This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa File: 38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa (raw, json) Hash identifier: FOF0Ia+tKMn+1Af8F9Bfjpfhmq9vAZnoJ7w2ka6odfE= Subject key identifier: B9:05:93:1C:2C:3F:B2:A3:93:E6:38:B1:42:2E:8E:57:6C:BE:27:4C Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 5BC5C607AE9F8377FF2DB5EA8684B50E88241D4C Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa Signing time: Sat 13 Dec 2025 09:11:30 +0000 ROA not before: Sat 13 Dec 2025 09:06:30 +0000 ROA not after: Sat 12 Dec 2026 09:11:30 +0000 asID: 216138 IP address blocks: 85.237.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c5:c6:07:ae:9f:83:77:ff:2d:b5:ea:86:84:b5:0e:88:24:1d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:30 2025 GMT Not After : Dec 12 09:11:30 2026 GMT Subject: CN=B905931C2C3FB2A393E638B1422E8E576CBE274C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:62:5e:96:5b:93:63:55:3c:92:64:e2:66:23: b9:7a:ec:58:22:a5:c3:78:1a:6b:a9:18:8e:16:f7: b2:5d:5b:c7:28:fb:0d:90:bb:2d:1f:51:ae:ad:dc: f5:0d:8c:43:6a:94:72:a0:ab:33:49:47:12:1e:a6: 4c:df:a2:5a:e3:a2:06:96:65:30:b6:89:51:14:93: 2c:96:c1:4e:51:1a:a4:3d:a7:a4:d6:2d:3b:b7:14: 6a:cb:84:26:2a:79:cf:b5:d9:38:77:13:6f:5e:c5: ab:a2:33:f2:71:be:9e:87:8d:02:c7:2a:f5:e1:9b: 05:26:2a:6b:e8:4c:a9:4b:d4:f4:3a:b8:7a:59:92: 5c:99:91:d3:59:2c:b5:dd:fd:a6:b5:aa:1c:82:4a: 3d:ae:3b:4e:ff:63:6a:d5:7d:44:e0:07:4d:a0:a3: 81:14:c1:9b:23:b3:90:f8:ee:8b:36:78:07:3a:20: 28:77:83:da:60:ee:b9:3a:e5:46:b7:5b:33:db:01: cb:fe:31:d1:b6:50:17:ee:12:3d:71:23:57:95:af: 3d:41:08:aa:2e:df:ef:99:60:2d:33:78:b4:1a:b1: c9:f8:b0:86:17:fa:d9:c6:53:be:38:2b:a9:c6:81: 09:f0:72:fa:2f:d1:45:df:a5:0e:87:f0:90:e0:6b: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:05:93:1C:2C:3F:B2:A3:93:E6:38:B1:42:2E:8E:57:6C:BE:27:4C X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231372e302f32342d3234203d3e20323136313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.217.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:77:df:fd:20:32:61:ff:e1:3b:88:9a:23:10:cf:b3:63:2b: 96:0b:87:8b:46:f4:55:2e:97:8d:b1:b4:7f:eb:b8:57:73:41: 80:98:0e:dd:9c:e9:0c:3d:83:de:89:ca:37:09:1b:fc:92:04: 30:b7:6c:cf:40:ce:1a:14:15:4e:b7:45:59:8e:19:d2:39:08: 2c:90:75:95:9a:58:0f:77:a4:f7:37:df:42:1d:fb:25:e9:40: 3f:5e:cb:bf:ee:96:24:a7:cf:42:51:06:62:35:a7:2d:3a:bf: d3:6e:e0:81:41:0e:8d:80:76:0b:ba:f3:69:d7:07:97:dd:51: 04:9d:02:e2:39:5d:b3:c9:ba:15:37:d4:76:ba:aa:92:49:cf: d9:74:04:f8:96:7c:40:84:2d:e1:56:15:02:c0:d6:7b:d5:a5: 2c:04:1c:95:81:ea:51:8f:49:4d:64:c7:5e:33:c7:25:bf:00: 8b:b9:e7:5c:ed:71:04:1b:8a:ff:13:41:dc:e0:1c:25:03:9a: 58:a8:f2:d5:9f:de:e0:14:70:b2:4f:3b:4c:ca:fe:37:d3:6b: 0e:1b:70:a9:f8:32:74:42:77:c0:88:84:d8:c2:73:e2:f1:2e: d3:84:b4:61:83:4e:dd:f5:b2:8a:1c:01:bc:2c:60:f8:e3:c0: 5f:60:eb:01 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUW8XGB66fg3f/LbXqhoS1DogkHUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MzBaFw0yNjEyMTIwOTExMzBaMDMxMTAvBgNV BAMTKEI5MDU5MzFDMkMzRkIyQTM5M0U2MzhCMTQyMkU4RTU3NkNCRTI3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYl6WW5NjVTySZOJmI7l67Fgi pcN4GmupGI4W97JdW8co+w2Quy0fUa6t3PUNjENqlHKgqzNJRxIepkzfolrjogaW ZTC2iVEUkyyWwU5RGqQ9p6TWLTu3FGrLhCYqec+12Th3E29exauiM/Jxvp6HjQLH KvXhmwUmKmvoTKlL1PQ6uHpZklyZkdNZLLXd/aa1qhyCSj2uO07/Y2rVfUTgB02g o4EUwZsjs5D47os2eAc6ICh3g9pg7rk65Ua3WzPbAcv+MdG2UBfuEj1xI1eVrz1B CKou3++ZYC0zeLQascn4sIYX+tnGU744K6nGgQnwcvov0UXfpQ6H8JDga6pfAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUuQWTHCw/sqOT5jixQi6OV2y+J0wwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMTMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dkwDQYJKoZIhvcNAQELBQADggEBAGt33/0gMmH/4TuImiMQz7NjK5YLh4tG 9FUul42xtH/ruFdzQYCYDt2c6Qw9g96JyjcJG/ySBDC3bM9AzhoUFU63RVmOGdI5 CCyQdZWaWA93pPc330Id+yXpQD9ey7/uliSnz0JRBmI1py06v9Nu4IFBDo2Adgu6 82nXB5fdUQSdAuI5XbPJuhU31Ha6qpJJz9l0BPiWfECELeFWFQLA1nvVpSwEHJWB 6lGPSU1kx14zxyW/AIu551ztcQQbiv8TQdzgHCUDmlio8tWf3uAUcLJPO0zK/jfT aw4bcKn4MnRCd8CIhNjCc+LxLtOEtGGDTt31soocAbwsYPjjwF9g6wE= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:01 2025 by rpki-client