This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37322e302f32342d3234203d3e203632323430.roa File: 322e35382e37322e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: 8vnE/QqptyI1ezG+TWWMKR/f8Lh9vU4DN/5FXy2xxsA= Subject key identifier: 5A:9E:40:D5:7D:F1:36:51:18:16:77:21:06:29:FE:ED:CF:88:9C:FF Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 42B77972F68DFACD700403CACF3277F4D9F3CA23 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37322e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:42 +0000 ROA not before: Fri 28 Nov 2025 11:44:42 +0000 ROA not after: Fri 27 Nov 2026 11:49:42 +0000 asID: 62240 IP address blocks: 2.58.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:b7:79:72:f6:8d:fa:cd:70:04:03:ca:cf:32:77:f4:d9:f3:ca:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:42 2025 GMT Not After : Nov 27 11:49:42 2026 GMT Subject: CN=5A9E40D57DF13651181677210629FEEDCF889CFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:7e:9e:39:d5:2c:0b:0e:27:6f:fa:4a:2f:4d: 35:6b:fd:43:6c:21:10:e0:c5:f4:5c:f3:1b:00:eb: b6:4f:18:9d:1c:da:2f:a6:de:1a:77:14:d1:45:e6: 3c:e3:2b:6c:e3:61:98:d0:2b:9c:da:6f:97:02:5d: 81:55:ca:f7:7c:3a:42:5b:9c:fe:66:7c:8b:3c:bc: ff:45:43:15:43:e0:62:a4:a1:10:c6:71:90:83:03: 7b:2e:36:e8:ff:c7:e2:38:66:6a:10:c7:4d:ab:80: 48:65:87:71:16:57:73:b9:ad:4e:2d:20:17:2f:a2: 8d:3d:ce:7e:9c:f2:3e:77:af:d9:b2:95:f0:c0:13: ee:7a:10:c4:67:1f:35:c6:a6:07:1e:f0:9d:aa:e7: 7b:3d:a1:86:5f:e3:ae:39:77:e1:c0:e9:6b:40:b1: d1:c3:90:8b:15:70:62:c9:03:cb:9a:38:02:e9:04: 84:c1:e7:42:bd:28:39:7a:f5:37:03:c5:2a:31:5a: ee:4f:00:fd:da:52:7d:72:a4:09:4b:76:b1:7d:44: 4c:c2:99:5f:91:23:3e:54:ce:b2:d9:22:12:fd:de: c8:fa:85:e5:62:10:bc:bb:80:51:d1:ca:cd:67:44: f9:72:9d:35:7a:29:c2:64:ea:13:f1:5e:dc:d2:a0: 53:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:9E:40:D5:7D:F1:36:51:18:16:77:21:06:29:FE:ED:CF:88:9C:FF X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37322e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.72.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:b7:7e:2c:b5:15:e1:6b:19:e6:be:b7:61:5e:d3:18:4e:76: 97:81:97:aa:85:93:5e:7f:e1:d5:df:e5:d9:66:4d:03:5d:08: 9b:e1:ca:b6:b9:a2:21:6e:d6:1e:0a:b6:e2:3d:22:90:2c:ec: 80:f2:04:92:d3:be:38:a8:d0:f2:41:ae:f2:ff:e0:c6:49:24: c5:31:6d:8d:ca:70:a6:eb:b1:ce:42:51:b7:66:fd:9d:61:00: ce:e5:38:a9:01:9f:7a:1e:6d:61:95:a0:8f:74:31:fe:3c:75: d6:82:6f:cf:d7:29:38:06:33:24:99:46:07:1d:03:7e:1a:44: 44:b5:52:5f:db:25:34:7b:40:06:e5:63:c9:42:ca:bc:5f:4e: da:46:36:b3:0d:39:4e:74:5a:9c:71:aa:2c:31:b7:a8:5b:8a: 87:ad:7b:cc:31:ae:48:96:f5:f7:81:0d:ff:e5:22:f2:6a:ce: 2d:1a:91:08:e0:a8:f3:7d:e5:2e:4d:32:3c:70:f0:22:15:3e: 66:4e:1d:8d:62:86:79:0a:c6:3e:d7:65:cd:99:66:da:46:c0: 6c:30:64:6b:12:7b:1b:d0:6f:01:e7:f4:30:04:cd:11:8f:3b: ac:a7:cf:a9:cd:21:0f:43:cd:39:ea:a7:6a:7c:33:23:f7:72: 69:75:e4:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQrd5cvaN+s1wBAPKzzJ39NnzyiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDJaFw0yNjExMjcxMTQ5NDJaMDMxMTAvBgNV BAMTKDVBOUU0MEQ1N0RGMTM2NTExODE2NzcyMTA2MjlGRUVEQ0Y4ODlDRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpfp451SwLDidv+kovTTVr/UNs IRDgxfRc8xsA67ZPGJ0c2i+m3hp3FNFF5jzjK2zjYZjQK5zab5cCXYFVyvd8OkJb nP5mfIs8vP9FQxVD4GKkoRDGcZCDA3suNuj/x+I4ZmoQx02rgEhlh3EWV3O5rU4t IBcvoo09zn6c8j53r9mylfDAE+56EMRnHzXGpgce8J2q53s9oYZf4645d+HA6WtA sdHDkIsVcGLJA8uaOALpBITB50K9KDl69TcDxSoxWu5PAP3aUn1ypAlLdrF9REzC mV+RIz5UzrLZIhL93sj6heViELy7gFHRys1nRPlynTV6KcJk6hPxXtzSoFN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWp5A1X3xNlEYFnchBin+7c+InP8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzcz MjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAC OkgwDQYJKoZIhvcNAQELBQADggEBAA+3fiy1FeFrGea+t2Fe0xhOdpeBl6qFk15/ 4dXf5dlmTQNdCJvhyra5oiFu1h4KtuI9IpAs7IDyBJLTvjio0PJBrvL/4MZJJMUx bY3KcKbrsc5CUbdm/Z1hAM7lOKkBn3oebWGVoI90Mf48ddaCb8/XKTgGMySZRgcd A34aRES1Ul/bJTR7QAblY8lCyrxfTtpGNrMNOU50Wpxxqiwxt6hbioete8wxrkiW 9feBDf/lIvJqzi0akQjgqPN95S5NMjxw8CIVPmZOHY1ihnkKxj7XZc2ZZtpGwGww ZGsSexvQbwHn9DAEzRGPO6ynz6nNIQ9DzTnqp2p8MyP3cml15LI= -----END CERTIFICATE-----Generated at Sat Dec 6 13:06:28 2025 by rpki-client