This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/32372e302e3233342e302f32342d3332203d3e20323035383438.roa File: 32372e302e3233342e302f32342d3332203d3e20323035383438.roa (raw, json) Hash identifier: ypMnhHsuYXQJ1uLaU18OSLrBvWg449VDZ1ZcIgNWVGg= Subject key identifier: 51:9A:6D:E8:7B:36:7F:86:B8:CF:EB:2E:DB:CC:73:06:AE:14:C5:23 Certificate issuer: /CN=3537F961668E4765578095AB33A4351BB72C9A63 Certificate serial: 11C056A120C8BA01E9813AED062F2EE1B2B08AE6 Authority key identifier: 35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/32372e302e3233342e302f32342d3332203d3e20323035383438.roa Signing time: Wed 31 Dec 2025 21:17:18 +0000 ROA not before: Wed 31 Dec 2025 21:12:18 +0000 ROA not after: Wed 30 Dec 2026 21:17:18 +0000 asID: 205848 IP address blocks: 27.0.234.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c0:56:a1:20:c8:ba:01:e9:81:3a:ed:06:2f:2e:e1:b2:b0:8a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3537F961668E4765578095AB33A4351BB72C9A63 Validity Not Before: Dec 31 21:12:18 2025 GMT Not After : Dec 30 21:17:18 2026 GMT Subject: CN=519A6DE87B367F86B8CFEB2EDBCC7306AE14C523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:4d:3b:50:10:6e:bc:fe:d3:5c:28:c0:62: 14:1b:a9:53:7c:c3:db:06:ad:90:fd:4b:fe:51:0b: 33:b0:f3:c8:13:cd:91:36:57:7d:0b:55:f6:9a:3a: 3e:69:b4:6b:c3:06:b2:0c:91:6a:87:12:4a:84:c0: 79:5c:99:0e:f2:c4:39:ee:11:e4:b1:9b:40:b7:d3: 4c:7b:f0:9e:c8:cd:c6:99:b6:b1:18:99:ae:cc:76: 00:6d:37:20:35:75:7d:95:c9:06:e2:46:e3:39:f4: ab:8a:45:e8:e4:64:c8:a4:6c:79:fa:05:c8:a2:2c: cd:0e:1d:48:30:57:34:87:d7:71:ed:9e:74:b6:50: 7d:b0:e2:74:e5:26:a7:4a:12:ad:cf:0b:9a:f2:b8: d8:ac:8e:4f:54:94:dc:b2:1e:79:60:14:af:20:f2: 28:a7:b5:8d:82:33:94:7a:8a:72:40:66:1a:49:e1: fa:d6:db:28:a3:09:cd:7d:3f:59:98:10:00:91:d3: 20:14:03:3c:97:4f:cb:0f:96:98:03:17:d2:01:33: 93:ba:38:bb:82:55:86:87:6c:21:57:c2:1b:35:f5: c7:8b:29:89:3a:18:ef:90:a1:13:47:78:8b:a2:0f: 43:ce:30:4c:08:6c:4b:0e:d6:c7:92:39:c7:8d:49: 1d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:6D:E8:7B:36:7F:86:B8:CF:EB:2E:DB:CC:73:06:AE:14:C5:23 X509v3 Authority Key Identifier: keyid:35:37:F9:61:66:8E:47:65:57:80:95:AB:33:A4:35:1B:B7:2C:9A:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/3537F961668E4765578095AB33A4351BB72C9A63.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/3537F961668E4765578095AB33A4351BB72C9A63.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a59e8c2f-e590-4a4f-8463-8317c2a1c048/1/32372e302e3233342e302f32342d3332203d3e20323035383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.234.0/24 Signature Algorithm: sha256WithRSAEncryption 28:56:98:a2:21:a3:73:16:cb:11:be:0c:c3:e8:c6:f5:9a:b1: 92:fb:55:7b:08:d0:43:cc:3b:39:e3:c5:00:4e:5f:b1:66:a0: 81:79:7c:6a:33:ad:92:36:78:89:d9:73:76:ca:79:d9:78:c7: 01:18:98:b1:83:af:f6:ef:94:51:27:56:7d:3c:66:ae:9e:23: 50:0d:f6:80:e8:c1:97:43:86:c9:80:1b:fe:fd:fb:66:e2:7b: c8:99:af:7a:06:36:de:d2:e5:b8:a5:a9:c4:6c:f8:52:d1:45: 84:d5:ec:05:36:29:04:5e:9e:f9:d0:fd:73:22:ca:53:e4:8b: 4f:66:02:6f:68:71:32:21:f8:18:30:a6:94:4b:e6:55:04:66: 8b:f6:49:48:80:55:cc:38:b0:a4:0a:84:8d:cb:30:12:18:82: 94:62:bd:05:ad:1d:88:ba:2f:f8:f3:ac:0a:42:9a:2a:39:45: ae:93:98:31:16:34:67:80:ad:fd:fa:22:26:e1:82:ad:d0:ac: e9:cd:61:c4:36:c8:6b:c9:1d:2b:c5:b2:26:7d:34:dc:d0:1c: e4:45:12:a6:a9:26:38:98:d6:ba:56:02:c2:43:2b:c5:96:1f: d3:97:73:f1:2b:c9:25:68:2d:21:d5:d9:2e:67:f9:dc:51:95: c4:8e:34:1e -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgIUEcBWoSDIugHpgTrtBi8u4bKwiuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJC NzJDOUE2MzAeFw0yNTEyMzEyMTEyMThaFw0yNjEyMzAyMTE3MThaMDMxMTAvBgNV BAMTKDUxOUE2REU4N0IzNjdGODZCOENGRUIyRURCQ0M3MzA2QUUxNEM1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Gk07UBBuvP7TXCjAYhQbqVN8 w9sGrZD9S/5RCzOw88gTzZE2V30LVfaaOj5ptGvDBrIMkWqHEkqEwHlcmQ7yxDnu EeSxm0C300x78J7IzcaZtrEYma7MdgBtNyA1dX2VyQbiRuM59KuKRejkZMikbHn6 BciiLM0OHUgwVzSH13HtnnS2UH2w4nTlJqdKEq3PC5ryuNisjk9UlNyyHnlgFK8g 8iintY2CM5R6inJAZhpJ4frW2yijCc19P1mYEACR0yAUAzyXT8sPlpgDF9IBM5O6 OLuCVYaHbCFXwhs19ceLKYk6GO+QoRNHeIuiD0POMEwIbEsO1seSOceNSR3zAgMB AAGjggJrMIICZzAdBgNVHQ4EFgQUUZpt6Hs2f4a4z+su28xzBq4UxSMwHwYDVR0j BBgwFoAUNTf5YWaOR2VXgJWrM6Q1G7csmmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYtZTU5MC00YTRmLTg0NjMtODMxN2MyYTFj MDQ4LzEvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJDOUE2My5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzcvMzUzN0Y5NjE2NjhFNDc2NTU3ODA5NUFCMzNBNDM1MUJCNzJD OUE2My5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYTU5ZThjMmYt ZTU5MC00YTRmLTg0NjMtODMxN2MyYTFjMDQ4LzEvMzIzNzJlMzAyZTMyMzMzNDJl MzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMyMzAzNTM4MzQzOC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABsA 6jANBgkqhkiG9w0BAQsFAAOCAQEAKFaYoiGjcxbLEb4Mw+jG9ZqxkvtVewjQQ8w7 OePFAE5fsWaggXl8ajOtkjZ4idlzdsp52XjHARiYsYOv9u+UUSdWfTxmrp4jUA32 gOjBl0OGyYAb/v37ZuJ7yJmvegY23tLluKWpxGz4UtFFhNXsBTYpBF6e+dD9cyLK U+SLT2YCb2hxMiH4GDCmlEvmVQRmi/ZJSIBVzDiwpAqEjcswEhiClGK9Ba0diLov +POsCkKaKjlFrpOYMRY0Z4Ct/foiJuGCrdCs6c1hxDbIa8kdK8WyJn003NAc5EUS pqkmOJjWulYCwkMrxZYf05dz8SvJJWgtIdXZLmf53FGVxI40Hg== -----END CERTIFICATE-----Generated at Sat Jan 10 22:06:55 2026 by rpki-client