This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e203633313939.roa File: 36322e38342e3136332e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: MDC/eOBxyBXe1UahBKHkeV4WKS7S4I5JK7WNR/eIfaQ= Subject key identifier: 9B:5C:54:CE:05:DE:1F:59:5D:94:EF:1F:C2:16:62:0A:FD:0A:F0:CF Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 418503381779D7BC513F9D51266E35DAFE1B46F0 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e203633313939.roa Signing time: Fri 19 Dec 2025 21:28:13 +0000 ROA not before: Fri 19 Dec 2025 21:23:13 +0000 ROA not after: Fri 18 Dec 2026 21:28:13 +0000 asID: 63199 IP address blocks: 62.84.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 01:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:85:03:38:17:79:d7:bc:51:3f:9d:51:26:6e:35:da:fe:1b:46:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Dec 19 21:23:13 2025 GMT Not After : Dec 18 21:28:13 2026 GMT Subject: CN=9B5C54CE05DE1F595D94EF1FC216620AFD0AF0CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:da:7d:7c:98:be:2d:1c:2b:b5:4e:52:c9: 36:50:b1:af:3a:17:99:a9:e9:17:bd:bb:62:75:2e: a1:1a:52:42:f3:75:36:bd:9b:06:76:a1:e9:97:fb: 5b:f8:9e:a8:fc:1a:2b:8b:15:0e:99:33:c1:c4:c0: f8:87:2e:df:53:a7:be:37:82:e3:90:74:04:02:4d: b5:9f:99:21:f9:c8:ab:8a:ef:27:6c:e2:e9:d0:61: 97:06:e5:62:27:4c:c0:15:12:d4:fc:10:d7:a4:14: fc:69:f8:bc:18:81:0e:b2:b0:0b:56:08:c2:7d:75: 41:57:56:7b:95:0d:bf:02:d9:86:b9:ff:9b:d0:a3: 19:ce:70:57:fd:56:08:92:ef:42:fc:94:52:ce:58: dc:38:fe:ee:6b:72:69:20:e0:ed:77:18:48:e5:19: 33:9b:99:03:9d:c0:8c:bd:11:8d:c4:46:e0:53:f3: 11:51:08:b4:f4:53:3c:ff:b0:44:41:86:21:06:7f: 3e:80:74:96:e9:e9:2f:35:af:50:1e:af:6e:92:87: 87:d4:eb:4a:f1:43:71:70:13:ce:0f:cd:68:99:ab: 4a:27:70:1c:35:28:15:54:f1:39:73:91:f9:8a:68: e4:e4:cf:2d:7c:89:d8:7d:e3:7b:01:eb:39:25:bb: a0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5C:54:CE:05:DE:1F:59:5D:94:EF:1F:C2:16:62:0A:FD:0A:F0:CF X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136332e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.163.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ea:26:f7:45:a9:15:85:45:27:77:ed:bd:28:5f:5a:88:98: 95:22:06:01:29:83:c2:ba:ac:25:21:33:ed:1b:05:4c:fb:b7: de:53:2e:27:4e:61:64:3b:da:79:e3:70:e2:51:f2:f8:77:aa: 09:2e:30:a6:8d:49:ed:14:a6:4b:96:4d:49:dc:de:d1:b4:85: fa:9b:9a:b4:08:d8:77:9f:d4:df:c5:73:93:58:63:51:a7:8b: b2:cf:5f:81:36:10:14:3d:d6:51:11:21:26:d2:1a:27:a9:e8: 59:57:48:a6:73:e5:2a:4a:2a:ab:1f:a0:07:9a:84:ce:ae:36: 22:04:b9:52:1c:c5:c2:ec:c2:d1:cd:52:e0:54:82:ed:9c:d7: 17:b6:37:ec:44:54:43:f8:ab:92:56:44:7b:49:26:84:3d:40: ac:3f:dd:52:75:a2:06:74:81:e1:57:a3:6c:c3:75:38:98:d2: 3b:a1:50:43:e4:85:a3:33:b9:bc:0f:e3:99:8f:87:92:6f:ee: 46:cc:1b:07:e7:00:2e:c2:d6:0c:3e:43:a3:7e:c2:db:30:b1: 1d:62:73:35:8d:91:da:cd:b6:62:86:98:84:ed:2b:2f:81:6f: 5c:24:f1:77:5f:5c:8b:42:38:ca:86:81:96:95:27:36:65:25: 6c:fe:67:3e -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUQYUDOBd517xRP51RJm412v4bRvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTEyMTkyMTIzMTNaFw0yNjEyMTgyMTI4MTNaMDMxMTAvBgNV BAMTKDlCNUM1NENFMDVERTFGNTk1RDk0RUYxRkMyMTY2MjBBRkQwQUYwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG99p9fJi+LRwrtU5SyTZQsa86 F5mp6Re9u2J1LqEaUkLzdTa9mwZ2oemX+1v4nqj8GiuLFQ6ZM8HEwPiHLt9Tp743 guOQdAQCTbWfmSH5yKuK7yds4unQYZcG5WInTMAVEtT8ENekFPxp+LwYgQ6ysAtW CMJ9dUFXVnuVDb8C2Ya5/5vQoxnOcFf9VgiS70L8lFLOWNw4/u5rcmkg4O13GEjl GTObmQOdwIy9EY3ERuBT8xFRCLT0Uzz/sERBhiEGfz6AdJbp6S81r1Aer26Sh4fU 60rxQ3FwE84PzWiZq0oncBw1KBVU8TlzkfmKaOTkzy18idh943sB6zklu6CvAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUm1xUzgXeH1ldlO8fwhZiCv0K8M8wHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjMz MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAD5U ozANBgkqhkiG9w0BAQsFAAOCAQEAfuom90WpFYVFJ3ftvShfWoiYlSIGASmDwrqs JSEz7RsFTPu33lMuJ05hZDvaeeNw4lHy+HeqCS4wpo1J7RSmS5ZNSdze0bSF+pua tAjYd5/U38Vzk1hjUaeLss9fgTYQFD3WUREhJtIaJ6noWVdIpnPlKkoqqx+gB5qE zq42IgS5UhzFwuzC0c1S4FSC7ZzXF7Y37ERUQ/irklZEe0kmhD1ArD/dUnWiBnSB 4VejbMN1OJjSO6FQQ+SFozO5vA/jmY+Hkm/uRswbB+cALsLWDD5Do37C2zCxHWJz NY2R2s22YoaYhO0rL4FvXCTxd19ci0I4yoaBlpUnNmUlbP5nPg== -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:32 2026 by rpki-client