This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37382e302f32342d3234203d3e20323030303838.roa File: 3138352e38392e37382e302f32342d3234203d3e20323030303838.roa (raw, json) Hash identifier: endH0BjLwQ8Q7uY0jpNI4JUwkqtYFkUmMQ0Hx2ZnUPM= Subject key identifier: 7F:DD:4A:CC:C5:37:20:DB:78:EC:A1:3B:55:B5:90:B6:AA:38:B2:DB Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 342370A1602CD61B78012BC7988B21CAC7986515 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37382e302f32342d3234203d3e20323030303838.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 200088 IP address blocks: 185.89.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:23:70:a1:60:2c:d6:1b:78:01:2b:c7:98:8b:21:ca:c7:98:65:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=7FDD4ACCC53720DB78ECA13B55B590B6AA38B2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f9:c4:d5:09:31:e3:8a:b9:1e:76:a5:13:a3: ff:48:73:b1:32:64:0d:91:96:61:c6:7e:ba:9f:9a: 1e:fc:76:c6:b3:ee:10:a1:fb:41:75:4f:2e:75:a5: 66:8b:98:95:8a:50:fb:ea:b6:77:1b:09:31:e2:e2: 02:7c:9c:10:b7:96:fa:c5:23:44:7d:f3:0f:e6:4a: c7:df:21:3a:17:95:72:8d:2c:b1:72:58:5f:99:1b: 49:2b:fd:1f:31:32:d9:0e:ef:bd:40:87:21:38:3f: a0:57:0f:d5:5d:b3:ab:63:50:ca:9b:fc:76:9b:e8: 36:4f:37:54:19:79:c0:56:7f:c6:a1:3b:8e:1a:1a: 60:45:72:65:ec:1b:d5:f7:ca:d7:95:d1:9c:81:b2: 0c:ff:41:c6:ce:2c:ae:3c:0b:0d:7d:4f:3d:27:47: 90:a5:d3:ea:76:e2:b6:1e:ac:1c:97:0b:a6:f9:a3: 2e:19:1b:97:7b:6d:b3:b4:1b:e1:de:52:85:32:4f: af:22:90:b5:17:d6:7e:62:ec:91:e7:a3:53:b5:5e: 32:69:54:79:1c:83:bf:55:e8:9b:92:09:32:66:ab: 20:06:f6:83:0f:9c:29:b6:b7:95:c4:84:9c:13:ff: 16:0c:34:62:4b:22:46:69:11:1b:ee:d8:c6:52:82: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:DD:4A:CC:C5:37:20:DB:78:EC:A1:3B:55:B5:90:B6:AA:38:B2:DB X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e38392e37382e302f32342d3234203d3e20323030303838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.78.0/24 Signature Algorithm: sha256WithRSAEncryption 92:82:6e:23:85:e0:db:3a:a5:e5:08:84:3d:8d:ca:2b:7a:6f: b1:45:bc:6b:6e:e2:63:01:ef:18:d9:96:72:af:92:0d:36:68: 7a:0c:83:71:fd:99:c9:f5:3d:a4:b6:54:62:a0:9b:84:36:38: a3:ab:d5:42:48:31:00:4e:99:e5:c3:57:f0:4d:ab:a0:05:84: 3c:76:76:00:6c:4c:e5:7f:bd:08:db:b4:59:08:24:5d:94:b8: c0:12:d5:48:0c:98:ee:ac:0b:25:bd:fb:1e:a3:71:25:0d:ed: 48:c2:5b:8e:0d:33:60:d8:0a:33:73:ee:3b:0b:15:e0:83:1b: 08:62:18:88:48:d9:e4:dd:e4:f6:0a:c4:fb:a1:dc:78:1b:4d: c9:84:8e:8a:29:da:3b:db:fa:4a:c3:21:8d:4b:ef:ea:58:32: 37:d2:fe:a4:58:1c:cb:3d:5e:cb:9f:d0:e7:8c:51:ee:d9:a3: ca:3c:8d:87:45:53:ec:92:7b:9c:29:f3:4a:97:13:3b:c1:d0: fe:93:28:6b:df:32:42:af:32:10:ad:ac:a7:61:0d:63:8d:38: 62:48:76:97:c1:4f:6f:25:f0:4c:4a:12:09:5a:10:ad:ea:63: 61:29:e8:5b:80:1d:a4:ba:ac:e7:e1:f3:eb:35:49:8d:2c:3c: ad:bd:05:f3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNCNwoWAs1ht4ASvHmIshyseYZRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDdGREQ0QUNDQzUzNzIwREI3OEVDQTEzQjU1QjU5MEI2QUEzOEIyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH+cTVCTHjirkedqUTo/9Ic7Ey ZA2RlmHGfrqfmh78dsaz7hCh+0F1Ty51pWaLmJWKUPvqtncbCTHi4gJ8nBC3lvrF I0R98w/mSsffIToXlXKNLLFyWF+ZG0kr/R8xMtkO771AhyE4P6BXD9Vds6tjUMqb /Hab6DZPN1QZecBWf8ahO44aGmBFcmXsG9X3yteV0ZyBsgz/QcbOLK48Cw19Tz0n R5Cl0+p24rYerByXC6b5oy4ZG5d7bbO0G+HeUoUyT68ikLUX1n5i7JHno1O1XjJp VHkcg79V6JuSCTJmqyAG9oMPnCm2t5XEhJwT/xYMNGJLIkZpERvu2MZSglWjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUf91KzMU3INt47KE7VbWQtqo4stswHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzODM5MmUzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDMwMzAzODM4LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA uVlOMA0GCSqGSIb3DQEBCwUAA4IBAQCSgm4jheDbOqXlCIQ9jcorem+xRbxrbuJj Ae8Y2ZZyr5INNmh6DINx/ZnJ9T2ktlRioJuENjijq9VCSDEATpnlw1fwTaugBYQ8 dnYAbEzlf70I27RZCCRdlLjAEtVIDJjurAslvfseo3ElDe1IwluODTNg2Aozc+47 CxXggxsIYhiISNnk3eT2CsT7odx4G03JhI6KKdo72/pKwyGNS+/qWDI30v6kWBzL PV7Ln9DnjFHu2aPKPI2HRVPsknucKfNKlxM7wdD+kyhr3zJCrzIQraynYQ1jjThi SHaXwU9vJfBMShIJWhCt6mNhKehbgB2kuqzn4fPrNUmNLDytvQXz -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:37 2025 by rpki-client