This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa File: 36322e3230342e34352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: yzZ2s/Gu97b+b/uXYrp2klBn4/FRnHICISiV+JtpQQk= Subject key identifier: F0:65:DD:4C:BC:33:47:67:50:72:38:37:EA:3B:97:D7:B6:D7:5D:A1 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3443C205FCA417994873C8AB0CA1D2B585BBF2B0 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:47 +0000 ROA not before: Fri 28 Nov 2025 11:44:47 +0000 ROA not after: Fri 27 Nov 2026 11:49:47 +0000 asID: 136787 IP address blocks: 62.204.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:43:c2:05:fc:a4:17:99:48:73:c8:ab:0c:a1:d2:b5:85:bb:f2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:47 2025 GMT Not After : Nov 27 11:49:47 2026 GMT Subject: CN=F065DD4CBC33476750723837EA3B97D7B6D75DA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:d7:d1:5d:14:ab:c2:41:68:16:48:60:41: 75:08:0b:28:d3:61:23:45:4e:4b:43:73:1d:fc:eb: 56:e6:c7:7c:e5:a9:e7:65:6d:07:fe:90:31:c9:bd: 23:b0:6b:20:d3:f0:11:85:65:af:ef:11:99:73:20: 16:d5:e5:b2:88:44:cd:26:ed:66:78:2a:83:9c:e1: 2e:8d:c5:f0:c8:b5:3e:6b:d6:27:b5:80:c4:22:c4: c7:7f:3f:c6:37:75:96:2e:fd:01:16:79:31:be:bf: cd:03:7d:cf:2e:ab:cb:e9:b3:7b:51:89:a5:86:5c: 57:8f:ba:51:33:44:22:4d:85:f6:11:57:c8:e7:bf: 10:6d:5a:bd:86:27:5b:43:4d:b5:3b:77:b5:59:d8: e4:18:44:4d:11:bd:1b:67:3d:ce:69:bc:0d:38:7b: 67:68:b6:33:93:2e:ec:3d:7a:31:e6:d0:0e:ed:e0: c6:19:b2:66:18:97:26:5b:b8:b2:b2:ee:01:11:d2: c1:15:aa:69:4c:1b:c1:2e:94:13:9a:dc:dd:8c:39: 17:58:c2:f6:fa:6f:1a:82:7f:2a:81:5a:58:db:c3: a8:37:d6:b3:8e:1a:e2:be:84:01:85:27:ec:5e:23: 9a:c4:a5:a5:e8:3e:e7:26:e8:b4:bf:eb:00:fb:e4: 43:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:65:DD:4C:BC:33:47:67:50:72:38:37:EA:3B:97:D7:B6:D7:5D:A1 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e3230342e34352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.204.45.0/24 Signature Algorithm: sha256WithRSAEncryption 90:03:3f:e8:40:55:fe:40:88:56:00:ad:72:e7:3a:39:90:d8: a9:c9:be:09:12:37:84:da:77:28:98:c4:90:d5:7f:6c:7f:0b: dd:1a:10:c5:5f:8e:9c:6e:61:b7:66:31:29:45:c5:b0:60:3b: 7c:16:00:50:6f:d8:fd:42:ab:1c:5d:cc:23:b4:d0:7e:31:1e: 23:00:89:9b:19:c0:75:bc:19:b3:28:9c:d5:c6:00:be:b4:39: de:99:ac:a1:6c:57:62:2f:99:63:30:6a:97:76:8e:38:2f:62: d1:76:a7:fd:7c:6c:d5:84:10:de:81:30:42:c6:c9:af:c9:45: dc:cb:18:71:c7:f2:60:8d:a9:46:7f:5f:fa:4e:db:1c:ea:31: 9b:fe:08:c3:97:93:30:fb:dd:bb:40:90:54:11:a3:40:58:a3: 82:e9:2e:2d:ed:a6:9e:dc:75:7d:30:bf:cf:8e:2f:a8:20:ad: ab:ce:17:0b:d7:d1:32:65:4f:11:ea:f1:53:c7:b0:f8:d4:e0: 38:74:c0:63:b1:0a:8b:36:02:2d:b2:67:14:df:3a:4f:59:cb: 4d:11:cf:ff:e6:3f:8d:1b:00:a3:db:57:c3:5a:a1:27:55:80: 06:f1:7d:22:28:15:d6:fe:1d:3f:77:eb:07:e9:72:11:a6:a6: 0a:d7:1f:11 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUNEPCBfykF5lIc8irDKHStYW78rAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDdaFw0yNjExMjcxMTQ5NDdaMDMxMTAvBgNV BAMTKEYwNjVERDRDQkMzMzQ3Njc1MDcyMzgzN0VBM0I5N0Q3QjZENzVEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qNfRXRSrwkFoFkhgQXUICyjT YSNFTktDcx3861bmx3zlqedlbQf+kDHJvSOwayDT8BGFZa/vEZlzIBbV5bKIRM0m 7WZ4KoOc4S6NxfDItT5r1ie1gMQixMd/P8Y3dZYu/QEWeTG+v80Dfc8uq8vps3tR iaWGXFePulEzRCJNhfYRV8jnvxBtWr2GJ1tDTbU7d7VZ2OQYRE0RvRtnPc5pvA04 e2dotjOTLuw9ejHm0A7t4MYZsmYYlyZbuLKy7gER0sEVqmlMG8EulBOa3N2MORdY wvb6bxqCfyqBWljbw6g31rOOGuK+hAGFJ+xeI5rEpaXoPucm6LS/6wD75EPFAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU8GXdTLwzR2dQcjg36juX17bXXaEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNjMyMmUzMjMwMzQy ZTM0MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAA+zC0wDQYJKoZIhvcNAQELBQADggEBAJADP+hAVf5AiFYArXLnOjmQ2KnJ vgkSN4TadyiYxJDVf2x/C90aEMVfjpxuYbdmMSlFxbBgO3wWAFBv2P1CqxxdzCO0 0H4xHiMAiZsZwHW8GbMonNXGAL60Od6ZrKFsV2IvmWMwapd2jjgvYtF2p/18bNWE EN6BMELGya/JRdzLGHHH8mCNqUZ/X/pO2xzqMZv+CMOXkzD73btAkFQRo0BYo4Lp Li3tpp7cdX0wv8+OL6ggravOFwvX0TJlTxHq8VPHsPjU4Dh0wGOxCos2Ai2yZxTf Ok9Zy00Rz//mP40bAKPbV8NaoSdVgAbxfSIoFdb+HT936wfpchGmpgrXHxE= -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:22 2025 by rpki-client