This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231332e302f32342d3234203d3e20323131333733.roa File: 38352e3233372e3231332e302f32342d3234203d3e20323131333733.roa (raw, json) Hash identifier: cSZF5uEYbZCnafYhUi/bTFFmSzk1PzpehGrypUSKyT8= Subject key identifier: A2:8F:CE:85:75:6A:E1:21:E7:B2:80:28:32:A7:85:B7:F1:7D:02:D7 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 3C50E9440F121378D1BA720EDC6427CEA82D76B2 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231332e302f32342d3234203d3e20323131333733.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 211373 IP address blocks: 85.237.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:50:e9:44:0f:12:13:78:d1:ba:72:0e:dc:64:27:ce:a8:2d:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=A28FCE85756AE121E7B2802832A785B7F17D02D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:d9:5f:d6:24:f1:de:b9:3f:1c:cf:4e:93: e3:d8:5e:f5:c5:ba:56:e3:e0:64:71:41:9d:78:2e: 13:fe:03:e0:a3:76:0a:db:0a:a6:23:cd:b0:b6:6b: 85:74:46:1f:f8:4e:46:0d:63:59:ed:44:c6:9e:bf: 97:9e:a4:e6:63:38:23:be:e5:31:b2:de:48:60:7f: 20:29:7c:64:a6:12:c2:0f:e2:fc:4d:eb:20:c3:9f: b9:e8:1c:35:08:f3:ce:a3:3b:e6:48:97:09:17:c1: 2b:61:3b:2d:19:1c:40:95:85:02:2a:89:06:0b:d3: 21:a2:9f:4b:ab:1b:61:a9:ea:12:b6:c0:cb:d9:42: 4b:59:2a:46:f7:f7:67:da:4e:6c:f1:60:e7:99:29: 7b:9e:4f:07:f2:b6:33:80:9e:d8:88:b9:69:e7:5a: 43:9d:56:8c:d6:fb:b8:61:ac:13:78:89:98:06:b7: 15:39:08:8c:98:5b:4e:6a:24:d5:da:57:72:60:1b: 8b:1f:4a:56:4f:3f:72:83:78:0f:c7:e8:de:e8:1b: ee:6a:91:10:cb:48:8a:10:d8:a7:0f:47:92:ee:5e: ee:d7:f8:27:2d:6a:38:6f:67:59:24:6d:1a:95:d3: ea:7c:28:85:cb:75:71:81:c1:51:84:92:96:ff:3b: 0e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:8F:CE:85:75:6A:E1:21:E7:B2:80:28:32:A7:85:B7:F1:7D:02:D7 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231332e302f32342d3234203d3e20323131333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.213.0/24 Signature Algorithm: sha256WithRSAEncryption 99:20:21:16:68:6f:3b:d3:31:ed:5d:47:08:db:9d:51:da:58: ce:70:04:0f:52:47:fa:ff:f7:cc:c0:91:c2:b3:5d:6c:86:ed: b0:25:fa:26:7b:59:e5:0e:68:b7:3b:93:b1:76:c3:0a:5e:2a: 38:27:e7:e3:fb:2f:9a:ea:38:e3:05:3b:1a:28:a7:59:b4:9f: 92:0a:9d:c5:9b:57:22:22:c9:8b:fc:04:ab:e5:44:3d:98:9e: 8f:7b:b6:a2:1d:48:f5:ac:17:34:eb:a9:f2:dc:71:80:a2:65: 43:3c:fd:b7:76:77:7a:de:3c:f2:de:9f:69:be:5f:b0:4b:66: dc:12:06:ff:aa:15:90:2a:ef:30:e5:79:1d:b6:a2:8f:68:17: bf:26:b5:2c:f6:6a:9f:47:10:fc:1c:fd:4d:39:eb:01:98:c9: 59:7c:6a:6c:d4:c7:cc:2c:38:7b:6a:68:ea:1e:8e:38:89:fa: 99:d4:15:f2:83:e4:cc:af:a6:ca:4e:65:e2:37:31:60:2b:be: 45:46:58:a9:64:82:aa:92:ee:e5:e1:47:c7:7e:7b:51:8c:88: 8a:fd:b7:3a:d8:9f:05:62:3c:76:bf:85:97:1c:cb:e1:00:9a: 20:6a:a9:16:f5:3f:d0:1f:a9:f5:45:a0:b8:78:bc:88:d0:6f: 50:6a:b8:0f -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPFDpRA8SE3jRunIO3GQnzqgtdrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEEyOEZDRTg1NzU2QUUxMjFFN0IyODAyODMyQTc4NUI3RjE3RDAyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcx9lf1iTx3rk/HM9Ok+PYXvXF ulbj4GRxQZ14LhP+A+CjdgrbCqYjzbC2a4V0Rh/4TkYNY1ntRMaev5eepOZjOCO+ 5TGy3khgfyApfGSmEsIP4vxN6yDDn7noHDUI886jO+ZIlwkXwSthOy0ZHECVhQIq iQYL0yGin0urG2Gp6hK2wMvZQktZKkb392faTmzxYOeZKXueTwfytjOAntiIuWnn WkOdVozW+7hhrBN4iZgGtxU5CIyYW05qJNXaV3JgG4sfSlZPP3KDeA/H6N7oG+5q kRDLSIoQ2KcPR5LuXu7X+CctajhvZ1kkbRqV0+p8KIXLdXGBwVGEkpb/Ow4VAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUoo/OhXVq4SHnsoAoMqeFt/F9AtcwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzEzMzM3MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dUwDQYJKoZIhvcNAQELBQADggEBAJkgIRZobzvTMe1dRwjbnVHaWM5wBA9S R/r/98zAkcKzXWyG7bAl+iZ7WeUOaLc7k7F2wwpeKjgn5+P7L5rqOOMFOxoop1m0 n5IKncWbVyIiyYv8BKvlRD2Yno97tqIdSPWsFzTrqfLccYCiZUM8/bd2d3rePPLe n2m+X7BLZtwSBv+qFZAq7zDleR22oo9oF78mtSz2ap9HEPwc/U056wGYyVl8amzU x8wsOHtqaOoejjiJ+pnUFfKD5MyvpspOZeI3MWArvkVGWKlkgqqS7uXhR8d+e1GM iIr9tzrYnwViPHa/hZccy+EAmiBqqRb1P9AfqfVFoLh4vIjQb1BquA8= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:39 2025 by rpki-client