This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32332d3234203d3e203230333236.roa File: 36322e38342e3136342e302f32332d3234203d3e203230333236.roa (raw, json) Hash identifier: Wkb/cGBVfo2ANfj2HmWudlpgq4Y5hvCR32BsAt6Pbj8= Subject key identifier: ED:CE:B9:2A:B5:F7:B7:CE:B4:EF:C8:D5:8B:02:52:E3:3A:54:15:59 Certificate issuer: /CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Certificate serial: 50B149DD3FE1E7302A56B29EC24933D55DF493C1 Authority key identifier: AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32332d3234203d3e203230333236.roa Signing time: Mon 24 Nov 2025 07:47:31 +0000 ROA not before: Mon 24 Nov 2025 07:42:31 +0000 ROA not after: Mon 23 Nov 2026 07:47:31 +0000 asID: 20326 IP address blocks: 62.84.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 17:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:b1:49:dd:3f:e1:e7:30:2a:56:b2:9e:c2:49:33:d5:5d:f4:93:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab2dcc169c95f2b14df31dd24a1f67034ea7779c Validity Not Before: Nov 24 07:42:31 2025 GMT Not After : Nov 23 07:47:31 2026 GMT Subject: CN=EDCEB92AB5F7B7CEB4EFC8D58B0252E33A541559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e2:ab:e8:d7:74:62:b7:a4:d1:c5:02:d3:ee: 9b:0f:ad:26:b5:f8:fc:e9:5d:43:1c:83:3c:3f:83: c4:ed:f4:61:bd:d5:2b:30:9f:1c:af:04:5c:78:56: fc:de:9e:ed:21:f9:a3:ee:40:74:57:0a:74:0c:e7: bb:3e:f4:bf:db:35:60:62:3f:e8:dd:17:19:a5:3a: c9:e8:80:2b:38:8c:21:b6:79:6d:39:f6:5d:8b:58: ac:f9:c4:41:fa:48:41:57:3c:a7:d7:87:ea:6d:e2: e0:fe:2c:60:f0:54:7f:07:6b:d1:f7:5e:eb:b5:df: ca:fe:88:03:10:f2:5f:42:19:87:d7:bc:c2:e9:c3: 2a:78:fe:25:e1:74:bd:9b:c9:f3:bc:65:45:81:4f: 2b:ea:93:1f:2f:8d:0b:57:a8:21:68:c4:06:38:58: e5:b9:4b:7d:cf:82:54:bc:d4:db:26:90:09:1b:1f: 07:c7:88:e9:90:dd:ec:f6:33:e9:d7:92:02:59:5d: 72:ac:9e:87:de:7d:80:49:08:20:b7:f0:b3:e0:7a: cc:c4:55:14:a7:d2:26:b4:5c:99:00:af:de:4c:e9: d2:51:e5:d9:89:f2:f1:41:3d:09:61:95:39:e8:86: b7:ef:e8:ce:b2:f9:ec:6a:95:a5:a0:a7:75:66:09: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:B9:2A:B5:F7:B7:CE:B4:EF:C8:D5:8B:02:52:E3:3A:54:15:59 X509v3 Authority Key Identifier: keyid:AB:2D:CC:16:9C:95:F2:B1:4D:F3:1D:D2:4A:1F:67:03:4E:A7:77:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/36322e38342e3136342e302f32332d3234203d3e203230333236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.84.164.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:48:df:f5:0f:97:8a:05:80:71:03:76:c8:2c:d2:f6:52:58: d7:2f:ac:a2:f0:d4:7b:6e:88:61:b1:7f:5c:f8:8c:1f:1e:29: 36:97:21:31:e3:28:ba:b9:04:2e:bf:25:b0:67:99:0e:14:0f: 2d:ee:ba:2b:1b:5f:bf:9a:4d:da:2d:08:24:07:5d:3a:2d:67: 7c:ba:6e:6d:cd:fc:36:f2:f8:b8:d7:c3:0d:ec:9d:0c:14:15: ba:7d:96:97:b5:47:4c:01:f2:25:4a:fa:e5:ae:43:1b:4d:41: ec:79:cf:f9:47:42:9c:c6:2c:a4:b9:b2:8d:75:92:9b:c1:31: 04:bc:bd:c5:7b:a7:47:cd:05:8c:7e:62:91:31:7b:4c:3f:43: 03:cc:8d:be:90:c1:8e:aa:fb:bc:49:38:63:d3:e6:b0:24:3f: e4:fb:e8:30:6f:4f:69:32:6c:30:12:74:0d:da:41:c6:f0:4a: 25:9e:c2:e2:b2:31:35:1e:bf:27:2c:d5:7a:af:33:6f:57:67: ac:ae:1f:ef:8c:8b:a3:bb:40:06:d8:52:63:f5:b0:a7:23:82: f0:b1:aa:a9:aa:a7:fa:bf:1d:bc:66:2d:31:5b:6a:c9:77:95: b1:48:83:a0:a7:76:f2:4a:0c:ea:c2:4d:b5:31:9b:68:d1:be: 4b:e9:2a:86 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUULFJ3T/h5zAqVrKewkkz1V30k8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYWIyZGNjMTY5Yzk1ZjJiMTRkZjMxZGQyNGExZjY3MDM0 ZWE3Nzc5YzAeFw0yNTExMjQwNzQyMzFaFw0yNjExMjMwNzQ3MzFaMDMxMTAvBgNV BAMTKEVEQ0VCOTJBQjVGN0I3Q0VCNEVGQzhENThCMDI1MkUzM0E1NDE1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI4qvo13Rit6TRxQLT7psPrSa1 +PzpXUMcgzw/g8Tt9GG91SswnxyvBFx4Vvzenu0h+aPuQHRXCnQM57s+9L/bNWBi P+jdFxmlOsnogCs4jCG2eW059l2LWKz5xEH6SEFXPKfXh+pt4uD+LGDwVH8Ha9H3 Xuu138r+iAMQ8l9CGYfXvMLpwyp4/iXhdL2byfO8ZUWBTyvqkx8vjQtXqCFoxAY4 WOW5S33PglS81NsmkAkbHwfHiOmQ3ez2M+nXkgJZXXKsnofefYBJCCC38LPgeszE VRSn0ia0XJkAr95M6dJR5dmJ8vFBPQlhlTnohrfv6M6y+exqlaWgp3VmCQ/ZAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU7c65KrX3t86078jViwJS4zpUFVkwHwYDVR0j BBgwFoAUqy3MFpyV8rFN8x3SSh9nA06nd5wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzQvQUIyRENDMTY5Qzk1RjJCMTRERjMxREQyNEExRjY3MDM0RUE3Nzc5Qy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3F5M01GcHlWOHJGTjh4M1NTaDluQTA2 bmQ1dy5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzQvMzYzMjJlMzgzNDJlMzEzNjM0 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMDMzMzIzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAT5U pDANBgkqhkiG9w0BAQsFAAOCAQEAH0jf9Q+XigWAcQN2yCzS9lJY1y+sovDUe26I YbF/XPiMHx4pNpchMeMourkELr8lsGeZDhQPLe66Kxtfv5pN2i0IJAddOi1nfLpu bc38NvL4uNfDDeydDBQVun2Wl7VHTAHyJUr65a5DG01B7HnP+UdCnMYspLmyjXWS m8ExBLy9xXunR80FjH5ikTF7TD9DA8yNvpDBjqr7vEk4Y9PmsCQ/5PvoMG9PaTJs MBJ0DdpBxvBKJZ7C4rIxNR6/JyzVeq8zb1dnrK4f74yLo7tABthSY/WwpyOC8LGq qaqn+r8dvGYtMVtqyXeVsUiDoKd28koM6sJNtTGbaNG+S+kqhg== -----END CERTIFICATE-----Generated at Thu Dec 4 07:38:20 2025 by rpki-client