This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37362e302f32342d3234203d3e203536353430.roa File: 3138352e38392e37362e302f32342d3234203d3e203536353430.roa (raw, json) Hash identifier: vCPu6XMaUf+W7NuVzSuwmLDUbdsE0+pgHjUUvvPR6aQ= Subject key identifier: 64:E5:65:68:00:42:5A:55:17:DF:1C:49:B2:5E:CA:A9:14:A7:7E:48 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 56095B83B84A3CE853A9D78E0D1C199F1A7C6805 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37362e302f32342d3234203d3e203536353430.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 56540 IP address blocks: 185.89.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:09:5b:83:b8:4a:3c:e8:53:a9:d7:8e:0d:1c:19:9f:1a:7c:68:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=64E5656800425A5517DF1C49B25ECAA914A77E48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:57:e4:30:16:46:75:f0:3c:dd:ff:f0:cf:ad: 1d:1d:90:cc:1d:3f:55:a5:bf:76:7c:87:1d:32:5a: c5:c4:37:ba:f3:9c:29:ab:cb:30:e3:45:bb:0c:31: ea:ab:d3:bb:74:16:65:56:bf:f9:33:c2:33:4b:8e: f0:ff:ba:21:5f:19:b6:39:88:96:58:ca:39:bd:7c: 99:a4:37:3c:95:ed:48:ab:c5:1b:82:fd:77:20:92: 37:ac:de:7d:97:6e:f6:62:22:58:4f:22:8e:f1:1f: c9:19:c6:30:14:b0:8f:4f:cf:ef:07:ab:6d:04:03: db:89:a6:73:51:19:f7:a1:62:b3:c1:f7:18:e9:74: f2:47:61:78:1f:2d:31:a5:4f:d1:2e:8e:07:38:4b: 74:0f:39:9b:ef:ba:52:77:75:36:b4:34:75:61:5b: b1:80:7a:57:6f:f9:2f:74:36:f4:0b:09:e2:73:f1: 8b:aa:84:ea:c8:a9:49:51:e3:da:d5:fa:2b:99:17: 09:1b:01:e9:f5:9a:bc:3d:e5:c9:e2:a8:f9:b6:68: 3d:f1:8d:11:8d:dc:41:07:f8:11:65:99:42:a3:93: 01:bd:3c:c3:b1:a3:57:b5:f1:c5:0a:9b:6b:43:cd: 40:30:6d:f0:fa:07:6e:fe:8a:73:3a:0b:56:74:82: 94:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:E5:65:68:00:42:5A:55:17:DF:1C:49:B2:5E:CA:A9:14:A7:7E:48 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37362e302f32342d3234203d3e203536353430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.76.0/24 Signature Algorithm: sha256WithRSAEncryption 60:0e:f3:14:18:d2:40:0a:c8:8c:f7:ae:c3:0d:7e:bc:43:e2: d2:67:0f:92:d1:37:e6:3a:44:1f:ce:ab:ce:21:ec:24:2f:9b: 63:f5:88:76:c0:d5:29:c7:2e:02:d9:0e:12:c1:75:10:a2:62: 09:b8:4a:71:b9:4f:15:d8:ec:ea:20:07:11:e4:65:b8:f3:98: 2d:e8:76:37:e5:7c:6f:16:69:2b:bc:f1:b3:a3:44:3c:36:8b: 8a:94:9c:a8:65:d8:38:c2:ac:a1:af:f9:f4:1b:77:34:96:91: 1d:ec:4f:2a:44:f4:db:8c:1e:57:1c:ce:f6:2f:cf:82:76:aa: 5e:b0:ee:21:f4:17:b6:a1:e7:60:f8:a1:32:2e:ba:a5:67:26: 3e:60:bc:85:7b:ce:e3:98:3e:d4:3c:d3:52:cb:3e:7e:a2:40: 45:fe:67:cf:79:5c:6c:19:73:6a:b7:83:74:7c:9f:47:fe:d9: 50:af:dc:7f:26:26:d7:4c:15:4a:c8:7e:6e:30:82:87:78:a2: 8d:f2:37:97:f7:8a:53:07:76:a9:dd:de:63:f9:00:9c:e0:dc: a2:50:de:16:d8:7e:e3:ca:32:5d:05:8a:31:fb:b9:50:a2:6f: e7:0c:1d:d5:48:a2:ab:72:51:87:c7:f4:0f:7e:ec:fc:92:c0: c6:9d:b5:32 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUVglbg7hKPOhTqdeODRwZnxp8aAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDY0RTU2NTY4MDA0MjVBNTUxN0RGMUM0OUIyNUVDQUE5MTRBNzdFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJV+QwFkZ18Dzd//DPrR0dkMwd P1Wlv3Z8hx0yWsXEN7rznCmryzDjRbsMMeqr07t0FmVWv/kzwjNLjvD/uiFfGbY5 iJZYyjm9fJmkNzyV7UirxRuC/Xcgkjes3n2XbvZiIlhPIo7xH8kZxjAUsI9Pz+8H q20EA9uJpnNRGfehYrPB9xjpdPJHYXgfLTGlT9Eujgc4S3QPOZvvulJ3dTa0NHVh W7GAeldv+S90NvQLCeJz8YuqhOrIqUlR49rV+iuZFwkbAen1mrw95cniqPm2aD3x jRGN3EEH+BFlmUKjkwG9PMOxo1e18cUKm2tDzUAwbfD6B27+inM6C1Z0gpSxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUZOVlaABCWlUX3xxJsl7KqRSnfkgwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzODM5MmUzNzM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjM1MzQzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALlZ TDANBgkqhkiG9w0BAQsFAAOCAQEAYA7zFBjSQArIjPeuww1+vEPi0mcPktE35jpE H86rziHsJC+bY/WIdsDVKccuAtkOEsF1EKJiCbhKcblPFdjs6iAHEeRluPOYLeh2 N+V8bxZpK7zxs6NEPDaLipScqGXYOMKsoa/59Bt3NJaRHexPKkT024weVxzO9i/P gnaqXrDuIfQXtqHnYPihMi66pWcmPmC8hXvO45g+1DzTUss+fqJARf5nz3lcbBlz areDdHyfR/7ZUK/cfyYm10wVSsh+bjCCh3iijfI3l/eKUwd2qd3eY/kAnODcolDe Fth+48oyXQWKMfu5UKJv5wwd1Uiiq3JRh8f0D37s/JLAxp21Mg== -----END CERTIFICATE-----Generated at Tue Dec 16 05:17:18 2025 by rpki-client