This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36332e302f32342d3234203d3e20323039353033.roa
File: 36322e3134312e36332e302f32342d3234203d3e20323039353033.roa (raw, json)
Hash identifier: 5iMkqdKaodGZceg7xcTo90AjAcnin/rj9yW7y461+ew=
Subject key identifier: B5:7B:08:36:AD:EC:0F:9A:06:81:F8:07:53:4E:44:F4:47:51:4C:97
Certificate issuer: /CN=9e576996388e94b8c7ab20effb23bd11becb4108
Certificate serial: 53A7CCC02A71BE7E74CD432983CD3078D9353073
Authority key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36332e302f32342d3234203d3e20323039353033.roa
Signing time: Sat 13 Dec 2025 16:09:40 +0000
ROA not before: Sat 13 Dec 2025 16:04:40 +0000
ROA not after: Sat 12 Dec 2026 16:09:40 +0000
asID: 209503
IP address blocks: 62.141.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 09:56:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a7:cc:c0:2a:71:be:7e:74:cd:43:29:83:cd:30:78:d9:35:30:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Validity
Not Before: Dec 13 16:04:40 2025 GMT
Not After : Dec 12 16:09:40 2026 GMT
Subject: CN=B57B0836ADEC0F9A0681F807534E44F447514C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8c:3a:66:07:9e:f2:4e:18:84:0d:6b:ff:48:
6f:a9:67:43:55:96:6d:97:7c:79:aa:20:0b:cd:33:
7b:52:89:45:0a:31:8a:bc:b2:6d:b1:31:3f:4b:35:
87:eb:13:62:94:09:a3:79:94:0b:35:3d:2a:f5:1d:
f1:75:fc:44:a3:55:56:ca:38:3f:7a:c2:4a:e8:72:
db:71:84:c3:8f:ea:4e:31:8f:db:60:59:38:c1:ae:
9e:54:11:c5:95:fe:1e:a9:5a:b2:0b:c2:68:8f:06:
dd:10:52:5d:be:23:e6:a7:71:e4:69:8d:b6:c8:c1:
7f:5f:a4:c8:05:1e:66:fa:5a:76:4d:da:f6:02:fb:
a9:d8:6a:4a:d6:58:3d:c9:6b:e5:69:f5:33:05:09:
ee:30:6a:44:74:f0:9c:3c:63:46:a1:3e:cd:a5:94:
d2:37:e7:6c:85:43:b8:d9:d7:31:62:ec:b3:09:46:
e2:66:bc:04:d1:cd:3e:d5:ae:cd:c8:11:90:1e:7c:
4c:a0:8e:ee:87:af:4b:bb:10:7e:e8:3f:6b:5c:d3:
a9:5c:f2:97:8a:c6:0b:6d:89:13:0a:a5:27:43:cc:
d5:c5:95:a6:fa:0d:1e:23:2b:ee:1c:ea:1f:31:b8:
60:2c:8c:4d:1e:a8:93:6f:f6:ca:7a:91:98:8e:26:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7B:08:36:AD:EC:0F:9A:06:81:F8:07:53:4E:44:F4:47:51:4C:97
X509v3 Authority Key Identifier:
keyid:9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/36322e3134312e36332e302f32342d3234203d3e20323039353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:51:cf:a7:fc:18:9e:a7:9f:f3:09:60:d6:00:aa:53:7b:c9:
23:5a:cf:33:c4:9f:79:95:8b:8c:9b:e1:3a:0d:e1:b9:af:c4:
f0:28:73:60:fe:7e:99:c3:86:15:56:de:b6:1b:bc:e9:5c:76:
cb:9a:99:fa:47:c7:f8:6f:fc:9e:01:fb:bf:64:c8:84:94:15:
60:b5:81:ab:ee:90:0d:86:6d:df:f7:8e:47:a8:57:ef:c9:88:
cf:81:2a:75:9e:67:52:c9:7c:cf:9e:ca:29:a3:70:b0:38:b5:
91:66:ba:7a:d5:e7:63:43:ca:3d:73:c4:69:4e:56:eb:f9:c1:
e2:49:4e:6e:de:2f:0d:56:37:fd:9c:f4:a0:4e:39:70:e4:37:
9f:f8:a4:fe:2d:3a:f1:f3:6e:3a:21:4d:84:1a:95:14:e8:d5:
9e:40:d7:94:85:9b:ab:9c:2e:64:04:0b:04:27:fe:98:8c:cb:
d6:a0:b7:47:d0:31:09:d3:54:da:e0:d8:85:2b:01:4c:6c:ff:
bb:a9:61:53:27:ea:b9:8d:ed:38:7d:ac:07:ff:0d:4b:ae:dc:
31:f5:de:d8:73:ca:bd:4e:f3:59:5c:d2:39:bd:90:9a:d9:6e:
fe:fc:2d:28:63:d8:52:95:6c:1e:ff:26:1b:13:30:5f:75:9f:
4e:c2:a3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:07:33 2025 by rpki-client