This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e203538303631.roa File: 38352e3233372e3230382e302f32342d3234203d3e203538303631.roa (raw, json) Hash identifier: ZdfzZVhEmIIOF6HDcZQWz83phjzFcTa5n4KOlaxPVR0= Subject key identifier: F0:E1:7B:D3:A5:23:40:2D:7B:D4:86:FB:F8:7F:33:31:88:85:F8:0A Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 64E6F70D8184D411651A5102772FF4E48AADF2BC Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e203538303631.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 58061 IP address blocks: 85.237.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:e6:f7:0d:81:84:d4:11:65:1a:51:02:77:2f:f4:e4:8a:ad:f2:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=F0E17BD3A523402D7BD486FBF87F33318885F80A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:07:b4:9d:29:8d:ee:5d:14:55:ea:3f:f8:e1: ec:dc:73:36:6c:21:06:31:12:04:82:72:60:87:57: fb:82:cd:be:f3:c1:0d:ac:11:77:50:1a:3d:60:01: 33:85:7e:cb:39:98:78:fe:2e:2d:a5:5c:4d:04:74: b3:52:f5:9d:31:10:0e:59:28:d7:f0:d8:fe:68:5d: e4:a6:b8:c2:ed:25:6e:f5:fa:d4:98:0e:27:94:3e: b5:af:1c:60:50:da:c9:78:b5:8d:b2:ae:26:ac:94: 95:82:c6:5c:c3:aa:43:4b:c2:69:45:26:a9:9c:98: 79:ea:0b:7e:28:5c:31:70:03:9d:a8:21:db:d9:24: 04:cc:9e:9b:b0:7c:1c:3f:58:f8:43:1f:f7:7d:d8: 63:55:35:36:9e:06:89:f2:b2:b5:f7:3f:9c:13:43: 4c:47:1b:59:29:4e:f1:15:fe:88:79:00:c2:71:1a: 0b:05:30:75:41:fc:a2:92:5b:6c:5d:c3:c6:1c:98: 9a:04:1f:9e:c6:65:1f:e2:4d:8e:4d:f7:00:9b:41: 46:60:c3:f7:ca:ee:02:b2:30:c9:ea:0a:e9:9f:46: 3b:64:46:c9:8b:96:4f:89:ae:f0:34:28:7f:01:63: 7e:ad:65:32:4d:94:38:99:84:be:29:60:a2:d1:25: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E1:7B:D3:A5:23:40:2D:7B:D4:86:FB:F8:7F:33:31:88:85:F8:0A X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e203538303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.208.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ee:f9:d2:88:bf:52:a0:6b:fd:aa:56:ec:63:0d:72:15:39: a5:cd:28:ab:b8:db:6a:7c:e1:8e:f5:c5:90:9a:95:8c:ad:f1: 42:98:ae:c5:ba:8c:ab:99:9e:fb:a4:6e:26:97:31:df:ad:9f: 9d:cd:56:06:d7:0a:c5:8c:4a:9b:56:da:1c:5f:68:9d:42:76: b5:b8:37:b3:4e:45:73:ff:8d:51:0d:6f:f7:18:8e:89:d3:c3: d1:08:47:57:c9:f4:b5:8a:b6:19:29:4f:2b:52:88:dc:ad:21: d8:61:cb:50:05:e3:f8:c7:46:b9:6d:99:fa:3a:c5:3f:52:18: 9d:da:fa:51:b6:10:6b:e5:e7:2b:95:56:8b:a3:01:96:66:1b: 92:af:8a:3d:1c:3f:0a:d9:bc:68:96:06:1f:84:d7:62:65:e9: 88:89:b4:da:7c:04:62:5f:f9:11:e5:80:85:7f:23:dd:26:08: 7d:56:44:fa:a0:6d:9b:9f:c1:2d:fc:3d:22:d9:42:a5:59:75: d0:45:87:97:44:50:c2:cd:d5:7f:43:d1:51:86:b5:e1:c9:6c: b1:f3:d8:e0:99:a0:f0:d3:8a:f3:31:fd:9b:01:50:22:fd:69: ff:be:fd:8c:12:74:d9:82:1f:98:d5:20:44:c7:25:37:00:9f: 41:19:ba:a7 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUZOb3DYGE1BFlGlECdy/05Iqt8rwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKEYwRTE3QkQzQTUyMzQwMkQ3QkQ0ODZGQkY4N0YzMzMxODg4NUY4MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVB7SdKY3uXRRV6j/44ezcczZs IQYxEgSCcmCHV/uCzb7zwQ2sEXdQGj1gATOFfss5mHj+Li2lXE0EdLNS9Z0xEA5Z KNfw2P5oXeSmuMLtJW71+tSYDieUPrWvHGBQ2sl4tY2yriaslJWCxlzDqkNLwmlF JqmcmHnqC34oXDFwA52oIdvZJATMnpuwfBw/WPhDH/d92GNVNTaeBonysrX3P5wT Q0xHG1kpTvEV/oh5AMJxGgsFMHVB/KKSW2xdw8YcmJoEH57GZR/iTY5N9wCbQUZg w/fK7gKyMMnqCumfRjtkRsmLlk+JrvA0KH8BY36tZTJNlDiZhL4pYKLRJR2JAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU8OF706UjQC171Ib7+H8zMYiF+AowHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM4MzAzNjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3QMA0GCSqGSIb3DQEBCwUAA4IBAQBF7vnSiL9SoGv9qlbsYw1yFTmlzSiruNtq fOGO9cWQmpWMrfFCmK7FuoyrmZ77pG4mlzHfrZ+dzVYG1wrFjEqbVtocX2idQna1 uDezTkVz/41RDW/3GI6J08PRCEdXyfS1irYZKU8rUojcrSHYYctQBeP4x0a5bZn6 OsU/Uhid2vpRthBr5ecrlVaLowGWZhuSr4o9HD8K2bxolgYfhNdiZemIibTafARi X/kR5YCFfyPdJgh9VkT6oG2bn8Et/D0i2UKlWXXQRYeXRFDCzdV/Q9FRhrXhyWyx 89jgmaDw04rzMf2bAVAi/Wn/vv2MEnTZgh+Y1SBExyU3AJ9BGbqn -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:00 2025 by rpki-client