This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31382e302f32342d3234203d3e20323132343136.roa File: 38352e3230392e31382e302f32342d3234203d3e20323132343136.roa (raw, json) Hash identifier: CE9hWXGWiDqK5X5bUXx/dqTabhUB/7ogzo6chIHvh68= Subject key identifier: 32:FF:31:99:1E:9C:26:8E:A7:78:34:56:9A:AD:BB:44:1F:0F:E9:19 Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Certificate serial: 51B6C2244A103AA4D206A7BBCEFB12A947DE3DBA Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31382e302f32342d3234203d3e20323132343136.roa Signing time: Thu 25 Dec 2025 18:55:32 +0000 ROA not before: Thu 25 Dec 2025 18:50:32 +0000 ROA not after: Thu 24 Dec 2026 18:55:32 +0000 asID: 212416 IP address blocks: 85.209.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b6:c2:24:4a:10:3a:a4:d2:06:a7:bb:ce:fb:12:a9:47:de:3d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6 Validity Not Before: Dec 25 18:50:32 2025 GMT Not After : Dec 24 18:55:32 2026 GMT Subject: CN=32FF31991E9C268EA77834569AADBB441F0FE919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1f:b4:4f:a0:db:7e:af:50:7b:9c:68:d9:38: e7:02:57:1f:91:d1:68:52:8a:e2:26:f2:47:85:c5: fe:fc:06:67:6b:53:74:df:a0:76:07:3a:06:7d:b7: c5:e8:cf:00:a5:17:f4:b3:40:07:96:c3:03:4a:48: f2:23:a6:e5:37:96:28:5a:f6:36:20:07:6c:6b:f6: 9e:13:60:e8:19:47:c4:f1:90:86:7f:53:73:1a:84: 85:a4:3d:bb:63:88:e8:0a:1d:81:6f:34:68:43:e9: 78:0d:16:d5:f4:83:27:a2:7f:6b:31:0c:c4:d0:7e: d4:68:47:5d:43:ff:e2:60:ad:07:77:53:2f:93:62: cc:69:58:8b:ba:fc:53:81:13:60:6b:f5:75:d3:23: 27:af:8a:63:b5:68:66:d1:3a:5b:3b:79:a6:69:75: f5:6c:0b:da:5d:9d:4c:fe:d2:3e:40:d2:6c:7a:e7: 70:3f:48:a0:30:9c:05:a7:94:fb:02:4b:5b:7c:5b: 19:89:28:f9:22:e6:ce:9a:f1:e6:39:4c:c5:27:f3: d6:c9:23:22:76:32:3d:5a:2d:e0:01:a7:c3:1f:04: 14:e4:c8:98:46:d4:4a:ab:e3:19:1a:bf:8b:cd:44: 2c:82:7d:8f:13:b3:0a:62:3f:1e:d2:58:a2:29:29: bb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FF:31:99:1E:9C:26:8E:A7:78:34:56:9A:AD:BB:44:1F:0F:E9:19 X509v3 Authority Key Identifier: keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/38352e3230392e31382e302f32342d3234203d3e20323132343136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.209.18.0/24 Signature Algorithm: sha256WithRSAEncryption c0:68:1b:31:42:33:88:63:b1:ab:92:ca:17:b2:b5:4a:0e:f5: 5f:b0:ff:88:cb:0c:9f:4c:41:5d:06:26:2f:04:c4:7d:89:01: 13:81:cb:75:10:02:02:0e:6a:da:9b:9d:17:9d:51:d2:4f:d6: 09:f8:55:05:89:46:59:71:17:8c:ce:bf:cc:74:0a:46:7c:16: d0:c4:b6:b5:a5:16:2a:46:9f:a4:fa:82:84:d3:2c:7b:21:6b: c0:07:d2:d3:0a:3f:3d:c3:ec:98:50:74:3e:bc:0e:25:bd:e6: 43:b8:9d:be:87:ef:8b:ce:5f:54:7a:df:cb:79:c7:c5:c6:67: b4:2e:9a:f3:dc:54:f2:a5:8b:dc:fd:40:81:07:5d:80:88:29: c5:b1:12:de:82:4c:67:c8:64:73:0b:48:d4:47:07:ab:44:44: d5:22:72:8c:12:0b:3a:59:6f:65:73:39:35:bd:90:28:a5:75: 29:42:66:00:f5:74:56:cf:0d:1a:b5:41:70:23:4b:9f:10:63: 89:61:e5:e2:89:73:5e:b6:47:98:24:1e:c5:56:11:4a:f0:25: 5b:41:c2:da:46:02:f7:d7:78:04:47:e4:16:88:83:58:47:dd: bd:74:da:30:77:85:4c:d8:3d:33:5c:34:45:0c:9b:6c:0a:69: fc:90:93:fb -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUbbCJEoQOqTSBqe7zvsSqUfePbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGY0Y2U3NzIyZjk5MDc1ZDk0NzM4YjdlNjEwNzA0MDEy NjllYjNkNjAeFw0yNTEyMjUxODUwMzJaFw0yNjEyMjQxODU1MzJaMDMxMTAvBgNV BAMTKDMyRkYzMTk5MUU5QzI2OEVBNzc4MzQ1NjlBQURCQjQ0MUYwRkU5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfH7RPoNt+r1B7nGjZOOcCVx+R 0WhSiuIm8keFxf78BmdrU3TfoHYHOgZ9t8XozwClF/SzQAeWwwNKSPIjpuU3liha 9jYgB2xr9p4TYOgZR8TxkIZ/U3MahIWkPbtjiOgKHYFvNGhD6XgNFtX0gyeif2sx DMTQftRoR11D/+JgrQd3Uy+TYsxpWIu6/FOBE2Br9XXTIyevimO1aGbROls7eaZp dfVsC9pdnUz+0j5A0mx653A/SKAwnAWnlPsCS1t8WxmJKPki5s6a8eY5TMUn89bJ IyJ2Mj1aLeABp8MfBBTkyJhG1Eqr4xkav4vNRCyCfY8TswpiPx7SWKIpKbtjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMv8xmR6cJo6neDRWmq27RB8P6RkwHwYDVR0j BBgwFoAUj0znci+ZB12Uc4t+YQcEASaes9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUtNTExMC00MjU3LTk0ZWYtNGQyYjQzODg0 MDQwLzAvOEY0Q0U3NzIyRjk5MDc1RDk0NzM4QjdFNjEwNzA0MDEyNjlFQjNENi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2owem5jaS1aQjEyVWM0dC1ZUWNFQVNh ZXM5WS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWE5NzcxMTUt NTExMC00MjU3LTk0ZWYtNGQyYjQzODg0MDQwLzAvMzgzNTJlMzIzMDM5MmUzMTM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzQzMTM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA VdESMA0GCSqGSIb3DQEBCwUAA4IBAQDAaBsxQjOIY7GrksoXsrVKDvVfsP+Iywyf TEFdBiYvBMR9iQETgct1EAICDmram50XnVHST9YJ+FUFiUZZcReMzr/MdApGfBbQ xLa1pRYqRp+k+oKE0yx7IWvAB9LTCj89w+yYUHQ+vA4lveZDuJ2+h++Lzl9Uet/L ecfFxme0Lprz3FTypYvc/UCBB12AiCnFsRLegkxnyGRzC0jURwerRETVInKMEgs6 WW9lczk1vZAopXUpQmYA9XRWzw0atUFwI0ufEGOJYeXiiXNetkeYJB7FVhFK8CVb QcLaRgL313gER+QWiINYR929dNowd4VM2D0zXDRFDJtsCmn8kJP7 -----END CERTIFICATE-----Generated at Wed Dec 31 05:21:40 2025 by rpki-client