This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231302e302f32342d3234203d3e20323039313831.roa File: 38352e3233372e3231302e302f32342d3234203d3e20323039313831.roa (raw, json) Hash identifier: efW83pXLgdRtfXEvg/Bm/TKPfRiD9Z8QV2NH0vK1yl4= Subject key identifier: 4E:4D:E8:BC:82:60:EB:24:3A:23:78:58:4F:5C:54:5B:48:39:33:30 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 19958D777A59D33A4F47BF8A748DAD3F84D573D1 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231302e302f32342d3234203d3e20323039313831.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 209181 IP address blocks: 85.237.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:95:8d:77:7a:59:d3:3a:4f:47:bf:8a:74:8d:ad:3f:84:d5:73:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=4E4DE8BC8260EB243A2378584F5C545B48393330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a0:56:fc:dd:59:7f:2a:a7:50:23:73:83:4c: e0:ad:c2:bb:e2:c3:35:f4:5d:7c:3c:42:62:10:43: 6b:35:40:f6:76:9c:38:d3:10:47:d4:92:33:81:27: 03:61:05:83:c7:69:21:f3:c9:28:cc:03:10:7c:d4: 96:e0:93:34:c6:95:ec:78:1e:74:fe:09:d4:5f:cc: c7:54:43:5f:f4:43:d3:76:76:cc:55:5c:c7:68:e4: d0:c8:0c:6a:91:16:9f:10:23:bc:61:1a:cb:5d:59: d4:4a:57:c7:b9:2d:87:6b:f8:d6:bf:75:4d:f4:5b: 57:f0:37:5b:fc:85:67:ac:ee:8c:26:31:2d:77:67: 1c:d3:05:eb:64:43:52:9c:36:66:22:13:68:5c:f5: 25:4e:e7:80:4f:b8:4a:19:38:52:b2:c7:7e:70:79: 73:4c:ed:7b:b6:5e:b9:13:9f:5f:34:a7:b9:9c:3d: a2:86:61:3b:3b:cc:ee:e5:a1:f1:b0:94:04:16:2f: 88:7e:e5:74:21:b4:92:09:4c:23:96:a9:c1:1b:3e: 8d:a8:4a:52:7f:15:3a:ec:01:e0:53:0b:98:6d:9a: 1e:91:38:cd:2a:24:df:90:31:51:8b:fd:be:4c:e7: f0:a3:96:4a:7f:e0:2d:4f:a7:c5:a9:71:45:40:6e: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4D:E8:BC:82:60:EB:24:3A:23:78:58:4F:5C:54:5B:48:39:33:30 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231302e302f32342d3234203d3e20323039313831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.210.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:c6:9a:2f:f1:08:55:99:c7:80:3d:76:d0:ec:38:00:44:2c: 13:37:27:5d:51:1b:11:56:0c:28:ae:a6:50:fd:e4:a1:55:52: 37:71:ae:c5:ff:a7:69:74:f4:a4:2c:5f:85:7f:1a:f2:3b:4e: 67:12:75:e9:16:ca:4e:1e:43:4a:e0:bd:5f:d4:48:c7:15:6f: 95:ea:15:8e:50:67:4e:8a:4b:80:75:70:8b:25:2b:e4:43:a6: bb:cc:85:4d:17:02:44:fe:9b:50:3e:ba:c8:43:1e:4b:c9:16: 70:f1:2b:17:8f:5c:4a:21:f2:09:e8:b6:45:c7:63:08:94:04: 50:55:91:53:c9:75:77:8d:74:b5:33:a6:a8:a8:d9:d7:f0:f4: 73:86:cb:e3:98:06:49:e1:3e:dd:fa:c9:8d:41:2b:cf:32:1d: 8a:33:06:e1:29:a0:c8:af:51:26:b3:58:6e:ac:50:cd:01:e0: ee:3a:71:4a:cb:76:79:af:4b:ec:ef:30:93:8b:02:54:b3:e3: 8e:66:1e:85:90:8e:59:84:00:49:30:db:5c:29:ab:0c:39:ba: 23:70:e0:8a:c8:42:1e:07:64:9e:41:5e:ca:b8:c4:30:d9:6c: 68:8e:6d:7a:b2:f6:10:57:ea:cb:c8:22:c4:d0:41:10:94:8f: a6:da:d8:01 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGZWNd3pZ0zpPR7+KdI2tP4TVc9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDRFNERFOEJDODI2MEVCMjQzQTIzNzg1ODRGNUM1NDVCNDgzOTMzMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0oFb83Vl/KqdQI3ODTOCtwrvi wzX0XXw8QmIQQ2s1QPZ2nDjTEEfUkjOBJwNhBYPHaSHzySjMAxB81JbgkzTGlex4 HnT+CdRfzMdUQ1/0Q9N2dsxVXMdo5NDIDGqRFp8QI7xhGstdWdRKV8e5LYdr+Na/ dU30W1fwN1v8hWes7owmMS13ZxzTBetkQ1KcNmYiE2hc9SVO54BPuEoZOFKyx35w eXNM7Xu2XrkTn180p7mcPaKGYTs7zO7lofGwlAQWL4h+5XQhtJIJTCOWqcEbPo2o SlJ/FTrsAeBTC5htmh6ROM0qJN+QMVGL/b5M5/Cjlkp/4C1Pp8WpcUVAbj4tAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUTk3ovIJg6yQ6I3hYT1xUW0g5MzAwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzkzMTM4MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dIwDQYJKoZIhvcNAQELBQADggEBAG7Gmi/xCFWZx4A9dtDsOABELBM3J11R GxFWDCiuplD95KFVUjdxrsX/p2l09KQsX4V/GvI7TmcSdekWyk4eQ0rgvV/USMcV b5XqFY5QZ06KS4B1cIslK+RDprvMhU0XAkT+m1A+ushDHkvJFnDxKxePXEoh8gno tkXHYwiUBFBVkVPJdXeNdLUzpqio2dfw9HOGy+OYBknhPt36yY1BK88yHYozBuEp oMivUSazWG6sUM0B4O46cUrLdnmvS+zvMJOLAlSz445mHoWQjlmEAEkw21wpqww5 uiNw4IrIQh4HZJ5BXsq4xDDZbGiObXqy9hBX6svIIsTQQRCUj6ba2AE= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:46 2025 by rpki-client