This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231382e302f32342d3234203d3e20323132363039.roa File: 38352e3233372e3231382e302f32342d3234203d3e20323132363039.roa (raw, json) Hash identifier: wUS9c8MdQ0BETPDvtK3gqHth8BrTUYPqZhAPd9p6CXM= Subject key identifier: FA:A8:D6:94:32:8C:D1:DD:2A:57:25:CD:CA:5A:52:CF:96:29:B7:B0 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 1876A47DFA9B348113BEDEB0621F2A7823FF25DC Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231382e302f32342d3234203d3e20323132363039.roa Signing time: Sat 13 Dec 2025 09:11:29 +0000 ROA not before: Sat 13 Dec 2025 09:06:29 +0000 ROA not after: Sat 12 Dec 2026 09:11:29 +0000 asID: 212609 IP address blocks: 85.237.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 17:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:76:a4:7d:fa:9b:34:81:13:be:de:b0:62:1f:2a:78:23:ff:25:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Dec 13 09:06:29 2025 GMT Not After : Dec 12 09:11:29 2026 GMT Subject: CN=FAA8D694328CD1DD2A5725CDCA5A52CF9629B7B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:42:e8:96:5e:5c:96:e0:c1:42:2b:e1:e9: ee:43:17:74:a2:3c:cf:75:68:69:05:43:85:0a:fe: fb:65:c9:67:e0:e6:c3:e5:0e:c9:1b:0a:6b:9d:ff: 6b:e7:20:18:36:02:73:0d:5e:31:9f:74:22:b5:3c: 3f:a3:64:95:80:00:43:aa:b4:a9:85:b6:a1:78:15: 62:c3:0c:43:29:1f:3c:06:10:70:9d:c4:35:0b:b1: 09:2a:74:8a:88:a5:bf:7c:43:c9:fd:c8:fb:50:89: f4:2a:96:e4:57:73:66:65:e0:0f:a8:cf:2d:5e:a7: 93:af:06:e6:26:53:73:98:8b:0a:1f:32:7b:13:e5: 25:f2:92:79:9b:cf:e7:96:bb:06:f7:13:0c:c7:19: f4:35:07:47:e9:6a:16:8c:aa:33:08:39:8e:19:ef: ba:d4:cd:d0:ba:83:14:82:f7:d1:d7:13:af:19:d4: 66:32:61:59:b9:48:2d:9f:97:94:88:ed:32:f7:a6: 86:d3:a2:61:f9:0a:49:64:dc:5b:b8:ae:79:3c:77: af:2a:4f:8f:90:da:58:64:05:78:53:1f:1b:60:48: 26:a3:22:6f:e1:41:3d:5a:e3:31:ad:26:31:75:d8: e9:21:05:de:f5:5d:f4:62:a6:8b:1c:c6:7e:1c:c9: 33:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A8:D6:94:32:8C:D1:DD:2A:57:25:CD:CA:5A:52:CF:96:29:B7:B0 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3231382e302f32342d3234203d3e20323132363039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.218.0/24 Signature Algorithm: sha256WithRSAEncryption 63:90:a8:a1:97:11:0f:d4:84:a8:6d:13:7b:ec:c0:c4:bb:85: 45:87:81:0d:5d:84:a5:86:e8:4e:7c:64:48:40:d6:19:81:c8: 3d:94:87:f5:a8:29:ce:34:ce:d3:63:c0:9f:f5:43:dd:a5:5b: e2:09:10:64:7e:5a:f5:cd:f7:26:16:88:23:de:28:82:a9:8d: 7b:6f:cb:ee:fe:53:e9:ee:de:c6:05:ce:fd:0d:a5:86:35:8a: 61:c7:23:d3:9b:8b:57:98:38:65:21:29:10:6d:f7:34:33:69: cb:59:f7:35:e1:9f:c9:82:3f:3d:ff:65:21:ce:52:9e:cf:b5: b1:ea:82:7b:3a:59:9e:6e:2c:db:c1:87:1c:2a:f1:73:81:82: 5e:c4:4e:ea:f1:14:43:91:a8:7c:b1:69:22:0d:e2:7d:d3:bb: cb:54:35:c2:17:b5:56:49:64:1a:99:fb:37:f3:d7:cf:9e:7a: 6f:f9:64:1f:a5:16:7b:0f:7a:f6:d4:3e:07:3c:d4:70:52:29: 6b:d9:80:a2:62:e6:52:02:fa:84:76:14:ad:3f:4b:24:e5:ad: 7f:e2:9d:70:87:d6:e0:ae:65:c2:31:2c:a2:95:db:ed:43:d6: 4e:61:f4:2e:08:79:02:00:47:28:5e:b0:1d:78:f5:2a:a2:01: 68:0b:17:41 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUGHakffqbNIETvt6wYh8qeCP/JdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNTEyMTMwOTA2MjlaFw0yNjEyMTIwOTExMjlaMDMxMTAvBgNV BAMTKEZBQThENjk0MzI4Q0QxREQyQTU3MjVDRENBNUE1MkNGOTYyOUI3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuELoll5cluDBQivh6e5DF3Si PM91aGkFQ4UK/vtlyWfg5sPlDskbCmud/2vnIBg2AnMNXjGfdCK1PD+jZJWAAEOq tKmFtqF4FWLDDEMpHzwGEHCdxDULsQkqdIqIpb98Q8n9yPtQifQqluRXc2Zl4A+o zy1ep5OvBuYmU3OYiwofMnsT5SXyknmbz+eWuwb3EwzHGfQ1B0fpahaMqjMIOY4Z 77rUzdC6gxSC99HXE68Z1GYyYVm5SC2fl5SI7TL3pobTomH5Cklk3Fu4rnk8d68q T4+Q2lhkBXhTHxtgSCajIm/hQT1a4zGtJjF12OkhBd71XfRiposcxn4cyTOpAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU+qjWlDKM0d0qVyXNylpSz5Ypt7AwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMx MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzIzNjMwMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7dowDQYJKoZIhvcNAQELBQADggEBAGOQqKGXEQ/UhKhtE3vswMS7hUWHgQ1d hKWG6E58ZEhA1hmByD2Uh/WoKc40ztNjwJ/1Q92lW+IJEGR+WvXN9yYWiCPeKIKp jXtvy+7+U+nu3sYFzv0NpYY1imHHI9Obi1eYOGUhKRBt9zQzactZ9zXhn8mCPz3/ ZSHOUp7PtbHqgns6WZ5uLNvBhxwq8XOBgl7ETurxFEORqHyxaSIN4n3Tu8tUNcIX tVZJZBqZ+zfz18+eem/5ZB+lFnsPevbUPgc81HBSKWvZgKJi5lIC+oR2FK0/SyTl rX/inXCH1uCuZcIxLKKV2+1D1k5h9C4IeQIARyhesB149SqiAWgLF0E= -----END CERTIFICATE-----Generated at Tue Dec 16 05:18:03 2025 by rpki-client