This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231392e302f32342d3234203d3e20343030303339.roa File: 38352e3233372e3231392e302f32342d3234203d3e20343030303339.roa (raw, json) Hash identifier: sE2tjIwR2+55tBOyZUzOOqv21OoVwWQVGTxfUsfxmTM= Subject key identifier: C0:80:42:60:24:03:2F:80:52:09:9C:2A:8D:A4:5F:6B:EA:05:79:25 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 0E31802F59B0C2C0B02040170C6EBD8413CC2F0C Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231392e302f32342d3234203d3e20343030303339.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 400039 IP address blocks: 85.237.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:31:80:2f:59:b0:c2:c0:b0:20:40:17:0c:6e:bd:84:13:cc:2f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=C080426024032F8052099C2A8DA45F6BEA057925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:98:2d:c8:db:59:93:49:03:fe:7f:11:30:1d: e8:78:cc:a1:4a:e3:b0:a2:ce:07:b5:1f:2a:ac:94: a0:12:19:f3:cf:28:66:c6:79:99:4b:68:82:86:8b: c2:c4:6e:d6:d8:a5:3d:65:37:66:de:94:42:ac:61: e5:22:5d:43:a7:e5:a0:a6:bb:92:09:4b:67:90:d1: b4:34:2d:f0:f7:d9:35:ef:4c:be:bb:ef:4b:61:7a: 46:55:68:c5:2f:7f:06:4e:f9:79:c5:34:55:f7:bf: 21:ab:b6:b8:40:54:03:76:f3:2f:84:99:88:2a:9b: dc:53:7c:af:9b:2d:ec:e4:9f:d7:14:9f:6e:d5:d4: 4d:b4:60:6b:ee:d3:1a:da:29:ee:b5:64:67:94:69: 23:a9:60:89:20:60:c5:01:10:08:a7:33:23:11:3b: 73:8d:08:e6:91:02:d7:24:1b:53:fb:32:3b:5e:29: 25:97:34:2e:7e:1c:00:73:1b:55:e0:20:e1:10:04: 28:cf:c2:d2:b6:ff:42:57:f4:fc:99:14:0a:4d:32: c1:4a:85:56:36:12:38:de:39:26:5a:57:05:df:37: 48:8b:a4:d1:29:c9:b0:53:5b:6d:64:73:1b:f4:87: 00:1f:9c:b3:5c:9e:d3:36:93:a9:b5:d9:52:c8:1b: fe:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:80:42:60:24:03:2F:80:52:09:9C:2A:8D:A4:5F:6B:EA:05:79:25 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231392e302f32342d3234203d3e20343030303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.219.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:37:97:04:7e:bd:9c:1c:e1:c1:2e:90:b1:ea:db:6a:08:18: ee:e7:d4:f1:52:f3:2e:fa:f1:97:34:98:e5:42:94:e3:80:5e: 78:53:83:fa:8e:eb:f1:dc:d7:05:bf:7b:18:a2:b3:85:d7:0b: 18:52:03:93:e6:19:79:da:9d:c0:57:0d:fa:6e:33:a1:5b:e0: 3c:02:bc:57:c0:1a:e6:8d:fc:cc:54:80:45:8f:59:cf:2f:a3: 47:65:16:a6:74:f0:bf:25:7b:a5:3c:a6:a8:1f:58:aa:9c:a4: 5b:58:b9:bc:8c:00:06:74:02:81:66:f3:47:d6:7f:cb:12:79: 50:40:71:15:d6:46:e0:dc:49:c3:88:4e:75:02:0f:ce:4d:d8: 69:bb:e7:ad:7a:84:99:e2:02:91:7a:24:c5:1a:8e:1e:a2:12: d1:34:12:31:b2:f3:ac:a6:bb:c1:b4:6b:09:6d:81:bf:43:bc: 0a:da:fd:2b:0f:9a:59:1f:9e:7f:f6:ee:62:be:f7:ad:a3:54: f8:e8:01:05:c0:17:fb:66:16:1b:bf:be:7f:0e:cc:65:18:b8: c0:08:fc:a9:fc:56:ea:67:e8:17:f7:d2:24:cb:5c:01:94:da: 20:f9:d8:d2:9e:6b:f7:d8:7f:14:25:dd:59:f3:cc:f9:80:c1: b9:0b:4a:bc -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUDjGAL1mwwsCwIEAXDG69hBPMLwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEMwODA0MjYwMjQwMzJGODA1MjA5OUMyQThEQTQ1RjZCRUEwNTc5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxmC3I21mTSQP+fxEwHeh4zKFK 47Cizge1HyqslKASGfPPKGbGeZlLaIKGi8LEbtbYpT1lN2belEKsYeUiXUOn5aCm u5IJS2eQ0bQ0LfD32TXvTL6770thekZVaMUvfwZO+XnFNFX3vyGrtrhAVAN28y+E mYgqm9xTfK+bLezkn9cUn27V1E20YGvu0xraKe61ZGeUaSOpYIkgYMUBEAinMyMR O3ONCOaRAtckG1P7MjteKSWXNC5+HABzG1XgIOEQBCjPwtK2/0JX9PyZFApNMsFK hVY2EjjeOSZaVwXfN0iLpNEpybBTW21kcxv0hwAfnLNcntM2k6m12VLIG/5fAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUwIBCYCQDL4BSCZwqjaRfa+oFeSUwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzMDMzMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dswDQYJKoZIhvcNAQELBQADggEBAB03lwR+vZwc4cEukLHq22oIGO7n1PFS 8y768Zc0mOVClOOAXnhTg/qO6/Hc1wW/exiis4XXCxhSA5PmGXnancBXDfpuM6Fb 4DwCvFfAGuaN/MxUgEWPWc8vo0dlFqZ08L8le6U8pqgfWKqcpFtYubyMAAZ0AoFm 80fWf8sSeVBAcRXWRuDcScOITnUCD85N2Gm75616hJniApF6JMUajh6iEtE0EjGy 86ymu8G0awltgb9DvAra/SsPmlkfnn/27mK+962jVPjoAQXAF/tmFhu/vn8OzGUY uMAI/Kn8Vupn6Bf30iTLXAGU2iD52NKea/fYfxQl3VnzzPmAwbkLSrw= -----END CERTIFICATE-----Generated at Tue Dec 16 16:18:45 2025 by rpki-client