This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33362e302f32342d3234203d3e20313336373837.roa File: 322e35382e33362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: S5Utw6m4ooOmSiy9Pxa9kNe4ri60SvevyOgO8t+HasU= Subject key identifier: 21:C2:9A:D2:B6:2D:C9:8A:76:81:9B:30:DC:7D:13:34:0C:DF:62:36 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4207AB99EC96EE45228162D7ED838E1E841A0976 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:54 +0000 ROA not before: Fri 28 Nov 2025 11:44:54 +0000 ROA not after: Fri 27 Nov 2026 11:49:54 +0000 asID: 136787 IP address blocks: 2.58.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:07:ab:99:ec:96:ee:45:22:81:62:d7:ed:83:8e:1e:84:1a:09:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:54 2025 GMT Not After : Nov 27 11:49:54 2026 GMT Subject: CN=21C29AD2B62DC98A76819B30DC7D13340CDF6236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8c:f3:d3:06:15:0f:b9:66:7e:ef:f7:dd:fb: 9b:29:20:b6:08:c7:15:90:76:49:d9:89:3b:bc:a0: b2:c8:e6:d3:63:2e:08:97:c2:97:e6:1c:e8:cf:84: 1d:0e:14:19:6b:30:49:26:bd:2f:53:7e:a9:1c:08: 95:2b:35:05:02:0b:97:5f:a3:42:fd:fe:2f:90:bc: 9f:01:ff:d0:54:71:6f:7b:ca:80:4c:a5:ec:42:91: 2d:04:dd:a8:18:52:ae:66:26:73:c1:a0:a9:68:8b: 5d:53:0e:58:62:55:f9:29:a7:0d:70:78:06:6e:bb: 85:ba:2a:08:2b:99:55:ea:fc:b2:74:31:34:bb:ca: 61:5b:94:33:8e:27:03:36:ee:32:65:ef:42:6c:16: d8:12:7c:64:ff:0c:6f:30:fa:0a:e4:ba:9b:11:78: 58:38:fe:a5:c7:c5:b6:ce:2f:aa:0c:e2:40:bc:0b: 89:53:5f:83:fc:46:64:a7:cb:6b:aa:e7:38:2f:20: cf:29:4b:2b:42:45:c8:e5:7e:ce:5e:44:50:b2:77: 93:cd:05:bb:53:8b:fb:cc:8e:63:20:e6:6c:13:14: 73:ff:db:d6:b2:02:fb:50:4a:e2:9d:e1:79:35:bf: 84:16:c3:42:e0:a7:e4:ed:5b:42:ed:e7:36:c2:ed: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C2:9A:D2:B6:2D:C9:8A:76:81:9B:30:DC:7D:13:34:0C:DF:62:36 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.36.0/24 Signature Algorithm: sha256WithRSAEncryption aa:1c:59:7d:6c:2d:61:20:9a:39:e9:84:d2:01:34:a9:3a:1b: 2a:3b:c0:65:cf:cb:6a:d5:56:37:12:60:77:a3:03:a3:8b:e8: e6:ee:eb:1e:a3:74:61:18:2b:49:e6:6c:b7:2e:54:c5:c8:02: d8:cd:b1:5c:f1:1d:5f:fd:cf:2d:1c:21:66:10:b9:c4:70:ab: 7b:6d:a5:f5:9d:2e:7e:c5:4a:e6:c8:73:8b:cd:c4:81:e7:8f: 67:a4:a2:7d:08:29:89:18:2a:4a:1a:35:78:f1:f8:27:97:22: bf:d0:ae:03:94:52:1e:a8:b1:f1:2a:eb:4d:92:29:98:04:71: d6:cb:14:3c:a5:df:6e:5c:3e:a0:91:03:c8:52:40:20:7c:62: 74:2e:41:a3:a3:29:4a:bf:d0:28:84:49:71:40:0b:ae:ff:7b: d6:0b:df:dc:f5:f7:0a:95:d9:64:43:58:b1:0f:f3:90:ec:26: 14:26:00:1e:90:83:62:2e:e7:ab:3f:08:16:b6:39:1e:52:d4: 59:e7:48:76:b2:8c:6b:f1:96:31:aa:2c:a7:3c:0e:bb:72:df: 70:fa:1a:66:6e:5d:4a:61:18:3f:08:22:c9:7d:92:16:cf:2b: 29:25:37:44:e2:09:24:dd:a7:45:57:43:77:9b:e7:9d:0a:ef: 05:32:87:a3 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQgermeyW7kUigWLX7YOOHoQaCXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTRaFw0yNjExMjcxMTQ5NTRaMDMxMTAvBgNV BAMTKDIxQzI5QUQyQjYyREM5OEE3NjgxOUIzMERDN0QxMzM0MENERjYyMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2jPPTBhUPuWZ+7/fd+5spILYI xxWQdknZiTu8oLLI5tNjLgiXwpfmHOjPhB0OFBlrMEkmvS9TfqkcCJUrNQUCC5df o0L9/i+QvJ8B/9BUcW97yoBMpexCkS0E3agYUq5mJnPBoKloi11TDlhiVfkppw1w eAZuu4W6KggrmVXq/LJ0MTS7ymFblDOOJwM27jJl70JsFtgSfGT/DG8w+grkupsR eFg4/qXHxbbOL6oM4kC8C4lTX4P8RmSny2uq5zgvIM8pSytCRcjlfs5eRFCyd5PN BbtTi/vMjmMg5mwTFHP/29ayAvtQSuKd4Xk1v4QWw0Lgp+TtW0Lt5zbC7R0JAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUIcKa0rYtyYp2gZsw3H0TNAzfYjYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzMz NjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAI6JDANBgkqhkiG9w0BAQsFAAOCAQEAqhxZfWwtYSCaOemE0gE0qTobKjvAZc/L atVWNxJgd6MDo4vo5u7rHqN0YRgrSeZsty5UxcgC2M2xXPEdX/3PLRwhZhC5xHCr e22l9Z0ufsVK5shzi83EgeePZ6SifQgpiRgqSho1ePH4J5civ9CuA5RSHqix8Srr TZIpmARx1ssUPKXfblw+oJEDyFJAIHxidC5Bo6MpSr/QKIRJcUALrv971gvf3PX3 CpXZZENYsQ/zkOwmFCYAHpCDYi7nqz8IFrY5HlLUWedIdrKMa/GWMaospzwOu3Lf cPoaZm5dSmEYPwgiyX2SFs8rKSU3ROIJJN2nRVdDd5vnnQrvBTKHow== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:12 2025 by rpki-client