This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e382e302f32342d3234203d3e20323031333431.roa File: 36322e332e382e302f32342d3234203d3e20323031333431.roa (raw, json) Hash identifier: IfkwWwV8OOEXip8iFAVMO0zepm26WPsNKBvaeRRdqww= Subject key identifier: 61:66:97:6E:5D:7F:DF:A2:07:67:38:7B:75:39:71:F2:BD:7D:E0:73 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3EA9C298E5B1E52318057721B2608B036B271912 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e382e302f32342d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:29 +0000 ROA not before: Fri 28 Nov 2025 11:44:29 +0000 ROA not after: Fri 27 Nov 2026 11:49:29 +0000 asID: 201341 IP address blocks: 62.3.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:a9:c2:98:e5:b1:e5:23:18:05:77:21:b2:60:8b:03:6b:27:19:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:29 2025 GMT Not After : Nov 27 11:49:29 2026 GMT Subject: CN=6166976E5D7FDFA20767387B753971F2BD7DE073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:52:cc:33:8b:59:a7:ea:b1:eb:01:e1:c2:3c: a7:42:ba:3e:4a:cb:54:f9:25:55:e3:f7:93:95:51: fe:e3:d2:39:51:8d:ce:f0:34:71:ef:13:95:3e:ca: 21:35:45:84:22:c6:0d:c9:4d:6e:8c:92:f1:33:89: 09:92:7d:2d:56:f7:a0:af:14:b1:aa:b4:32:0b:f3: 9b:97:d3:30:c7:23:dc:2b:47:f6:01:3a:86:e1:1d: 92:da:a5:d4:0a:5b:ae:82:1e:16:d6:9c:fa:c4:2d: 56:2c:ee:66:b5:8e:17:61:10:3d:61:6c:a5:a9:27: 99:db:7f:31:61:d2:a5:c5:ce:d6:60:ac:3c:c1:81: bd:66:71:a3:a7:e0:4b:78:62:a2:4c:87:5f:d1:d0: 3e:12:15:c0:2a:a3:82:ba:55:10:ef:66:b1:09:b6: 92:88:47:12:95:89:c1:0b:52:b3:f2:9b:c5:06:17: b9:63:a8:dd:f3:56:0d:24:d6:2f:10:a2:46:3b:e7: 1b:a5:a4:54:0d:15:d8:99:ca:59:dd:62:1a:5b:84: cc:ed:e3:0b:30:36:e9:d0:d4:ba:72:5e:91:09:85: de:53:99:e7:d2:8a:e3:27:e1:87:b6:a7:2f:7f:31: 20:1b:ce:b3:2d:25:85:fe:cc:26:bf:ee:60:58:4d: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:66:97:6E:5D:7F:DF:A2:07:67:38:7B:75:39:71:F2:BD:7D:E0:73 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/36322e332e382e302f32342d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.8.0/24 Signature Algorithm: sha256WithRSAEncryption 94:0c:c5:59:61:fa:0b:3e:f0:97:e4:4e:5b:72:ef:6d:cb:dd: 7a:d7:b8:de:8d:76:86:60:0f:f6:d2:e0:5f:33:68:3e:9a:9e: aa:e5:c7:08:ab:f7:39:bd:3c:47:05:36:70:c8:19:b6:10:40: 17:45:63:33:f0:15:e9:b8:7b:6a:92:66:1f:8d:2b:1f:50:92: f0:a8:99:81:fc:54:5f:71:c6:e2:8b:8c:13:eb:c9:f8:11:f4: 46:dc:3a:5a:94:e4:7e:51:61:06:19:36:50:4c:5a:c0:e2:b6: 2f:69:91:04:3f:fe:4a:0c:81:63:0c:58:62:c5:32:d9:1a:f1: eb:0c:c9:14:5f:c6:21:c6:a2:91:8d:c6:25:8a:0f:e5:0b:22: 32:ed:c4:e6:60:67:73:ea:66:7d:75:77:18:98:86:59:26:e3: ee:bb:25:e3:78:77:77:02:43:86:f8:87:b3:0e:43:95:31:7e: 9c:ca:06:ce:1e:a0:c7:77:dc:c0:16:5e:6e:aa:67:56:1d:30: db:aa:c4:5e:dd:0b:38:97:83:5e:d6:4d:06:ee:e8:8f:6e:e2: 41:00:be:46:48:29:43:e9:0f:17:be:89:7d:a1:1a:ae:1c:8e: 92:5f:dd:f5:98:86:3a:9b:1b:2c:52:cd:97:e3:ff:31:0b:18: 6a:eb:64:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPqnCmOWx5SMYBXchsmCLA2snGRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjlaFw0yNjExMjcxMTQ5MjlaMDMxMTAvBgNV BAMTKDYxNjY5NzZFNUQ3RkRGQTIwNzY3Mzg3Qjc1Mzk3MUYyQkQ3REUwNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhUswzi1mn6rHrAeHCPKdCuj5K y1T5JVXj95OVUf7j0jlRjc7wNHHvE5U+yiE1RYQixg3JTW6MkvEziQmSfS1W96Cv FLGqtDIL85uX0zDHI9wrR/YBOobhHZLapdQKW66CHhbWnPrELVYs7ma1jhdhED1h bKWpJ5nbfzFh0qXFztZgrDzBgb1mcaOn4Et4YqJMh1/R0D4SFcAqo4K6VRDvZrEJ tpKIRxKVicELUrPym8UGF7ljqN3zVg0k1i8QokY75xulpFQNFdiZylndYhpbhMzt 4wswNunQ1LpyXpEJhd5TmefSiuMn4Ye2py9/MSAbzrMtJYX+zCa/7mBYTQpHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWaXbl1/36IHZzh7dTlx8r194HMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNjMyMmUzMzJlMzgy ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzEzMzM0MzEucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+ AwgwDQYJKoZIhvcNAQELBQADggEBAJQMxVlh+gs+8JfkTlty723L3XrXuN6NdoZg D/bS4F8zaD6anqrlxwir9zm9PEcFNnDIGbYQQBdFYzPwFem4e2qSZh+NKx9QkvCo mYH8VF9xxuKLjBPryfgR9EbcOlqU5H5RYQYZNlBMWsDiti9pkQQ//koMgWMMWGLF Mtka8esMyRRfxiHGopGNxiWKD+ULIjLtxOZgZ3PqZn11dxiYhlkm4+67JeN4d3cC Q4b4h7MOQ5UxfpzKBs4eoMd33MAWXm6qZ1YdMNuqxF7dCziXg17WTQbu6I9u4kEA vkZIKUPpDxe+iX2hGq4cjpJf3fWYhjqbGyxSzZfj/zELGGrrZKU= -----END CERTIFICATE-----Generated at Sun Dec 7 01:28:37 2025 by rpki-client