This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230332e302f32342d3234203d3e20333937343233.roa File: 38352e3233372e3230332e302f32342d3234203d3e20333937343233.roa (raw, json) Hash identifier: KoUsIWsSuDNmy28D4eI9yGPZtt8qJsLc1Gk/9MBwqTw= Subject key identifier: 80:E6:24:F6:8B:45:05:FF:11:B5:D4:BC:29:CB:0E:2D:74:31:DD:0E Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 013023E4C10DC0C8D507A2E6A29AF3945DDD4BE0 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230332e302f32342d3234203d3e20333937343233.roa Signing time: Sat 13 Dec 2025 09:11:31 +0000 ROA not before: Sat 13 Dec 2025 09:06:31 +0000 ROA not after: Sat 12 Dec 2026 09:11:31 +0000 asID: 397423 IP address blocks: 85.237.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:30:23:e4:c1:0d:c0:c8:d5:07:a2:e6:a2:9a:f3:94:5d:dd:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:31 2025 GMT Not After : Dec 12 09:11:31 2026 GMT Subject: CN=80E624F68B4505FF11B5D4BC29CB0E2D7431DD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7a:b4:2e:89:8c:28:c0:7a:b9:d3:38:4c:9d: 19:f5:69:86:af:d8:f8:ec:9c:84:5e:95:98:4d:22: ce:0f:81:59:6b:91:88:4b:d1:79:15:3e:72:6e:ca: a9:ae:70:f8:7f:f3:57:eb:66:1e:b9:84:0a:38:32: 2a:54:73:ef:76:30:12:97:ff:08:70:fb:37:f1:58: 55:95:00:8d:86:77:32:08:e5:c1:67:e4:fa:f5:d2: 5a:fe:90:be:f1:b7:69:0c:a7:72:57:77:86:43:63: 23:cb:33:92:b1:93:2f:83:16:d0:20:52:a6:7c:fb: 91:07:30:44:8b:70:03:92:50:be:fb:a8:a4:9d:5a: bd:ae:c5:2b:cd:ca:0d:96:88:ce:2e:f2:91:68:e2: 09:82:6c:23:a4:22:25:7c:22:b5:86:cc:32:57:46: 10:e9:53:ff:4c:4d:f5:ba:50:6b:b7:13:bb:71:39: 4a:9b:19:a9:78:8f:8f:52:17:97:eb:f7:dc:3e:b9: a8:24:f6:83:95:74:45:c4:2f:19:ab:d8:29:d3:32: 32:ef:f0:6e:f1:b3:ff:a3:73:ff:6c:39:9e:c0:1a: 94:7c:8b:d1:1a:12:af:19:f5:7a:6e:61:9f:af:1d: e1:cd:9f:12:1b:4b:e8:8c:99:4a:8c:50:12:eb:97: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E6:24:F6:8B:45:05:FF:11:B5:D4:BC:29:CB:0E:2D:74:31:DD:0E X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230332e302f32342d3234203d3e20333937343233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.203.0/24 Signature Algorithm: sha256WithRSAEncryption 68:8c:31:6b:4c:0a:1e:db:93:3c:bb:ac:c8:eb:97:52:09:74: 77:13:c9:55:af:36:29:ce:1d:72:89:fa:e7:b0:84:ea:e0:5c: 85:b1:46:39:0c:0a:33:b6:28:49:f3:3f:73:88:b7:23:b7:3f: 6c:aa:e0:fb:e2:33:8e:09:f7:89:38:4a:06:45:55:1d:6a:bb: b0:73:d7:69:48:85:d0:5a:e4:36:5a:d0:19:08:ea:bf:72:61: 33:8a:9f:5b:17:ee:82:84:3f:5e:a6:45:4c:d8:f4:32:8f:2a: fd:4d:71:5b:84:7a:62:cf:89:30:7f:7d:c4:85:dd:c8:00:e8: d1:4a:f0:de:2b:2e:ec:3f:6b:f1:e5:b8:24:d6:d6:66:a2:0c: 57:5e:c4:e6:f7:3b:a8:1e:c0:da:4c:7f:05:db:22:d8:b0:3b: f2:17:f1:a6:67:51:b1:e5:f0:35:fc:42:fa:77:a2:2b:4a:f9: b7:b2:40:f0:2c:81:12:4e:43:17:8e:4a:9c:93:e1:96:e2:a4: 8f:9e:f1:a7:ce:5f:60:22:b9:9b:40:62:73:b6:a5:0a:f8:f3: 66:38:e7:f7:2e:7c:f3:f6:63:17:67:1a:69:bd:aa:20:3d:a2: b0:03:3d:6a:88:30:e1:b8:ff:e0:82:67:42:74:79:ba:d3:b7: 8c:17:fc:68 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUATAj5MENwMjVB6LmoprzlF3dS+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzFaFw0yNjEyMTIwOTExMzFaMDMxMTAvBgNV BAMTKDgwRTYyNEY2OEI0NTA1RkYxMUI1RDRCQzI5Q0IwRTJENzQzMUREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRerQuiYwowHq50zhMnRn1aYav 2PjsnIRelZhNIs4PgVlrkYhL0XkVPnJuyqmucPh/81frZh65hAo4MipUc+92MBKX /whw+zfxWFWVAI2GdzII5cFn5Pr10lr+kL7xt2kMp3JXd4ZDYyPLM5Kxky+DFtAg UqZ8+5EHMESLcAOSUL77qKSdWr2uxSvNyg2WiM4u8pFo4gmCbCOkIiV8IrWGzDJX RhDpU/9MTfW6UGu3E7txOUqbGal4j49SF5fr99w+uagk9oOVdEXELxmr2CnTMjLv 8G7xs/+jc/9sOZ7AGpR8i9EaEq8Z9XpuYZ+vHeHNnxIbS+iMmUqMUBLrl6VhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUgOYk9otFBf8RtdS8KcsOLXQx3Q4wHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM5MzczNDMyMzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7cswDQYJKoZIhvcNAQELBQADggEBAGiMMWtMCh7bkzy7rMjrl1IJdHcTyVWv NinOHXKJ+uewhOrgXIWxRjkMCjO2KEnzP3OItyO3P2yq4PviM44J94k4SgZFVR1q u7Bz12lIhdBa5DZa0BkI6r9yYTOKn1sX7oKEP16mRUzY9DKPKv1NcVuEemLPiTB/ fcSF3cgA6NFK8N4rLuw/a/HluCTW1maiDFdexOb3O6gewNpMfwXbItiwO/IX8aZn UbHl8DX8Qvp3oitK+beyQPAsgRJOQxeOSpyT4ZbipI+e8afOX2AiuZtAYnO2pQr4 82Y45/cufPP2YxdnGmm9qiA9orADPWqIMOG4/+CCZ0J0ebrTt4wX/Gg= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:37 2025 by rpki-client