This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3232342e302f32302d3332203d3e203531313637.roa File: 33372e36302e3232342e302f32302d3332203d3e203531313637.roa (raw, json) Hash identifier: ZuBU1Ot/Y1MFe8OW3pYuvNB+M7Mp/XjUystrn3JSUEA= Subject key identifier: 94:33:19:D5:BD:D2:9B:7D:2B:FB:A2:93:3B:86:D8:E4:65:D5:CC:5E Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 20977141CD9A272E92554C504F1F63AD60A5905A Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3232342e302f32302d3332203d3e203531313637.roa Signing time: Thu 27 Nov 2025 10:49:14 +0000 ROA not before: Thu 27 Nov 2025 10:44:14 +0000 ROA not after: Thu 26 Nov 2026 10:49:14 +0000 asID: 51167 IP address blocks: 37.60.224.0/20 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:97:71:41:cd:9a:27:2e:92:55:4c:50:4f:1f:63:ad:60:a5:90:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 27 10:44:14 2025 GMT Not After : Nov 26 10:49:14 2026 GMT Subject: CN=943319D5BDD29B7D2BFBA2933B86D8E465D5CC5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:2a:0c:5f:03:f5:1c:25:8a:4b:b3:2c:85: ec:a3:85:a0:1e:e1:30:f6:dd:71:9a:0a:94:f9:06: 9f:d0:52:60:33:83:24:4c:df:dd:1e:36:0c:d9:ae: 28:eb:4a:14:85:c2:8d:a8:63:99:af:11:3b:90:c5: 2e:02:a4:0d:ff:c6:13:70:62:13:24:5d:ef:34:c1: 9f:83:5e:12:b0:48:73:bc:fc:06:82:bf:ac:a0:62: bf:9b:9e:d4:9a:ac:b0:2f:16:62:c1:91:bd:46:50: a9:40:06:85:b5:c9:56:d7:0c:cc:71:c5:1f:11:48: 0c:1b:5a:b1:4a:0f:fa:21:18:49:90:fe:da:3a:dd: 7d:c0:2c:fe:bb:8e:98:c3:fb:f7:47:e6:ce:eb:3f: 5d:34:b2:00:5c:23:de:36:af:d7:9f:e7:5f:34:00: 64:11:39:c2:84:b7:8e:18:bc:8f:81:1a:cc:c8:6a: 64:7c:68:5d:dd:c3:fe:3c:c4:aa:45:fe:9f:de:93: 28:40:c8:f5:ff:1b:3a:de:df:58:dd:28:2d:ea:83: be:10:38:6c:60:4b:c4:9f:af:d4:c3:a3:a9:b8:88: 40:4f:ca:8a:f8:e4:bf:b0:e4:2c:e2:62:ec:61:36: 1d:f8:0b:db:a1:93:91:ba:f2:05:d5:3f:17:f4:31: a8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:33:19:D5:BD:D2:9B:7D:2B:FB:A2:93:3B:86:D8:E4:65:D5:CC:5E X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/33372e36302e3232342e302f32302d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.60.224.0/20 Signature Algorithm: sha256WithRSAEncryption 19:ec:f5:89:b6:0c:18:9f:a3:76:75:2f:31:6f:96:97:7f:42: 56:a2:81:8d:79:4e:07:8d:d2:c0:cd:38:90:09:6d:00:e6:1b: d0:2a:74:5c:cb:7a:b8:16:39:16:8a:e3:34:ae:1a:a5:90:17: bc:84:b3:32:88:49:26:59:f2:a3:5f:6e:6c:e0:92:8c:78:db: b2:e2:0a:8c:73:3c:33:34:b0:29:4b:2b:90:9e:bc:72:69:62: 7e:d5:68:54:89:f4:db:84:e3:b5:2f:ca:14:f4:cc:c1:dd:a6: b1:e1:d2:c7:7d:c7:90:e7:15:da:43:d0:09:75:20:ac:bc:66: c3:f5:ed:5c:09:50:8c:ed:5b:30:bb:97:09:dc:b3:be:dd:b8: 44:5a:ca:cf:2a:53:8e:3d:55:7a:c2:15:c6:cb:9c:5b:86:16: b3:b0:dd:df:6a:21:07:ba:16:0c:9f:a7:a3:d5:98:48:ef:6a: 2d:cd:6e:2a:ff:e5:7f:e0:62:9e:0e:c1:15:b4:5d:1e:36:79: df:53:2a:7d:eb:ac:5f:14:fe:2a:b6:e0:fd:48:35:a9:3f:73: 40:c6:a2:99:2b:7a:e8:ad:bd:0c:42:3e:be:46:da:56:4e:d1: 9a:c5:dc:05:3c:92:24:31:67:cd:07:72:fd:b0:a7:18:64:ca: d0:e4:94:07 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUIJdxQc2aJy6SVUxQTx9jrWClkFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjcxMDQ0MTRaFw0yNjExMjYxMDQ5MTRaMDMxMTAvBgNV BAMTKDk0MzMxOUQ1QkREMjlCN0QyQkZCQTI5MzNCODZEOEU0NjVENUNDNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1SoMXwP1HCWKS7MsheyjhaAe 4TD23XGaCpT5Bp/QUmAzgyRM390eNgzZrijrShSFwo2oY5mvETuQxS4CpA3/xhNw YhMkXe80wZ+DXhKwSHO8/AaCv6ygYr+bntSarLAvFmLBkb1GUKlABoW1yVbXDMxx xR8RSAwbWrFKD/ohGEmQ/to63X3ALP67jpjD+/dH5s7rP100sgBcI942r9ef5180 AGQROcKEt44YvI+BGszIamR8aF3dw/48xKpF/p/ekyhAyPX/Gzre31jdKC3qg74Q OGxgS8Sfr9TDo6m4iEBPyor45L+w5CziYuxhNh34C9uhk5G68gXVPxf0Mai7AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUlDMZ1b3Sm30r+6KTO4bY5GXVzF4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzMzNzJlMzYzMDJlMzIzMjM0 MmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBCU8 4DANBgkqhkiG9w0BAQsFAAOCAQEAGez1ibYMGJ+jdnUvMW+Wl39CVqKBjXlOB43S wM04kAltAOYb0Cp0XMt6uBY5ForjNK4apZAXvISzMohJJlnyo19ubOCSjHjbsuIK jHM8MzSwKUsrkJ68cmliftVoVIn024TjtS/KFPTMwd2mseHSx33HkOcV2kPQCXUg rLxmw/XtXAlQjO1bMLuXCdyzvt24RFrKzypTjj1VesIVxsucW4YWs7Dd32ohB7oW DJ+no9WYSO9qLc1uKv/lf+Bing7BFbRdHjZ531MqfeusXxT+Krbg/Ug1qT9zQMai mSt66K29DEI+vkbaVk7RmsXcBTySJDFnzQdy/bCnGGTK0OSUBw== -----END CERTIFICATE-----Generated at Fri Dec 5 06:23:14 2025 by rpki-client