This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35362e37322e302f32322d3234203d3e20333936333139.roa File: 322e35362e37322e302f32322d3234203d3e20333936333139.roa (raw, json) Hash identifier: 6T86wrllqtIZCBNa3jnwz+BvHkgJMFHazdkETyGEED8= Subject key identifier: 4B:58:7F:1E:CA:9D:22:81:A0:2E:9E:00:19:E9:97:78:7C:D3:2C:BA Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 46217E25E23603BDD3ABED8F914221EA5B762012 Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35362e37322e302f32322d3234203d3e20333936333139.roa Signing time: Mon 29 Dec 2025 09:50:24 +0000 ROA not before: Mon 29 Dec 2025 09:45:24 +0000 ROA not after: Mon 28 Dec 2026 09:50:24 +0000 asID: 396319 IP address blocks: 2.56.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:21:7e:25:e2:36:03:bd:d3:ab:ed:8f:91:42:21:ea:5b:76:20:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:24 2025 GMT Not After : Dec 28 09:50:24 2026 GMT Subject: CN=4B587F1ECA9D2281A02E9E0019E997787CD32CBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:3b:4b:98:8a:01:3f:90:67:46:9b:8e:3a: e5:b1:7f:57:a0:17:73:ce:8b:03:2f:43:0f:90:79: c0:e8:a1:91:89:74:c8:1b:c3:ab:1e:4c:64:99:aa: cd:ca:b8:7a:27:de:d8:ea:8a:da:cd:45:76:fd:a6: 26:f5:ea:1e:63:5e:2f:29:61:4f:e7:a8:80:5b:28: e6:fd:c7:0a:7a:c9:39:64:93:07:7c:e0:53:e1:03: bd:28:03:01:b9:74:0f:54:1c:7c:ee:75:00:24:84: e4:db:e1:35:70:73:85:1c:1d:c9:69:1d:d2:b3:fc: 74:07:cd:59:59:7c:42:44:37:be:cd:94:32:9a:54: ad:b9:d1:df:ba:7f:dd:69:80:cb:34:3d:b2:3b:2f: f1:42:03:75:dc:0f:43:bd:1d:0e:95:d2:25:53:5f: 7d:c9:01:f9:b2:a0:90:c9:0b:ad:45:ef:97:ec:d8: 16:00:45:8c:6a:21:94:04:96:ba:d7:e1:92:9c:9a: c5:1e:29:b6:49:36:a8:fc:26:99:74:67:69:18:65: 4d:7a:84:c0:2c:30:a0:45:e4:8c:4a:54:30:d2:f6: bd:01:e4:93:62:a8:fc:60:9b:d4:b8:fd:f5:09:3c: ca:6e:fb:df:1e:59:ee:bd:11:59:42:65:66:5f:e4: 77:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:58:7F:1E:CA:9D:22:81:A0:2E:9E:00:19:E9:97:78:7C:D3:2C:BA X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/322e35362e37322e302f32322d3234203d3e20333936333139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.72.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:71:2c:72:68:6b:81:b1:ef:77:26:46:7e:95:c0:48:f3:05: f8:cf:19:d5:d2:b3:4a:89:a6:68:e5:e5:a5:80:d5:0b:fe:d2: f6:7c:39:d8:a1:71:16:69:be:db:c7:6a:03:8f:4c:6b:5d:fd: 3d:1a:c1:d2:2a:bb:f0:d1:fb:1d:82:e9:82:c7:5c:fc:0e:6d: a7:31:5b:e8:3c:29:95:c3:a7:dd:9e:87:1a:08:7b:38:25:fd: 25:76:1a:88:b3:2f:4e:e9:64:66:d3:2a:0e:c2:7b:16:0b:14: 6f:72:ec:85:27:e2:9e:9a:fe:5b:70:54:fd:65:25:26:fc:49: 6b:83:42:24:93:41:7a:fe:32:2a:d6:ac:ad:ee:a3:8c:9c:6a: 25:27:76:c6:7f:1c:ce:d2:87:0d:07:4e:c8:ec:2e:9a:49:f0: 8c:69:3b:81:63:8b:00:16:5f:99:23:28:93:05:50:57:f1:07: de:ec:f0:e3:f5:92:b9:4c:9a:36:fd:d9:31:11:0e:a1:03:ff: ec:3d:62:e6:8d:8b:a8:55:0b:fe:d1:f7:d7:9d:a6:bf:1b:38: 3e:ca:a2:44:d9:a9:b9:95:11:7b:b0:34:4f:5b:6f:be:5a:fe: 87:ce:0b:f4:26:fc:ad:72:dc:95:58:cb:2b:9d:a8:40:b4:f3: 1e:75:c3:09 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURiF+JeI2A73Tq+2PkUIh6lt2IBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjRaFw0yNjEyMjgwOTUwMjRaMDMxMTAvBgNV BAMTKDRCNTg3RjFFQ0E5RDIyODFBMDJFOUUwMDE5RTk5Nzc4N0NEMzJDQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgMztLmIoBP5BnRpuOOuWxf1eg F3POiwMvQw+QecDooZGJdMgbw6seTGSZqs3KuHon3tjqitrNRXb9pib16h5jXi8p YU/nqIBbKOb9xwp6yTlkkwd84FPhA70oAwG5dA9UHHzudQAkhOTb4TVwc4UcHclp HdKz/HQHzVlZfEJEN77NlDKaVK250d+6f91pgMs0PbI7L/FCA3XcD0O9HQ6V0iVT X33JAfmyoJDJC61F75fs2BYARYxqIZQElrrX4ZKcmsUeKbZJNqj8Jpl0Z2kYZU16 hMAsMKBF5IxKVDDS9r0B5JNiqPxgm9S4/fUJPMpu+98eWe69EVlCZWZf5HfrAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUS1h/HsqdIoGgLp4AGemXeHzTLLowHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzIyZTM1MzYyZTM3MzIyZTMw MmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM5MzYzMzMxMzkucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAICOEgw DQYJKoZIhvcNAQELBQADggEBAI5xLHJoa4Gx73cmRn6VwEjzBfjPGdXSs0qJpmjl 5aWA1Qv+0vZ8OdihcRZpvtvHagOPTGtd/T0awdIqu/DR+x2C6YLHXPwObacxW+g8 KZXDp92ehxoIezgl/SV2GoizL07pZGbTKg7CexYLFG9y7IUn4p6a/ltwVP1lJSb8 SWuDQiSTQXr+MirWrK3uo4ycaiUndsZ/HM7Shw0HTsjsLppJ8IxpO4FjiwAWX5kj KJMFUFfxB97s8OP1krlMmjb92TERDqED/+w9YuaNi6hVC/7R99edpr8bOD7KokTZ qbmVEXuwNE9bb75a/ofOC/Qm/K1y3JVYyyudqEC08x51wwk= -----END CERTIFICATE-----Generated at Mon Jan 26 02:09:03 2026 by rpki-client