This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203231383539.roa File: 36322e332e32302e302f32342d3234203d3e203231383539.roa (raw, json) Hash identifier: Rro+Gx/ym8oazWi/ZTJ2dg2MGKpj7/78mNky+1y7VfU= Subject key identifier: F0:75:91:0E:6C:9A:D1:1E:D5:74:68:71:F3:E1:86:34:45:FF:F4:AF Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 46A1BE5C86409A680B4348CBE1D56C73BE6CBE93 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203231383539.roa Signing time: Mon 08 Dec 2025 01:26:39 +0000 ROA not before: Mon 08 Dec 2025 01:21:39 +0000 ROA not after: Mon 07 Dec 2026 01:26:39 +0000 asID: 21859 IP address blocks: 62.3.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 15:11:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a1:be:5c:86:40:9a:68:0b:43:48:cb:e1:d5:6c:73:be:6c:be:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Dec 8 01:21:39 2025 GMT Not After : Dec 7 01:26:39 2026 GMT Subject: CN=F075910E6C9AD11ED5746871F3E1863445FFF4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c8:d0:2f:5d:61:ef:a9:5c:a4:71:43:21:1d: 3a:82:c3:c6:4d:4c:e8:cb:bc:92:aa:a4:71:ff:f8: b3:2f:88:b2:42:bf:5d:05:47:b0:ab:94:43:e5:f7: d9:99:48:0b:b7:b8:59:6a:46:a2:25:2d:bd:d2:e6: 29:16:15:cb:de:62:58:fb:f4:7a:f9:f5:ae:82:aa: 7f:7b:b7:4b:af:ff:6a:73:36:6e:5a:b9:67:b5:15: 2f:57:6d:99:c0:cb:a7:da:6d:83:75:c2:63:b9:37: d4:08:09:06:74:ee:39:24:ae:85:52:a3:23:e4:30: 23:6e:3f:d0:61:eb:79:4a:2f:ef:ec:b0:4e:6a:41: 3c:1e:69:92:ee:0e:39:74:bc:3d:0d:9b:01:5d:ac: b5:9d:83:8a:18:12:23:b4:20:cf:f9:06:8c:b1:4f: 16:2f:26:a7:cb:af:22:11:76:81:05:40:93:b7:0f: d1:be:56:2b:d0:73:2e:55:b1:e6:c0:ed:7b:de:9f: 27:6a:57:f3:aa:b8:dd:e2:23:0a:46:d9:a0:cd:ed: 28:36:d8:02:71:a8:ec:ac:7c:1f:cf:58:f2:59:d7: 5f:1a:e6:c7:07:1a:37:ca:56:55:0d:d8:45:e1:c2: 4c:b7:51:b2:64:04:2a:7d:ff:6e:82:f1:85:df:71: 0c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:75:91:0E:6C:9A:D1:1E:D5:74:68:71:F3:E1:86:34:45:FF:F4:AF X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/36322e332e32302e302f32342d3234203d3e203231383539.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.3.20.0/24 Signature Algorithm: sha256WithRSAEncryption 48:75:ef:d5:3a:bd:bc:09:99:44:fc:21:50:84:72:a7:ce:44: f8:2b:e6:c1:3a:91:0e:44:ce:54:cb:6f:a8:a0:b6:52:6a:4c: 76:0a:e4:97:17:46:bb:a2:56:c4:0f:e1:db:9f:0b:97:5f:fd: af:bc:38:22:d2:dd:f9:45:fe:04:f9:42:35:30:2a:b0:df:52: 54:1b:93:14:7b:e8:d2:53:f0:65:3b:5e:ae:e9:e4:24:51:8a: e6:df:af:4c:e1:dc:03:fc:f6:4f:87:c3:c2:a6:d1:84:ff:e6: 86:a6:7e:ad:e7:1a:4d:86:f8:06:f2:64:0a:52:ac:b1:16:32: 71:72:f4:1f:1f:2b:09:cf:1d:79:03:09:c9:d9:25:be:6d:ef: a5:e0:42:a1:1d:cd:4d:06:33:01:9b:11:bd:46:96:e1:f0:f3: 5b:77:f4:5a:1e:48:da:3e:86:ee:0e:35:bf:85:00:80:a6:9f: 7f:46:b4:1d:49:ec:3a:40:be:48:23:ce:88:43:3d:c1:04:c7: 6d:3f:20:4e:16:d0:a0:f3:a8:8a:6b:b4:89:c1:c6:00:42:67: 33:bf:b0:1e:ab:f2:e2:20:a0:0b:94:40:48:57:ff:6b:e7:89: 59:29:88:54:71:77:fe:a7:73:ef:ea:4e:1e:20:1d:d0:66:01: ae:32:40:81 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIURqG+XIZAmmgLQ0jL4dVsc75svpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTEyMDgwMTIxMzlaFw0yNjEyMDcwMTI2MzlaMDMxMTAvBgNV BAMTKEYwNzU5MTBFNkM5QUQxMUVENTc0Njg3MUYzRTE4NjM0NDVGRkY0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyNAvXWHvqVykcUMhHTqCw8ZN TOjLvJKqpHH/+LMviLJCv10FR7CrlEPl99mZSAu3uFlqRqIlLb3S5ikWFcveYlj7 9Hr59a6Cqn97t0uv/2pzNm5auWe1FS9XbZnAy6fabYN1wmO5N9QICQZ07jkkroVS oyPkMCNuP9Bh63lKL+/ssE5qQTweaZLuDjl0vD0NmwFdrLWdg4oYEiO0IM/5Boyx TxYvJqfLryIRdoEFQJO3D9G+VivQcy5VsebA7XvenydqV/OquN3iIwpG2aDN7Sg2 2AJxqOysfB/PWPJZ118a5scHGjfKVlUN2EXhwky3UbJkBCp9/26C8YXfcQw7AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQU8HWRDmya0R7VdGhx8+GGNEX/9K8wHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzYzMjJlMzMyZTMyMzAyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzgzNTM5LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMUMA0G CSqGSIb3DQEBCwUAA4IBAQBIde/VOr28CZlE/CFQhHKnzkT4K+bBOpEORM5Uy2+o oLZSakx2CuSXF0a7olbED+HbnwuXX/2vvDgi0t35Rf4E+UI1MCqw31JUG5MUe+jS U/BlO16u6eQkUYrm369M4dwD/PZPh8PCptGE/+aGpn6t5xpNhvgG8mQKUqyxFjJx cvQfHysJzx15AwnJ2SW+be+l4EKhHc1NBjMBmxG9Rpbh8PNbd/RaHkjaPobuDjW/ hQCApp9/RrQdSew6QL5II86IQz3BBMdtPyBOFtCg86iKa7SJwcYAQmczv7Aeq/Li IKALlEBIV/9r54lZKYhUcXf+p3Pv6k4eIB3QZgGuMkCB -----END CERTIFICATE-----Generated at Tue Dec 9 22:38:53 2025 by rpki-client