This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa File: 36322e3134362e3136382e302f32312d3332203d3e203430303231.roa (raw, json) Hash identifier: 34AiCq26spIFuDv/Ng1y8wu9UoDACrfq/AFaxHmlupg= Subject key identifier: B3:80:42:59:59:17:18:42:45:7A:1E:6D:E7:BA:04:13:33:A8:50:8E Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 3B917C68CBDD322BF4574CC0713C2585F4337C77 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa Signing time: Mon 29 Dec 2025 09:50:47 +0000 ROA not before: Mon 29 Dec 2025 09:45:47 +0000 ROA not after: Mon 28 Dec 2026 09:50:47 +0000 asID: 40021 IP address blocks: 62.146.168.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:91:7c:68:cb:dd:32:2b:f4:57:4c:c0:71:3c:25:85:f4:33:7c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:47 2025 GMT Not After : Dec 28 09:50:47 2026 GMT Subject: CN=B380425959171842457A1E6DE7BA041333A8508E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:38:65:bd:1b:7b:27:f0:1d:a7:53:b7:fd: 01:1f:1f:d9:c5:46:4a:5f:c8:54:3b:3b:fa:18:5d: d7:ea:76:80:d5:50:da:ca:81:b8:00:30:a4:c9:16: 6a:21:d3:e6:fe:86:b4:df:25:4a:8c:a7:0a:e7:80: 2b:01:03:2d:db:d7:a5:6c:51:84:4b:54:ea:85:92: bf:65:7a:65:bc:f0:41:b3:5c:56:41:1b:85:b0:50: 5b:2d:cb:4c:a3:e7:d7:89:3d:8e:ee:d9:d3:1f:80: 16:d4:d9:ec:31:fd:28:3e:0d:c8:ba:cf:4e:75:25: 34:ff:34:17:b6:cd:39:b7:f9:f3:4b:0f:ae:55:43: c8:b3:90:cc:3c:4e:1c:21:bf:36:4e:bd:ef:fa:89: 60:5a:6b:b4:08:5d:c4:d6:7b:7b:19:e6:7c:5e:fb: f2:90:21:89:2a:76:a2:78:aa:10:bf:66:0f:10:cf: 50:7f:ce:45:06:90:70:32:81:60:9e:dd:70:d3:c4: 0b:a4:e1:dc:a0:30:c6:81:a6:c5:fd:d7:4d:3b:d3: bc:58:02:11:3e:71:0e:21:f0:83:af:93:68:73:8e: d1:34:03:50:37:ae:07:56:7f:6f:08:e7:70:a1:a2: 3f:ea:f2:e6:61:65:f5:ad:40:c6:55:4f:29:15:82: 78:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:80:42:59:59:17:18:42:45:7A:1E:6D:E7:BA:04:13:33:A8:50:8E X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3136382e302f32312d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.168.0/21 Signature Algorithm: sha256WithRSAEncryption 36:5f:7d:ae:a2:9b:3e:87:af:fb:2c:ab:f5:5d:4d:3f:3f:54: 9b:ef:79:bc:0a:70:7d:fd:d2:d5:0a:26:46:d7:ab:55:23:d2: c9:30:35:cf:4d:53:5b:20:b2:11:b9:be:0b:04:75:da:59:7d: 36:67:bd:20:43:cc:cd:99:7a:62:5f:ce:7e:2f:d3:31:3b:2e: 97:64:b3:db:a1:ae:c0:f0:8c:e5:93:20:23:4d:db:e0:08:3f: 13:14:10:e7:50:b5:3b:03:f9:d7:3a:3d:74:d4:87:5f:a4:ac: ca:94:b1:a3:0e:32:34:1a:31:6d:77:1c:b5:0d:00:d4:41:bc: 7a:3b:38:3d:76:20:8c:9f:96:99:bb:57:4b:22:6a:63:d3:e9: 90:8c:76:ad:8d:27:5f:a2:f6:86:f9:05:63:3e:48:30:c5:9a: 7b:c7:67:e9:73:92:34:66:79:16:cf:a7:cd:79:62:b0:2c:68: 2b:a3:13:c4:52:92:12:d5:48:40:59:f1:03:23:6d:f5:4c:6b: b3:73:f1:c8:14:8b:51:8d:79:c0:94:30:d0:32:0d:a7:95:83: eb:34:4b:1f:9f:33:13:ca:d3:f0:ec:5a:01:ac:43:5a:b9:18: 64:40:0b:e4:a1:7e:45:41:e7:a3:6c:aa:9a:05:23:31:cc:6e: 4d:7c:51:8c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUO5F8aMvdMiv0V0zAcTwlhfQzfHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NDdaFw0yNjEyMjgwOTUwNDdaMDMxMTAvBgNV BAMTKEIzODA0MjU5NTkxNzE4NDI0NTdBMUU2REU3QkEwNDEzMzNBODUwOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKThlvRt7J/Adp1O3/QEfH9nF RkpfyFQ7O/oYXdfqdoDVUNrKgbgAMKTJFmoh0+b+hrTfJUqMpwrngCsBAy3b16Vs UYRLVOqFkr9lemW88EGzXFZBG4WwUFsty0yj59eJPY7u2dMfgBbU2ewx/Sg+Dci6 z051JTT/NBe2zTm3+fNLD65VQ8izkMw8ThwhvzZOve/6iWBaa7QIXcTWe3sZ5nxe +/KQIYkqdqJ4qhC/Zg8Qz1B/zkUGkHAygWCe3XDTxAuk4dygMMaBpsX9100707xY AhE+cQ4h8IOvk2hzjtE0A1A3rgdWf28I53Choj/q8uZhZfWtQMZVTykVgnhtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUs4BCWVkXGEJFeh5t57oEEzOoUI4wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzEzNDM2MmUzMTM2 MzgyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD PpKoMA0GCSqGSIb3DQEBCwUAA4IBAQA2X32uops+h6/7LKv1XU0/P1Sb73m8CnB9 /dLVCiZG16tVI9LJMDXPTVNbILIRub4LBHXaWX02Z70gQ8zNmXpiX85+L9MxOy6X ZLPboa7A8IzlkyAjTdvgCD8TFBDnULU7A/nXOj101IdfpKzKlLGjDjI0GjFtdxy1 DQDUQbx6Ozg9diCMn5aZu1dLImpj0+mQjHatjSdfovaG+QVjPkgwxZp7x2fpc5I0 ZnkWz6fNeWKwLGgroxPEUpIS1UhAWfEDI231TGuzc/HIFItRjXnAlDDQMg2nlYPr NEsfnzMTytPw7FoBrENauRhkQAvkoX5FQeejbKqaBSMxzG5NfFGM -----END CERTIFICATE-----Generated at Mon Jan 19 14:27:21 2026 by rpki-client