This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230372e302f32342d3234203d3e20343031343433.roa File: 38352e3233372e3230372e302f32342d3234203d3e20343031343433.roa (raw, json) Hash identifier: egeLw0yogpMsbxX6t2aAJhy7dB5+8MZhBfBKhz3ZFg4= Subject key identifier: 56:B2:F6:64:C6:58:A4:1B:F7:88:DA:7B:6A:FE:17:9A:10:D1:56:7B Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 6AD87669BEC0D374EEFF7C68DAA2B0F7D149AB88 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230372e302f32342d3234203d3e20343031343433.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 401443 IP address blocks: 85.237.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:d8:76:69:be:c0:d3:74:ee:ff:7c:68:da:a2:b0:f7:d1:49:ab:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=56B2F664C658A41BF788DA7B6AFE179A10D1567B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:33:90:51:34:ce:3e:8e:7b:7d:63:50:c1:35: 82:0b:b2:a2:05:18:48:bc:bf:8c:28:47:9c:6c:eb: 17:8d:7f:17:a1:7f:36:c0:c0:a4:9d:ec:0b:72:8f: d7:c3:e2:cd:59:99:7b:96:bc:9a:b8:02:b8:09:f7: 9e:aa:5a:31:9c:7a:bd:e1:5d:0d:fe:15:b1:2f:8f: aa:7f:6e:dd:4e:5d:d4:fe:e6:e4:7d:93:69:41:a9: 60:b3:79:37:87:09:4c:c8:88:65:93:23:4d:4c:9e: ba:6b:a6:43:44:58:ab:22:06:a7:91:75:2b:f9:e7: ec:aa:dd:be:e7:93:a3:8b:52:3b:ef:29:1f:ab:fe: 5e:ea:65:8c:40:d4:09:5c:38:b2:94:d9:fa:6c:8c: 7e:92:54:ff:a5:b3:17:b4:38:9e:1d:f5:0c:fb:53: d5:da:2a:57:00:b3:23:64:53:4c:d9:25:59:fe:1a: 88:77:45:07:d6:5c:32:48:43:fe:45:ff:f1:6f:83: 8b:56:65:2e:ee:9e:31:22:bc:4f:1c:b9:43:a9:cd: 81:82:5d:1a:92:b9:fb:23:b6:8a:6a:e0:14:f3:85: 42:17:95:56:92:16:ee:40:36:c0:6e:38:1d:21:7a: a1:62:b4:e8:b6:b8:dd:8e:9e:9b:94:0f:76:b0:1f: 6e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B2:F6:64:C6:58:A4:1B:F7:88:DA:7B:6A:FE:17:9A:10:D1:56:7B X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3230372e302f32342d3234203d3e20343031343433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.207.0/24 Signature Algorithm: sha256WithRSAEncryption a0:5e:f8:80:cc:6f:6b:68:e0:ff:d5:47:93:6c:53:ce:cf:83: 39:11:ae:ad:36:e1:40:32:b4:03:a0:d7:cc:1d:36:74:1b:2e: 45:a8:23:c7:07:df:ed:70:3b:74:fc:57:09:4d:1a:78:57:27: 0e:82:ba:63:2b:43:39:16:80:cd:de:51:32:e7:64:4a:f8:36: 3a:90:64:b7:14:a0:1b:d3:fe:ad:5f:00:2f:70:8d:64:c9:a8: 87:36:0e:80:e1:ad:92:c7:25:d6:f5:b2:50:78:e3:30:6c:0f: 47:ae:c5:b9:46:20:8a:4c:b2:7d:95:b0:ac:77:1d:f9:26:90: f7:26:e4:2a:f0:e6:88:91:1a:49:9c:72:41:c6:4a:93:37:e9: b6:b2:74:7c:e5:cd:c9:d1:25:c1:23:c9:04:1a:5b:b1:2b:35: 6b:e4:ff:c6:7b:0d:60:bd:93:e7:84:f5:01:f5:9e:ac:cf:97: 43:b4:af:7f:b4:49:30:53:30:22:91:d3:ab:a9:2d:f9:40:f9: 22:07:c7:e1:19:73:6c:c9:46:0b:eb:7c:a8:93:ea:ef:94:c1: 9f:49:93:2a:68:51:51:4d:c6:22:ca:56:c1:9c:81:74:49:c4: 73:ed:6b:d7:e9:fc:03:84:02:63:57:7b:f5:8e:96:8c:be:5d: f5:13:b5:e5 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUath2ab7A03Tu/3xo2qKw99FJq4gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDU2QjJGNjY0QzY1OEE0MUJGNzg4REE3QjZBRkUxNzlBMTBEMTU2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoM5BRNM4+jnt9Y1DBNYILsqIF GEi8v4woR5xs6xeNfxehfzbAwKSd7Atyj9fD4s1ZmXuWvJq4ArgJ956qWjGcer3h XQ3+FbEvj6p/bt1OXdT+5uR9k2lBqWCzeTeHCUzIiGWTI01MnrprpkNEWKsiBqeR dSv55+yq3b7nk6OLUjvvKR+r/l7qZYxA1AlcOLKU2fpsjH6SVP+lsxe0OJ4d9Qz7 U9XaKlcAsyNkU0zZJVn+Goh3RQfWXDJIQ/5F//Fvg4tWZS7unjEivE8cuUOpzYGC XRqSufsjtopq4BTzhUIXlVaSFu5ANsBuOB0heqFitOi2uN2OnpuUD3awH25vAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUVrL2ZMZYpBv3iNp7av4XmhDRVnswHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMw MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzEzNDM0MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7c8wDQYJKoZIhvcNAQELBQADggEBAKBe+IDMb2to4P/VR5NsU87PgzkRrq02 4UAytAOg18wdNnQbLkWoI8cH3+1wO3T8VwlNGnhXJw6CumMrQzkWgM3eUTLnZEr4 NjqQZLcUoBvT/q1fAC9wjWTJqIc2DoDhrZLHJdb1slB44zBsD0euxblGIIpMsn2V sKx3HfkmkPcm5Crw5oiRGkmcckHGSpM36baydHzlzcnRJcEjyQQaW7ErNWvk/8Z7 DWC9k+eE9QH1nqzPl0O0r3+0STBTMCKR06upLflA+SIHx+EZc2zJRgvrfKiT6u+U wZ9JkypoUVFNxiLKVsGcgXRJxHPta9fp/AOEAmNXe/WOloy+XfUTteU= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:02 2025 by rpki-client