This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3232342e302f32312d3332203d3e203430303231.roa File: 36322e3134362e3232342e302f32312d3332203d3e203430303231.roa (raw, json) Hash identifier: q8cn2HdIRgvKq8bXbOn/sVJrWfwuxmjZjvO1LGXrC4s= Subject key identifier: CE:29:E2:51:5C:00:84:F0:28:A1:5B:01:85:1F:F0:27:DF:08:9D:90 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 07D64B6535884BFB48E6794D5A42145F94FEA543 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3232342e302f32312d3332203d3e203430303231.roa Signing time: Mon 29 Dec 2025 09:50:50 +0000 ROA not before: Mon 29 Dec 2025 09:45:50 +0000 ROA not after: Mon 28 Dec 2026 09:50:50 +0000 asID: 40021 IP address blocks: 62.146.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:d6:4b:65:35:88:4b:fb:48:e6:79:4d:5a:42:14:5f:94:fe:a5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 29 09:45:50 2025 GMT Not After : Dec 28 09:50:50 2026 GMT Subject: CN=CE29E2515C0084F028A15B01851FF027DF089D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:77:5e:23:a0:67:b2:00:7e:28:4b:74:9a:32: f2:59:eb:f1:c2:2c:94:87:e3:61:c5:76:2b:2f:af: 2e:cc:ce:81:f4:5a:4c:d6:70:ac:b3:0f:c1:3a:df: a3:6c:be:5b:48:fc:83:07:d1:e9:fa:ca:9e:35:14: ca:01:0d:74:c0:ad:e2:02:c6:42:a7:fa:f1:67:4a: dd:0d:fe:75:23:fd:9a:37:f2:a5:4a:f2:f2:33:ec: 7e:95:5b:24:17:d2:56:a7:5a:2f:dd:57:60:16:fe: 7f:c5:11:04:31:6f:ed:9f:4a:82:40:49:1e:cc:4e: 2c:36:9f:2c:b6:9d:1d:70:fa:81:b4:77:a8:4f:2b: 01:25:68:06:c9:d8:31:a4:6e:85:24:b8:04:df:f4: 19:13:d2:1f:fd:97:78:0d:a6:72:34:b3:3b:73:e1: d3:be:d8:b9:ea:25:d4:03:ec:fb:c7:50:a8:dc:5c: 35:74:3a:b8:6e:33:52:c3:2e:48:0d:74:f9:53:6d: 11:07:9a:87:35:a9:5d:e3:7e:2a:08:af:62:61:d9: 85:49:a2:7f:31:5b:a4:0e:0d:af:96:3e:76:f0:e1: 01:9f:c7:7e:82:48:5b:07:77:5b:a5:47:bc:41:5d: 3f:bb:a0:74:3e:ae:59:c3:72:37:eb:5b:55:75:9b: 70:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:29:E2:51:5C:00:84:F0:28:A1:5B:01:85:1F:F0:27:DF:08:9D:90 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e3134362e3232342e302f32312d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.146.224.0/21 Signature Algorithm: sha256WithRSAEncryption 09:2d:d4:36:de:34:75:f3:96:66:85:25:92:b7:35:47:30:6b: 5b:b0:d0:e0:9d:bf:3a:a0:61:be:de:08:b0:8e:70:21:f7:a8: 2c:c1:ba:92:32:ee:7e:39:53:1e:3f:ce:e3:c0:29:8a:18:61: 3e:52:74:91:fa:97:3c:37:c2:a3:14:84:a2:46:4d:1f:5e:98: 65:73:8a:3f:55:94:90:5e:6a:b0:c6:c4:9f:18:65:c9:a1:e4: 86:70:e7:86:51:ab:6a:d3:27:c2:01:d9:b8:3d:a5:2e:72:55: 74:d5:1d:e0:4f:56:8a:2f:3c:46:60:05:01:e1:5e:71:1b:ce: f7:24:04:cf:b3:73:d5:b0:88:6e:b4:85:ec:29:1d:83:a0:de: b3:bb:21:f7:76:b3:3f:ab:17:05:c1:36:85:07:6c:5b:4c:0e: f1:fe:c0:07:23:03:7f:eb:5a:7b:7e:68:54:21:c0:25:4b:2e: 35:13:32:75:0b:70:4d:6a:38:18:5c:7d:55:fe:97:6c:35:ac: c6:f1:f2:03:3c:fe:93:4b:d3:7a:a1:c2:ea:d8:76:00:2a:53: 78:76:52:57:bf:7a:4b:0b:6e:7e:5d:21:0a:3e:4d:b7:4f:85: 8f:a8:75:fa:b1:f7:42:08:54:76:db:5e:c8:df:11:63:68:62: 8b:a7:e7:a3 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUB9ZLZTWIS/tI5nlNWkIUX5T+pUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMjkwOTQ1NTBaFw0yNjEyMjgwOTUwNTBaMDMxMTAvBgNV BAMTKENFMjlFMjUxNUMwMDg0RjAyOEExNUIwMTg1MUZGMDI3REYwODlEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8d14joGeyAH4oS3SaMvJZ6/HC LJSH42HFdisvry7MzoH0WkzWcKyzD8E636NsvltI/IMH0en6yp41FMoBDXTAreIC xkKn+vFnSt0N/nUj/Zo38qVK8vIz7H6VWyQX0lanWi/dV2AW/n/FEQQxb+2fSoJA SR7MTiw2nyy2nR1w+oG0d6hPKwElaAbJ2DGkboUkuATf9BkT0h/9l3gNpnI0sztz 4dO+2LnqJdQD7PvHUKjcXDV0OrhuM1LDLkgNdPlTbREHmoc1qV3jfioIr2Jh2YVJ on8xW6QODa+WPnbw4QGfx36CSFsHd1ulR7xBXT+7oHQ+rlnDcjfrW1V1m3C7AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUziniUVwAhPAooVsBhR/wJ98InZAwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzEzNDM2MmUzMjMy MzQyZTMwMmYzMjMxMmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD PpLgMA0GCSqGSIb3DQEBCwUAA4IBAQAJLdQ23jR185ZmhSWStzVHMGtbsNDgnb86 oGG+3giwjnAh96gswbqSMu5+OVMeP87jwCmKGGE+UnSR+pc8N8KjFISiRk0fXphl c4o/VZSQXmqwxsSfGGXJoeSGcOeGUatq0yfCAdm4PaUuclV01R3gT1aKLzxGYAUB 4V5xG873JATPs3PVsIhutIXsKR2DoN6zuyH3drM/qxcFwTaFB2xbTA7x/sAHIwN/ 61p7fmhUIcAlSy41EzJ1C3BNajgYXH1V/pdsNazG8fIDPP6TS9N6ocLq2HYAKlN4 dlJXv3pLC25+XSEKPk23T4WPqHX6sfdCCFR2217I3xFjaGKLp+ej -----END CERTIFICATE-----Generated at Mon Jan 19 14:24:14 2026 by rpki-client