This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230352e302f32342d3234203d3e203432393632.roa File: 38352e3233372e3230352e302f32342d3234203d3e203432393632.roa (raw, json) Hash identifier: Mjam0EiakvWtagADCfswiYTnso6MQIsiZpqb/olXOb8= Subject key identifier: AE:A6:D0:A6:99:3F:BB:0D:16:0E:67:5F:8F:61:65:30:CA:96:5B:75 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 2CC9953B94207DC4087941459136E73EAE74DEB2 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230352e302f32342d3234203d3e203432393632.roa Signing time: Sat 13 Dec 2025 09:11:32 +0000 ROA not before: Sat 13 Dec 2025 09:06:32 +0000 ROA not after: Sat 12 Dec 2026 09:11:32 +0000 asID: 42962 IP address blocks: 85.237.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:c9:95:3b:94:20:7d:c4:08:79:41:45:91:36:e7:3e:ae:74:de:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:32 2025 GMT Not After : Dec 12 09:11:32 2026 GMT Subject: CN=AEA6D0A6993FBB0D160E675F8F616530CA965B75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:dc:2a:55:27:3f:c4:63:2c:7a:61:40:95:f0: b6:5e:d5:58:bd:7b:42:1d:6a:45:89:87:8a:69:67: 33:99:c1:6d:e3:3a:63:8f:37:43:ee:e5:cc:24:13: 46:ce:33:c4:91:cd:81:5c:d8:43:eb:a1:19:95:ac: 21:7d:26:22:7f:ca:6e:67:85:e7:a7:a5:b2:a0:51: d6:49:5a:e6:26:f7:73:62:30:3f:b0:1d:62:e9:54: 50:fa:cd:73:1f:5b:4c:72:94:12:3e:23:33:a5:09: 9d:af:41:6a:d4:2a:a9:14:13:75:3e:f9:a3:72:5d: 0b:a1:f1:47:e0:f9:42:89:3c:0b:5f:fb:d2:7d:ac: f3:a8:e2:02:2f:f4:23:19:ac:7f:94:35:9e:2a:1e: 3f:da:2b:12:d1:cc:fa:2a:f4:55:64:5e:2a:d9:4e: a5:42:00:5d:dc:51:9e:41:62:ff:79:c3:e0:5f:cc: bf:b6:2b:87:f0:65:2f:44:a5:d4:25:8a:34:73:d2: f8:fb:10:29:ae:79:7f:56:91:89:d1:ea:a9:49:41: ec:67:fd:43:04:ae:23:4a:a4:d7:49:71:63:8a:4a: 07:61:49:10:72:53:fd:e8:8d:e1:92:b1:e2:94:8b: 7c:b1:9d:5f:f7:58:4c:3f:93:a5:94:86:ad:cf:d4: b6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A6:D0:A6:99:3F:BB:0D:16:0E:67:5F:8F:61:65:30:CA:96:5B:75 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230352e302f32342d3234203d3e203432393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.205.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:83:e4:79:30:04:f1:c8:b8:d1:e8:3f:b0:8c:a1:a2:4f:7d: 81:11:b7:52:e8:a1:0a:85:03:60:e7:d2:12:76:50:0c:c2:a4: 2d:3a:14:f9:af:05:51:25:4d:50:fd:fb:29:7d:af:12:bd:97: 1c:11:48:08:e8:15:8a:71:01:d4:04:d2:fa:98:3d:8d:3b:a9: 2b:60:54:29:0c:e2:88:be:47:b0:b6:bd:e5:d8:18:c1:7f:63: 0e:55:34:86:41:e9:b5:ca:31:cf:cd:c9:b2:c9:0e:93:5b:d1: dd:05:22:23:90:3b:b2:05:c4:52:66:e7:1a:e2:38:1a:55:e0: 26:73:a2:36:70:c1:d5:c3:65:02:48:6c:dc:21:60:cc:49:8d: 28:50:ec:b2:09:73:4c:41:4f:f1:b6:68:08:29:de:56:2f:d2: e4:ef:e5:a4:2c:8c:21:cc:07:46:40:8a:a3:82:af:e4:43:fa: da:bd:dc:b6:4b:02:0c:e7:bb:ea:08:21:84:ea:9f:59:2c:42: 88:b5:40:6d:05:bc:26:f8:ad:85:95:7a:e2:1f:b5:05:47:c7: 5f:2c:05:d0:2a:8a:6c:52:9f:bb:a5:78:87:b0:bc:58:dd:d7: c8:78:56:19:24:54:9f:a8:36:c1:26:78:59:70:61:6a:d8:90: 9b:f2:a7:01 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIULMmVO5QgfcQIeUFFkTbnPq503rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzJaFw0yNjEyMTIwOTExMzJaMDMxMTAvBgNV BAMTKEFFQTZEMEE2OTkzRkJCMEQxNjBFNjc1RjhGNjE2NTMwQ0E5NjVCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp3CpVJz/EYyx6YUCV8LZe1Vi9 e0IdakWJh4ppZzOZwW3jOmOPN0Pu5cwkE0bOM8SRzYFc2EProRmVrCF9JiJ/ym5n heenpbKgUdZJWuYm93NiMD+wHWLpVFD6zXMfW0xylBI+IzOlCZ2vQWrUKqkUE3U+ +aNyXQuh8Ufg+UKJPAtf+9J9rPOo4gIv9CMZrH+UNZ4qHj/aKxLRzPoq9FVkXirZ TqVCAF3cUZ5BYv95w+BfzL+2K4fwZS9EpdQlijRz0vj7ECmueX9WkYnR6qlJQexn /UMEriNKpNdJcWOKSgdhSRByU/3ojeGSseKUi3yxnV/3WEw/k6WUhq3P1LafAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUrqbQppk/uw0WDmdfj2FlMMqWW3UwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMyMzkzNjMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Ve3NMA0GCSqGSIb3DQEBCwUAA4IBAQAMg+R5MATxyLjR6D+wjKGiT32BEbdS6KEK hQNg59ISdlAMwqQtOhT5rwVRJU1Q/fspfa8SvZccEUgI6BWKcQHUBNL6mD2NO6kr YFQpDOKIvkewtr3l2BjBf2MOVTSGQem1yjHPzcmyyQ6TW9HdBSIjkDuyBcRSZuca 4jgaVeAmc6I2cMHVw2UCSGzcIWDMSY0oUOyyCXNMQU/xtmgIKd5WL9Lk7+WkLIwh zAdGQIqjgq/kQ/ravdy2SwIM57vqCCGE6p9ZLEKItUBtBbwm+K2FlXriH7UFR8df LAXQKopsUp+7pXiHsLxY3dfIeFYZJFSfqDbBJnhZcGFq2JCb8qcB -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:36 2025 by rpki-client