This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203430303231.roa File: 36322e3134362e3233322e302f32312d3332203d3e203430303231.roa (raw, json) Hash identifier: Nuy8NZESwPJWJmmULo7lM1pT3VzkpNLybo3zgYo2rsM= Subject key identifier: E4:D4:77:DA:CE:94:48:86:CF:A2:6E:80:D1:40:8A:CB:D2:12:9E:E2 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 35416535D0E94F46FDCA6C0A99EE81162B7C1100 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203430303231.roa Signing time: Tue 20 Jan 2026 11:23:10 +0000 ROA not before: Tue 20 Jan 2026 11:18:10 +0000 ROA not after: Tue 19 Jan 2027 11:23:10 +0000 asID: 40021 IP address blocks: 62.146.232.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 15:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:41:65:35:d0:e9:4f:46:fd:ca:6c:0a:99:ee:81:16:2b:7c:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Jan 20 11:18:10 2026 GMT Not After : Jan 19 11:23:10 2027 GMT Subject: CN=E4D477DACE944886CFA26E80D1408ACBD2129EE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:94:e6:cf:eb:09:4e:b1:ca:99:bc:64:b3:05: b3:f6:86:d0:b3:78:20:22:a4:c4:36:29:bb:08:c7: b8:54:34:f1:3a:c2:e4:f2:ef:1b:37:9b:cb:c9:7b: 66:98:47:61:7f:82:7c:db:cc:ac:c7:64:25:f6:43: 2f:ec:38:18:f9:22:e0:e3:73:75:76:dd:02:99:8f: 18:6a:61:f3:54:c5:71:c7:31:94:9d:30:96:29:02: 17:db:fd:42:f9:d9:58:1f:e8:d0:12:7c:16:ab:2e: c2:46:10:07:f1:04:dc:0b:97:ec:d6:eb:ef:bc:c5: 8f:26:d2:2b:a2:39:48:c5:31:c9:87:11:85:22:48: 13:55:3d:7f:af:2e:9c:2d:3b:0f:82:c9:3f:0d:e1: 82:06:8c:30:a1:aa:e0:2a:ef:87:ae:83:c0:ec:a2: fe:99:0f:78:2a:b3:20:88:13:29:c9:da:9f:c9:07: 71:95:f6:df:21:60:1e:59:08:cb:90:a3:51:10:8a: 00:98:55:3e:f9:e5:40:99:6b:5e:9b:4e:58:7b:d3: 64:61:c0:78:0d:79:27:b6:3b:1f:d4:d6:c1:ba:60: ed:4a:1e:13:d0:10:3c:fe:95:7b:64:fa:a1:a9:38: e1:30:8e:f6:48:ee:05:75:6f:45:8c:8f:ed:38:3e: 5c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D4:77:DA:CE:94:48:86:CF:A2:6E:80:D1:40:8A:CB:D2:12:9E:E2 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3233322e302f32312d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.232.0/21 Signature Algorithm: sha256WithRSAEncryption 03:1f:fc:78:f9:d9:7d:20:fa:14:ce:7e:ca:3a:ae:ca:e4:aa: 39:3c:5f:ac:df:dd:54:42:d6:a0:2f:9b:b3:2c:41:fa:c4:24: 03:5e:03:e0:9b:f9:6b:57:ed:aa:a1:b1:f1:aa:64:b8:c4:8b: ca:de:c9:61:b3:ae:72:80:75:43:24:bd:c4:b0:5a:c3:d3:82: 2e:98:6b:94:93:e7:93:65:24:5b:56:85:6c:ee:12:cb:dd:47: 43:b9:f5:dc:d4:17:39:08:a1:26:bc:19:05:87:1a:99:ce:50: 3a:d3:4d:63:e1:0f:58:d8:f1:14:1c:d5:9c:32:aa:8a:4b:b5: 8b:65:ee:8c:9e:f4:ce:82:c5:ab:0d:fd:cd:8f:f1:7f:99:fa: a7:eb:5d:33:12:b8:b1:a0:02:bc:94:bc:e8:be:2b:64:ea:eb: ff:1f:a8:dc:c8:84:c7:04:1f:fc:69:9c:e8:75:79:b0:eb:32: de:61:c0:b7:92:a8:7d:b0:c4:69:1a:84:e0:46:3e:a1:ab:db: 3b:4a:f5:2f:bd:d4:62:01:53:6b:6a:05:de:71:c8:8c:e0:cb: 4a:fe:4c:65:b5:90:e6:d4:5e:13:20:19:57:f8:1b:f0:bf:ff: 50:a3:8b:3e:a7:e7:57:13:d4:93:a9:3e:ef:96:3e:6d:b4:5c: 4f:9c:05:9d -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUNUFlNdDpT0b9ymwKme6BFit8EQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNjAxMjAxMTE4MTBaFw0yNzAxMTkxMTIzMTBaMDMxMTAvBgNV BAMTKEU0RDQ3N0RBQ0U5NDQ4ODZDRkEyNkU4MEQxNDA4QUNCRDIxMjlFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCllObP6wlOscqZvGSzBbP2htCz eCAipMQ2KbsIx7hUNPE6wuTy7xs3m8vJe2aYR2F/gnzbzKzHZCX2Qy/sOBj5IuDj c3V23QKZjxhqYfNUxXHHMZSdMJYpAhfb/UL52Vgf6NASfBarLsJGEAfxBNwLl+zW 6++8xY8m0iuiOUjFMcmHEYUiSBNVPX+vLpwtOw+CyT8N4YIGjDChquAq74eug8Ds ov6ZD3gqsyCIEynJ2p/JB3GV9t8hYB5ZCMuQo1EQigCYVT755UCZa16bTlh702Rh wHgNeSe2Ox/U1sG6YO1KHhPQEDz+lXtk+qGpOOEwjvZI7gV1b0WMj+04PlwJAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU5NR32s6USIbPom6A0UCKy9ISnuIwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzEzNDM2MmUzMjMz MzIyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD PpLoMA0GCSqGSIb3DQEBCwUAA4IBAQADH/x4+dl9IPoUzn7KOq7K5Ko5PF+s391U QtagL5uzLEH6xCQDXgPgm/lrV+2qobHxqmS4xIvK3slhs65ygHVDJL3EsFrD04Iu mGuUk+eTZSRbVoVs7hLL3UdDufXc1Bc5CKEmvBkFhxqZzlA6001j4Q9Y2PEUHNWc MqqKS7WLZe6MnvTOgsWrDf3Nj/F/mfqn610zErixoAK8lLzovitk6uv/H6jcyITH BB/8aZzodXmw6zLeYcC3kqh9sMRpGoTgRj6hq9s7SvUvvdRiAVNragXecciM4MtK /kxltZDm1F4TIBlX+Bvwv/9Qo4s+p+dXE9STqT7vlj5ttFxPnAWd -----END CERTIFICATE-----Generated at Sun Jan 25 07:23:17 2026 by rpki-client