This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231322e302f32342d3234203d3e20323036303932.roa File: 38352e3233372e3231322e302f32342d3234203d3e20323036303932.roa (raw, json) Hash identifier: EAUezlhy7YdCrkDqTRzOEA+J/sMRhqBmYis4wJHMNBg= Subject key identifier: AE:B5:8B:A5:9F:1F:42:7F:50:CD:23:1F:B2:CB:A7:1D:D1:1C:8D:B5 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 438DBF8F95C4AFCCA1BA5BB835E7523DB447B2C7 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231322e302f32342d3234203d3e20323036303932.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 206092 IP address blocks: 85.237.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:8d:bf:8f:95:c4:af:cc:a1:ba:5b:b8:35:e7:52:3d:b4:47:b2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=AEB58BA59F1F427F50CD231FB2CBA71DD11C8DB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:dd:c8:a8:89:e9:f9:0a:e4:61:e3:f4:07: 4c:4a:01:53:b5:fd:e7:81:74:df:c5:1a:1c:52:37: 77:2d:b0:9e:73:4e:01:80:8e:d3:5b:9a:bb:a3:cd: 04:2c:f5:8b:81:eb:94:0e:5c:b2:58:eb:04:6c:f6: 35:80:dc:ee:f8:4b:c1:c4:31:8a:83:fd:3c:08:59: 4a:63:61:96:ff:e9:8d:9d:d4:f7:4e:00:61:f8:88: 1e:9e:4e:06:4e:c2:f9:10:94:6b:7e:91:a6:cb:e0: 6a:2e:ec:9d:8b:03:28:03:fd:21:4c:49:a8:ac:98: 86:df:27:cb:55:a7:c5:40:2b:5b:ce:21:eb:ef:d5: 57:e1:cb:20:63:75:eb:03:48:d1:0b:bb:e5:3a:bd: 60:a6:c1:0f:25:6e:ee:a3:b5:b6:92:77:e2:ce:2e: 32:4e:09:78:8f:84:5f:ab:71:96:e0:47:c1:c5:60: cc:c9:32:53:fc:b6:c0:9a:ac:9b:91:4e:75:60:2a: 6a:64:62:03:7d:e7:65:40:8a:5d:35:22:21:c9:a9: c1:f4:e4:c4:e7:01:61:fc:f8:e5:2a:53:c0:53:b7: ef:7b:cd:a0:2b:8c:9e:ce:d6:e0:ab:1d:0b:5f:98: ba:40:e4:f9:c2:4d:01:40:4a:1b:a2:36:eb:5f:10: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B5:8B:A5:9F:1F:42:7F:50:CD:23:1F:B2:CB:A7:1D:D1:1C:8D:B5 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231322e302f32342d3234203d3e20323036303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.212.0/24 Signature Algorithm: sha256WithRSAEncryption a0:6e:e4:75:bf:26:e3:78:2a:f3:b8:0e:cb:c6:9f:d1:94:cb: 4f:e0:f3:cc:8d:30:d7:99:17:4d:cb:00:c7:b0:0d:41:d4:f6: bb:af:e5:61:f2:f6:a5:a0:78:58:b4:2c:61:0b:08:4d:1f:ee: c8:9c:ef:94:8d:24:7c:dc:42:57:39:c1:09:de:5d:8e:35:75: 65:c0:c3:76:9e:48:f9:2e:df:ad:e8:23:01:53:48:7a:ca:72: 4c:97:8f:ed:63:54:20:76:bf:08:8d:b1:8d:fa:36:81:4a:6f: 4f:41:16:b6:d2:2c:61:e2:c5:4f:3b:fb:fb:e8:aa:78:a7:14: 63:bf:62:1b:c9:46:61:c4:0e:24:1b:c3:5a:38:c3:b2:dc:6e: 17:ec:2e:c4:52:0e:77:81:55:f2:05:b0:99:aa:ec:34:84:9d: 77:e5:c1:96:65:62:a4:b2:79:cd:50:ad:b9:ba:c5:f9:b0:da: ef:af:50:37:be:e7:e3:c0:95:1c:ac:6f:80:2e:8e:d2:2e:00: e8:17:db:e5:5d:94:d7:d8:35:4d:b6:64:af:43:b1:04:2b:86: 90:f5:7d:9a:7b:bd:7a:f7:d3:14:b8:5b:09:a1:72:fc:49:7a: ba:14:a1:df:1b:40:e6:48:ef:96:04:5a:8a:ad:d5:3e:11:9b: 4a:6f:8d:6e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUQ42/j5XEr8yhulu4NedSPbRHsscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEFFQjU4QkE1OUYxRjQyN0Y1MENEMjMxRkIyQ0JBNzFERDExQzhEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT893IqInp+QrkYeP0B0xKAVO1 /eeBdN/FGhxSN3ctsJ5zTgGAjtNbmrujzQQs9YuB65QOXLJY6wRs9jWA3O74S8HE MYqD/TwIWUpjYZb/6Y2d1PdOAGH4iB6eTgZOwvkQlGt+kabL4Gou7J2LAygD/SFM SaismIbfJ8tVp8VAK1vOIevv1VfhyyBjdesDSNELu+U6vWCmwQ8lbu6jtbaSd+LO LjJOCXiPhF+rcZbgR8HFYMzJMlP8tsCarJuRTnVgKmpkYgN952VAil01IiHJqcH0 5MTnAWH8+OUqU8BTt+97zaArjJ7O1uCrHQtfmLpA5PnCTQFAShuiNutfEKK7AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUrrWLpZ8fQn9QzSMfssunHdEcjbUwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMDM5MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dQwDQYJKoZIhvcNAQELBQADggEBAKBu5HW/JuN4KvO4DsvGn9GUy0/g88yN MNeZF03LAMewDUHU9ruv5WHy9qWgeFi0LGELCE0f7sic75SNJHzcQlc5wQneXY41 dWXAw3aeSPku363oIwFTSHrKckyXj+1jVCB2vwiNsY36NoFKb09BFrbSLGHixU87 +/voqninFGO/YhvJRmHEDiQbw1o4w7LcbhfsLsRSDneBVfIFsJmq7DSEnXflwZZl YqSyec1Qrbm6xfmw2u+vUDe+5+PAlRysb4AujtIuAOgX2+VdlNfYNU22ZK9DsQQr hpD1fZp7vXr30xS4WwmhcvxJeroUod8bQOZI75YEWoqt1T4Rm0pvjW4= -----END CERTIFICATE-----Generated at Tue Dec 16 16:28:54 2025 by rpki-client