This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa File: 38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa (raw, json) Hash identifier: F3nL+PATD3gOzZdjINpCRdbNyER8HiHmFGbm/cRvxqY= Subject key identifier: AB:6B:3D:B9:C8:92:6B:0D:BC:CC:D5:01:90:E1:7B:A0:1C:25:49:0F Certificate issuer: /CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Certificate serial: 6296AB0AD99D88C7EB22453BD939EE2369DDC809 Authority key identifier: 65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa Signing time: Mon 29 Dec 2025 18:06:36 +0000 ROA not before: Mon 29 Dec 2025 18:01:36 +0000 ROA not after: Mon 28 Dec 2026 18:06:36 +0000 asID: 139205 IP address blocks: 85.155.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:96:ab:0a:d9:9d:88:c7:eb:22:45:3b:d9:39:ee:23:69:dd:c8:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6578E79662000496EB1540D8BD8FA65ED8D63A62 Validity Not Before: Dec 29 18:01:36 2025 GMT Not After : Dec 28 18:06:36 2026 GMT Subject: CN=AB6B3DB9C8926B0DBCCCD50190E17BA01C25490F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:85:c6:86:04:9b:d8:06:1d:cb:26:9e:7e:1d: eb:e3:c6:e2:b0:ec:94:05:a8:d5:a2:eb:52:85:77: 8e:14:06:0d:05:41:ed:99:12:92:bf:a4:78:ea:2f: 66:28:16:ae:c5:5b:bc:63:b6:d0:e9:5e:8e:03:83: f2:f0:6b:ed:a9:dc:03:79:f5:24:4d:97:f3:8c:37: 71:b1:ff:bc:16:92:ab:b4:3c:32:57:9b:2c:6b:de: 81:1f:3a:2c:0d:3d:f5:46:0e:54:ec:54:01:93:20: 9c:49:f3:69:ce:8a:94:44:2b:cd:79:56:c0:eb:fd: d4:e5:9d:05:9e:d6:2c:6f:8d:68:39:19:7d:fd:1b: 2b:72:f3:88:16:db:4f:85:8a:3f:8b:fd:ac:10:cf: 7b:33:95:a5:44:1d:98:f7:f1:00:a0:f1:60:d9:f1: 50:d0:c5:77:ab:55:4f:ec:c7:2a:ad:6d:b5:67:62: e3:52:9c:ea:eb:c9:00:fc:e7:41:6d:b7:bb:9b:90: 8b:4f:cd:be:b0:1f:8d:da:07:d9:06:0f:8a:5c:fc: 61:75:ba:1e:a8:d7:ff:48:67:f2:e8:5a:66:d0:34: 54:37:e1:87:17:56:2e:28:7d:82:0a:1d:c1:d4:04: 80:bf:0b:26:87:6f:77:ce:29:49:9c:b2:d6:c7:95: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6B:3D:B9:C8:92:6B:0D:BC:CC:D5:01:90:E1:7B:A0:1C:25:49:0F X509v3 Authority Key Identifier: keyid:65:78:E7:96:62:00:04:96:EB:15:40:D8:BD:8F:A6:5E:D8:D6:3A:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/6578E79662000496EB1540D8BD8FA65ED8D63A62.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6578E79662000496EB1540D8BD8FA65ED8D63A62.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/8/38352e3135352e3232372e302f32342d3234203d3e20313339323035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.155.227.0/24 Signature Algorithm: sha256WithRSAEncryption 78:c5:a7:0c:c7:01:b3:f5:dc:90:9c:22:e2:e5:f8:56:ec:5d: b9:28:f9:a4:3d:47:23:b2:1d:14:19:fa:85:3c:69:db:3a:94: 21:70:41:b4:95:d9:ea:74:d9:ad:04:63:b2:4a:f1:d5:1c:a8: 73:4f:5b:f0:4a:44:18:0b:b2:bb:cc:30:6b:86:25:5d:2d:22: 69:74:23:0e:01:5c:b5:8e:ed:fb:de:a6:dd:53:9c:c0:38:f5: 1d:11:73:48:d7:ad:f5:63:9c:b1:ef:24:e7:46:dd:46:71:21: d1:c2:cd:e9:20:67:4f:c8:0a:0c:9b:53:ff:1a:29:52:5c:fd: c3:fa:16:fd:54:c8:b6:48:f0:18:7f:b0:a6:74:ae:33:05:91: 6f:95:ce:05:d6:68:e5:be:0c:80:ed:a1:73:08:8e:97:a1:b6: b4:4f:60:f7:70:40:ab:85:9a:fe:7b:46:29:01:9b:9a:81:7b: 31:04:44:bb:54:6b:7b:e5:62:62:f0:67:12:db:ce:e9:84:2b: cb:bd:a0:93:37:f8:27:12:50:84:c2:86:75:39:9d:2c:a6:bf: b3:6f:1b:5d:ba:fc:d2:f0:6c:0f:4a:4c:34:fb:e8:20:3f:df: b6:01:cd:51:97:12:a1:2f:bc:92:dd:c5:0d:d5:4c:ae:96:59: 73:be:f1:3d -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIUYparCtmdiMfrIkU72TnuI2ndyAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVE OEQ2M0E2MjAeFw0yNTEyMjkxODAxMzZaFw0yNjEyMjgxODA2MzZaMDMxMTAvBgNV BAMTKEFCNkIzREI5Qzg5MjZCMERCQ0NDRDUwMTkwRTE3QkEwMUMyNTQ5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdhcaGBJvYBh3LJp5+HevjxuKw 7JQFqNWi61KFd44UBg0FQe2ZEpK/pHjqL2YoFq7FW7xjttDpXo4Dg/Lwa+2p3AN5 9SRNl/OMN3Gx/7wWkqu0PDJXmyxr3oEfOiwNPfVGDlTsVAGTIJxJ82nOipREK815 VsDr/dTlnQWe1ixvjWg5GX39Gyty84gW20+Fij+L/awQz3szlaVEHZj38QCg8WDZ 8VDQxXerVU/sxyqtbbVnYuNSnOrryQD850Ftt7ubkItPzb6wH43aB9kGD4pc/GF1 uh6o1/9IZ/LoWmbQNFQ34YcXVi4ofYIKHcHUBIC/CyaHb3fOKUmcstbHlXHzAgMB AAGjggJvMIICazAdBgNVHQ4EFgQUq2s9uciSaw28zNUBkOF7oBwlSQ8wHwYDVR0j BBgwFoAUZXjnlmIABJbrFUDYvY+mXtjWOmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzgvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2M0E2Mi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvNjU3OEU3OTY2MjAwMDQ5NkVCMTU0MEQ4QkQ4RkE2NUVEOEQ2 M0E2Mi5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQt ZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVkOGM0LzgvMzgzNTJlMzEzNTM1MmUzMjMy MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMjMwMzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABVm+MwDQYJKoZIhvcNAQELBQADggEBAHjFpwzHAbP13JCcIuLl+FbsXbko+aQ9 RyOyHRQZ+oU8ads6lCFwQbSV2ep02a0EY7JK8dUcqHNPW/BKRBgLsrvMMGuGJV0t Iml0Iw4BXLWO7fvept1TnMA49R0Rc0jXrfVjnLHvJOdG3UZxIdHCzekgZ0/ICgyb U/8aKVJc/cP6Fv1UyLZI8Bh/sKZ0rjMFkW+VzgXWaOW+DIDtoXMIjpehtrRPYPdw QKuFmv57RikBm5qBezEERLtUa3vlYmLwZxLbzumEK8u9oJM3+CcSUITChnU5nSym v7NvG126/NLwbA9KTDT76CA/37YBzVGXEqEvvJLdxQ3VTK6WWXO+8T0= -----END CERTIFICATE-----Generated at Wed Dec 31 05:15:37 2025 by rpki-client