This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37342e302f32342d3234203d3e20313336373837.roa File: 322e35382e37342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: PAQ9GiOo2S5fysW1T2g8bCh7JtkBVn7ffssvSNFQZ8s= Subject key identifier: 6E:F1:14:5C:AD:BA:76:18:A0:B7:57:81:D4:0B:C4:EB:97:40:F4:37 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6ACC7F3515817F8E4B339216F9433B8396BEACD1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:31 +0000 ROA not before: Fri 28 Nov 2025 11:44:31 +0000 ROA not after: Fri 27 Nov 2026 11:49:31 +0000 asID: 136787 IP address blocks: 2.58.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:cc:7f:35:15:81:7f:8e:4b:33:92:16:f9:43:3b:83:96:be:ac:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:31 2025 GMT Not After : Nov 27 11:49:31 2026 GMT Subject: CN=6EF1145CADBA7618A0B75781D40BC4EB9740F437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c5:99:30:cb:51:c0:c0:98:73:b1:b8:da:1c: 23:21:31:7e:f4:b8:98:dd:b2:f6:39:46:1c:a3:28: 78:52:c2:a8:a2:4c:42:33:59:82:6e:b3:97:2e:97: a3:c5:47:d7:82:a8:5e:d6:49:7e:58:05:0b:a8:df: 0c:d3:be:76:44:4c:c9:57:92:3d:61:1c:fc:2d:26: c0:87:ee:e6:ff:87:dc:f6:cc:2a:2b:19:a8:22:25: 19:b3:43:46:ff:a9:b6:01:0d:7e:9d:70:88:b3:89: 38:b1:2f:85:65:79:85:28:2f:68:fd:a9:c8:d2:6c: fa:2e:be:7c:f8:40:66:49:bb:60:1d:ea:3a:45:7e: ae:f6:e8:53:62:f5:53:2d:c8:5a:70:2f:24:74:e4: df:35:9a:a8:9b:be:6c:29:5c:a0:44:11:af:36:4c: 8d:ea:c8:21:69:73:07:b6:93:ce:87:de:91:d2:48: d0:7e:1a:bb:67:62:8f:b5:84:49:dc:7d:b9:04:5d: 92:1a:82:8a:c1:23:0c:18:b8:ae:3d:e2:27:be:6a: 23:dc:11:ae:51:23:6e:74:26:62:31:6e:65:fe:37: f9:f1:56:cf:90:9b:2e:d5:c1:8c:32:53:05:35:83: a1:1b:e7:4b:9d:a2:2c:39:03:4a:25:bb:aa:fb:3f: b5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F1:14:5C:AD:BA:76:18:A0:B7:57:81:D4:0B:C4:EB:97:40:F4:37 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.74.0/24 Signature Algorithm: sha256WithRSAEncryption 31:0d:90:e2:30:df:fa:5a:1b:5a:c1:47:8e:01:40:2d:42:45: 5d:55:ab:0a:0d:aa:76:a5:13:39:ec:30:e7:54:74:4d:05:2f: 94:a9:20:6d:f8:35:13:12:c0:0e:20:fd:c6:54:12:5c:be:99: d3:65:d2:a9:76:20:7c:78:34:72:dd:df:cf:3d:ec:a9:62:5d: 6b:ac:29:b1:f8:ce:f5:e0:d4:23:5c:2c:b0:51:e8:80:af:85: 6f:06:d2:01:cd:4c:e0:31:49:1f:b5:bf:61:d9:71:78:82:50: a9:c6:6a:e3:92:1e:c9:c8:a4:81:0a:7d:d0:b7:74:cc:97:08: 99:64:34:b0:b1:3d:24:88:5d:56:a0:09:39:ea:c8:07:87:ff: d3:3c:eb:b3:dd:88:00:20:70:f1:0f:6f:d5:38:c1:a4:10:98: 50:c0:bc:cf:87:f1:2d:17:73:13:a2:50:db:69:2c:66:a7:8a: f6:c2:da:37:04:c1:32:72:36:cc:01:73:90:2d:70:f1:47:d2: b3:79:72:3d:4d:2a:86:08:08:00:2a:f1:21:16:77:16:10:51: 20:d6:e3:89:50:7a:d1:ee:93:7d:8d:b2:79:37:8d:50:91:f2: b6:2c:38:ed:73:ae:ae:de:41:19:93:60:fc:cf:cf:2c:88:6c: ef:02:d9:33 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUasx/NRWBf45LM5IW+UM7g5a+rNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzFaFw0yNjExMjcxMTQ5MzFaMDMxMTAvBgNV BAMTKDZFRjExNDVDQURCQTc2MThBMEI3NTc4MUQ0MEJDNEVCOTc0MEY0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNxZkwy1HAwJhzsbjaHCMhMX70 uJjdsvY5RhyjKHhSwqiiTEIzWYJus5cul6PFR9eCqF7WSX5YBQuo3wzTvnZETMlX kj1hHPwtJsCH7ub/h9z2zCorGagiJRmzQ0b/qbYBDX6dcIiziTixL4VleYUoL2j9 qcjSbPouvnz4QGZJu2Ad6jpFfq726FNi9VMtyFpwLyR05N81mqibvmwpXKBEEa82 TI3qyCFpcwe2k86H3pHSSNB+GrtnYo+1hEncfbkEXZIagorBIwwYuK494ie+aiPc Ea5RI250JmIxbmX+N/nxVs+Qmy7VwYwyUwU1g6Eb50udoiw5A0olu6r7P7VZAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUbvEUXK26dhigt1eB1AvE65dA9DcwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzcz NDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNjM3MzgzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAI6SjANBgkqhkiG9w0BAQsFAAOCAQEAMQ2Q4jDf+lobWsFHjgFALUJFXVWrCg2q dqUTOeww51R0TQUvlKkgbfg1ExLADiD9xlQSXL6Z02XSqXYgfHg0ct3fzz3sqWJd a6wpsfjO9eDUI1wssFHogK+FbwbSAc1M4DFJH7W/YdlxeIJQqcZq45IeycikgQp9 0Ld0zJcImWQ0sLE9JIhdVqAJOerIB4f/0zzrs92IACBw8Q9v1TjBpBCYUMC8z4fx LRdzE6JQ22ksZqeK9sLaNwTBMnI2zAFzkC1w8UfSs3lyPU0qhggIACrxIRZ3FhBR INbjiVB60e6TfY2yeTeNUJHytiw47XOurt5BGZNg/M/PLIhs7wLZMw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:14 2025 by rpki-client