This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37332e302f32342d3234203d3e203632323430.roa File: 322e35382e37332e302f32342d3234203d3e203632323430.roa (raw, json) Hash identifier: h2PtYgkjYXtevVGdgCIyzAiga9NXWntqIlNVzkWR9pM= Subject key identifier: 3A:11:4F:8C:F4:F2:C3:DA:91:E1:0E:5C:5C:EB:33:AF:97:E2:75:B3 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2462B0F9F6C2857244A87D01618D406C7D351B1C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37332e302f32342d3234203d3e203632323430.roa Signing time: Fri 28 Nov 2025 11:49:34 +0000 ROA not before: Fri 28 Nov 2025 11:44:34 +0000 ROA not after: Fri 27 Nov 2026 11:49:34 +0000 asID: 62240 IP address blocks: 2.58.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:62:b0:f9:f6:c2:85:72:44:a8:7d:01:61:8d:40:6c:7d:35:1b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:34 2025 GMT Not After : Nov 27 11:49:34 2026 GMT Subject: CN=3A114F8CF4F2C3DA91E10E5C5CEB33AF97E275B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3e:ee:15:e8:79:07:02:b7:8d:c5:28:18:fc: 5f:b9:0a:e3:b9:4a:c0:bc:2d:7e:e8:5d:43:4b:49: 86:35:b1:48:85:96:e4:ff:b2:19:e1:5a:71:a0:aa: 57:cc:80:78:e4:d3:b4:80:86:28:38:7f:d7:26:ca: 26:91:a7:76:b1:1d:ab:67:ff:67:96:36:00:73:22: 9b:d4:76:7c:60:78:e5:71:a3:d2:75:92:84:b5:48: 01:06:cc:47:ff:6e:a2:04:f9:05:73:20:fe:6c:f1: 01:02:4f:d1:3d:45:93:c6:7f:23:55:a1:27:ad:4b: 0e:85:95:b5:47:00:c4:75:dc:f3:dc:66:13:a7:12: 39:14:58:64:22:1e:15:a3:f5:f5:46:04:ac:5e:3d: f6:67:0e:6b:59:6f:ad:bb:8f:c0:42:ce:a6:47:99: 0d:19:9b:fd:38:ef:8d:be:88:cb:0b:a3:b0:37:b3: 17:84:69:93:1d:1f:31:6e:38:83:1d:a3:79:70:0d: ba:db:4b:b5:4f:24:92:3e:5c:eb:c1:b3:87:90:e9: 06:c7:c0:65:f7:be:85:b1:01:a2:cb:90:a4:51:1e: 44:3e:33:24:dd:45:cf:e6:fc:4f:38:22:d0:87:4e: 41:f2:23:e2:b1:6a:a7:3b:6f:61:c7:7c:f6:32:40: 15:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:11:4F:8C:F4:F2:C3:DA:91:E1:0E:5C:5C:EB:33:AF:97:E2:75:B3 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/322e35382e37332e302f32342d3234203d3e203632323430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.73.0/24 Signature Algorithm: sha256WithRSAEncryption d2:aa:61:91:cd:08:a0:ae:12:69:fc:23:d9:67:65:ff:ce:d0: 95:2b:4b:b1:42:03:52:c5:35:00:1b:e0:d3:1c:43:3e:78:2d: 66:f4:81:87:2d:ee:22:20:aa:7e:03:7f:df:51:56:75:48:2c: 7a:a3:ce:c5:df:25:bd:79:b1:c8:ae:39:7b:46:34:67:92:94: a3:aa:ff:19:b8:ea:05:59:bb:5a:b2:91:35:63:31:ab:95:67: 15:ea:d1:07:95:fd:bb:33:e5:82:b3:df:70:1c:be:d5:64:27: b8:99:a6:3c:65:a7:39:91:68:64:a8:62:bd:14:a1:72:cd:d5: cd:67:5d:ff:f0:11:18:96:e6:66:72:fd:07:58:1f:b6:15:ba: 8f:6f:5f:37:11:5c:63:ee:bf:30:79:81:4c:7e:b1:18:48:69: 14:22:ef:9a:fd:38:9a:f8:2f:fe:fc:17:35:52:c4:a2:66:90: 58:0a:91:e2:91:25:40:5f:2f:5e:30:58:5e:c1:33:4b:58:80: f8:42:03:14:fa:51:45:04:70:69:40:b7:4b:02:cd:fc:c8:9f: 56:26:16:49:12:b8:55:83:81:05:1f:1f:b3:50:c6:1d:93:09: 98:87:dc:2b:ac:28:72:aa:63:79:59:6a:a9:c3:65:3d:db:21: 15:da:79:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGKw+fbChXJEqH0BYY1AbH01GxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzRaFw0yNjExMjcxMTQ5MzRaMDMxMTAvBgNV BAMTKDNBMTE0RjhDRjRGMkMzREE5MUUxMEU1QzVDRUIzM0FGOTdFMjc1QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYPu4V6HkHAreNxSgY/F+5CuO5 SsC8LX7oXUNLSYY1sUiFluT/shnhWnGgqlfMgHjk07SAhig4f9cmyiaRp3axHatn /2eWNgBzIpvUdnxgeOVxo9J1koS1SAEGzEf/bqIE+QVzIP5s8QECT9E9RZPGfyNV oSetSw6FlbVHAMR13PPcZhOnEjkUWGQiHhWj9fVGBKxePfZnDmtZb627j8BCzqZH mQ0Zm/04742+iMsLo7A3sxeEaZMdHzFuOIMdo3lwDbrbS7VPJJI+XOvBs4eQ6QbH wGX3voWxAaLLkKRRHkQ+MyTdRc/m/E84ItCHTkHyI+Kxaqc7b2HHfPYyQBVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOhFPjPTyw9qR4Q5cXOszr5fidbMwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zMjJlMzUzODJlMzcz MzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzIzMjM0MzAucm9hMBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAC OkkwDQYJKoZIhvcNAQELBQADggEBANKqYZHNCKCuEmn8I9lnZf/O0JUrS7FCA1LF NQAb4NMcQz54LWb0gYct7iIgqn4Df99RVnVILHqjzsXfJb15sciuOXtGNGeSlKOq /xm46gVZu1qykTVjMauVZxXq0QeV/bsz5YKz33AcvtVkJ7iZpjxlpzmRaGSoYr0U oXLN1c1nXf/wERiW5mZy/QdYH7YVuo9vXzcRXGPuvzB5gUx+sRhIaRQi75r9OJr4 L/78FzVSxKJmkFgKkeKRJUBfL14wWF7BM0tYgPhCAxT6UUUEcGlAt0sCzfzIn1Ym FkkSuFWDgQUfH7NQxh2TCZiH3CusKHKqY3lZaqnDZT3bIRXaeds= -----END CERTIFICATE-----Generated at Sat Dec 20 00:24:11 2025 by rpki-client