This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231322e302f32342d3234203d3e20313430363431.roa File: 3138352e3130302e3231322e302f32342d3234203d3e20313430363431.roa (raw, json) Hash identifier: UUeDTAfwml3Gaw1TGCsL66027gNUV7ygT8z3K1kwEZE= Subject key identifier: 91:B8:A7:90:59:F3:1A:AC:2E:44:99:AF:2D:7D:75:72:2D:15:33:52 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 2422AA63A782527F743F63A3B206A259C9FC3CF4 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231322e302f32342d3234203d3e20313430363431.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 140641 IP address blocks: 185.100.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:22:aa:63:a7:82:52:7f:74:3f:63:a3:b2:06:a2:59:c9:fc:3c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=91B8A79059F31AAC2E4499AF2D7D75722D153352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:ce:60:5d:c3:b8:d3:a7:dd:75:bd:ea:f6: 68:e5:36:36:28:d7:d3:83:52:53:8a:b2:d1:c4:b5: b3:49:47:f0:33:96:85:1c:f1:da:4f:7e:c8:80:f2: b5:82:ee:bb:33:89:6a:3f:d0:ce:7a:ab:4f:8e:32: c2:77:e2:46:e5:f2:ba:96:a9:e3:a4:f5:85:21:1a: 4f:3f:fc:8b:8a:6b:f2:8b:8c:2c:8e:b5:b1:60:c5: ba:2d:e7:9e:3b:94:3a:04:9f:7b:83:f9:35:32:72: 2e:ca:ca:7e:7c:cf:42:08:a5:51:5e:23:1f:a8:bc: 97:d7:43:61:29:3e:3a:5d:0a:0c:c5:23:f7:5d:4b: be:1e:72:da:39:3a:de:ea:5c:f7:fe:49:bc:c4:33: 44:56:06:53:59:da:1a:45:2f:64:45:18:10:6d:7e: 96:1b:c7:23:4f:3b:af:f9:f0:dd:f6:e9:21:cb:2f: 80:d8:5d:f4:2a:c3:96:1f:96:f4:ba:e5:10:40:0a: 6f:ef:00:5f:e7:12:83:40:89:20:93:df:46:74:59: e2:43:a9:6b:b4:e7:83:0c:8f:73:36:0a:47:48:c6: d5:d2:38:fd:bd:1c:23:f4:0b:b2:f0:95:d4:ed:05: 8b:2c:d3:6b:d6:ad:4b:57:68:31:83:bb:83:31:a9: e8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B8:A7:90:59:F3:1A:AC:2E:44:99:AF:2D:7D:75:72:2D:15:33:52 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e3130302e3231322e302f32342d3234203d3e20313430363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.100.212.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:4e:99:0a:19:71:e6:22:4a:be:fb:2d:e5:85:87:dd:37:dc: eb:f7:4b:5f:de:cc:0e:dd:84:6f:ac:c2:e0:bd:d9:ce:f1:92: 7c:af:0d:64:06:14:19:b3:66:53:fd:31:08:3a:9e:fc:47:40: d8:1f:bf:d2:b9:c5:f6:82:68:14:21:a6:3d:fb:d6:59:b4:42: e5:2d:0d:3c:0c:f3:88:af:37:ea:b4:9f:b5:4a:25:3e:1e:5e: 94:50:f2:f0:a4:da:6f:2d:d0:0a:d4:93:48:fa:98:36:d5:ba: dc:bd:09:ad:50:39:bb:6f:28:ea:57:2e:98:11:38:e8:6a:07: 9d:df:d6:53:6e:1f:52:c6:8f:07:34:1c:b4:ca:f4:3b:29:0b: 53:a3:83:fb:a6:60:bb:f7:67:1f:5e:14:37:da:e2:ca:54:1e: 30:af:8f:82:45:b5:af:13:a7:3e:be:29:c5:a6:9a:08:80:b6: e6:07:e5:45:74:0a:50:57:01:0e:71:df:fd:dd:33:53:8b:7f: 07:de:32:1d:63:5e:c7:e0:f4:81:39:ad:71:f9:5f:f3:36:62: f2:e7:e5:fb:6e:8a:4d:a1:70:39:a4:44:a6:8d:85:07:8c:6b: 66:a2:54:55:45:02:2e:b7:df:ca:4d:59:03:3b:ac:1d:5e:65: 3c:61:d3:a5 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUJCKqY6eCUn90P2OjsgaiWcn8PPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKDkxQjhBNzkwNTlGMzFBQUMyRTQ0OTlBRjJEN0Q3NTcyMkQxNTMzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMYc5gXcO406fddb3q9mjlNjYo 19ODUlOKstHEtbNJR/AzloUc8dpPfsiA8rWC7rsziWo/0M56q0+OMsJ34kbl8rqW qeOk9YUhGk8//IuKa/KLjCyOtbFgxbot5547lDoEn3uD+TUyci7Kyn58z0IIpVFe Ix+ovJfXQ2EpPjpdCgzFI/ddS74ecto5Ot7qXPf+SbzEM0RWBlNZ2hpFL2RFGBBt fpYbxyNPO6/58N326SHLL4DYXfQqw5YflvS65RBACm/vAF/nEoNAiSCT30Z0WeJD qWu054MMj3M2CkdIxtXSOP29HCP0C7LwldTtBYss02vWrUtXaDGDu4MxqeiHAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUkbinkFnzGqwuRJmvLX11ci0VM1IwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzMTMwMzAyZTMy MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM2MzQzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEALlk1DANBgkqhkiG9w0BAQsFAAOCAQEAbU6ZChlx5iJKvvst5YWH3Tfc6/dL X97MDt2Eb6zC4L3ZzvGSfK8NZAYUGbNmU/0xCDqe/EdA2B+/0rnF9oJoFCGmPfvW WbRC5S0NPAzziK836rSftUolPh5elFDy8KTaby3QCtSTSPqYNtW63L0JrVA5u28o 6lcumBE46GoHnd/WU24fUsaPBzQctMr0OykLU6OD+6Zgu/dnH14UN9riylQeMK+P gkW1rxOnPr4pxaaaCIC25gflRXQKUFcBDnHf/d0zU4t/B94yHWNex+D0gTmtcflf 8zZi8ufl+26KTaFwOaREpo2FB4xrZqJUVUUCLrffyk1ZAzusHV5lPGHTpQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:36 2025 by rpki-client