This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230392e302f32342d3234203d3e203533333536.roa File: 38352e3233372e3230392e302f32342d3234203d3e203533333536.roa (raw, json) Hash identifier: qn3HFdNpDfCtaMKDc2A3ih+Anw+bJojbS4EI3psuBVk= Subject key identifier: 44:1D:10:5F:3F:36:93:BD:6C:8F:3A:6A:80:E4:3B:EE:BA:9E:47:F8 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 1281EF262C93FD4BF2CA3DA493C4E97E3EF9C264 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230392e302f32342d3234203d3e203533333536.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 53356 IP address blocks: 85.237.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:81:ef:26:2c:93:fd:4b:f2:ca:3d:a4:93:c4:e9:7e:3e:f9:c2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=441D105F3F3693BD6C8F3A6A80E43BEEBA9E47F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b5:03:1c:0f:1d:2c:99:3e:b3:28:93:13:c7: eb:9f:18:1f:94:41:f1:f0:61:58:da:62:ce:97:b0: 7d:1e:2b:e1:86:78:d2:a6:24:1d:03:fd:fc:c2:18: a7:f0:2f:b1:53:1d:07:c8:ad:a2:e7:c7:9a:68:f6: 05:f8:cf:a3:7d:6e:99:c8:b0:c6:69:72:7c:7d:40: bb:de:62:73:cc:31:2e:39:2a:ad:10:5a:e8:c7:19: 5d:25:17:71:79:12:57:ad:42:c9:10:4f:ce:7e:12: 17:35:2b:16:98:dd:c9:e4:39:8d:99:9f:11:1d:59: c8:48:78:52:64:07:b8:77:0c:ea:fe:df:31:47:e5: 45:53:2c:0c:87:90:0d:68:f1:af:a5:e4:81:7b:9f: 86:15:1a:32:7c:05:b0:41:e9:45:24:ff:4f:7b:c7: 71:b3:69:77:73:4c:f5:52:0c:e4:fe:94:c3:76:66: b6:37:ab:b6:67:55:89:ae:ae:cc:a4:a2:73:42:b1: 37:e8:75:a2:44:e3:49:ee:41:62:2b:9f:a9:5d:6a: 25:6b:8f:cb:3d:21:9b:45:93:c0:4e:59:27:eb:53: 3d:d4:9c:2c:01:1c:23:c6:39:6e:28:3e:b0:77:36: 64:9c:61:3c:42:6b:e3:3b:c0:fa:4f:57:8d:f0:28: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1D:10:5F:3F:36:93:BD:6C:8F:3A:6A:80:E4:3B:EE:BA:9E:47:F8 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230392e302f32342d3234203d3e203533333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.209.0/24 Signature Algorithm: sha256WithRSAEncryption 81:a2:d6:c0:ba:ce:b7:56:3b:2d:c0:bc:be:f7:67:48:db:63: d2:da:91:60:ec:90:94:8c:2b:97:2e:5a:52:4e:e2:16:5e:f7: ba:d6:87:27:d1:67:70:a2:87:a0:e4:75:e6:0c:0c:6e:ea:5e: 46:e9:31:f9:2a:91:c3:41:7b:3e:3b:1a:4f:49:43:5b:24:49: 26:f2:ca:91:13:28:16:c2:9b:5f:af:35:45:40:d4:58:f2:28: 90:19:e1:a2:60:1a:60:e0:48:e1:9c:c1:b7:7e:da:0b:8b:e9: d3:ec:62:29:05:cc:39:a2:ce:17:8d:df:39:27:57:32:9f:21: ea:60:ff:ef:39:bc:b5:62:da:6e:b1:c9:b6:47:90:3c:78:87: e4:55:39:16:67:88:47:83:ab:f3:89:49:e6:c8:b3:98:32:6d: 9c:e2:c0:75:80:03:64:c1:b7:93:8c:e2:8c:db:d3:e6:61:cf: 6a:31:6c:a4:15:98:16:ad:81:d8:16:82:d4:7f:91:92:6a:92: ab:41:a6:9f:11:af:c4:b8:80:cd:2f:a0:63:9f:7e:09:85:41: 1c:dd:2b:6a:d5:d3:75:0b:28:b6:7c:99:b8:8c:4d:06:c1:d0: 46:f6:aa:aa:90:d8:83:13:c2:b0:31:4d:59:7c:0e:51:1c:ca: 69:19:4e:50 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEoHvJiyT/Uvyyj2kk8Tpfj75wmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDQ0MUQxMDVGM0YzNjkzQkQ2QzhGM0E2QTgwRTQzQkVFQkE5RTQ3RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctQMcDx0smT6zKJMTx+ufGB+U QfHwYVjaYs6XsH0eK+GGeNKmJB0D/fzCGKfwL7FTHQfIraLnx5po9gX4z6N9bpnI sMZpcnx9QLveYnPMMS45Kq0QWujHGV0lF3F5EletQskQT85+Ehc1KxaY3cnkOY2Z nxEdWchIeFJkB7h3DOr+3zFH5UVTLAyHkA1o8a+l5IF7n4YVGjJ8BbBB6UUk/097 x3GzaXdzTPVSDOT+lMN2ZrY3q7ZnVYmursykonNCsTfodaJE40nuQWIrn6ldaiVr j8s9IZtFk8BOWSfrUz3UnCwBHCPGOW4oPrB3NmScYTxCa+M7wPpPV43wKHuRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURB0QXz82k71sjzpqgOQ77rqeR/gwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3RMA0GCSqGSIb3DQEBCwUAA4IBAQCBotbAus63VjstwLy+92dI22PS2pFg7JCU jCuXLlpSTuIWXve61ocn0Wdwooeg5HXmDAxu6l5G6TH5KpHDQXs+OxpPSUNbJEkm 8sqREygWwptfrzVFQNRY8iiQGeGiYBpg4EjhnMG3ftoLi+nT7GIpBcw5os4Xjd85 J1cynyHqYP/vOby1Ytpuscm2R5A8eIfkVTkWZ4hHg6vziUnmyLOYMm2c4sB1gANk wbeTjOKM29PmYc9qMWykFZgWrYHYFoLUf5GSapKrQaafEa/EuIDNL6Bjn34JhUEc 3Stq1dN1Cyi2fJm4jE0GwdBG9qqqkNiDE8KwMU1ZfA5RHMppGU5Q -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:37 2025 by rpki-client