This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231352e302f32342d3234203d3e20323030303137.roa File: 38352e3233372e3231352e302f32342d3234203d3e20323030303137.roa (raw, json) Hash identifier: ofMXzW1KmxDhOERMXD4b/6q8eE3clKNNwWTefuLAxFI= Subject key identifier: 4C:46:7E:7D:8B:1E:24:E2:2B:37:85:00:F4:3E:EE:1A:C4:AF:9F:64 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 21891EDEF05878246BFB64A1C79EEDD560A88AC2 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231352e302f32342d3234203d3e20323030303137.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 200017 IP address blocks: 85.237.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:89:1e:de:f0:58:78:24:6b:fb:64:a1:c7:9e:ed:d5:60:a8:8a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=4C467E7D8B1E24E22B378500F43EEE1AC4AF9F64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5f:09:03:4a:76:39:3b:62:26:0e:6b:7e:a9: e4:cc:f1:8c:d9:52:42:ab:c9:d4:1a:bf:3a:b5:b3: 62:ed:7f:6a:04:d8:3a:2b:2d:db:34:ef:15:e3:b3: a0:c8:4b:f1:c8:5b:81:1a:ae:c9:f8:df:92:89:80: a7:ef:0c:29:6c:7b:b9:9c:a3:61:bc:23:fe:6e:8d: a2:1f:c8:b5:35:32:21:a5:87:c1:b7:bc:d2:30:2d: ef:62:ab:3b:f6:41:27:af:e4:a5:fa:3b:41:ea:41: 11:a2:ee:23:b1:85:c9:07:b2:01:f2:e9:f7:b4:cd: e6:16:fc:20:91:1c:c7:00:7c:99:ae:cc:c8:27:5d: 41:2c:11:3a:d4:62:0d:c2:3a:4d:68:84:88:c0:db: 1f:80:22:93:e2:c3:3b:86:38:94:17:a3:3b:db:62: 10:33:d1:90:bb:ab:06:55:72:99:15:a6:64:18:5a: a6:ec:30:43:b1:a1:fd:4c:5b:fc:57:5e:29:7d:61: 23:ec:58:70:ef:10:da:1f:d6:42:88:9e:a4:35:f9: 6e:2c:d5:96:67:15:3b:11:c3:c7:9b:76:c2:32:95: 82:9c:c8:2a:10:dd:6d:81:f9:28:f8:1e:13:cd:30: 0c:1f:0f:b8:5f:9f:40:58:d3:fb:95:97:f1:e4:92: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:46:7E:7D:8B:1E:24:E2:2B:37:85:00:F4:3E:EE:1A:C4:AF:9F:64 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231352e302f32342d3234203d3e20323030303137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.215.0/24 Signature Algorithm: sha256WithRSAEncryption a5:2a:12:b5:34:e2:ff:ec:54:94:e0:d7:99:32:76:55:1c:b3: 71:c6:01:ae:00:2a:dc:16:b9:4f:9d:c0:7d:80:7f:d3:c2:c2: 56:81:f3:65:c1:e8:1b:50:a3:db:0c:0d:b6:76:95:f7:39:f6: 3f:e4:5e:0f:ec:b7:2a:7f:90:14:ab:32:ce:ba:57:12:9f:90: 03:ee:09:1a:ec:77:61:79:76:e3:c7:b5:a8:ca:58:d4:3d:2d: 6c:3a:8e:58:7d:83:76:70:b6:94:b6:4d:99:dd:04:5a:87:9e: 4e:4b:c0:4f:f3:a4:fe:0d:b2:02:e9:13:b2:dd:6e:ed:bc:b3: 01:03:85:7b:49:1c:ca:c1:7b:6d:b3:77:a1:b0:78:6b:c9:06: ee:0f:f4:d3:5e:c6:f9:07:4a:71:d4:d4:70:8a:7c:58:88:9c: 4d:31:24:0b:50:5f:52:0d:c3:72:95:ae:7d:e8:c4:26:66:8d: 80:ee:3e:38:19:68:60:4c:6f:f4:38:10:cd:54:02:f1:d9:a8: a4:50:25:36:bf:14:f1:7b:32:dc:9d:d3:01:5b:6b:87:b5:60: 0d:7a:b0:ee:91:9e:af:dc:49:c0:83:87:90:b4:d8:a0:2e:de: 3b:dc:90:b9:d7:6b:cc:19:e6:f6:fe:44:9c:b4:71:5b:52:40: f6:af:93:67 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUIYke3vBYeCRr+2Shx57t1WCoisIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKDRDNDY3RTdEOEIxRTI0RTIyQjM3ODUwMEY0M0VFRTFBQzRBRjlGNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXwkDSnY5O2ImDmt+qeTM8YzZ UkKrydQavzq1s2Ltf2oE2DorLds07xXjs6DIS/HIW4Earsn435KJgKfvDClse7mc o2G8I/5ujaIfyLU1MiGlh8G3vNIwLe9iqzv2QSev5KX6O0HqQRGi7iOxhckHsgHy 6fe0zeYW/CCRHMcAfJmuzMgnXUEsETrUYg3COk1ohIjA2x+AIpPiwzuGOJQXozvb YhAz0ZC7qwZVcpkVpmQYWqbsMEOxof1MW/xXXil9YSPsWHDvENof1kKInqQ1+W4s 1ZZnFTsRw8ebdsIylYKcyCoQ3W2B+Sj4HhPNMAwfD7hfn0BY0/uVl/HkkqvhAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUTEZ+fYseJOIrN4UA9D7uGsSvn2QwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzMDMxMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dcwDQYJKoZIhvcNAQELBQADggEBAKUqErU04v/sVJTg15kydlUcs3HGAa4A KtwWuU+dwH2Af9PCwlaB82XB6BtQo9sMDbZ2lfc59j/kXg/styp/kBSrMs66VxKf kAPuCRrsd2F5duPHtajKWNQ9LWw6jlh9g3ZwtpS2TZndBFqHnk5LwE/zpP4NsgLp E7Ldbu28swEDhXtJHMrBe22zd6GweGvJBu4P9NNexvkHSnHU1HCKfFiInE0xJAtQ X1INw3KVrn3oxCZmjYDuPjgZaGBMb/Q4EM1UAvHZqKRQJTa/FPF7Mtyd0wFba4e1 YA16sO6Rnq/cScCDh5C02KAu3jvckLnXa8wZ5vb+RJy0cVtSQPavk2c= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:51 2025 by rpki-client