This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31362e302f32342d3234203d3e20343030303339.roa File: 38352e3230392e31362e302f32342d3234203d3e20343030303339.roa (raw, json) Hash identifier: JpeDtHMcVyRt7wSevEegZIXGiDHI/xp5ouHedcx7mT4= Subject key identifier: FF:A1:B1:CB:46:5F:51:07:3F:74:6A:A9:79:E9:38:19:4D:06:88:BB Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 13A231D2A64D5D07B6A586081642A4EBC6358F51 Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31362e302f32342d3234203d3e20343030303339.roa Signing time: Thu 25 Dec 2025 18:55:32 +0000 ROA not before: Thu 25 Dec 2025 18:50:32 +0000 ROA not after: Thu 24 Dec 2026 18:55:32 +0000 asID: 400039 IP address blocks: 85.209.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:53:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:a2:31:d2:a6:4d:5d:07:b6:a5:86:08:16:42:a4:eb:c6:35:8f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Dec 25 18:50:32 2025 GMT Not After : Dec 24 18:55:32 2026 GMT Subject: CN=FFA1B1CB465F51073F746AA979E938194D0688BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:5c:38:8e:bd:d9:60:e2:03:b5:27:e9:b1: bd:83:2a:e3:60:23:20:8c:64:b3:89:b0:d6:49:87: d1:80:5c:2c:da:0b:ed:96:09:7a:87:54:91:eb:23: af:79:32:4e:b4:27:ed:83:11:b6:06:3a:0a:39:cd: 71:7e:91:01:42:64:20:b9:16:2b:26:ea:46:45:c7: 58:39:a9:a0:b0:58:25:e4:cd:f7:a7:93:9d:b3:69: e3:74:ba:1f:7c:ba:25:aa:28:e1:c9:6c:1d:bc:1e: a8:37:43:0f:3e:09:68:a8:2f:89:ba:0b:c5:e9:ed: e7:7d:4c:7a:52:60:27:43:6e:41:ec:f6:b6:ba:16: ad:5c:77:28:30:66:e4:70:ed:a1:40:31:24:71:fc: 3d:1e:03:5f:e5:b5:37:04:64:d0:7c:ca:ab:77:b6: e4:a3:20:e7:d0:31:6c:7a:77:d0:ca:16:a7:c8:d7: c6:51:22:d0:96:9f:6e:80:4a:4f:e9:58:c7:54:d3: 71:f7:ca:47:f9:57:2a:81:1d:dc:14:1d:b4:d0:d4: 78:44:e8:ba:9d:fa:a4:e7:17:a0:69:2d:06:fb:14: 8e:b0:29:77:ab:0c:51:0d:e3:bb:ab:e5:97:51:f2: ad:bc:32:8a:04:b9:c3:d5:4b:26:41:19:d9:4c:ed: c3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A1:B1:CB:46:5F:51:07:3F:74:6A:A9:79:E9:38:19:4D:06:88:BB X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31362e302f32342d3234203d3e20343030303339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.16.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:b8:21:18:7a:45:7b:20:9f:3c:e1:0f:42:52:9a:15:c9:d9: 0e:a2:40:2a:2c:3d:2b:55:a7:d4:d6:03:28:83:ee:89:c7:ba: 83:bd:21:df:81:c2:3f:9c:4b:d0:af:bc:a2:19:58:03:7e:3d: 91:cf:c4:af:ab:26:ec:69:af:2e:50:30:f6:66:7a:3a:2a:86: 9d:61:00:b5:39:69:82:b4:55:f4:12:a0:f0:d8:ef:9f:5e:ff: ae:af:6c:01:ce:4a:e5:79:cf:ff:9a:80:47:8a:3b:d0:e5:8c: ec:b6:5c:bb:7e:8a:a4:95:6e:50:a0:78:8e:14:05:7b:7d:28: c7:c5:cf:70:e5:8c:dc:b8:a9:60:c0:f5:76:5c:1f:e1:ba:2f: 00:07:13:61:d7:1d:36:77:da:71:17:55:2f:ed:ca:6c:a2:9b: 76:d0:f5:18:44:8d:2c:66:14:36:a6:1a:0e:71:e1:37:a3:45: 9d:d0:25:62:cb:34:f7:6e:b5:79:f4:86:5e:08:70:75:67:ae: 66:a7:bf:1c:ce:fe:80:40:49:47:29:cb:cb:e0:19:01:74:e7: 55:7a:c1:c6:57:07:61:c3:4b:73:0e:01:b6:ae:c3:30:b7:0c: 9b:2b:05:b3:dd:1f:b6:de:1d:0f:3c:6f:9a:85:4a:e8:88:e6: db:f6:ca:5f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUE6Ix0qZNXQe2pYYIFkKk68Y1j1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTEyMjUxODUwMzJaFw0yNjEyMjQxODU1MzJaMDMxMTAvBgNV BAMTKEZGQTFCMUNCNDY1RjUxMDczRjc0NkFBOTc5RTkzODE5NEQwNjg4QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxV1w4jr3ZYOIDtSfpsb2DKuNg IyCMZLOJsNZJh9GAXCzaC+2WCXqHVJHrI695Mk60J+2DEbYGOgo5zXF+kQFCZCC5 Fism6kZFx1g5qaCwWCXkzfenk52zaeN0uh98uiWqKOHJbB28Hqg3Qw8+CWioL4m6 C8Xp7ed9THpSYCdDbkHs9ra6Fq1cdygwZuRw7aFAMSRx/D0eA1/ltTcEZNB8yqt3 tuSjIOfQMWx6d9DKFqfI18ZRItCWn26ASk/pWMdU03H3ykf5VyqBHdwUHbTQ1HhE 6Lqd+qTnF6BpLQb7FI6wKXerDFEN47ur5ZdR8q28MooEucPVSyZBGdlM7cNvAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU/6Gxy0ZfUQc/dGqpeek4GU0GiLswHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzgzNTJlMzIzMDM5MmUzMTM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMwMzAzMzM5LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA VdEQMA0GCSqGSIb3DQEBCwUAA4IBAQBauCEYekV7IJ884Q9CUpoVydkOokAqLD0r VafU1gMog+6Jx7qDvSHfgcI/nEvQr7yiGVgDfj2Rz8Svqybsaa8uUDD2Zno6Koad YQC1OWmCtFX0EqDw2O+fXv+ur2wBzkrlec//moBHijvQ5Yzstly7foqklW5QoHiO FAV7fSjHxc9w5YzcuKlgwPV2XB/hui8ABxNh1x02d9pxF1Uv7cpsopt20PUYRI0s ZhQ2phoOceE3o0Wd0CViyzT3brV59IZeCHB1Z65mp78czv6AQElHKcvL4BkBdOdV esHGVwdhw0tzDgG2rsMwtwybKwWz3R+23h0PPG+ahUroiObb9spf -----END CERTIFICATE-----Generated at Sun Jan 25 14:47:20 2026 by rpki-client