This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33352e302f32342d3234203d3e20313337353137.roa File: 3138352e39332e33352e302f32342d3234203d3e20313337353137.roa (raw, json) Hash identifier: wOcjO3nusbOUSJjlA86N4M/lPYoZPezkmHIWQAjgOkQ= Subject key identifier: 36:BA:B0:B3:44:2E:14:8C:7A:84:57:97:9C:67:C6:2F:86:EC:35:AE Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 39CDEEA93F235E16D394ED973FC87D6F4C8C503F Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33352e302f32342d3234203d3e20313337353137.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 137517 IP address blocks: 185.93.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:cd:ee:a9:3f:23:5e:16:d3:94:ed:97:3f:c8:7d:6f:4c:8c:50:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=36BAB0B3442E148C7A8457979C67C62F86EC35AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:ed:1f:f7:2d:8c:55:8d:1f:89:1e:ee:cb: 4b:5b:ef:76:bc:69:41:46:ba:23:17:78:a0:fa:bd: c7:16:1d:20:9d:a2:7c:6d:b0:12:56:34:1a:9b:d5: 68:de:bd:6c:82:da:05:e6:55:d9:34:62:ef:f3:4e: f8:1f:5e:4d:2d:19:ff:0c:41:fb:35:20:2c:42:5c: 51:db:07:f2:97:c9:69:b4:4f:aa:50:97:61:3a:44: 70:c3:0f:fc:84:c7:b3:5c:98:3d:31:b5:fc:4f:01: 5b:d6:2d:f5:73:50:c8:a5:c7:56:87:3b:9d:ba:dc: 85:93:32:2d:14:b0:d2:4d:92:bb:ff:90:18:46:26: 37:0f:db:87:41:a7:a6:79:a6:a5:3f:87:82:8b:c9: 9c:5d:2d:c3:9d:35:16:93:c1:f3:36:ef:a0:d6:d6: 7a:f9:66:a5:68:a9:2e:5a:bf:d3:9c:af:f5:fa:22: 8f:ba:74:42:70:06:24:79:53:4f:20:fe:01:f6:a8: 5d:08:49:a3:d1:93:cd:3d:ef:67:cc:f6:78:ed:f7: 3a:6d:d3:34:b8:b3:fc:70:4a:cc:e9:23:6b:e0:a1: 04:ec:ea:ee:53:14:42:2e:97:eb:47:c5:40:9b:a6: d1:aa:ec:b9:68:31:99:7a:4c:99:b8:40:fb:00:b0: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BA:B0:B3:44:2E:14:8C:7A:84:57:97:9C:67:C6:2F:86:EC:35:AE X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/3138352e39332e33352e302f32342d3234203d3e20313337353137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.93.35.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:2e:9e:f1:c7:f0:d0:88:d6:c2:7e:cf:8b:44:3c:35:35:17: c6:47:ed:4f:94:67:27:1b:04:9b:17:bb:4e:34:ca:85:99:e1: c4:02:b2:ab:ab:66:5d:1a:bb:7d:0f:63:f0:0f:17:70:d9:35: 30:90:69:5b:a2:6b:b2:3e:95:38:1f:4a:00:cb:c2:72:44:97: ad:67:ff:5c:09:f3:37:c8:a1:87:89:74:5a:f4:92:73:20:6d: ff:1f:63:bf:33:d7:d3:ac:23:e4:a6:be:2a:8a:f0:5a:f6:89: 1f:4f:2c:75:a6:8c:77:f0:81:b1:76:30:33:a2:e1:d7:47:85: f5:57:e4:b8:04:cd:8e:7a:d7:e1:b3:e9:1c:b9:9c:7c:09:b1: 17:73:6e:a7:d6:a1:1d:f2:b4:af:51:e0:f6:4b:79:d8:ff:96: 63:cf:9e:84:8c:58:d0:66:f7:ce:26:ba:69:88:62:de:e5:e7: ea:f0:8c:75:ad:1d:7a:77:c8:56:a5:74:af:27:a0:bf:da:ab: 74:88:c7:f2:56:c4:22:30:70:7d:8f:18:d6:1b:92:56:70:2e: 71:99:06:3a:c0:1c:9a:85:1e:b0:97:52:58:54:bd:a9:7b:c8: 60:7b:38:eb:e0:37:98:c9:83:a5:29:60:c2:70:8d:ff:00:4c: c7:05:21:90 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOc3uqT8jXhbTlO2XP8h9b0yMUD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKDM2QkFCMEIzNDQyRTE0OEM3QTg0NTc5NzlDNjdDNjJGODZFQzM1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13+0f9y2MVY0fiR7uy0tb73a8 aUFGuiMXeKD6vccWHSCdonxtsBJWNBqb1WjevWyC2gXmVdk0Yu/zTvgfXk0tGf8M Qfs1ICxCXFHbB/KXyWm0T6pQl2E6RHDDD/yEx7NcmD0xtfxPAVvWLfVzUMilx1aH O5263IWTMi0UsNJNkrv/kBhGJjcP24dBp6Z5pqU/h4KLyZxdLcOdNRaTwfM276DW 1nr5ZqVoqS5av9Ocr/X6Io+6dEJwBiR5U08g/gH2qF0ISaPRk80972fM9njt9zpt 0zS4s/xwSszpI2vgoQTs6u5TFEIul+tHxUCbptGq7LloMZl6TJm4QPsAsM21AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUNrqws0QuFIx6hFeXnGfGL4bsNa4wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzEzODM1MmUzOTMzMmUzMzM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM3MzUzMTM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA uV0jMA0GCSqGSIb3DQEBCwUAA4IBAQBPLp7xx/DQiNbCfs+LRDw1NRfGR+1PlGcn GwSbF7tONMqFmeHEArKrq2ZdGrt9D2PwDxdw2TUwkGlbomuyPpU4H0oAy8JyRJet Z/9cCfM3yKGHiXRa9JJzIG3/H2O/M9fTrCPkpr4qivBa9okfTyx1pox38IGxdjAz ouHXR4X1V+S4BM2Oetfhs+kcuZx8CbEXc26n1qEd8rSvUeD2S3nY/5Zjz56EjFjQ ZvfOJrppiGLe5efq8Ix1rR16d8hWpXSvJ6C/2qt0iMfyVsQiMHB9jxjWG5JWcC5x mQY6wByahR6wl1JYVL2pe8hgezjr4DeYyYOlKWDCcI3/AEzHBSGQ -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:37 2025 by rpki-client