This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230362e302f32342d3234203d3e20343031343433.roa File: 38352e3233372e3230362e302f32342d3234203d3e20343031343433.roa (raw, json) Hash identifier: 7ntPwWKnBqqDIGIMn5yQvW2I9vUwgZq6Ch8iNKEYAUk= Subject key identifier: 9B:DA:83:61:C0:B2:34:24:9C:1D:3A:53:83:07:73:6D:54:B1:AE:EB Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 34A26C60CC9C022A8E37A4B2142F7CFEF4C338A9 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230362e302f32342d3234203d3e20343031343433.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 401443 IP address blocks: 85.237.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a2:6c:60:cc:9c:02:2a:8e:37:a4:b2:14:2f:7c:fe:f4:c3:38:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=9BDA8361C0B234249C1D3A538307736D54B1AEEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:15:ef:81:06:b3:4e:67:e5:b3:90:6d:79: 83:da:38:67:cb:ca:9a:f4:0c:18:03:37:43:24:dd: 8c:91:4b:e5:1a:f4:98:c4:0b:a7:64:4b:61:45:cf: d9:41:39:4d:78:bc:fe:66:2b:3e:12:39:0f:c2:7e: 23:76:5e:9a:d3:b6:fa:c1:0c:50:3d:85:c2:9d:09: 67:01:2a:5e:8d:d2:e8:4f:97:19:60:61:39:55:fb: 13:92:70:de:c3:ab:9a:ea:f0:cd:d7:58:d9:98:0f: e5:50:c4:36:9f:2f:52:70:71:fe:92:66:44:e6:53: b4:d9:57:c0:e3:4a:6b:65:f2:a6:72:0b:dc:32:58: e0:69:19:20:f4:31:b9:d5:43:74:9b:d2:a7:87:db: 8e:93:bf:f6:9a:a4:05:d9:ad:df:99:4c:2e:69:d2: 8d:d9:29:e6:75:c2:cd:bf:ee:be:51:bd:61:88:16: f8:c7:72:67:ce:4e:a0:51:11:c4:1a:d7:3c:ea:61: 4e:04:b2:cb:46:e6:2c:7c:1f:24:2f:1f:56:14:c4: ac:1f:2e:dd:07:c5:c9:ed:1f:bd:52:ad:b0:13:23: 97:e0:0b:8a:7c:1f:8a:13:4c:2c:e1:ae:f4:2a:98: bd:ef:c2:99:7c:75:5a:8c:85:08:d3:db:b4:2b:2e: 7d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:83:61:C0:B2:34:24:9C:1D:3A:53:83:07:73:6D:54:B1:AE:EB X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230362e302f32342d3234203d3e20343031343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.206.0/24 Signature Algorithm: sha256WithRSAEncryption 25:b0:42:b0:ff:a3:c5:12:61:0c:39:40:16:b2:e2:30:59:b1: 77:6c:3c:84:5a:bf:db:3f:06:1a:eb:37:f3:3e:f1:f5:1e:dd: 3f:59:ef:c8:22:22:0d:d2:a5:88:8a:1e:d3:d4:94:88:f3:79: 72:e5:0f:a9:5c:4e:bf:d2:5f:ed:14:91:90:a2:6e:d0:3a:22: 11:b4:02:a7:ab:4d:a6:11:cd:64:a1:49:bb:40:ee:05:fe:96: 69:8b:1d:d4:aa:e4:8a:57:0e:40:06:67:a1:24:6a:4c:4c:16: 3e:fe:24:f9:c5:81:b5:d0:a6:21:b8:38:ef:64:6f:38:3c:01: 7b:df:99:d3:9d:c9:87:aa:8f:cd:02:57:68:6f:2c:47:5d:e2: ed:54:ea:3e:d1:a5:8f:55:49:08:0d:f3:8d:d1:83:69:22:72: 9c:56:11:03:87:5a:6e:41:32:0f:6e:7d:0d:88:d5:30:73:20: 42:90:c7:8a:41:56:ff:ba:39:20:07:82:8a:9b:31:6a:1a:e4: 99:f6:b4:eb:f9:e8:0f:48:62:ba:d9:43:f3:81:a7:e5:16:db: 99:50:d2:a3:e2:ce:cc:78:d8:c8:4e:87:e1:43:28:6a:1e:3b: f8:d1:33:6a:4f:e0:88:7c:d1:bd:56:56:d1:f3:2d:a8:fe:07: 15:e2:0e:8d -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUNKJsYMycAiqON6SyFC98/vTDOKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDlCREE4MzYxQzBCMjM0MjQ5QzFEM0E1MzgzMDc3MzZENTRCMUFFRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXRXvgQazTmfls5BteYPaOGfL ypr0DBgDN0Mk3YyRS+Ua9JjEC6dkS2FFz9lBOU14vP5mKz4SOQ/CfiN2XprTtvrB DFA9hcKdCWcBKl6N0uhPlxlgYTlV+xOScN7Dq5rq8M3XWNmYD+VQxDafL1Jwcf6S ZkTmU7TZV8DjSmtl8qZyC9wyWOBpGSD0MbnVQ3Sb0qeH246Tv/aapAXZrd+ZTC5p 0o3ZKeZ1ws2/7r5RvWGIFvjHcmfOTqBREcQa1zzqYU4EsstG5ix8HyQvH1YUxKwf Lt0HxcntH71SrbATI5fgC4p8H4oTTCzhrvQqmL3vwpl8dVqMhQjT27QrLn3pAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUm9qDYcCyNCScHTpTgwdzbVSxruswHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzNDM0MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7c4wDQYJKoZIhvcNAQELBQADggEBACWwQrD/o8USYQw5QBay4jBZsXdsPIRa v9s/BhrrN/M+8fUe3T9Z78giIg3SpYiKHtPUlIjzeXLlD6lcTr/SX+0UkZCibtA6 IhG0AqerTaYRzWShSbtA7gX+lmmLHdSq5IpXDkAGZ6EkakxMFj7+JPnFgbXQpiG4 OO9kbzg8AXvfmdOdyYeqj80CV2hvLEdd4u1U6j7RpY9VSQgN843Rg2kicpxWEQOH Wm5BMg9ufQ2I1TBzIEKQx4pBVv+6OSAHgoqbMWoa5Jn2tOv56A9IYrrZQ/OBp+UW 25lQ0qPizsx42MhOh+FDKGoeO/jRM2pP4Ih80b1WVtHzLaj+BxXiDo0= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:39 2025 by rpki-client