This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e203631333137.roa File: 38352e3233372e3230382e302f32342d3234203d3e203631333137.roa (raw, json) Hash identifier: +z8XRzFSpmrjWpBNX20PP1xWESyE6LzusjEsFjdwj3o= Subject key identifier: 59:2C:D6:0D:12:70:42:F3:AD:FC:87:64:D4:E8:04:40:FF:F4:02:A8 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 1722E73B023332F2ACAD8245EB3650B99BD54A50 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 61317 IP address blocks: 85.237.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:22:e7:3b:02:33:32:f2:ac:ad:82:45:eb:36:50:b9:9b:d5:4a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=592CD60D127042F3ADFC8764D4E80440FFF402A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:b7:3f:80:9b:eb:aa:63:c9:47:1e:a7:2c: 3d:98:6a:d0:8d:94:6a:96:15:47:37:c7:f3:06:23: e6:3f:e7:50:ed:d9:c5:fc:19:09:f2:41:96:46:f1: 98:d4:fc:21:67:45:6c:8c:5c:d9:b0:51:1a:7d:15: b0:9a:c3:e6:0c:45:a7:6f:ef:f7:75:54:3e:9a:94: 18:b8:b9:ad:5b:89:8d:dd:7b:fa:c4:a7:f0:9e:6e: 8c:35:61:38:0b:ba:1c:b8:d0:5c:9f:1a:20:32:2b: b5:ab:16:e7:dc:7b:f7:dd:59:6d:96:83:a1:79:e9: bb:47:8d:51:44:c7:58:1a:3e:94:7d:77:9d:37:2f: 14:75:35:5b:89:e1:ed:3e:fb:c6:8b:26:62:75:1f: f0:4b:a1:1c:db:96:cb:08:2d:c2:cb:6c:6b:06:e8: a3:76:8b:d6:da:b0:06:32:f1:db:a7:82:5d:c1:3d: 25:40:dc:d4:6b:1c:27:66:9a:5e:41:3b:d9:8e:36: c0:c5:b1:fd:54:b8:ee:be:f4:e9:c5:a1:30:ca:c2: d5:d0:eb:05:4d:14:a5:80:c2:1c:0e:db:aa:19:7e: 6b:a2:9c:7f:11:fe:5d:ae:e4:33:a5:9c:c2:54:84: 4c:7a:a8:f1:f1:f9:10:16:aa:83:ce:10:ac:4a:fc: 48:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2C:D6:0D:12:70:42:F3:AD:FC:87:64:D4:E8:04:40:FF:F4:02:A8 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230382e302f32342d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.208.0/24 Signature Algorithm: sha256WithRSAEncryption 13:6e:43:a1:a8:32:a2:d7:e1:de:9e:79:c8:5c:c3:4b:27:e7: cf:a8:aa:33:36:ff:8f:66:a3:24:35:9f:c0:5f:f5:b0:0b:67: 23:37:3a:08:46:f5:20:f0:50:97:a7:36:21:24:7f:1b:1a:af: d6:df:82:23:8c:43:e2:fa:63:c7:67:ca:df:69:24:3f:6b:c3: 77:29:ae:e4:6d:3b:9f:53:46:e0:a1:a4:9a:f5:4b:ea:55:ca: f6:f7:1f:29:0c:33:e2:22:6b:99:13:3d:bb:72:0c:c3:c9:49: 56:a3:8d:b2:26:b5:f0:3d:9e:dd:cb:aa:40:dc:d5:5e:f1:5c: e9:db:4d:14:0a:41:e5:72:cd:8a:8f:63:99:90:e8:c9:67:f5: bc:16:02:5a:88:85:29:bc:3b:87:26:57:21:2b:17:a1:ad:dd: d1:12:0c:22:e2:ac:29:c4:f7:df:30:6a:28:8d:f6:e7:18:8d: ca:d4:6d:15:ab:55:4c:9a:42:2d:e1:ee:23:9f:c6:4c:48:81: 8b:83:2f:88:86:14:f8:5a:10:d1:13:7a:12:7e:20:e5:3d:f8: c7:9a:bd:63:df:be:6e:38:aa:ba:dd:0a:bc:d5:bd:60:49:59: 70:8c:8c:f7:28:f9:25:a8:9f:3f:73:49:38:dd:dc:ea:99:15: b2:20:68:47 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFyLnOwIzMvKsrYJF6zZQuZvVSlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDU5MkNENjBEMTI3MDQyRjNBREZDODc2NEQ0RTgwNDQwRkZGNDAyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99rc/gJvrqmPJRx6nLD2YatCN lGqWFUc3x/MGI+Y/51Dt2cX8GQnyQZZG8ZjU/CFnRWyMXNmwURp9FbCaw+YMRadv 7/d1VD6alBi4ua1biY3de/rEp/Cebow1YTgLuhy40FyfGiAyK7WrFufce/fdWW2W g6F56btHjVFEx1gaPpR9d503LxR1NVuJ4e0++8aLJmJ1H/BLoRzblssILcLLbGsG 6KN2i9basAYy8dungl3BPSVA3NRrHCdmml5BO9mONsDFsf1UuO6+9OnFoTDKwtXQ 6wVNFKWAwhwO26oZfmuinH8R/l2u5DOlnMJUhEx6qPHx+RAWqoPOEKxK/EifAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUWSzWDRJwQvOt/Idk1OgEQP/0AqgwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3QMA0GCSqGSIb3DQEBCwUAA4IBAQATbkOhqDKi1+HennnIXMNLJ+fPqKozNv+P ZqMkNZ/AX/WwC2cjNzoIRvUg8FCXpzYhJH8bGq/W34IjjEPi+mPHZ8rfaSQ/a8N3 Ka7kbTufU0bgoaSa9UvqVcr29x8pDDPiImuZEz27cgzDyUlWo42yJrXwPZ7dy6pA 3NVe8Vzp200UCkHlcs2Kj2OZkOjJZ/W8FgJaiIUpvDuHJlchKxehrd3REgwi4qwp xPffMGoojfbnGI3K1G0Vq1VMmkIt4e4jn8ZMSIGLgy+IhhT4WhDRE3oSfiDlPfjH mr1j375uOKq63Qq81b1gSVlwjIz3KPklqJ8/c0k43dzqmRWyIGhH -----END CERTIFICATE-----Generated at Tue Dec 16 16:21:01 2025 by rpki-client