72:c4:d4:b5:2c:fd:6f: a1:c0:b9:fd:3d:68:ff:4a:3b:dd:b2:2f:7c:f6:d8:9b:70:f3: 7d:ff:93:6b:ec:78:6f:91:79:33:76:0f:10:19:c2:68:92:fb: d3:d2:4a:56:26:fa:2c:29:9f:d8:7f:29:ec:f5:87:60:2f:96: 3a:af:5d:5d:fd:d0:9b:57:78:59:f1:29:00:44:67:42:05:c4: d0:8e:91:4b:c2:dc:91:a7:67:3b:54:34:c2:d7:64:03:b9:93: dd:8a:05:62:1d:a6:1c:92:72:d9:b4:ff:34:81:f5:a8:7e:22: 0f:13:18:76 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUKzidUCvN3XLQKOC6qm8AESGfVdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKEYzMzhBQ0JGNUJFNzFERTYzNjFGODVDQTk1MkI5MjQ1OTFCRDYyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWJzyUVTYEdEuhGOdNquBICKh+ fs0GvvplEMv/QC90qg6nwqn3uGLqW6JTfOZoxWPzBV1/pAODyPUaSLjHzCSFFYtj zeywjgOkcsuUqnR0LrMGS6cYKjG/iDRIqBlFEOxcUl1CP4jjDeC2mIsfB5fZKEev 78nIOUEMiisY8Au8Bb8FDoRgcC94l7HPYHTVrT4tKO+yv3t6G1qc+N6nfrPUoCCy 0N7rfjsguLUJI/oGA4swYG1PMPtV9jgQ/bxPTHZRBhD5/mdT2eThdmC/JvyqpOQj fuQjcONQngLNvNbBPdAakGN5j0dlIfcGpen6+i8/G9OmMd0Y9+rr2lQdi30XAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU8zisv1vnHeY2H4XKlSuSRZG9YiowHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDMwMzEzNDM0MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAFV7c4wDQYJKoZIhvcNAQELBQADggEBAH/bro5EIg+P6yXDau/Q8xcscrGf6sZR e4hoNFvTEcGL7krNnOqkXxs2mQSE4lgnOlHTlA0dxV/qWi6ax/eQ24BjIt+orfvj 7Bez82Pb3svhzvJ0bls76ky+bnJbqqZglGLc7vII9SUtY94lOf189gdp9qk6QAJZ 95UL+keVXyBW+gFQupGXExDmcsTUtSz9b6HAuf09aP9KO92yL3z22Jtw833/k2vs eG+ReTN2DxAZwmiS+9PSSlYm+iwpn9h/Kez1h2AvljqvXV390JtXeFnxKQBEZ0IF xNCOkUvC3JGnZztUNMLXZAO5k92KBWIdphySctm0/zSB9ah+Ig8TGHY= -----END CERTIFICATE-----Generated at Tue Dec 16 16:18:45 2025 by rpki-client