This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139372e302f32342d3234203d3e20343030303430.roa File: 38352e3233372e3139372e302f32342d3234203d3e20343030303430.roa (raw, json) Hash identifier: UcIVhffa7AOboQT2Kwdar9xl2iXMsDJLeIt72guoYyg= Subject key identifier: 99:DA:1D:53:34:2C:ED:D6:4F:C4:65:0F:81:C9:3D:B8:54:32:37:06 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 72212B7AD643ABC7E78AEBC543BCB344EC55EDBF Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139372e302f32342d3234203d3e20343030303430.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 400040 IP address blocks: 85.237.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:21:2b:7a:d6:43:ab:c7:e7:8a:eb:c5:43:bc:b3:44:ec:55:ed:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=99DA1D53342CEDD64FC4650F81C93DB854323706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:4b:7b:f3:f7:26:e7:d8:eb:47:aa:ab:b8: e3:48:33:a5:b9:62:c8:14:86:6c:f7:04:2b:36:c6: d6:46:69:65:0f:7e:6c:b6:be:84:92:66:14:4e:6c: 97:29:45:01:8e:48:f8:9b:f6:35:f6:8c:1b:5a:7d: 74:14:4b:6b:6b:08:17:1c:b9:cd:af:1b:02:06:20: bd:8c:0d:56:c2:96:d0:fb:51:0c:da:09:8e:4d:c9: ba:ea:00:38:f6:da:7f:75:48:b3:78:c5:e4:4c:45: 6c:27:d6:c1:21:c4:11:a5:d2:3d:63:a0:2b:4b:cc: 49:ef:74:cc:fa:a9:ab:cd:26:c0:18:a4:10:5c:f3: a8:66:00:cd:cc:1f:b9:88:3c:6e:92:f2:59:b6:bc: fc:6e:b8:48:cb:b6:3b:60:34:77:9f:0f:21:30:7a: a2:c4:8d:57:9a:b9:0d:59:5b:e5:4d:7b:7a:ab:ea: 27:c4:f5:25:53:24:84:6a:c9:c5:71:bf:f6:9e:70: c1:19:15:15:1b:7f:4c:1c:ca:a6:84:c2:4a:66:3d: ee:60:52:a7:eb:ae:b2:bc:6b:e6:4d:57:7c:f3:e4: 69:50:78:9e:d2:ea:1f:fa:2b:f1:61:ae:4e:c3:de: 1f:a5:3a:b0:73:c2:0c:93:a6:4f:71:76:c5:66:0c: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DA:1D:53:34:2C:ED:D6:4F:C4:65:0F:81:C9:3D:B8:54:32:37:06 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3139372e302f32342d3234203d3e20343030303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.197.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c4:ba:3c:3f:10:e4:ae:ac:a9:d8:de:7a:fe:f2:00:b6:8b: e1:00:79:8e:d5:ed:5b:bc:6c:94:9b:81:85:68:56:e1:a2:cb: d3:e8:c1:7d:3c:13:f7:2e:c1:62:47:86:b9:8c:a5:42:6a:94: 73:7e:4c:34:9b:18:f3:17:ed:0a:96:42:18:33:54:1a:41:7d: 33:25:17:cb:8c:bb:44:b5:ed:75:b9:a5:b7:10:b7:5d:dc:bc: f7:97:82:33:65:75:a0:ab:3b:a9:a9:71:72:f4:cf:00:c9:f9: 0a:7d:80:b7:da:91:a6:8b:b4:10:4c:4f:5e:1a:14:6f:a7:dd: 02:d5:1a:cc:74:05:ea:07:80:21:8b:4d:45:e9:ac:49:1e:f7: 42:e9:7f:74:b4:2c:f5:f7:25:6a:91:e5:ac:01:5a:bb:38:6d: c6:85:7c:ed:92:5c:94:e3:90:14:76:57:63:c0:0b:15:09:0a: 08:68:6c:58:03:ac:d9:dc:a1:3b:d0:52:ff:cc:05:6c:6b:1f: 1b:ae:33:de:c4:fc:30:a2:73:66:d5:55:5e:aa:37:1c:09:d5: f1:4d:6b:35:8d:97:79:23:50:c1:a5:d5:fe:41:5b:c0:59:29: a2:f1:d2:81:4a:47:13:21:a2:07:81:7f:4a:d1:8a:23:ca:08: 58:fd:80:33 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUciEretZDq8fniuvFQ7yzROxV7b8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDk5REExRDUzMzQyQ0VERDY0RkM0NjUwRjgxQzkzREI4NTQzMjM3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMxkt78/cm59jrR6qruONIM6W5 YsgUhmz3BCs2xtZGaWUPfmy2voSSZhRObJcpRQGOSPib9jX2jBtafXQUS2trCBcc uc2vGwIGIL2MDVbCltD7UQzaCY5NybrqADj22n91SLN4xeRMRWwn1sEhxBGl0j1j oCtLzEnvdMz6qavNJsAYpBBc86hmAM3MH7mIPG6S8lm2vPxuuEjLtjtgNHefDyEw eqLEjVeauQ1ZW+VNe3qr6ifE9SVTJIRqycVxv/aecMEZFRUbf0wcyqaEwkpmPe5g UqfrrrK8a+ZNV3zz5GlQeJ7S6h/6K/Fhrk7D3h+lOrBzwgyTpk9xdsVmDGa1AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUmdodUzQs7dZPxGUPgck9uFQyNwYwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMTM5 MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzAzMDM0MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7cUwDQYJKoZIhvcNAQELBQADggEBAJbEujw/EOSurKnY3nr+8gC2i+EAeY7V 7Vu8bJSbgYVoVuGiy9PowX08E/cuwWJHhrmMpUJqlHN+TDSbGPMX7QqWQhgzVBpB fTMlF8uMu0S17XW5pbcQt13cvPeXgjNldaCrO6mpcXL0zwDJ+Qp9gLfakaaLtBBM T14aFG+n3QLVGsx0BeoHgCGLTUXprEke90Lpf3S0LPX3JWqR5awBWrs4bcaFfO2S XJTjkBR2V2PACxUJCghobFgDrNncoTvQUv/MBWxrHxuuM97E/DCic2bVVV6qNxwJ 1fFNazWNl3kjUMGl1f5BW8BZKaLx0oFKRxMhogeBf0rRiiPKCFj9gDM= -----END CERTIFICATE-----Generated at Tue Dec 16 05:17:18 2025 by rpki-client