This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231312e302f32342d3234203d3e203231383539.roa File: 38352e3233372e3231312e302f32342d3234203d3e203231383539.roa (raw, json) Hash identifier: Xs4e0AmGmlqLD2A8yP3uF4B89A1IKqRmF3h6X5Ynumg= Subject key identifier: 10:DA:56:D5:66:67:1F:19:94:EF:D3:93:88:4E:EC:FE:FA:DD:60:91 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 10CBB23B5644226BA501C5DF8A292192446A5612 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231312e302f32342d3234203d3e203231383539.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 21859 IP address blocks: 85.237.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:cb:b2:3b:56:44:22:6b:a5:01:c5:df:8a:29:21:92:44:6a:56:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=10DA56D566671F1994EFD393884EECFEFADD6091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:59:71:16:5f:68:ab:65:1d:c6:99:7f:4a:ea: bd:6b:c4:1e:9a:a0:c3:c5:92:91:b7:6f:90:ad:96: d8:40:fd:85:b6:5e:9b:74:c5:57:1f:64:63:46:04: 04:17:b0:7a:0f:9f:36:ac:48:7a:63:e3:f3:ec:9b: 2a:aa:cf:23:c4:e4:43:cc:ce:d6:7e:e4:d6:ec:29: cd:51:4d:f3:3d:48:00:2a:30:6e:1a:e1:8c:05:08: 03:b7:c1:4a:a6:ef:b1:c2:64:83:2e:2b:05:e5:92: 10:07:39:a2:a8:5e:e8:72:f1:47:9b:c6:ba:63:79: e2:bd:d0:e5:1d:c5:06:65:d6:7b:91:5a:f2:5b:32: 60:95:9c:00:cd:9e:c3:14:21:95:da:72:ea:0d:2e: 30:1b:59:21:f1:7f:42:8f:c4:7a:dd:c4:1b:b3:b4: 98:60:10:bb:7f:15:eb:75:e5:00:77:b3:48:f4:bd: 7f:c0:cb:d4:f5:17:76:9a:48:3a:0a:0b:e3:49:45: 93:41:84:4c:16:11:09:d2:7b:c4:ca:ed:77:90:df: 08:27:d8:1e:9c:b3:6d:49:4f:a7:08:ef:d3:51:19: 80:ad:7c:43:eb:e3:f5:f3:49:79:b6:53:24:cc:9c: 4d:2c:84:81:f9:e7:d3:0e:2a:5a:35:45:02:8e:44: 76:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DA:56:D5:66:67:1F:19:94:EF:D3:93:88:4E:EC:FE:FA:DD:60:91 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231312e302f32342d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.211.0/24 Signature Algorithm: sha256WithRSAEncryption 70:0c:0f:99:d9:fc:75:4e:16:6f:57:6b:57:59:df:7c:17:77: 88:97:8f:10:3a:56:99:d8:47:80:79:48:1d:39:b9:2a:b1:9c: ed:c6:86:c5:b6:ba:12:41:58:e4:e3:8e:c4:54:6f:66:f0:1e: 6c:54:ab:02:a0:07:08:54:85:5f:46:7b:20:7a:93:0b:2f:dd: 76:0a:b0:4f:08:45:90:ba:3e:b2:35:75:d9:af:aa:18:81:65: 2a:3d:de:85:89:4a:e8:ea:8b:68:54:9f:72:d5:3e:0c:fb:91: d8:64:ed:64:2a:43:cd:58:be:56:22:27:7c:6d:28:93:4c:33: b2:4f:24:11:31:7b:02:88:48:30:30:ef:d0:36:68:f7:02:70: 31:a7:0b:40:46:93:f5:6a:a5:0d:b9:76:4f:a3:5f:62:de:cd: 25:0b:cc:7d:c2:21:cb:13:1d:6e:55:c8:ed:83:37:35:c7:ec: 29:84:8a:43:05:28:6e:ce:b0:8b:68:61:4a:dc:65:04:bf:d9: 5f:ed:c3:2a:a4:ef:ae:1d:01:7c:ba:05:af:03:73:e3:d5:2b: cc:a1:db:b9:13:77:e9:a1:a6:a3:7c:9e:64:05:cb:7f:f6:9d: 6b:10:0a:94:35:f0:24:ab:37:e3:3a:c7:82:a6:95:55:f7:ae: 48:f9:bf:47 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUEMuyO1ZEImulAcXfiikhkkRqVhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDEwREE1NkQ1NjY2NzFGMTk5NEVGRDM5Mzg4NEVFQ0ZFRkFERDYwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkWXEWX2irZR3GmX9K6r1rxB6a oMPFkpG3b5CtlthA/YW2Xpt0xVcfZGNGBAQXsHoPnzasSHpj4/PsmyqqzyPE5EPM ztZ+5NbsKc1RTfM9SAAqMG4a4YwFCAO3wUqm77HCZIMuKwXlkhAHOaKoXuhy8Ueb xrpjeeK90OUdxQZl1nuRWvJbMmCVnADNnsMUIZXacuoNLjAbWSHxf0KPxHrdxBuz tJhgELt/Fet15QB3s0j0vX/Ay9T1F3aaSDoKC+NJRZNBhEwWEQnSe8TK7XeQ3wgn 2B6cs21JT6cI79NRGYCtfEPr4/XzSXm2UyTMnE0shIH559MOKlo1RQKORHYtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUENpW1WZnHxmU79OTiE7s/vrdYJEwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3TMA0GCSqGSIb3DQEBCwUAA4IBAQBwDA+Z2fx1ThZvV2tXWd98F3eIl48QOlaZ 2EeAeUgdObkqsZztxobFtroSQVjk447EVG9m8B5sVKsCoAcIVIVfRnsgepMLL912 CrBPCEWQuj6yNXXZr6oYgWUqPd6FiUro6otoVJ9y1T4M+5HYZO1kKkPNWL5WIid8 bSiTTDOyTyQRMXsCiEgwMO/QNmj3AnAxpwtARpP1aqUNuXZPo19i3s0lC8x9wiHL Ex1uVcjtgzc1x+wphIpDBShuzrCLaGFK3GUEv9lf7cMqpO+uHQF8ugWvA3Pj1SvM odu5E3fpoaajfJ5kBct/9p1rEAqUNfAkqzfjOseCppVV965I+b9H -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:51 2025 by rpki-client