This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232322e302f32342d3234203d3e20323136313338.roa File: 38352e3233372e3232322e302f32342d3234203d3e20323136313338.roa (raw, json) Hash identifier: PXLH6v/kl46XuJk7RVfaIaKnZkO9zw/vUajT939u+Yw= Subject key identifier: D2:45:10:AB:FB:F6:6C:D0:EF:5B:6C:44:7B:9C:88:E3:E4:FC:DB:27 Certificate issuer: /CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Certificate serial: 3C271392D8E364A74CE631A5674AFED8763942B6 Authority key identifier: AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232322e302f32342d3234203d3e20323136313338.roa Signing time: Sat 10 Jan 2026 05:30:33 +0000 ROA not before: Sat 10 Jan 2026 05:25:33 +0000 ROA not after: Sat 09 Jan 2027 05:30:33 +0000 asID: 216138 IP address blocks: 85.237.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.mft rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 20:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:27:13:92:d8:e3:64:a7:4c:e6:31:a5:67:4a:fe:d8:76:39:42:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f26ea1f10da4a16cad9c7a6510856fbabb8d Validity Not Before: Jan 10 05:25:33 2026 GMT Not After : Jan 9 05:30:33 2027 GMT Subject: CN=D24510ABFBF66CD0EF5B6C447B9C88E3E4FCDB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7b:ab:d2:14:31:d2:e7:a7:aa:f1:1c:54:73: ee:37:db:4b:03:8a:fe:d0:ba:2a:e4:5a:d8:c5:0f: a5:a7:20:9e:b8:a6:53:d6:c3:53:a1:d0:8e:8f:4e: e4:2b:d4:c4:06:e1:90:09:65:0a:1d:4a:9e:e7:3e: 8e:1d:be:9b:40:7c:4b:26:a7:f8:b2:08:4b:99:d3: 85:19:91:df:75:21:aa:2e:29:c1:33:a1:7f:41:8f: ea:c8:a8:79:94:a4:a9:4a:8d:26:9a:55:7f:6d:d7: e8:06:aa:4c:78:a5:91:95:87:45:70:cc:bd:f6:f5: 10:9e:15:66:43:13:73:ea:2f:66:e1:9a:9f:c6:04: 3c:2f:0e:fa:af:b4:cf:3a:79:94:8d:7a:3b:99:1d: af:ce:39:68:60:ea:0f:6d:85:b4:ba:2b:8a:45:d3: f2:d0:d2:ec:fa:91:0d:10:8e:f7:24:a0:80:8e:94: ea:8a:57:a6:5d:1b:eb:f4:0e:82:3f:69:bb:2d:03: 17:89:e2:28:74:42:1f:50:85:db:72:81:bf:a8:b1: c3:e1:5d:f6:b2:5e:24:00:e7:bf:13:91:bb:74:a6: 04:75:79:f3:29:c5:9e:d6:87:56:eb:a4:20:7d:10: b6:ce:1b:10:9d:2e:2b:1d:ed:08:1b:48:40:fd:48: 1c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:10:AB:FB:F6:6C:D0:EF:5B:6C:44:7B:9C:88:E3:E4:FC:DB:27 X509v3 Authority Key Identifier: keyid:AF:F6:F2:6E:A1:F1:0D:A4:A1:6C:AD:9C:7A:65:10:85:6F:BA:BB:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/AFF6F26EA1F10DA4A16CAD9C7A6510856FBABB8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_bybqHxDaShbK2cemUQhW-6u40.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ab9f5497-2b95-4a42-80d0-5c41f807b61f/0/38352e3233372e3232322e302f32342d3234203d3e20323136313338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.222.0/24 Signature Algorithm: sha256WithRSAEncryption 20:97:f3:61:37:56:cd:e7:cb:bf:3e:46:b2:a4:1c:24:0d:e1: 2e:0d:09:74:45:9b:6f:28:72:10:19:e0:db:c0:55:5b:50:36: 13:c6:77:38:ee:03:ee:ac:be:2f:52:78:85:7f:5a:83:8b:5f: 29:cc:a5:49:db:8e:7a:64:2c:4e:50:ed:d8:12:35:a1:88:e9: db:50:1c:06:f0:bb:f0:fe:f1:1c:42:f0:66:58:c7:d7:44:6f: 74:68:8e:e9:a3:b8:f8:f2:ce:8f:2e:30:85:d0:ff:35:a1:3a: d5:aa:1f:a1:fa:10:12:41:df:33:75:97:34:ee:65:db:fb:bf: ca:bf:1d:f1:18:cc:8a:ac:83:ad:53:0a:33:ad:a3:fa:f0:f9: 91:d2:85:8c:5f:63:00:f4:e7:6e:d7:e6:76:8c:2c:8e:a6:79: c1:45:d3:6a:ff:92:31:33:2a:51:c5:05:65:83:e1:cd:0d:5e: fb:f3:de:d1:14:cf:d5:19:e4:55:e8:77:41:f8:ad:fb:7e:d1: d8:e4:82:a7:1e:b5:9c:32:f0:ed:06:9f:98:18:30:82:af:50: 1c:67:09:6f:c7:34:c0:e0:ef:88:56:9f:27:63:c0:17:55:d9: 59:9b:5d:fa:8f:3d:d2:be:a4:2e:a7:0c:90:43:db:62:f9:10: ad:9c:31:7e -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUPCcTktjjZKdM5jGlZ0r+2HY5QrYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWZmNmYyNmVhMWYxMGRhNGExNmNhZDljN2E2NTEwODU2 ZmJhYmI4ZDAeFw0yNjAxMTAwNTI1MzNaFw0yNzAxMDkwNTMwMzNaMDMxMTAvBgNV BAMTKEQyNDUxMEFCRkJGNjZDRDBFRjVCNkM0NDdCOUM4OEUzRTRGQ0RCMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEe6vSFDHS56eq8RxUc+4320sD iv7QuirkWtjFD6WnIJ64plPWw1Oh0I6PTuQr1MQG4ZAJZQodSp7nPo4dvptAfEsm p/iyCEuZ04UZkd91IaouKcEzoX9Bj+rIqHmUpKlKjSaaVX9t1+gGqkx4pZGVh0Vw zL329RCeFWZDE3PqL2bhmp/GBDwvDvqvtM86eZSNejuZHa/OOWhg6g9thbS6K4pF 0/LQ0uz6kQ0QjvckoICOlOqKV6ZdG+v0DoI/abstAxeJ4ih0Qh9Qhdtygb+oscPh XfayXiQA578Tkbt0pgR1efMpxZ7Wh1brpCB9ELbOGxCdLisd7QgbSED9SBx5AgMB AAGjggI/MIICOzAdBgNVHQ4EFgQU0kUQq/v2bNDvW2xEe5yI4+T82ycwHwYDVR0j BBgwFoAUr/bybqHxDaShbK2cemUQhW+6u40wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTctMmI5NS00YTQyLTgwZDAtNWM0MWY4MDdi NjFmLzAvQUZGNkYyNkVBMUYxMERBNEExNkNBRDlDN0E2NTEwODU2RkJBQkI4RC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3JfYnlicUh4RGFTaGJLMmNlbVVRaFct NnU0MC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWI5ZjU0OTct MmI5NS00YTQyLTgwZDAtNWM0MWY4MDdiNjFmLzAvMzgzNTJlMzIzMzM3MmUzMjMy MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzYzMTMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABV7d4wDQYJKoZIhvcNAQELBQADggEBACCX82E3Vs3ny78+RrKkHCQN4S4NCXRF m28ochAZ4NvAVVtQNhPGdzjuA+6svi9SeIV/WoOLXynMpUnbjnpkLE5Q7dgSNaGI 6dtQHAbwu/D+8RxC8GZYx9dEb3RojumjuPjyzo8uMIXQ/zWhOtWqH6H6EBJB3zN1 lzTuZdv7v8q/HfEYzIqsg61TCjOto/rw+ZHShYxfYwD0527X5naMLI6mecFF02r/ kjEzKlHFBWWD4c0NXvvz3tEUz9UZ5FXod0H4rft+0djkgqcetZwy8O0Gn5gYMIKv UBxnCW/HNMDg74hWnydjwBdV2VmbXfqPPdK+pC6nDJBD22L5EK2cMX4= -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:55 2026 by rpki-client