This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20343031373736.roa File: 36322e38342e3136302e302f32342d3234203d3e20343031373736.roa (raw, json) Hash identifier: w7Iy/48vEFSt2uie5wDgh15lnHyZBejOsry2YJ38p7c= Subject key identifier: 43:33:FB:B0:3B:E8:FC:BA:D4:BF:DA:84:1F:DB:B4:31:F9:D6:E5:99 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 4CCD45FD9D26FC50D278A8088080800317AF4DAC Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20343031373736.roa Signing time: Fri 19 Dec 2025 22:02:14 +0000 ROA not before: Fri 19 Dec 2025 21:57:14 +0000 ROA not after: Fri 18 Dec 2026 22:02:14 +0000 asID: 401776 IP address blocks: 62.84.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:cd:45:fd:9d:26:fc:50:d2:78:a8:08:80:80:80:03:17:af:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 19 21:57:14 2025 GMT Not After : Dec 18 22:02:14 2026 GMT Subject: CN=4333FBB03BE8FCBAD4BFDA841FDBB431F9D6E599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:bc:2c:2e:12:dc:69:09:31:87:f0:7f:36:9d: 60:95:7a:b4:8f:14:e9:16:ff:77:b3:64:f7:5b:5a: 10:03:e2:84:7a:33:1f:ae:1d:84:0e:25:f8:24:dd: 92:28:03:1a:49:74:96:dd:e0:93:c2:eb:24:1f:df: bd:ed:b1:d1:35:46:11:88:05:f7:4e:c5:12:3c:6f: bc:fc:a4:0e:46:55:9c:d7:2a:10:3f:f5:44:f3:37: 1e:09:3b:5b:87:51:7e:58:f5:48:8c:66:20:69:2b: e2:ea:35:70:75:70:9e:14:c3:69:33:40:06:af:d4: cd:65:63:76:46:1a:4b:bb:34:bf:13:a8:29:2b:95: 9f:3b:d2:d1:9d:43:6e:c2:5a:03:a5:7f:91:93:ad: e0:25:39:13:60:4d:bc:99:61:66:87:15:94:f2:65: e6:9c:db:f0:88:86:de:ee:20:42:24:7f:0b:8f:9b: 3a:60:46:be:a1:31:e1:5a:59:87:ce:38:e4:05:c4: 3d:f4:fb:39:55:b5:da:f2:15:33:d3:cf:6e:aa:7c: 4c:12:df:a9:e5:a4:d2:9e:31:d3:27:44:5e:b0:42: 33:14:18:fe:7c:25:58:2b:51:9f:ea:f8:11:af:a0: 5e:62:16:e6:83:03:41:08:fa:70:63:f0:be:4e:ae: d4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:33:FB:B0:3B:E8:FC:BA:D4:BF:DA:84:1F:DB:B4:31:F9:D6:E5:99 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136302e302f32342d3234203d3e20343031373736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.160.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:a9:e3:50:df:08:d6:4a:d8:41:83:87:68:96:f5:e7:12:81: 69:11:6c:be:6f:f8:a0:30:16:cc:94:e4:c8:46:36:15:59:8b: e2:32:65:86:56:a8:8b:45:87:45:e1:c6:ee:b8:3f:a4:d5:c0: c1:df:f2:d6:b6:32:3e:d4:00:f5:cb:12:26:2d:b7:17:0e:0e: 77:67:db:45:49:3c:88:42:7c:3d:35:91:2d:48:37:e8:73:54: 98:23:bd:f2:97:ce:a0:93:25:70:2f:6b:20:06:29:49:56:d2: 4d:c5:44:7e:cb:d3:7c:24:a9:66:bb:11:23:be:c0:19:59:52: f0:f9:28:ad:9e:c0:5b:e8:95:23:de:aa:85:05:08:3a:df:a2: 1b:d8:25:5a:e9:56:0c:2c:21:ec:43:6c:e1:c1:d8:ee:18:78: ba:86:80:ab:42:62:b5:7b:30:ad:2e:ff:76:83:ac:aa:ab:0f: 30:f0:b6:ab:0e:56:46:81:2e:c7:eb:86:e7:d6:1c:83:52:77: 75:43:c8:a7:9a:6e:6a:ee:6e:bb:60:bb:c4:3e:d4:67:ad:eb: 73:0f:d0:a4:03:a3:ce:fe:1c:7d:b4:3f:06:fe:21:63:11:f2: e1:1c:f8:d7:28:28:34:62:dc:99:88:de:6e:9d:4c:c7:0e:c4: 50:79:cd:f9 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUTM1F/Z0m/FDSeKgIgICAAxevTawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTkyMTU3MTRaFw0yNjEyMTgyMjAyMTRaMDMxMTAvBgNV BAMTKDQzMzNGQkIwM0JFOEZDQkFENEJGREE4NDFGREJCNDMxRjlENkU1OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjvCwuEtxpCTGH8H82nWCVerSP FOkW/3ezZPdbWhAD4oR6Mx+uHYQOJfgk3ZIoAxpJdJbd4JPC6yQf373tsdE1RhGI BfdOxRI8b7z8pA5GVZzXKhA/9UTzNx4JO1uHUX5Y9UiMZiBpK+LqNXB1cJ4Uw2kz QAav1M1lY3ZGGku7NL8TqCkrlZ870tGdQ27CWgOlf5GTreAlORNgTbyZYWaHFZTy Zeac2/CIht7uIEIkfwuPmzpgRr6hMeFaWYfOOOQFxD30+zlVtdryFTPTz26qfEwS 36nlpNKeMdMnRF6wQjMUGP58JVgrUZ/q+BGvoF5iFuaDA0EI+nBj8L5OrtSdAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUQzP7sDvo/LrUv9qEH9u0MfnW5ZkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMDMxMzczNzM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA PlSgMA0GCSqGSIb3DQEBCwUAA4IBAQAaqeNQ3wjWSthBg4dolvXnEoFpEWy+b/ig MBbMlOTIRjYVWYviMmWGVqiLRYdF4cbuuD+k1cDB3/LWtjI+1AD1yxImLbcXDg53 Z9tFSTyIQnw9NZEtSDfoc1SYI73yl86gkyVwL2sgBilJVtJNxUR+y9N8JKlmuxEj vsAZWVLw+SitnsBb6JUj3qqFBQg636Ib2CVa6VYMLCHsQ2zhwdjuGHi6hoCrQmK1 ezCtLv92g6yqqw8w8LarDlZGgS7H64bn1hyDUnd1Q8inmm5q7m67YLvEPtRnretz D9CkA6PO/hx9tD8G/iFjEfLhHPjXKCg0YtyZiN5unUzHDsRQec35 -----END CERTIFICATE-----Generated at Sat Dec 20 07:43:13 2025 by rpki-client