This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e20323135313532.roa File: 36322e332e32302e302f32342d3234203d3e20323135313532.roa (raw, json) Hash identifier: K3GEYfrcdLJt/Pv1pZTdwz6yJZqY0yfvXEhbrZ66rqc= Subject key identifier: D8:53:D9:33:87:99:FF:0C:56:F3:13:4D:81:00:93:FA:8D:48:F4:C7 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 7FC6EC30704667A72139FAEC8B9D85C2211C2779 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e20323135313532.roa Signing time: Wed 17 Dec 2025 07:36:23 +0000 ROA not before: Wed 17 Dec 2025 07:31:23 +0000 ROA not after: Wed 16 Dec 2026 07:36:23 +0000 asID: 215152 IP address blocks: 62.3.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c6:ec:30:70:46:67:a7:21:39:fa:ec:8b:9d:85:c2:21:1c:27:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Dec 17 07:31:23 2025 GMT Not After : Dec 16 07:36:23 2026 GMT Subject: CN=D853D9338799FF0C56F3134D810093FA8D48F4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:9f:8f:f2:e5:80:c9:28:6e:ef:77:9e:4a: b0:9f:c0:61:17:4a:25:ca:be:73:fc:61:3a:1f:ca: ac:02:5c:7a:db:19:b3:5f:29:c3:a7:3d:a9:e3:94: 9e:ac:81:da:a3:ab:c7:68:87:1b:0c:6f:4b:a3:1e: 37:80:c4:5a:7a:77:2a:7b:04:14:86:1a:af:86:db: 09:92:a6:3a:8a:a9:d6:87:fe:4b:3a:08:53:3a:75: 22:2b:33:7a:d3:a9:86:31:ea:af:d3:24:d3:3b:51: 86:05:79:f5:1c:1f:83:ce:de:48:db:0a:51:29:7d: 33:91:19:59:ac:ca:fb:1e:e0:89:a9:52:46:d8:ad: 03:bf:f0:68:84:bc:7c:0d:23:e1:d3:85:2d:0b:4a: 49:80:94:c4:69:50:0c:37:bc:99:04:66:68:20:4c: d4:86:43:f0:bc:8e:65:f1:12:86:78:14:ba:65:cd: b4:c4:79:df:83:f0:38:b7:96:35:c2:67:11:ad:a3: 02:60:21:f9:55:6c:0d:ff:73:dd:56:cc:cd:ff:e0: 1c:ca:6c:e7:32:ee:71:30:11:8c:dd:90:b8:d1:07: 5e:d0:64:8e:89:e6:0b:eb:39:6e:5c:c7:53:08:a2: 39:4b:b3:e6:73:16:a9:ba:e2:5e:8e:74:e4:88:b6: 0a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:53:D9:33:87:99:FF:0C:56:F3:13:4D:81:00:93:FA:8D:48:F4:C7 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e20323135313532.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.20.0/24 Signature Algorithm: sha256WithRSAEncryption aa:50:43:78:ab:ba:6f:e3:16:5c:19:fe:96:ac:66:99:cf:63: fd:c9:99:5a:df:00:79:1c:f4:e3:46:46:3d:d3:c9:5f:9e:9f: bd:98:91:75:b6:a9:a3:71:43:45:a2:da:f8:1d:d5:0f:23:6f: 78:26:78:ef:fe:5c:93:a0:0b:21:32:e7:bc:e1:0c:f4:88:63: ab:ec:f2:f6:fd:f3:4f:bc:17:6d:60:96:b2:bd:16:8a:3c:fc: f0:19:07:d3:16:77:32:74:5a:89:11:3a:78:59:b1:b3:8f:b9: f4:a6:a4:4c:41:57:0e:05:6e:e0:40:aa:9c:38:6b:97:9b:61: e2:c0:cf:32:54:41:5c:18:36:38:0a:18:8a:59:60:57:7b:27: 84:1e:4f:63:4a:6f:39:4a:9e:52:ea:b1:f8:41:61:47:53:91: 10:2c:78:c5:3a:a3:78:17:a2:e4:0a:ed:d3:c6:13:1b:6d:78: f2:8a:27:5e:e1:ec:4d:0b:48:07:56:90:07:80:4e:0b:57:77: 14:2c:68:07:65:4f:05:f9:29:99:cf:f3:f5:88:38:f3:ad:36: 9d:ee:b2:02:ae:54:3f:61:f3:8b:09:28:cd:4b:98:97:9f:23: 26:12:41:7d:b9:b9:52:2a:fc:22:02:65:4a:14:03:28:f2:25: c1:6d:37:d9 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUf8bsMHBGZ6chOfrsi52FwiEcJ3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTEyMTcwNzMxMjNaFw0yNjEyMTYwNzM2MjNaMDMxMTAvBgNV BAMTKEQ4NTNEOTMzODc5OUZGMEM1NkYzMTM0RDgxMDA5M0ZBOEQ0OEY0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/J+P8uWAyShu73eeSrCfwGEX SiXKvnP8YTofyqwCXHrbGbNfKcOnPanjlJ6sgdqjq8dohxsMb0ujHjeAxFp6dyp7 BBSGGq+G2wmSpjqKqdaH/ks6CFM6dSIrM3rTqYYx6q/TJNM7UYYFefUcH4PO3kjb ClEpfTORGVmsyvse4ImpUkbYrQO/8GiEvHwNI+HThS0LSkmAlMRpUAw3vJkEZmgg TNSGQ/C8jmXxEoZ4FLplzbTEed+D8Di3ljXCZxGtowJgIflVbA3/c91WzM3/4BzK bOcy7nEwEYzdkLjRB17QZI6J5gvrOW5cx1MIojlLs+ZzFqm64l6OdOSItgqfAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU2FPZM4eZ/wxW8xNNgQCT+o1I9McwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzYzMjJlMzMyZTMyMzAyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMTM1MzIucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAA+AxQw DQYJKoZIhvcNAQELBQADggEBAKpQQ3irum/jFlwZ/pasZpnPY/3JmVrfAHkc9ONG Rj3TyV+en72YkXW2qaNxQ0Wi2vgd1Q8jb3gmeO/+XJOgCyEy57zhDPSIY6vs8vb9 80+8F21glrK9Foo8/PAZB9MWdzJ0WokROnhZsbOPufSmpExBVw4FbuBAqpw4a5eb YeLAzzJUQVwYNjgKGIpZYFd7J4QeT2NKbzlKnlLqsfhBYUdTkRAseMU6o3gXouQK 7dPGExttePKKJ17h7E0LSAdWkAeATgtXdxQsaAdlTwX5KZnP8/WIOPOtNp3usgKu VD9h84sJKM1LmJefIyYSQX25uVIq/CICZUoUAyjyJcFtN9k= -----END CERTIFICATE-----Generated at Fri Dec 19 13:10:05 2025 by rpki-client