This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33392e302f32342d3234203d3e20313336373837.roa File: 322e35382e33392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: kc8OGfbcpnGRZxYiIc60NC/IzotmIGTfxA81ZDpdWbY= Subject key identifier: 27:4D:DD:21:3D:A8:25:B9:30:B8:2C:18:4E:3A:6C:64:02:CF:F5:C3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 269D2D7C1AA29BF1BDD019914318E7EF8E21FEAD Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:21 +0000 ROA not before: Fri 28 Nov 2025 11:44:21 +0000 ROA not after: Fri 27 Nov 2026 11:49:21 +0000 asID: 136787 IP address blocks: 2.58.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:9d:2d:7c:1a:a2:9b:f1:bd:d0:19:91:43:18:e7:ef:8e:21:fe:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:21 2025 GMT Not After : Nov 27 11:49:21 2026 GMT Subject: CN=274DDD213DA825B930B82C184E3A6C6402CFF5C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5d:e9:09:5d:b3:ce:dd:18:b4:f8:43:ab:7f: 6b:df:16:15:07:ac:c6:64:b1:48:50:6f:d9:fd:44: 09:3c:30:3e:a8:24:52:0f:fb:c5:d7:82:83:0a:1a: f5:c3:c7:5e:c5:0d:e1:73:a5:5d:3c:09:e3:ee:4a: 98:be:5f:a5:5c:f6:7d:a9:43:f9:b5:3f:62:3f:66: 5e:5f:7a:16:c2:81:52:bd:70:16:91:a7:ee:69:84: 7f:95:c1:0d:c7:33:03:6c:60:1e:b3:9e:02:65:81: 4b:2a:25:01:2d:31:3d:80:c0:58:a8:c2:26:17:c8: ea:58:2c:68:a6:bc:f1:fc:91:43:3b:fd:7f:90:62: e4:73:29:7b:21:44:d5:72:e1:04:62:57:2b:16:c1: 22:20:12:b1:5a:63:ae:6f:7c:39:01:60:31:30:01: 66:eb:fc:81:26:5d:d0:00:2b:da:fc:de:8a:72:91: fb:9f:1c:87:cc:09:3a:14:0e:8c:ab:66:a7:d1:01: 5a:af:e5:b5:43:f6:aa:86:1b:5f:c4:97:8c:07:93: 11:fb:38:6c:f6:03:60:ed:25:76:06:df:c2:d7:36: 7a:04:ac:db:3f:50:8c:36:0a:6c:18:0b:b8:0a:76: 64:5a:7c:ec:71:33:f4:e0:9f:db:46:81:aa:35:42: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4D:DD:21:3D:A8:25:B9:30:B8:2C:18:4E:3A:6C:64:02:CF:F5:C3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e33392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.39.0/24 Signature Algorithm: sha256WithRSAEncryption 85:5c:f5:0b:ba:3a:8a:01:c1:77:16:16:74:01:c7:a7:0a:c0: e6:5d:86:cd:dd:a2:58:79:63:4c:bc:5c:73:09:aa:15:93:16: d4:77:58:9e:51:13:44:b1:6e:e0:a1:17:9e:24:73:02:8c:5d: b3:b1:25:ec:23:e2:92:03:81:61:57:e0:14:c7:00:47:30:83: a3:fb:86:eb:60:ec:8c:9a:55:45:5c:52:2a:6d:de:0a:df:aa: 3a:b1:d7:ff:c7:7a:8b:bb:2c:5c:b1:1c:e8:d2:3e:94:f6:44: 27:94:37:d3:a3:92:5b:d9:ba:9c:23:29:81:09:b1:dc:61:1f: 9c:55:60:08:f9:61:bf:39:06:e4:2b:b3:ed:ee:62:7e:34:a2: 4a:e7:25:70:00:a8:ce:ab:3c:fc:92:ce:c8:96:25:c3:ad:94: df:fd:bc:36:3a:1f:96:48:ca:15:6d:24:7e:9a:ef:8c:86:ae: 96:ec:ad:e6:07:d8:a6:47:1a:45:c1:60:49:94:45:b0:fe:ca: 0b:fc:da:42:82:f1:ad:50:b7:0f:da:49:17:d1:0e:51:7e:fa: 17:b6:ce:c4:df:42:e2:2a:12:4d:af:8d:df:1c:07:50:db:43: 9a:e4:90:cc:e6:9f:de:fd:ba:6f:81:4b:c1:ab:82:24:54:c8: 81:ff:31:a6 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUJp0tfBqim/G90BmRQxjn744h/q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjFaFw0yNjExMjcxMTQ5MjFaMDMxMTAvBgNV BAMTKDI3NERERDIxM0RBODI1QjkzMEI4MkMxODRFM0E2QzY0MDJDRkY1QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLXekJXbPO3Ri0+EOrf2vfFhUH rMZksUhQb9n9RAk8MD6oJFIP+8XXgoMKGvXDx17FDeFzpV08CePuSpi+X6Vc9n2p Q/m1P2I/Zl5fehbCgVK9cBaRp+5phH+VwQ3HMwNsYB6zngJlgUsqJQEtMT2AwFio wiYXyOpYLGimvPH8kUM7/X+QYuRzKXshRNVy4QRiVysWwSIgErFaY65vfDkBYDEw AWbr/IEmXdAAK9r83opykfufHIfMCToUDoyrZqfRAVqv5bVD9qqGG1/El4wHkxH7 OGz2A2DtJXYG38LXNnoErNs/UIw2CmwYC7gKdmRafOxxM/Tgn9tGgao1Qrn/AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUJ03dIT2oJbkwuCwYTjpsZALP9cMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzMz OTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAI6JzANBgkqhkiG9w0BAQsFAAOCAQEAhVz1C7o6igHBdxYWdAHHpwrA5l2Gzd2i WHljTLxccwmqFZMW1HdYnlETRLFu4KEXniRzAoxds7El7CPikgOBYVfgFMcARzCD o/uG62DsjJpVRVxSKm3eCt+qOrHX/8d6i7ssXLEc6NI+lPZEJ5Q306OSW9m6nCMp gQmx3GEfnFVgCPlhvzkG5Cuz7e5ifjSiSuclcACozqs8/JLOyJYlw62U3/28Njof lkjKFW0kfprvjIauluyt5gfYpkcaRcFgSZRFsP7KC/zaQoLxrVC3D9pJF9EOUX76 F7bOxN9C4ioSTa+N3xwHUNtDmuSQzOaf3v26b4FLwauCJFTIgf8xpg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:06 2025 by rpki-client