This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232322e302f32342d3234203d3e20323032373336.roa File: 38352e3233372e3232322e302f32342d3234203d3e20323032373336.roa (raw, json) Hash identifier: 4NukENTp3zJHJ/1qEH6+RA7tsn/11pVdOxzQQGnhFFc= Subject key identifier: 0A:3C:60:1C:24:B3:DB:7A:C3:34:76:C7:28:D1:A1:3E:01:32:B5:80 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 646AFCD514C55D3DB11755A36F79A0D9BFBD4350 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232322e302f32342d3234203d3e20323032373336.roa Signing time: Sat 10 Jan 2026 05:30:33 +0000 ROA not before: Sat 10 Jan 2026 05:25:33 +0000 ROA not after: Sat 09 Jan 2027 05:30:33 +0000 asID: 202736 IP address blocks: 85.237.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6a:fc:d5:14:c5:5d:3d:b1:17:55:a3:6f:79:a0:d9:bf:bd:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Jan 10 05:25:33 2026 GMT Not After : Jan 9 05:30:33 2027 GMT Subject: CN=0A3C601C24B3DB7AC33476C728D1A13E0132B580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:e3:7d:6f:9f:96:03:7e:b0:8a:cc:03:09: 34:e9:8e:bf:7c:f9:1c:20:f4:1a:bf:3e:a6:c3:8a: 7c:83:d0:96:2b:83:ef:af:fa:7d:04:8e:68:3d:7a: 82:ea:b9:94:02:7d:0f:e7:7a:23:92:cf:fa:da:f3: 9f:35:84:b3:0e:3c:89:9f:fd:45:5e:54:0b:a0:f4: 9f:b2:3d:79:86:9a:ef:b7:9b:c4:13:a8:2d:5d:74: 33:92:cc:31:3d:59:a1:75:1f:22:14:04:b8:31:7f: ad:c8:43:a8:54:e7:ef:9c:c0:20:6a:be:26:70:12: b9:f7:94:a5:eb:a9:44:f9:c8:f7:15:9f:df:f3:31: b1:2d:31:27:8f:13:d5:de:26:6b:c1:9d:50:d9:89: cf:41:e7:a9:66:38:10:c7:20:b1:b2:48:68:2f:1a: ff:37:d6:c5:49:7b:80:55:4c:a4:fe:b7:af:fd:1b: 88:ea:96:c9:2d:95:ac:83:25:fd:62:bd:bd:4e:55: f1:09:38:36:cd:7a:27:35:e9:81:3a:59:13:9a:b9: b7:0b:71:72:1c:cf:99:20:dc:5a:6d:06:95:0a:c0: f0:36:fa:f5:e9:e7:50:f2:a8:a4:e8:71:2f:8b:63: 0b:d7:25:fe:c7:48:72:19:fc:69:47:93:59:01:c1: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3C:60:1C:24:B3:DB:7A:C3:34:76:C7:28:D1:A1:3E:01:32:B5:80 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232322e302f32342d3234203d3e20323032373336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.222.0/24 Signature Algorithm: sha256WithRSAEncryption 19:15:84:7c:08:28:8f:76:72:99:ae:93:3d:2c:e4:da:be:ea: 9c:03:ec:57:9c:b0:98:e7:63:a8:c1:53:72:92:d1:bb:f5:be: b4:c7:7c:f4:28:39:ee:39:d2:32:6a:ca:d7:12:f8:73:45:44: 33:ef:eb:08:96:12:b2:bb:f7:c8:22:33:91:84:a7:36:53:7f: 16:54:e2:12:4c:cf:2d:6e:03:06:f6:62:f5:2a:99:ed:e9:79: 6e:1b:57:55:8f:80:9d:cf:5d:9a:81:bf:a9:62:82:98:04:6c: dd:19:33:77:5a:fd:5b:83:0d:94:00:25:3b:d9:8e:89:ee:12: 65:d7:65:83:7e:d5:ac:6d:8c:af:4a:ca:d3:0e:74:33:bd:6d: fb:d1:e1:1d:f5:0b:b4:a0:df:d0:55:ee:8e:3e:3d:bb:06:e9: 41:ea:1f:47:66:67:fe:16:81:98:fe:5e:e8:5b:dc:68:46:37: 96:27:7c:55:a7:cb:bd:ca:10:45:f8:2f:d1:ea:a7:b8:a4:0d: b5:b0:50:e8:8f:a2:44:e6:43:84:03:4c:6a:90:e4:2b:3c:dc: 5a:97:b2:79:f0:94:11:76:ac:7e:a1:3d:1d:5c:f0:b0:ef:e3: ed:11:bf:a9:78:76:44:bf:37:95:15:13:4d:bd:ec:ee:1e:34: 8c:39:8d:51 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUZGr81RTFXT2xF1Wjb3mg2b+9Q1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNjAxMTAwNTI1MzNaFw0yNzAxMDkwNTMwMzNaMDMxMTAvBgNV BAMTKDBBM0M2MDFDMjRCM0RCN0FDMzM0NzZDNzI4RDFBMTNFMDEzMkI1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVseN9b5+WA36wiswDCTTpjr98 +Rwg9Bq/PqbDinyD0JYrg++v+n0Ejmg9eoLquZQCfQ/neiOSz/ra8581hLMOPImf /UVeVAug9J+yPXmGmu+3m8QTqC1ddDOSzDE9WaF1HyIUBLgxf63IQ6hU5++cwCBq viZwErn3lKXrqUT5yPcVn9/zMbEtMSePE9XeJmvBnVDZic9B56lmOBDHILGySGgv Gv831sVJe4BVTKT+t6/9G4jqlsktlayDJf1ivb1OVfEJODbNeic16YE6WROaubcL cXIcz5kg3FptBpUKwPA2+vXp51DyqKTocS+LYwvXJf7HSHIZ/GlHk1kBwXrhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUCjxgHCSz23rDNHbHKNGhPgEytYAwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMy MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzIzNzMzMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7d4wDQYJKoZIhvcNAQELBQADggEBABkVhHwIKI92cpmukz0s5Nq+6pwD7Fec sJjnY6jBU3KS0bv1vrTHfPQoOe450jJqytcS+HNFRDPv6wiWErK798giM5GEpzZT fxZU4hJMzy1uAwb2YvUqme3peW4bV1WPgJ3PXZqBv6ligpgEbN0ZM3da/VuDDZQA JTvZjonuEmXXZYN+1axtjK9KytMOdDO9bfvR4R31C7Sg39BV7o4+PbsG6UHqH0dm Z/4WgZj+Xuhb3GhGN5YnfFWny73KEEX4L9Hqp7ikDbWwUOiPokTmQ4QDTGqQ5Cs8 3FqXsnnwlBF2rH6hPR1c8LDv4+0Rv6l4dkS/N5UVE0297O4eNIw5jVE= -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:19 2026 by rpki-client