This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20313938353834.roa File: 38352e3135382e35392e302f32342d3234203d3e20313938353834.roa (raw, json) Hash identifier: bNrGkl0PP/CLBEXexD+RqS/bcWoYW3Lk7ARTcg8/wbU= Subject key identifier: 28:E7:C6:42:FF:99:1A:EB:33:FB:95:22:A0:05:19:AD:EB:AE:B5:82 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 1B53DA26C54FDB1E76D69B83C55E483E7C2BACDF Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20313938353834.roa Signing time: Thu 22 Jan 2026 12:48:41 +0000 ROA not before: Thu 22 Jan 2026 12:43:41 +0000 ROA not after: Thu 21 Jan 2027 12:48:41 +0000 asID: 198584 IP address blocks: 85.158.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:53:da:26:c5:4f:db:1e:76:d6:9b:83:c5:5e:48:3e:7c:2b:ac:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Jan 22 12:43:41 2026 GMT Not After : Jan 21 12:48:41 2027 GMT Subject: CN=28E7C642FF991AEB33FB9522A00519ADEBAEB582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:70:b9:7c:0f:60:2d:4b:22:ad:41:24:a7:f0: 2f:5f:be:86:b3:22:15:00:57:c8:a9:0c:44:59:8d: 47:83:33:3f:65:10:13:28:35:b0:7e:b4:89:86:e3: f3:92:4a:f1:c4:7f:47:b0:55:a5:ff:39:a7:19:85: 1d:1b:d6:12:25:01:58:fd:18:14:58:0c:3d:c3:75: 1a:6c:fc:1b:51:63:74:b3:33:ce:55:2c:7d:bb:61: e8:e5:63:18:0a:bf:e4:77:2b:f5:a1:1c:f6:74:5e: 23:9e:cb:b0:2a:ee:c1:f9:96:5a:13:f2:23:06:14: ff:d2:8e:34:c1:e4:28:1a:53:a7:cc:c7:ca:11:2a: 3b:bd:c4:36:64:84:90:78:d2:ca:14:10:ac:3c:62: e7:94:5d:d1:9c:32:aa:48:e7:b6:c4:e0:39:17:6a: cf:f2:db:6d:a8:4c:96:65:83:23:ee:f0:e6:74:90: 80:81:1a:34:90:70:7e:c9:fb:f6:10:c4:3d:e5:77: d6:ce:46:e0:44:f8:a3:f3:c9:d6:02:bc:fa:3d:0f: 08:a3:08:45:02:f7:35:eb:c4:f8:c1:19:98:b2:ca: 25:78:77:94:7e:5e:ad:9a:46:f6:50:bd:bc:b8:07: db:bd:25:a3:1b:32:1a:5f:ba:2d:6e:b2:a6:55:b7: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E7:C6:42:FF:99:1A:EB:33:FB:95:22:A0:05:19:AD:EB:AE:B5:82 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e35392e302f32342d3234203d3e20313938353834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.59.0/24 Signature Algorithm: sha256WithRSAEncryption 24:7f:9c:3b:20:5c:1f:e9:c4:33:b1:c6:6f:eb:f3:4a:ac:f3: a3:a5:92:35:94:06:f6:a6:59:15:86:f4:97:d2:e9:08:95:3c: b9:2d:84:95:61:a0:ce:28:14:0b:4d:a3:88:b2:7a:ec:b9:a3: e0:f8:92:df:c3:8b:d9:9b:5e:0a:cb:48:3b:f7:aa:61:30:9f: 3d:0a:25:30:53:94:27:8d:f7:30:c1:9c:cf:fe:5d:40:1d:07: 6c:cd:a5:b1:2c:0a:d8:88:e9:ac:ee:d0:a1:2e:8a:bf:6c:67: cc:4c:98:fa:cb:0b:f8:cc:15:a3:05:bf:b9:bd:38:1e:b6:28: ea:a8:70:8d:9f:01:ed:c3:2a:69:69:c3:8f:8a:d4:57:de:7a: 6d:b7:bd:3f:91:e7:4a:32:a2:70:54:54:84:d6:b9:c5:52:f2: ac:46:94:c8:20:ac:d3:06:75:df:d5:70:82:9f:e7:8e:ca:36: 2b:d8:14:6a:48:b0:4f:e1:08:cf:8e:e8:26:05:6a:0c:73:2e: 34:c1:f7:a8:55:57:bb:48:79:cb:d5:d9:de:ee:79:6b:e9:93: b6:3d:71:38:8c:31:34:5c:32:53:84:f0:ee:3c:ef:ce:a2:ad: e5:b1:4d:b4:ff:05:b9:86:cb:85:2b:fa:3a:e6:9b:ee:fc:da: 75:33:db:bf -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUG1PaJsVP2x521puDxV5IPnwrrN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNjAxMjIxMjQzNDFaFw0yNzAxMjExMjQ4NDFaMDMxMTAvBgNV BAMTKDI4RTdDNjQyRkY5OTFBRUIzM0ZCOTUyMkEwMDUxOUFERUJBRUI1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cLl8D2AtSyKtQSSn8C9fvoaz IhUAV8ipDERZjUeDMz9lEBMoNbB+tImG4/OSSvHEf0ewVaX/OacZhR0b1hIlAVj9 GBRYDD3DdRps/BtRY3SzM85VLH27YejlYxgKv+R3K/WhHPZ0XiOey7Aq7sH5lloT 8iMGFP/SjjTB5CgaU6fMx8oRKju9xDZkhJB40soUEKw8YueUXdGcMqpI57bE4DkX as/y222oTJZlgyPu8OZ0kICBGjSQcH7J+/YQxD3ld9bORuBE+KPzydYCvPo9Dwij CEUC9zXrxPjBGZiyyiV4d5R+Xq2aRvZQvby4B9u9JaMbMhpfui1usqZVtxAJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKOfGQv+ZGusz+5UioAUZreuutYIwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNTM5 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzOTM4MzUzODM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA VZ47MA0GCSqGSIb3DQEBCwUAA4IBAQAkf5w7IFwf6cQzscZv6/NKrPOjpZI1lAb2 plkVhvSX0ukIlTy5LYSVYaDOKBQLTaOIsnrsuaPg+JLfw4vZm14Ky0g796phMJ89 CiUwU5QnjfcwwZzP/l1AHQdszaWxLArYiOms7tChLoq/bGfMTJj6ywv4zBWjBb+5 vTgetijqqHCNnwHtwyppacOPitRX3nptt70/kedKMqJwVFSE1rnFUvKsRpTIIKzT BnXf1XCCn+eOyjYr2BRqSLBP4QjPjugmBWoMcy40wfeoVVe7SHnL1dne7nlr6ZO2 PXE4jDE0XDJThPDuPO/Ooq3lsU20/wW5hsuFK/o65pvu/Np1M9u/ -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:14 2026 by rpki-client