This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38322e302f32342d3332203d3e203531313637.roa File: 322e35382e38322e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: DmRZo6JgdWENJ+Ufi40Mj7PLe3Ro9RFECNnv/Pb0zAk= Subject key identifier: F2:7D:4A:A3:87:EB:4B:21:3B:3E:B2:6B:D1:C3:E3:93:81:33:B5:B0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4B6CF6B7418C9E2DF099B6D9D8EB5651F79DDCDA Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38322e302f32342d3332203d3e203531313637.roa Signing time: Fri 21 Nov 2025 15:48:58 +0000 ROA not before: Fri 21 Nov 2025 15:43:58 +0000 ROA not after: Fri 20 Nov 2026 15:48:58 +0000 asID: 51167 IP address blocks: 2.58.82.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6c:f6:b7:41:8c:9e:2d:f0:99:b6:d9:d8:eb:56:51:f7:9d:dc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:43:58 2025 GMT Not After : Nov 20 15:48:58 2026 GMT Subject: CN=F27D4AA387EB4B213B3EB26BD1C3E3938133B5B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:3a:e4:56:60:b2:40:d4:76:0c:0e:62:12: c4:06:15:34:07:1f:7d:69:c5:11:f0:04:0d:42:97: 50:e4:49:f9:f8:f6:22:62:82:35:32:0b:c2:5b:b4: 9b:71:4e:13:04:fa:df:72:20:90:30:d1:0d:14:51: af:50:09:24:a5:c0:2c:12:be:5f:d1:de:71:79:19: a9:77:b1:61:d9:68:d9:c8:4b:49:ba:20:da:05:3c: f1:76:d6:4b:a7:36:e3:7b:00:21:1e:0b:7c:fd:1f: 02:51:dd:02:b0:f0:08:b4:06:9b:3d:d3:5d:e9:ec: ea:51:9a:9f:4e:15:2b:0a:ba:40:03:a0:df:60:b2: b6:ef:75:69:87:dd:68:07:65:60:89:ae:4c:81:ba: a0:60:a9:02:12:56:5d:ba:e2:72:bd:78:66:d8:b7: e0:9e:40:2a:9c:f6:20:c1:05:cb:3c:ea:dd:78:78: fe:21:83:1b:90:a1:ea:80:10:73:dc:68:d9:81:c2: 1a:13:11:96:a2:4c:bb:0c:4b:8d:59:47:97:4f:b4: 24:54:dc:27:64:49:64:ee:ea:38:3f:80:9d:e3:aa: df:37:89:b2:77:32:db:6a:13:a0:35:47:fc:96:c7: f7:6c:44:b3:d8:ab:a8:1f:05:91:82:80:06:55:1c: cc:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:7D:4A:A3:87:EB:4B:21:3B:3E:B2:6B:D1:C3:E3:93:81:33:B5:B0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e38322e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.82.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:92:65:2e:9e:a9:aa:73:4e:0a:8d:64:cf:df:0f:1c:64:cd: 0e:97:fb:62:43:d5:79:ae:56:5d:c8:a4:e3:4c:00:4c:79:97: c7:d9:67:2e:32:dd:ff:fd:f7:35:cb:c1:5f:57:89:b7:40:00: a9:8e:5a:d9:f8:da:7d:a8:2b:37:a1:88:0b:2c:01:71:d1:f5: cd:13:d7:b3:a6:a3:1f:f6:cc:4b:28:65:09:e3:59:1e:bf:f9: 97:49:37:17:58:e8:21:cd:88:08:bd:c2:c6:49:74:cd:5b:0a: 2a:99:28:5f:88:72:f6:72:28:ac:12:a3:58:4c:3b:0f:01:44: 01:5b:e3:d3:80:88:9c:84:2d:45:ba:10:bc:68:e2:41:3b:18: fa:d6:46:94:e1:64:59:09:fc:31:57:7f:6c:a9:c3:dc:8b:02: 0e:e0:2f:eb:1c:5a:3c:a3:0f:96:6b:5d:30:c4:33:a5:57:99: 28:b0:f3:b0:99:7d:dd:ee:6e:f4:4d:09:a3:39:e9:b4:56:5c: f4:9e:a5:17:35:c1:ba:e5:2d:4e:9e:19:b2:23:2d:c0:b7:e2: 45:a4:61:4b:44:15:e1:da:93:d1:7b:8e:a5:a8:6e:e9:eb:7b: 3a:a6:0a:72:7a:66:b2:f2:8b:94:18:43:f8:ae:b3:41:78:70: 06:90:2f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS2z2t0GMni3wmbbZ2OtWUfed3NowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQzNThaFw0yNjExMjAxNTQ4NThaMDMxMTAvBgNV BAMTKEYyN0Q0QUEzODdFQjRCMjEzQjNFQjI2QkQxQzNFMzkzODEzM0I1QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8zrkVmCyQNR2DA5iEsQGFTQH H31pxRHwBA1Cl1DkSfn49iJigjUyC8JbtJtxThME+t9yIJAw0Q0UUa9QCSSlwCwS vl/R3nF5Gal3sWHZaNnIS0m6INoFPPF21kunNuN7ACEeC3z9HwJR3QKw8Ai0Bps9 013p7OpRmp9OFSsKukADoN9gsrbvdWmH3WgHZWCJrkyBuqBgqQISVl264nK9eGbY t+CeQCqc9iDBBcs86t14eP4hgxuQoeqAEHPcaNmBwhoTEZaiTLsMS41ZR5dPtCRU 3CdkSWTu6jg/gJ3jqt83ibJ3MttqE6A1R/yWx/dsRLPYq6gfBZGCgAZVHMwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8n1Ko4frSyE7PrJr0cPjk4EztbAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzgz MjJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1MzEzMTM2Mzcucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAC OlIwDQYJKoZIhvcNAQELBQADggEBAE2SZS6eqapzTgqNZM/fDxxkzQ6X+2JD1Xmu Vl3IpONMAEx5l8fZZy4y3f/99zXLwV9XibdAAKmOWtn42n2oKzehiAssAXHR9c0T 17Omox/2zEsoZQnjWR6/+ZdJNxdY6CHNiAi9wsZJdM1bCiqZKF+IcvZyKKwSo1hM Ow8BRAFb49OAiJyELUW6ELxo4kE7GPrWRpThZFkJ/DFXf2ypw9yLAg7gL+scWjyj D5ZrXTDEM6VXmSiw87CZfd3ubvRNCaM56bRWXPSepRc1wbrlLU6eGbIjLcC34kWk YUtEFeHak9F7jqWobunrezqmCnJ6ZrLyi5QYQ/ius0F4cAaQLzc= -----END CERTIFICATE-----Generated at Sat Dec 6 18:43:34 2025 by rpki-client