This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3235312e302f32342d3234203d3e20323032373034.roa File: 322e35362e3235312e302f32342d3234203d3e20323032373034.roa (raw, json) Hash identifier: 7B9Wtyg1cROjEfNCqKX+MjqDnb+jkXAnmp7ARwhRaPg= Subject key identifier: A8:56:4C:98:BA:DF:A7:95:CA:ED:7A:5A:F9:26:30:5B:34:B2:44:15 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 4D851B875289BDA1C485CC51129E6275AE644717 Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3235312e302f32342d3234203d3e20323032373034.roa Signing time: Wed 24 Dec 2025 19:55:32 +0000 ROA not before: Wed 24 Dec 2025 19:50:32 +0000 ROA not after: Wed 23 Dec 2026 19:55:32 +0000 asID: 202704 IP address blocks: 2.56.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:85:1b:87:52:89:bd:a1:c4:85:cc:51:12:9e:62:75:ae:64:47:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Dec 24 19:50:32 2025 GMT Not After : Dec 23 19:55:32 2026 GMT Subject: CN=A8564C98BADFA795CAED7A5AF926305B34B24415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:45:40:1d:19:e1:48:78:c1:0f:49:9e:1e:59: 72:2b:b6:3c:3b:db:f8:3f:7c:9d:0a:fb:92:87:75: ea:4a:94:7d:f4:e2:eb:46:9d:08:da:16:60:0a:09: 42:eb:8a:61:ad:14:f6:6f:72:ca:a5:8c:42:c9:26: 41:34:6f:75:1c:3f:11:83:4c:8b:4f:0c:08:9a:95: 0f:82:6b:d5:ac:52:ac:8e:cd:80:03:bc:a2:8e:8b: 6f:9a:6a:17:bb:ea:56:34:dd:51:44:7a:f1:8a:28: 14:79:da:2c:99:08:28:a2:f5:30:c4:6e:f7:33:4b: 17:a3:d7:b1:e9:83:d9:ae:ab:c8:a8:f5:e5:e7:d7: 7d:10:22:9f:5d:32:60:f6:4c:8a:cd:e6:d8:ee:df: ea:e8:bb:c0:ec:af:64:bf:8a:f8:b7:f4:b2:47:8b: 31:05:34:fd:16:3c:65:47:f6:82:67:48:13:f8:8e: b9:77:8b:f3:d8:50:3e:88:7b:ae:60:43:49:0a:76: 3f:bf:18:0e:ec:41:49:ee:43:fa:00:c4:82:c2:14: a2:b9:fe:df:94:04:f0:e4:7d:6a:6b:8c:21:14:2f: 55:4c:aa:14:19:57:7c:ce:22:94:57:fe:3d:42:79: 4b:37:59:68:34:a6:ad:52:8f:2f:a8:b4:8c:24:7f: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:56:4C:98:BA:DF:A7:95:CA:ED:7A:5A:F9:26:30:5B:34:B2:44:15 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/322e35362e3235312e302f32342d3234203d3e20323032373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.251.0/24 Signature Algorithm: sha256WithRSAEncryption 48:c4:37:bb:e9:c3:9e:a3:f9:7e:07:9f:71:5d:6f:96:29:93: bd:0d:fc:18:50:bc:d9:f5:6c:19:18:99:b3:11:14:88:91:51: a3:4b:84:1c:6f:28:2d:3a:e6:d7:07:63:1a:96:66:3a:e9:5b: 2d:55:8b:fc:87:cd:b5:32:1f:66:e7:cb:a1:09:06:8b:de:ec: a5:0c:4a:9e:7d:91:17:97:e8:43:99:34:6c:29:7b:19:1b:66: e8:1d:7e:cc:3f:18:85:fc:ec:fd:43:fd:4c:46:86:06:39:42: 88:2b:78:6f:69:aa:9a:5d:fc:58:ea:e4:ad:77:ed:b9:8f:75: 68:9f:4b:c8:0a:f4:79:1f:6d:3e:d5:f2:1f:fe:bb:08:24:63: 61:8f:65:f1:5b:f8:00:5a:23:5e:ad:06:5a:4b:77:83:1c:e4: ad:0e:55:bb:a7:20:6b:7c:e3:da:1a:d1:b6:e2:00:23:bd:57: fd:5c:0e:49:e5:7d:e8:6d:bb:7e:e5:bf:60:03:d3:55:0b:73: 88:70:9b:0d:72:1b:d2:72:62:31:e0:c9:18:4e:c7:2e:cf:7a: ec:9d:85:a7:a6:ac:66:e6:f2:4e:0b:e9:7e:29:33:39:f5:7d: db:4b:2e:df:29:1b:9c:e4:b0:7a:18:8a:d2:a5:bb:4c:f5:86: cc:1b:93:8e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTYUbh1KJvaHEhcxREp5ida5kRxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTEyMjQxOTUwMzJaFw0yNjEyMjMxOTU1MzJaMDMxMTAvBgNV BAMTKEE4NTY0Qzk4QkFERkE3OTVDQUVEN0E1QUY5MjYzMDVCMzRCMjQ0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRUAdGeFIeMEPSZ4eWXIrtjw7 2/g/fJ0K+5KHdepKlH304utGnQjaFmAKCULrimGtFPZvcsqljELJJkE0b3UcPxGD TItPDAialQ+Ca9WsUqyOzYADvKKOi2+aahe76lY03VFEevGKKBR52iyZCCii9TDE bvczSxej17Hpg9muq8io9eXn130QIp9dMmD2TIrN5tju3+rou8Dsr2S/ivi39LJH izEFNP0WPGVH9oJnSBP4jrl3i/PYUD6Ie65gQ0kKdj+/GA7sQUnuQ/oAxILCFKK5 /t+UBPDkfWprjCEUL1VMqhQZV3zOIpRX/j1CeUs3WWg0pq1Sjy+otIwkf83/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUqFZMmLrfp5XK7Xpa+SYwWzSyRBUwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzIyZTM1MzYyZTMyMzUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM3MzAzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI4 +zANBgkqhkiG9w0BAQsFAAOCAQEASMQ3u+nDnqP5fgefcV1vlimTvQ38GFC82fVs GRiZsxEUiJFRo0uEHG8oLTrm1wdjGpZmOulbLVWL/IfNtTIfZufLoQkGi97spQxK nn2RF5foQ5k0bCl7GRtm6B1+zD8Yhfzs/UP9TEaGBjlCiCt4b2mqml38WOrkrXft uY91aJ9LyAr0eR9tPtXyH/67CCRjYY9l8Vv4AFojXq0GWkt3gxzkrQ5Vu6cga3zj 2hrRtuIAI71X/VwOSeV96G27fuW/YAPTVQtziHCbDXIb0nJiMeDJGE7HLs967J2F p6asZubyTgvpfikzOfV920su3ykbnOSwehiK0qW7TPWGzBuTjg== -----END CERTIFICATE-----Generated at Sun Jan 25 10:22:57 2026 by rpki-client