This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa File: 36322e332e34362e302f32342d3234203d3e20323034313730.roa (raw, json) Hash identifier: eG6/8jHv18bL+/L+7D/nA25u+52Pm8se9/tD3TFryyw= Subject key identifier: 1B:03:DE:A0:FB:EA:63:13:C2:69:54:82:7F:22:C1:54:DD:A7:13:B0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4240ECA438AB0800E81089A5489ADDF96889E784 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 204170 IP address blocks: 62.3.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:40:ec:a4:38:ab:08:00:e8:10:89:a5:48:9a:dd:f9:68:89:e7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=1B03DEA0FBEA6313C26954827F22C154DDA713B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:ee:73:6e:70:86:29:01:fd:12:9b:1e:0e: 95:ce:a3:d7:93:68:a6:91:f6:f0:1d:00:b7:51:50: 21:40:68:f8:79:95:f2:d3:e5:4a:af:5c:00:22:d6: 90:f1:7a:35:29:7a:3e:7b:75:1d:4d:fc:c1:e6:e7: 96:f4:36:ee:a4:5a:83:10:ce:c0:cb:98:b5:d9:eb: 69:46:f1:93:50:1c:ea:a0:63:3a:40:1c:62:e7:e3: ae:6d:4e:d2:be:0b:b2:d0:9c:ff:4c:5b:1f:84:c7: a7:ef:59:39:56:9e:b4:3f:20:3d:dd:cc:2a:4c:42: ad:b1:80:2d:ed:6e:d7:2c:10:4d:8b:01:f9:a1:b6: 51:a9:79:3d:96:44:a6:ae:c2:ba:6b:0a:84:93:ea: 1c:0b:68:62:43:90:d3:18:7e:4c:66:64:7f:5d:bf: 96:30:6f:b2:32:dd:e3:26:9c:45:87:1a:bd:36:69: 9a:d3:ec:60:1f:02:3f:ae:fb:6b:d3:d0:11:ae:b4: d6:48:9e:1a:8e:24:d4:fb:31:66:61:68:62:22:9a: 79:92:28:73:d2:68:54:6b:4e:10:2e:e5:f2:6e:23: 50:c0:a9:c4:ee:dc:63:3f:4c:71:05:b6:d9:10:f7: b8:29:d5:66:32:91:9f:3c:83:8d:41:05:cb:6a:6d: 38:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:03:DE:A0:FB:EA:63:13:C2:69:54:82:7F:22:C1:54:DD:A7:13:B0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e34362e302f32342d3234203d3e20323034313730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.46.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:7c:cd:6d:70:a4:c2:6e:33:9c:48:56:04:64:a5:e2:70:48: ab:24:9c:f0:39:ad:88:d0:55:0f:aa:1d:ae:d8:44:8a:38:78: 87:93:b4:e0:86:90:2c:03:d5:9e:8b:3e:d4:bb:22:c2:e4:de: fa:40:6e:74:29:cc:88:a5:c8:0e:c1:6f:bf:47:6a:78:86:f9: b2:4b:07:8f:35:71:29:6d:45:04:45:15:cb:cd:a1:84:c8:d2: 1c:7d:74:af:38:87:15:61:eb:25:51:4a:c6:b0:a0:94:12:16: bb:f3:84:86:19:77:44:db:73:8a:ec:9b:b8:4a:1e:36:e3:65: cd:95:d1:06:11:a2:da:2a:7e:26:ff:6e:d5:75:81:84:ed:cb: 3a:68:16:ac:d0:fe:72:cb:8a:8d:59:62:5a:9e:c4:3b:fc:b7: 49:2a:95:33:ea:8e:1f:8a:a9:b3:8f:cd:4f:03:06:54:ba:35: 5d:f9:be:a5:b4:7e:74:7d:9e:d0:13:7f:0a:84:69:30:2f:e8: 69:42:5c:0a:73:81:e1:45:de:2b:b1:a4:96:46:aa:e4:20:c2: c9:fd:87:f6:98:8c:fe:8a:6a:76:7d:de:3f:d4:a9:28:e2:8f: 57:47:89:11:37:65:94:a5:b8:1a:77:66:91:d6:72:12:b6:ca: f5:4f:7a:00 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUQkDspDirCADoEImlSJrd+WiJ54QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKDFCMDNERUEwRkJFQTYzMTNDMjY5NTQ4MjdGMjJDMTU0RERBNzEzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68u5zbnCGKQH9EpseDpXOo9eT aKaR9vAdALdRUCFAaPh5lfLT5UqvXAAi1pDxejUpej57dR1N/MHm55b0Nu6kWoMQ zsDLmLXZ62lG8ZNQHOqgYzpAHGLn465tTtK+C7LQnP9MWx+Ex6fvWTlWnrQ/ID3d zCpMQq2xgC3tbtcsEE2LAfmhtlGpeT2WRKauwrprCoST6hwLaGJDkNMYfkxmZH9d v5Ywb7Iy3eMmnEWHGr02aZrT7GAfAj+u+2vT0BGutNZInhqOJNT7MWZhaGIimnmS KHPSaFRrThAu5fJuI1DAqcTu3GM/THEFttkQ97gp1WYykZ88g41BBctqbTjRAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUGwPeoPvqYxPCaVSCfyLBVN2nE7AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNjMyMmUzMzJlMzQz NjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDMxMzczMC5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AD4DLjANBgkqhkiG9w0BAQsFAAOCAQEAXXzNbXCkwm4znEhWBGSl4nBIqySc8Dmt iNBVD6odrthEijh4h5O04IaQLAPVnos+1LsiwuTe+kBudCnMiKXIDsFvv0dqeIb5 sksHjzVxKW1FBEUVy82hhMjSHH10rziHFWHrJVFKxrCglBIWu/OEhhl3RNtziuyb uEoeNuNlzZXRBhGi2ip+Jv9u1XWBhO3LOmgWrND+csuKjVliWp7EO/y3SSqVM+qO H4qps4/NTwMGVLo1Xfm+pbR+dH2e0BN/CoRpMC/oaUJcCnOB4UXeK7Gklkaq5CDC yf2H9piM/opqdn3eP9SpKOKPV0eJETdllKW4GndmkdZyErbK9U96AA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:56:02 2025 by rpki-client