This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232312e302f32342d3234203d3e20313335343032.roa File: 38352e3233372e3232312e302f32342d3234203d3e20313335343032.roa (raw, json) Hash identifier: +qVTjJVKuotsgvi4tQdU8uj67sFEdangIoxQPHC20Hk= Subject key identifier: 80:7E:7A:80:65:E7:3E:1E:CF:5F:F6:03:B0:EC:4E:F8:08:84:67:85 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4E226A98C33F87253A05F10DABE6B7DD5C41B40D Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232312e302f32342d3234203d3e20313335343032.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 135402 IP address blocks: 85.237.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:18:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:22:6a:98:c3:3f:87:25:3a:05:f1:0d:ab:e6:b7:dd:5c:41:b4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=807E7A8065E73E1ECF5FF603B0EC4EF808846785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b8:5c:d5:96:e3:99:9b:dc:15:62:e0:9e:a5: 07:c7:77:b2:74:8f:41:30:f5:11:d4:54:ce:e7:1a: c3:45:b5:fa:07:be:57:ca:1b:41:39:ee:93:f5:14: c4:ee:40:86:37:d1:38:f4:03:8b:ea:ed:d7:1c:4a: 9f:ef:b7:d3:d2:8e:f2:45:5e:45:fd:19:42:84:4b: d5:25:55:a1:5c:12:f5:47:f6:51:86:e5:bf:ec:9d: 1e:64:ee:45:12:cb:4b:a3:57:d2:4b:60:1a:eb:2a: 0a:14:89:ac:66:5d:97:bd:e1:97:4e:01:98:d5:c4: 91:0e:28:6c:42:a8:c5:2a:9c:60:41:6e:da:af:b6: 18:ab:14:f9:4b:2d:85:c4:2e:7e:2a:34:a7:bd:ca: f9:90:b3:09:32:39:da:d4:b7:e5:9f:6f:97:71:90: 58:76:86:a9:98:67:e6:26:db:8f:4a:73:80:20:de: ad:74:71:0a:6d:d3:3f:30:75:89:9c:dc:82:95:e5: a2:c0:df:87:5e:7f:f2:5e:f5:2f:88:da:91:bb:27: 9b:94:c6:25:c1:0e:15:fe:13:d6:f9:80:91:f5:27: d1:1e:39:6c:05:d6:2e:67:32:30:b6:b9:46:ee:5e: 73:4e:bf:88:ee:02:5c:f9:f1:c1:12:ea:a4:f8:5c: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7E:7A:80:65:E7:3E:1E:CF:5F:F6:03:B0:EC:4E:F8:08:84:67:85 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232312e302f32342d3234203d3e20313335343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.221.0/24 Signature Algorithm: sha256WithRSAEncryption 16:e3:00:f2:40:dc:ee:ab:23:16:90:6e:2e:07:c9:d5:68:e6: 71:6e:b1:8c:66:e8:08:5b:1d:2c:0e:d6:87:d0:0d:47:04:a9: e6:bf:90:25:e2:f5:d8:25:59:45:53:8e:e9:76:a6:bc:8b:07: 04:d2:45:fe:3a:f3:d2:f7:34:fe:92:be:b9:98:bf:e4:24:d2: e0:55:02:e9:d9:67:7f:ae:97:4d:91:13:63:a6:97:a1:c5:d8: c3:ea:74:13:36:9b:97:1d:6f:79:79:b9:d0:23:54:25:0b:cd: c3:bf:12:f5:6c:54:57:da:f1:57:0f:42:7c:05:9a:e7:24:ab: 70:45:32:b5:ab:ee:2d:9f:5e:97:89:d8:45:8d:c4:41:ae:9b: 10:80:42:d9:ff:6e:71:a5:8a:c6:0a:14:28:42:87:e4:a5:c5: c4:a6:64:d3:db:f0:4c:e8:eb:eb:07:64:7f:9d:12:85:ec:21: c0:e6:9f:a1:72:d7:40:16:4c:dc:4c:4a:ac:1a:c0:f6:72:6c: 69:2b:a6:23:d0:d2:b3:da:35:b3:3c:d1:15:cd:37:16:51:26: d6:6f:58:82:23:34:be:b2:e3:29:e6:e5:ad:82:19:a9:9c:8f: 0c:28:ca:25:c0:31:82:99:1c:21:ed:c3:00:23:51:82:2a:14: 21:2b:90:ed -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUTiJqmMM/hyU6BfENq+a33VxBtA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDgwN0U3QTgwNjVFNzNFMUVDRjVGRjYwM0IwRUM0RUY4MDg4NDY3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQuFzVluOZm9wVYuCepQfHd7J0 j0Ew9RHUVM7nGsNFtfoHvlfKG0E57pP1FMTuQIY30Tj0A4vq7dccSp/vt9PSjvJF XkX9GUKES9UlVaFcEvVH9lGG5b/snR5k7kUSy0ujV9JLYBrrKgoUiaxmXZe94ZdO AZjVxJEOKGxCqMUqnGBBbtqvthirFPlLLYXELn4qNKe9yvmQswkyOdrUt+Wfb5dx kFh2hqmYZ+Ym249Kc4Ag3q10cQpt0z8wdYmc3IKV5aLA34def/Je9S+I2pG7J5uU xiXBDhX+E9b5gJH1J9EeOWwF1i5nMjC2uUbuXnNOv4juAlz58cES6qT4XEnzAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUgH56gGXnPh7PX/YDsOxO+AiEZ4UwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMy MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUzNDMwMzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7d0wDQYJKoZIhvcNAQELBQADggEBABbjAPJA3O6rIxaQbi4HydVo5nFusYxm 6AhbHSwO1ofQDUcEqea/kCXi9dglWUVTjul2pryLBwTSRf4689L3NP6SvrmYv+Qk 0uBVAunZZ3+ul02RE2Oml6HF2MPqdBM2m5cdb3l5udAjVCULzcO/EvVsVFfa8VcP QnwFmuckq3BFMrWr7i2fXpeJ2EWNxEGumxCAQtn/bnGlisYKFChCh+SlxcSmZNPb 8Ezo6+sHZH+dEoXsIcDmn6Fy10AWTNxMSqwawPZybGkrpiPQ0rPaNbM80RXNNxZR JtZvWIIjNL6y4ynm5a2CGamcjwwoyiXAMYKZHCHtwwAjUYIqFCErkO0= -----END CERTIFICATE-----Generated at Tue Dec 16 16:19:48 2025 by rpki-client