This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33372e302f32342d3234203d3e20313336373837.roa File: 322e35382e33372e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: HOXx0ZrfU1JR8c9BWyd2gL7dqN5+9qy+L5YguyN4ATo= Subject key identifier: A6:C4:40:55:D8:23:BB:7F:A2:3D:CF:46:44:32:D5:F2:F3:6C:DC:BC Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3C2AD9F9D07F1AFB7979DBDCA1720064BA938CAC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33372e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:36 +0000 ROA not before: Fri 28 Nov 2025 11:44:36 +0000 ROA not after: Fri 27 Nov 2026 11:49:36 +0000 asID: 136787 IP address blocks: 2.58.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2a:d9:f9:d0:7f:1a:fb:79:79:db:dc:a1:72:00:64:ba:93:8c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:36 2025 GMT Not After : Nov 27 11:49:36 2026 GMT Subject: CN=A6C44055D823BB7FA23DCF464432D5F2F36CDCBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:c3:6b:4f:2f:3c:21:0e:87:18:a1:bf:09: 5d:ca:be:b0:21:00:91:20:f4:6f:9b:3e:5e:e0:46: 33:41:a4:70:e8:4e:f5:de:ef:1e:8e:b7:df:21:05: c5:cc:f0:a2:36:27:fd:69:64:a6:c2:31:08:21:a5: 08:59:b0:ab:f6:ca:e0:6d:55:ea:ce:dc:5e:ad:49: b7:12:97:ee:b0:21:6b:f7:4b:65:4c:8a:d1:3d:85: e3:13:8d:63:fd:04:1c:9d:bf:93:47:82:03:44:fb: e2:6c:36:e7:b2:8c:58:1c:58:ae:a5:48:68:68:e2: d2:cb:b2:49:4b:0c:58:6b:44:1b:1f:08:94:ab:78: 9b:c9:95:21:fb:d1:14:51:f0:d9:2c:50:e5:92:a2: e0:e4:bb:c8:bd:d5:49:c0:d7:2b:b6:29:76:bd:73: 68:08:31:dd:f8:fe:70:cb:3b:4e:91:07:7a:b7:b9: 12:1b:1a:06:10:3b:a1:4c:01:32:5d:c5:a3:a2:ef: 8b:7c:2c:1e:3c:77:47:c3:92:74:6e:47:b0:d8:e4: 6f:51:a7:b9:fa:d0:b7:e5:fa:f1:52:2e:8a:0f:21: e4:d1:65:63:8f:15:57:7d:65:02:ee:66:87:20:fa: 1d:5d:73:27:fd:5e:a6:45:15:9d:af:9e:3e:f8:2f: 68:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C4:40:55:D8:23:BB:7F:A2:3D:CF:46:44:32:D5:F2:F3:6C:DC:BC X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33372e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.37.0/24 Signature Algorithm: sha256WithRSAEncryption d2:e3:0a:a8:63:2b:f0:a5:d0:15:3d:8f:82:1e:97:21:9d:0e: 00:59:9b:4c:31:98:d7:8c:d3:c4:b6:56:69:17:29:4b:87:6d: 5e:9c:f7:ff:e5:63:96:9d:c1:13:15:ae:13:4f:db:82:ff:7e: 8b:7a:7d:4d:93:c2:23:99:f8:59:5e:80:50:1c:2e:64:8e:d0: 95:f4:70:eb:f9:44:25:c0:f8:e3:c3:43:b6:7f:aa:c4:b1:ca: 6a:0d:0d:4c:65:e4:14:c0:32:23:e7:d4:68:6c:e8:96:94:56: 0c:1b:24:c3:b5:ae:fc:27:57:6d:96:83:b3:8f:a0:fe:cf:d0: 3c:f2:37:00:cd:35:7c:7e:4c:8f:fd:cb:6b:f7:7b:a5:21:13: a4:e8:7d:74:81:9f:31:fa:04:ac:47:5c:99:81:b3:9b:c9:ed: 8e:8c:d6:6f:9b:af:a8:a1:93:e2:fc:36:47:b5:d6:e2:2b:d0: 9b:a2:fd:cf:86:60:57:8c:49:cf:f0:0d:67:46:5b:fb:7b:0e: 21:2c:06:45:d2:29:a4:b6:e1:77:ad:ce:55:56:ab:ae:7f:d6: 6f:7f:8b:c1:75:24:d8:d1:fd:83:50:d7:32:3e:3d:43:d9:13: a5:82:08:78:75:ff:97:c3:fe:a9:84:73:94:02:46:80:34:9c: a6:c1:cf:e5 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUPCrZ+dB/Gvt5edvcoXIAZLqTjKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzZaFw0yNjExMjcxMTQ5MzZaMDMxMTAvBgNV BAMTKEE2QzQ0MDU1RDgyM0JCN0ZBMjNEQ0Y0NjQ0MzJENUYyRjM2Q0RDQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsLsNrTy88IQ6HGKG/CV3KvrAh AJEg9G+bPl7gRjNBpHDoTvXe7x6Ot98hBcXM8KI2J/1pZKbCMQghpQhZsKv2yuBt VerO3F6tSbcSl+6wIWv3S2VMitE9heMTjWP9BBydv5NHggNE++JsNueyjFgcWK6l SGho4tLLsklLDFhrRBsfCJSreJvJlSH70RRR8NksUOWSouDku8i91UnA1yu2KXa9 c2gIMd34/nDLO06RB3q3uRIbGgYQO6FMATJdxaOi74t8LB48d0fDknRuR7DY5G9R p7n60Lfl+vFSLooPIeTRZWOPFVd9ZQLuZocg+h1dcyf9XqZFFZ2vnj74L2hFAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUpsRAVdgju3+iPc9GRDLV8vNs3LwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzMz NzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAI6JTANBgkqhkiG9w0BAQsFAAOCAQEA0uMKqGMr8KXQFT2Pgh6XIZ0OAFmbTDGY 14zTxLZWaRcpS4dtXpz3/+Vjlp3BExWuE0/bgv9+i3p9TZPCI5n4WV6AUBwuZI7Q lfRw6/lEJcD448NDtn+qxLHKag0NTGXkFMAyI+fUaGzolpRWDBskw7Wu/CdXbZaD s4+g/s/QPPI3AM01fH5Mj/3La/d7pSETpOh9dIGfMfoErEdcmYGzm8ntjozWb5uv qKGT4vw2R7XW4ivQm6L9z4ZgV4xJz/ANZ0Zb+3sOISwGRdIppLbhd63OVVarrn/W b3+LwXUk2NH9g1DXMj49Q9kTpYIIeHX/l8P+qYRzlAJGgDScpsHP5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:46 2025 by rpki-client