This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20383334.roa File: 38352e3233372e3232302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 5Kkej1mUwRBLoylDdb/rTZ8vpp5aNGtC4K+zP167980= Subject key identifier: C3:49:60:69:3B:E7:DF:DD:DE:B1:92:9E:23:C5:4F:72:AB:AD:8C:B9 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 57753A7F6CF666E98A0AA4F0F989812F09719B4A Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20383334.roa Signing time: Thu 12 Feb 2026 08:05:30 +0000 ROA not before: Thu 12 Feb 2026 08:00:30 +0000 ROA not after: Thu 11 Feb 2027 08:05:30 +0000 asID: 834 IP address blocks: 85.237.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:75:3a:7f:6c:f6:66:e9:8a:0a:a4:f0:f9:89:81:2f:09:71:9b:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Feb 12 08:00:30 2026 GMT Not After : Feb 11 08:05:30 2027 GMT Subject: CN=C34960693BE7DFDDDEB1929E23C54F72ABAD8CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:f1:fd:27:a5:09:32:3d:1f:2c:c4:84:58: 29:f6:0b:83:a1:f1:2c:f8:38:fa:ee:79:07:c3:81: b9:80:cd:17:d1:2f:f4:06:da:63:bb:28:aa:f1:f3: 97:b1:97:f7:22:eb:8e:59:66:be:bc:7b:74:89:bc: b7:68:5f:ce:76:af:1e:ab:11:de:ea:7d:c2:a5:b0: 7b:9f:29:4d:4b:9b:4a:52:74:9b:75:c2:a5:e8:cb: bb:35:1c:5c:85:dd:11:ea:f2:7e:ee:8b:77:89:cc: dd:24:c3:92:44:52:34:3c:94:b1:a9:18:ed:24:90: e2:61:cc:39:f4:41:47:b3:7e:2e:0e:68:a0:66:4b: 1c:7b:20:c2:4e:96:39:5e:41:17:55:33:da:bd:f0: ee:8b:d5:99:7a:e7:ad:52:64:01:f7:e4:90:ea:d6: b8:cd:3d:4a:64:3a:dd:19:cc:c7:bc:d2:cd:47:bb: e2:98:87:e4:6f:7e:f2:4b:3f:d1:3b:26:9a:ab:33: 5b:61:6f:82:09:25:63:54:d9:7d:ad:85:35:cb:02: f7:00:41:0c:83:d2:dc:c3:d4:7b:3f:d4:57:67:3e: fe:bc:3b:e3:c6:8d:56:45:3a:b6:2c:66:3a:64:37: 74:55:19:67:1b:ac:7f:d9:76:ec:7b:02:fd:64:7f: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:49:60:69:3B:E7:DF:DD:DE:B1:92:9E:23:C5:4F:72:AB:AD:8C:B9 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.220.0/24 Signature Algorithm: sha256WithRSAEncryption 77:c1:f6:15:ed:76:ec:bd:aa:e8:86:0f:4a:59:08:5c:2a:9c: ea:6d:31:c5:47:35:60:b1:ae:5e:38:7d:3b:8d:5c:7e:b3:65: 28:fd:9f:51:a7:b9:9b:06:40:31:c1:12:3e:04:b9:07:86:36: 7c:fa:40:bd:5a:d0:eb:92:ba:b2:cf:24:1f:a2:34:d5:02:53: 96:bf:7f:a2:51:2e:3c:72:12:e1:8e:02:3c:a6:63:8a:ea:a9: dd:dd:b6:f7:1b:53:f5:d0:f1:5d:53:ae:48:80:a5:e5:cd:18: e0:36:5b:56:1a:41:90:51:f3:6f:bd:29:5e:82:4f:88:4e:51: af:94:97:e7:af:d0:5e:96:b2:18:44:35:27:ae:06:1a:b4:cc: 57:89:f1:15:df:0f:b8:4d:00:e1:3c:54:7c:32:57:07:f8:b9: ed:32:d7:f3:55:fc:60:7b:8b:16:3a:be:b3:bc:11:e8:e1:77: 67:57:f8:9c:dc:e2:7d:1b:d9:cd:d9:49:1c:b1:93:08:49:3d: fb:34:3c:e5:9f:27:ab:6b:92:4b:81:86:1f:18:61:bc:67:fd: a2:c2:40:18:e5:e0:63:bb:d4:65:b4:9e:30:55:44:0b:6b:af: 4c:99:f8:d5:b0:fb:d1:27:1d:e1:c2:38:54:4e:a9:8f:df:63: a0:af:38:cf -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUV3U6f2z2ZumKCqTw+YmBLwlxm0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNjAyMTIwODAwMzBaFw0yNzAyMTEwODA1MzBaMDMxMTAvBgNV BAMTKEMzNDk2MDY5M0JFN0RGRERERUIxOTI5RTIzQzU0RjcyQUJBRDhDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSfH9J6UJMj0fLMSEWCn2C4Oh 8Sz4OPrueQfDgbmAzRfRL/QG2mO7KKrx85exl/ci645ZZr68e3SJvLdoX852rx6r Ed7qfcKlsHufKU1Lm0pSdJt1wqXoy7s1HFyF3RHq8n7ui3eJzN0kw5JEUjQ8lLGp GO0kkOJhzDn0QUezfi4OaKBmSxx7IMJOljleQRdVM9q98O6L1Zl6561SZAH35JDq 1rjNPUpkOt0ZzMe80s1Hu+KYh+RvfvJLP9E7JpqrM1thb4IJJWNU2X2thTXLAvcA QQyD0tzD1Hs/1FdnPv68O+PGjVZFOrYsZjpkN3RVGWcbrH/Zdux7Av1kf+PtAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUw0lgaTvn393esZKeI8VPcqutjLkwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMy MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABV7dww DQYJKoZIhvcNAQELBQADggEBAHfB9hXtduy9quiGD0pZCFwqnOptMcVHNWCxrl44 fTuNXH6zZSj9n1GnuZsGQDHBEj4EuQeGNnz6QL1a0OuSurLPJB+iNNUCU5a/f6JR LjxyEuGOAjymY4rqqd3dtvcbU/XQ8V1TrkiApeXNGOA2W1YaQZBR82+9KV6CT4hO Ua+Ul+ev0F6WshhENSeuBhq0zFeJ8RXfD7hNAOE8VHwyVwf4ue0y1/NV/GB7ixY6 vrO8Eejhd2dX+Jzc4n0b2c3ZSRyxkwhJPfs0POWfJ6trkkuBhh8YYbxn/aLCQBjl 4GO71GW0njBVRAtrr0yZ+NWw+9EnHeHCOFROqY/fY6CvOM8= -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:53 2026 by rpki-client