This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32342d3234203d3e20323134343636.roa File: 322e35362e3234382e302f32342d3234203d3e20323134343636.roa (raw, json) Hash identifier: 6PbunhBWfej9c7OxTBzCa+9K7lq4rSQU2AnIAJJULQw= Subject key identifier: C1:3B:91:A3:37:9A:8E:C1:DA:F3:7B:BF:98:23:24:AB:7B:6E:B8:01 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 3612359DAE579AFCC89F3C62BDC2A287516BFBEF Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32342d3234203d3e20323134343636.roa Signing time: Mon 03 Nov 2025 19:55:11 +0000 ROA not before: Mon 03 Nov 2025 19:50:11 +0000 ROA not after: Mon 02 Nov 2026 19:55:11 +0000 asID: 214466 IP address blocks: 2.56.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:12:35:9d:ae:57:9a:fc:c8:9f:3c:62:bd:c2:a2:87:51:6b:fb:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 3 19:50:11 2025 GMT Not After : Nov 2 19:55:11 2026 GMT Subject: CN=C13B91A3379A8EC1DAF37BBF982324AB7B6EB801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:7e:fc:9b:fd:58:5c:99:f0:55:bd:93:aa: 25:27:49:67:3d:b0:d5:b8:c0:c4:6e:a7:ef:a5:7a: 19:5f:90:6c:df:fa:44:4c:b0:15:f9:95:67:06:3c: 14:24:7d:ec:b4:d0:3c:5d:0f:f4:62:f2:a6:d1:58: a1:f1:c3:2f:f0:35:34:d6:fe:db:a7:42:c8:2c:06: bf:b7:33:53:8a:a4:ce:f5:99:61:06:c2:f6:c1:d9: 3f:15:4f:45:5c:b1:0a:38:7b:b9:78:fa:ab:ce:db: 7f:db:43:43:6c:3b:f7:28:23:44:e4:f1:dc:87:b0: b8:7e:5b:08:27:20:e7:88:3c:08:f8:ba:eb:66:81: 29:ef:39:d5:4a:c0:80:1a:d4:1e:6b:6d:04:43:01: 98:e7:d3:b4:f4:c5:9d:05:de:0a:72:27:85:d5:58: 69:af:a5:15:2d:93:eb:88:1e:07:b3:62:bf:dd:bb: f4:2d:d1:62:91:3b:6c:3d:ec:d0:61:ce:fa:36:aa: a6:1a:2f:a9:da:78:78:40:97:a8:b4:21:fd:f2:8c: d3:06:bf:d2:e2:98:de:c3:45:0a:7e:3b:1a:0c:0c: ff:76:bb:31:c8:a9:b9:71:c1:21:db:33:04:96:ad: 35:16:22:bd:fd:66:b4:c7:db:c9:04:05:4b:75:93: b4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3B:91:A3:37:9A:8E:C1:DA:F3:7B:BF:98:23:24:AB:7B:6E:B8:01 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3234382e302f32342d3234203d3e20323134343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.248.0/24 Signature Algorithm: sha256WithRSAEncryption 04:81:13:aa:ab:cd:65:d6:0c:81:12:13:cb:e0:f3:69:55:e1: 01:06:da:7d:3e:07:41:db:c2:08:61:2d:a5:b0:c4:05:24:2c: 14:dc:77:ac:10:dd:fc:b8:8f:fb:85:8e:b8:74:53:08:43:21: 07:33:f1:6e:0b:87:d8:45:1a:7e:70:a0:2c:2d:72:1c:3d:17: 0f:35:44:cf:94:f7:04:12:f6:8f:55:d3:25:23:a5:30:35:7b: 34:70:c4:4b:1b:60:94:17:44:3e:ae:3f:3c:f0:9a:55:9d:a9: ee:8f:b7:5a:ba:60:65:25:b6:02:bd:de:00:cb:02:14:bf:33: ce:f7:50:c2:1c:cc:5a:64:ea:e8:09:73:15:e0:38:b6:71:88: da:be:c6:9a:fc:e9:bf:82:51:a7:bc:86:de:b0:23:54:0e:15: d2:42:1b:61:91:43:11:f3:80:79:cf:23:23:6f:d1:ee:a1:a6: 1f:88:39:ae:30:89:f8:4d:0b:9e:95:63:44:9f:02:14:df:84: 8c:b6:c0:07:22:78:78:ef:2d:1c:23:b6:b9:50:cd:f9:85:97: 5f:21:54:47:4e:81:83:f8:91:2f:b3:51:ae:ae:5b:58:c2:18: e3:9b:9e:bb:bb:a4:86:30:a2:cd:d4:ef:5d:ae:91:f9:1e:d5: 02:90:9d:09 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNhI1na5XmvzInzxivcKih1Fr++8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMDMxOTUwMTFaFw0yNjExMDIxOTU1MTFaMDMxMTAvBgNV BAMTKEMxM0I5MUEzMzc5QThFQzFEQUYzN0JCRjk4MjMyNEFCN0I2RUI4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8J378m/1YXJnwVb2TqiUnSWc9 sNW4wMRup++lehlfkGzf+kRMsBX5lWcGPBQkfey00DxdD/Ri8qbRWKHxwy/wNTTW /tunQsgsBr+3M1OKpM71mWEGwvbB2T8VT0VcsQo4e7l4+qvO23/bQ0NsO/coI0Tk 8dyHsLh+WwgnIOeIPAj4uutmgSnvOdVKwIAa1B5rbQRDAZjn07T0xZ0F3gpyJ4XV WGmvpRUtk+uIHgezYr/du/Qt0WKRO2w97NBhzvo2qqYaL6naeHhAl6i0If3yjNMG v9LimN7DRQp+OxoMDP92uzHIqblxwSHbMwSWrTUWIr39ZrTH28kEBUt1k7S/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUwTuRozeajsHa83u/mCMkq3tuuAEwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIyZTM1MzYyZTMyMzQzODJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDM0MzYzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI4 +DANBgkqhkiG9w0BAQsFAAOCAQEABIETqqvNZdYMgRITy+DzaVXhAQbafT4HQdvC CGEtpbDEBSQsFNx3rBDd/LiP+4WOuHRTCEMhBzPxbguH2EUafnCgLC1yHD0XDzVE z5T3BBL2j1XTJSOlMDV7NHDESxtglBdEPq4/PPCaVZ2p7o+3WrpgZSW2Ar3eAMsC FL8zzvdQwhzMWmTq6AlzFeA4tnGI2r7Gmvzpv4JRp7yG3rAjVA4V0kIbYZFDEfOA ec8jI2/R7qGmH4g5rjCJ+E0LnpVjRJ8CFN+EjLbAByJ4eO8tHCO2uVDN+YWXXyFU R06Bg/iRL7NRrq5bWMIY45ueu7ukhjCizdTvXa6R+R7VApCdCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:40 2025 by rpki-client