This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa File: 322e35382e38302e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: hWYhmUxq8YWIW5d3L6vYvYrIBoBaPPpiyX0rCFbqULE= Subject key identifier: E0:BE:ED:40:10:B7:B2:41:D2:BC:FE:6A:04:80:6B:9F:DC:54:28:1A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4E4B433701E908E6522A25F2E45B498638296D5F Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 51167 IP address blocks: 2.58.80.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:4b:43:37:01:e9:08:e6:52:2a:25:f2:e4:5b:49:86:38:29:6d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=E0BEED4010B7B241D2BCFE6A04806B9FDC54281A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b7:87:94:2d:ed:43:13:4a:82:4f:37:7c:f7: ba:09:3f:e8:f8:3d:eb:e7:b3:89:65:6b:5e:00:c8: fe:5c:f6:5a:58:f1:ae:03:97:86:df:8b:98:ec:ec: c4:e9:98:f1:89:4c:ec:06:c5:d9:e3:2b:6c:b3:0d: d9:c7:1b:05:de:b4:34:8f:fa:6e:4c:8e:4e:39:c9: 6a:89:67:93:a0:fd:33:03:3e:0d:38:21:5c:60:26: d1:16:f8:da:1e:26:1e:15:78:c4:2e:79:e1:7d:e0: 9c:aa:68:7e:32:dc:a8:d0:d4:c4:5c:c5:86:0d:3a: 8b:27:bc:70:86:59:3a:64:88:af:78:63:98:f0:8f: 6c:fa:8b:e2:8d:b7:69:dd:4d:24:33:60:f8:3d:45: ec:e5:6a:ae:f3:d9:88:24:88:43:1d:89:a3:07:82: 16:5b:96:08:d4:4d:c5:8b:55:ba:c1:5e:94:84:f0: a8:db:b3:2b:6e:8d:db:36:bf:f9:e0:cb:8a:53:f2: 6c:4f:64:49:c1:00:ba:80:0a:e3:6b:dd:f8:48:9f: c4:fb:5e:5b:1d:b8:11:57:f8:fe:44:7b:37:0b:64: cf:3c:ef:2f:72:d0:d0:2d:8a:78:bb:15:1c:8d:cd: 84:c6:2e:ea:a1:93:ce:a4:0e:d4:b0:72:20:ed:42: 95:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BE:ED:40:10:B7:B2:41:D2:BC:FE:6A:04:80:6B:9F:DC:54:28:1A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38302e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.80.0/23 Signature Algorithm: sha256WithRSAEncryption 85:fd:72:53:51:23:c8:6e:6e:f0:cd:fc:97:b0:62:dc:27:53: dd:a6:6a:a0:3c:e4:75:41:69:cd:05:39:14:3f:39:19:65:f9: 3b:e9:83:47:5e:eb:84:e1:60:c5:95:ff:a7:4b:76:72:05:1c: 41:55:9e:2f:dc:21:a5:77:ed:1a:51:38:c6:e8:5a:67:91:b8: 24:9f:da:04:e9:b1:c7:f3:05:35:6e:e8:e5:e0:56:5b:16:b6: 67:d5:18:51:64:1a:c4:9e:ab:2b:d3:73:a3:d2:bb:0a:f5:9e: 40:3e:0e:68:70:cc:9d:64:cb:82:52:51:2c:3a:3d:05:30:ec: 97:84:e9:70:f3:85:1d:41:cd:e5:d3:2a:c2:b1:7b:0a:47:b3: 61:0d:ba:24:20:3f:56:1e:10:ed:64:87:98:c0:8c:1f:c2:58: 8d:d8:5b:a0:89:a5:de:9d:ff:f9:b4:3f:ab:e6:59:84:79:94: b4:91:16:af:7a:c6:ee:cf:6d:a4:47:13:08:83:1e:63:a4:db: 4c:68:e0:fb:47:a3:09:c5:1f:ce:d6:35:73:63:4f:ab:95:bc: cc:02:d8:7e:7f:c6:27:f6:34:0a:8f:d7:66:47:7a:13:31:74: 45:ec:a9:f1:49:eb:35:b1:7c:8f:6c:87:f7:14:9a:aa:f6:d3: e0:96:89:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTktDNwHpCOZSKiXy5FtJhjgpbV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKEUwQkVFRDQwMTBCN0IyNDFEMkJDRkU2QTA0ODA2QjlGREM1NDI4MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8t4eULe1DE0qCTzd897oJP+j4 Pevns4lla14AyP5c9lpY8a4Dl4bfi5js7MTpmPGJTOwGxdnjK2yzDdnHGwXetDSP +m5Mjk45yWqJZ5Og/TMDPg04IVxgJtEW+NoeJh4VeMQueeF94JyqaH4y3KjQ1MRc xYYNOosnvHCGWTpkiK94Y5jwj2z6i+KNt2ndTSQzYPg9Rezlaq7z2YgkiEMdiaMH ghZblgjUTcWLVbrBXpSE8Kjbsytujds2v/ngy4pT8mxPZEnBALqACuNr3fhIn8T7 XlsduBFX+P5EezcLZM887y9y0NAtini7FRyNzYTGLuqhk86kDtSwciDtQpW3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4L7tQBC3skHSvP5qBIBrn9xUKBowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzgz MDJlMzAyZjMyMzMyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEC OlAwDQYJKoZIhvcNAQELBQADggEBAIX9clNRI8hubvDN/JewYtwnU92maqA85HVB ac0FORQ/ORll+Tvpg0de64ThYMWV/6dLdnIFHEFVni/cIaV37RpROMboWmeRuCSf 2gTpscfzBTVu6OXgVlsWtmfVGFFkGsSeqyvTc6PSuwr1nkA+DmhwzJ1ky4JSUSw6 PQUw7JeE6XDzhR1BzeXTKsKxewpHs2ENuiQgP1YeEO1kh5jAjB/CWI3YW6CJpd6d //m0P6vmWYR5lLSRFq96xu7PbaRHEwiDHmOk20xo4PtHownFH87WNXNjT6uVvMwC 2H5/xif2NAqP12ZHehMxdEXsqfFJ6zWxfI9sh/cUmqr20+CWiZQ= -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:28 2025 by rpki-client