This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139342e302f32342d3234203d3e20323036303932.roa File: 38352e3233372e3139342e302f32342d3234203d3e20323036303932.roa (raw, json) Hash identifier: SJllMgk5at54bMT1E8IoutIm2+sa7Rd0/i+mqszc9DY= Subject key identifier: A5:39:D4:93:6E:4F:1A:4F:84:88:D2:C6:42:91:4A:1A:05:37:50:0C Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 76EDCB2972858C703AC27EAE282C4379988DB1FF Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139342e302f32342d3234203d3e20323036303932.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 206092 IP address blocks: 85.237.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ed:cb:29:72:85:8c:70:3a:c2:7e:ae:28:2c:43:79:98:8d:b1:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=A539D4936E4F1A4F8488D2C642914A1A0537500C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b8:c9:e0:fd:8a:a4:01:44:54:6e:75:ae:41: ba:bf:cf:73:d4:4e:13:19:a2:02:ab:4d:3c:9c:c0: fe:68:43:62:19:9e:6b:16:18:0e:be:7b:ba:8d:58: 26:6e:49:79:b0:8e:3d:c9:84:3b:ed:c3:4a:bc:86: 1c:9c:bf:a1:7b:6a:0e:69:82:4d:d9:67:72:d8:be: d7:ae:47:cf:07:20:8b:ad:b0:91:f4:b7:23:ab:5a: 39:93:5b:74:c8:23:48:9c:d9:56:e4:29:3b:9b:b4: cb:a6:07:7c:b7:0f:91:cd:1b:a6:22:61:9b:be:b6: f6:e1:a7:20:8e:e8:44:3a:3e:d7:40:ea:22:34:77: 13:9c:f3:e9:6d:e9:ac:8b:4f:b5:6b:36:10:70:ec: 1d:0d:ca:52:ae:c4:d1:b0:35:6a:7a:83:13:d4:57: dc:8c:61:89:1c:f6:d7:d7:96:ec:20:80:a7:17:7a: 6c:ce:46:2a:ae:d0:4d:18:9a:bb:06:d2:dc:e9:67: a8:17:31:26:7b:15:07:b2:89:98:25:5b:a4:04:3f: a6:47:98:7d:ba:43:e7:da:37:82:52:23:38:62:33: ff:3a:45:d9:20:83:09:64:90:1b:9b:b1:e1:ec:e0: 20:5c:7e:e3:7d:76:88:15:0a:ec:06:28:c5:96:a2: 4f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:39:D4:93:6E:4F:1A:4F:84:88:D2:C6:42:91:4A:1A:05:37:50:0C X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139342e302f32342d3234203d3e20323036303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.194.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:7c:32:ba:1c:11:fa:0e:24:d2:ef:76:e8:18:45:00:22:80: 48:0d:85:33:f6:ab:fd:2d:68:cd:16:14:04:f5:af:11:de:46: 89:a9:09:22:75:2c:64:48:b3:cd:f0:97:11:50:38:f0:c4:8e: 9a:da:6f:5d:e4:74:ee:89:76:b7:73:ec:67:eb:00:b5:3c:64: dc:b5:5e:10:fb:98:ab:37:ac:8e:9d:da:87:e9:0f:82:de:a1: 15:8f:26:30:38:b9:e7:9d:05:07:35:78:84:8e:2c:d8:a2:1d: 28:c2:9b:db:b5:27:74:36:be:1a:99:24:60:84:50:39:f4:a3: 4c:63:9d:5c:e5:61:7e:96:97:47:ff:16:24:2c:71:a0:09:be: 38:7b:2b:12:c9:93:d6:7f:08:ca:2a:94:8e:b5:8c:82:88:d3: bc:7d:d3:a0:9f:81:f1:f8:2c:fa:3f:14:a7:1c:e6:a6:48:3c: cd:bb:2c:ee:59:b0:e2:3f:dc:fe:58:82:07:5f:4a:34:41:7f: f9:ce:69:04:2c:e1:71:19:1b:36:85:7b:ad:1e:eb:1a:12:96: cc:4f:c0:d3:23:6a:f9:75:04:e1:fb:7c:27:a3:fd:43:e9:87: c2:d7:3b:f9:c1:2c:65:5c:92:bd:2d:f9:56:5c:60:10:7e:05: 39:e1:b7:a2 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdu3LKXKFjHA6wn6uKCxDeZiNsf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEE1MzlENDkzNkU0RjFBNEY4NDg4RDJDNjQyOTE0QTFBMDUzNzUwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiuMng/YqkAURUbnWuQbq/z3PU ThMZogKrTTycwP5oQ2IZnmsWGA6+e7qNWCZuSXmwjj3JhDvtw0q8hhycv6F7ag5p gk3ZZ3LYvteuR88HIIutsJH0tyOrWjmTW3TII0ic2VbkKTubtMumB3y3D5HNG6Yi YZu+tvbhpyCO6EQ6PtdA6iI0dxOc8+lt6ayLT7VrNhBw7B0NylKuxNGwNWp6gxPU V9yMYYkc9tfXluwggKcXemzORiqu0E0YmrsG0tzpZ6gXMSZ7FQeyiZglW6QEP6ZH mH26Q+faN4JSIzhiM/86RdkggwlkkBubseHs4CBcfuN9dogVCuwGKMWWok8PAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUpTnUk25PGk+EiNLGQpFKGgU3UAwwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMTM5 MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzYzMDM5MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7cIwDQYJKoZIhvcNAQELBQADggEBAHx8MrocEfoOJNLvdugYRQAigEgNhTP2 q/0taM0WFAT1rxHeRompCSJ1LGRIs83wlxFQOPDEjprab13kdO6Jdrdz7GfrALU8 ZNy1XhD7mKs3rI6d2ofpD4LeoRWPJjA4ueedBQc1eISOLNiiHSjCm9u1J3Q2vhqZ JGCEUDn0o0xjnVzlYX6Wl0f/FiQscaAJvjh7KxLJk9Z/CMoqlI61jIKI07x906Cf gfH4LPo/FKcc5qZIPM27LO5ZsOI/3P5YggdfSjRBf/nOaQQs4XEZGzaFe60e6xoS lsxPwNMjavl1BOH7fCej/UPph8LXO/nBLGVckr0t+VZcYBB+BTnht6I= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:04 2025 by rpki-client