This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36302e302f32332d3233203d3e203631333137.roa File: 38352e3135382e36302e302f32332d3233203d3e203631333137.roa (raw, json) Hash identifier: fcTR9Qx+i69ugfYIUztkFK16+mgRyEWJ9mGykcS/OOo= Subject key identifier: C1:A6:A3:A6:21:62:FC:8F:15:8D:CC:AA:07:53:F0:AD:71:48:C5:0D Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 4AE2920114381626E4CA7EC7DE4BB43885A89BF2 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36302e302f32332d3233203d3e203631333137.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 61317 IP address blocks: 85.158.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e2:92:01:14:38:16:26:e4:ca:7e:c7:de:4b:b4:38:85:a8:9b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=C1A6A3A62162FC8F158DCCAA0753F0AD7148C50D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:34:8c:75:41:89:3e:e5:eb:0a:44:be:6b:7f: c6:b9:8a:f0:18:4e:91:a4:17:96:f4:fc:30:a5:f5: e7:db:f5:16:a8:27:30:5f:74:1f:c6:e2:15:8b:55: 06:55:68:4b:79:08:3f:29:7f:20:56:31:a1:80:71: e3:2b:63:10:75:09:e4:63:69:fa:f3:de:0a:6a:4f: a1:ff:61:9c:cc:c6:9e:0b:cc:50:c1:f3:14:ce:96: 5d:32:0a:95:62:73:0c:39:b3:2f:de:c5:66:77:ad: 14:56:3a:bf:36:56:f1:a4:85:02:98:cb:c2:bb:9d: a1:5b:aa:ee:04:48:8e:ec:46:2c:9f:a6:dd:70:24: 20:c1:cf:dc:1c:74:a9:5e:c2:a0:ba:8a:2c:ec:d6: 26:d8:0e:56:e7:a0:82:12:c1:02:10:61:25:34:cc: 52:6d:fe:49:e8:c0:77:0e:fa:83:08:36:ec:37:dd: 74:66:9d:63:4e:a8:1b:d5:7b:14:18:85:5e:9c:8f: 81:ea:c7:08:b7:71:20:6d:ca:e5:f9:18:9f:57:af: 8a:ca:c2:02:8d:dc:b5:61:a6:60:dd:0b:e4:38:de: 7a:19:ef:99:2c:c9:88:16:fc:59:ce:7b:cd:a9:89: 7d:1f:6f:68:81:a9:c8:b3:23:f1:21:09:bc:64:bb: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A6:A3:A6:21:62:FC:8F:15:8D:CC:AA:07:53:F0:AD:71:48:C5:0D X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3135382e36302e302f32332d3233203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.60.0/23 Signature Algorithm: sha256WithRSAEncryption 2d:6e:28:81:f1:15:44:61:27:ee:ca:be:b2:bb:a1:06:c7:84: 85:cc:5b:7f:04:02:1b:63:a2:94:de:80:d5:ba:6f:b9:b2:fd: 05:76:b2:d1:41:dc:51:ed:03:f8:71:e7:56:b9:e3:1d:65:4d: 43:62:f5:3e:16:9c:04:aa:00:73:ee:d1:25:14:27:f7:b4:d6: ad:87:f2:a2:d5:d6:f1:c7:17:3c:b6:9e:97:c8:b4:73:de:e3: 67:7b:3c:ef:b7:85:85:8c:76:b5:97:6b:96:9d:de:63:c0:0c: 86:1e:da:f7:72:97:c2:61:31:3c:d2:00:7a:77:50:90:de:a6: dc:af:09:77:54:84:c2:85:d6:b4:6c:ac:49:1c:15:8e:ab:07: 03:25:82:7a:3f:b4:b7:07:ed:01:69:17:f1:9d:5e:75:8f:f1: 9a:5b:47:d4:3f:62:99:20:32:bc:31:55:5f:b5:44:b7:62:35: ae:2d:19:9e:0e:f9:70:54:2f:6f:8a:65:66:19:6a:fd:14:f4: a3:3b:63:74:2b:11:da:f1:c5:7b:d7:57:b2:3f:9a:e9:3b:69: 17:53:11:e0:f8:33:b8:18:b5:59:92:3a:ff:22:e0:09:d7:ec: 09:75:ba:24:db:a6:5e:14:7d:7c:76:41:4c:1b:82:dd:19:2a: 5f:e3:ef:c7 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUSuKSARQ4Fibkyn7H3ku0OIWom/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEMxQTZBM0E2MjE2MkZDOEYxNThEQ0NBQTA3NTNGMEFENzE0OEM1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZNIx1QYk+5esKRL5rf8a5ivAY TpGkF5b0/DCl9efb9RaoJzBfdB/G4hWLVQZVaEt5CD8pfyBWMaGAceMrYxB1CeRj afrz3gpqT6H/YZzMxp4LzFDB8xTOll0yCpVicww5sy/exWZ3rRRWOr82VvGkhQKY y8K7naFbqu4ESI7sRiyfpt1wJCDBz9wcdKlewqC6iizs1ibYDlbnoIISwQIQYSU0 zFJt/knowHcO+oMINuw33XRmnWNOqBvVexQYhV6cj4Hqxwi3cSBtyuX5GJ9Xr4rK wgKN3LVhpmDdC+Q43noZ75ksyYgW/FnOe82piX0fb2iBqcizI/EhCbxku+oLAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUwaajpiFi/I8VjcyqB1PwrXFIxQ0wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzEzNTM4MmUzNjMw MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVWe PDANBgkqhkiG9w0BAQsFAAOCAQEALW4ogfEVRGEn7sq+sruhBseEhcxbfwQCG2Oi lN6A1bpvubL9BXay0UHcUe0D+HHnVrnjHWVNQ2L1PhacBKoAc+7RJRQn97TWrYfy otXW8ccXPLael8i0c97jZ3s877eFhYx2tZdrlp3eY8AMhh7a93KXwmExPNIAendQ kN6m3K8Jd1SEwoXWtGysSRwVjqsHAyWCej+0twftAWkX8Z1edY/xmltH1D9imSAy vDFVX7VEt2I1ri0Zng75cFQvb4plZhlq/RT0oztjdCsR2vHFe9dXsj+a6TtpF1MR 4PgzuBi1WZI6/yLgCdfsCXW6JNumXhR9fHZBTBuC3RkqX+Pvxw== -----END CERTIFICATE-----Generated at Tue Dec 16 05:17:18 2025 by rpki-client