This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e203331373135.roa File: 38352e3233372e3232302e302f32342d3234203d3e203331373135.roa (raw, json) Hash identifier: Hs2g/HZIgcDDN71MiNtWi2OxewIXe/IrVsdMIrYsC+s= Subject key identifier: A9:F2:04:05:79:BA:01:6B:10:B5:78:DE:06:B7:96:F1:C4:FD:4D:DD Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 49A33804CBD2C9DA820434CA9993495EA1A226F4 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e203331373135.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 31715 IP address blocks: 85.237.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a3:38:04:cb:d2:c9:da:82:04:34:ca:99:93:49:5e:a1:a2:26:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=A9F2040579BA016B10B578DE06B796F1C4FD4DDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:bf:ae:71:af:b4:f0:3f:29:59:94:4a:53: 5a:47:8e:e0:91:ee:af:0a:b2:4f:da:49:89:48:6c: af:44:2c:0e:69:a0:1f:f9:a3:8c:8f:7a:7e:c1:d7: 7c:62:4b:75:8b:a6:87:de:9f:e2:63:65:01:d0:81: cb:43:53:b7:73:0b:66:2d:32:2b:bc:53:d0:aa:19: c0:35:ef:e8:f8:f3:2a:3d:e8:b5:b4:29:1a:80:c2: ae:1e:4c:34:99:6b:07:cc:01:f6:95:fe:e9:a7:9e: 34:5a:ef:37:0f:0e:be:71:b9:81:5e:b1:ad:d2:6a: bb:b7:82:ce:98:90:40:a8:17:7a:98:be:cc:69:c2: 28:de:b5:f1:12:3d:c0:3a:8d:56:58:34:5a:49:f8: 12:ac:84:09:69:fd:22:4f:a6:e6:56:bd:30:64:3c: a9:39:aa:b6:8e:9c:92:e8:fb:93:71:e6:41:71:08: 33:1a:76:9e:07:ff:70:f6:89:47:70:2c:28:9a:f8: 5b:5f:51:f7:5f:7c:22:61:08:89:71:14:5e:83:58: 60:fb:35:0f:a9:91:ab:37:87:39:ef:85:2f:cc:91: 74:3b:51:02:90:09:b4:f4:72:a6:ff:3b:8b:47:de: a3:36:fd:05:84:56:14:31:87:1e:3b:19:d4:f7:6d: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F2:04:05:79:BA:01:6B:10:B5:78:DE:06:B7:96:F1:C4:FD:4D:DD X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e203331373135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.220.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:61:51:cc:92:a4:8f:f5:04:fd:cd:78:6e:d9:9e:0f:f2:c5: 11:1e:28:d9:4b:5a:d0:a9:90:9f:15:d8:63:cf:9d:13:02:bd: 14:81:9f:4e:cd:51:7f:c7:bd:b0:0f:bc:4f:65:49:a2:c3:c3: d3:08:41:0e:30:60:23:fd:dc:a5:33:85:cc:25:11:fc:41:6d: 27:d8:17:f6:05:9c:62:71:c1:b7:de:38:90:9f:30:db:55:36: 6e:00:0f:2a:38:30:b3:94:9e:01:d5:26:96:74:f8:36:da:13: 92:6a:59:cb:43:9a:b7:4c:c6:e0:74:2f:52:d0:6c:74:5c:49: 08:89:a6:a5:90:7a:8a:79:b5:9b:6f:8c:36:d3:15:57:30:fe: 1c:8d:96:c4:64:b2:d9:ba:1c:61:85:cc:68:d1:aa:1d:39:5a: fb:ad:58:7c:cf:81:a9:30:cd:fe:9c:f9:40:5d:4c:cf:79:cf: bc:47:87:4c:d2:24:64:52:1d:98:78:73:eb:75:76:8d:94:b2: 0a:32:95:b4:d9:43:97:ee:d9:a6:d1:ec:08:7e:77:e6:b4:bf: 96:e7:a5:fd:6f:b1:bb:8b:5a:46:48:6a:3b:af:3d:cc:55:13: 3c:6c:fa:a0:3c:5a:a3:c3:83:9b:ee:1e:f0:11:ec:5a:a5:a5: e2:7e:5f:91 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUSaM4BMvSydqCBDTKmZNJXqGiJvQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEE5RjIwNDA1NzlCQTAxNkIxMEI1NzhERTA2Qjc5NkYxQzRGRDREREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzO7+uca+08D8pWZRKU1pHjuCR 7q8Ksk/aSYlIbK9ELA5poB/5o4yPen7B13xiS3WLpofen+JjZQHQgctDU7dzC2Yt Miu8U9CqGcA17+j48yo96LW0KRqAwq4eTDSZawfMAfaV/umnnjRa7zcPDr5xuYFe sa3Saru3gs6YkECoF3qYvsxpwijetfESPcA6jVZYNFpJ+BKshAlp/SJPpuZWvTBk PKk5qraOnJLo+5Nx5kFxCDMadp4H/3D2iUdwLCia+FtfUfdffCJhCIlxFF6DWGD7 NQ+pkas3hznvhS/MkXQ7UQKQCbT0cqb/O4tH3qM2/QWEVhQxhx47GdT3bSuTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUqfIEBXm6AWsQtXjeBreW8cT9Td0wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMy MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMxMzczMTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3cMA0GCSqGSIb3DQEBCwUAA4IBAQCLYVHMkqSP9QT9zXhu2Z4P8sURHijZS1rQ qZCfFdhjz50TAr0UgZ9OzVF/x72wD7xPZUmiw8PTCEEOMGAj/dylM4XMJRH8QW0n 2Bf2BZxiccG33jiQnzDbVTZuAA8qODCzlJ4B1SaWdPg22hOSalnLQ5q3TMbgdC9S 0Gx0XEkIiaalkHqKebWbb4w20xVXMP4cjZbEZLLZuhxhhcxo0aodOVr7rVh8z4Gp MM3+nPlAXUzPec+8R4dM0iRkUh2YeHPrdXaNlLIKMpW02UOX7tmm0ewIfnfmtL+W 56X9b7G7i1pGSGo7rz3MVRM8bPqgPFqjw4Ob7h7wEexapaXifl+R -----END CERTIFICATE-----Generated at Tue Dec 16 16:18:45 2025 by rpki-client