This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa File: 33372e34342e3234362e302f32332d3234203d3e203437353833.roa (raw, json) Hash identifier: 2l67MyNsbRAAmQiO82K9lOtQNhWacOZ06t1w4PciF2U= Subject key identifier: F3:53:13:2A:C3:CA:46:C1:BA:05:4A:B0:DC:DE:D7:A0:0D:5A:C3:4A Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 3668A49B42A51CD76E9657E2DC8F0CCAEDAD5ACC Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa Signing time: Mon 29 Dec 2025 09:50:24 +0000 ROA not before: Mon 29 Dec 2025 09:45:24 +0000 ROA not after: Mon 28 Dec 2026 09:50:24 +0000 asID: 47583 IP address blocks: 37.44.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:68:a4:9b:42:a5:1c:d7:6e:96:57:e2:dc:8f:0c:ca:ed:ad:5a:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Dec 29 09:45:24 2025 GMT Not After : Dec 28 09:50:24 2026 GMT Subject: CN=F353132AC3CA46C1BA054AB0DCDED7A00D5AC34A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1b:bf:6c:dc:00:67:b1:80:27:e5:31:48:fa: c2:dc:ce:f5:7e:4a:40:6f:c7:1a:4f:10:fb:d9:27: 0e:c2:ff:9b:2a:0e:6b:6f:c9:44:46:b0:c5:52:c0: 1e:47:8c:1d:37:69:66:6b:28:ef:d9:65:60:1c:5a: f9:cc:46:33:6b:2f:d1:a7:4c:b3:94:81:e9:83:f2: dd:1c:a7:38:2c:17:ed:ee:94:ab:21:7c:2e:89:eb: da:9c:dd:93:0a:a6:5a:f9:a8:c4:0e:fb:20:16:9b: 41:31:a9:63:a0:98:44:7b:d8:a0:cc:47:e2:17:8a: 7b:3a:9e:fd:1d:44:d8:83:0c:2f:b4:94:fb:2f:3f: bd:cc:28:ed:7e:26:75:4c:09:b2:65:ba:86:bd:75: 62:3d:9b:79:b0:a3:84:02:15:f4:34:3d:63:27:b2: 2b:c1:94:8c:e4:24:21:06:37:e2:36:10:67:e9:12: 32:17:81:94:45:8a:89:7a:4e:f5:2c:10:45:07:c2: 3e:7e:7b:04:de:b7:02:bc:86:9a:6b:83:4a:99:ac: 15:50:62:92:15:aa:6d:04:ad:54:a7:59:c3:fa:a9: d5:ef:27:be:60:4e:30:b6:d5:ef:33:31:06:30:d4: d1:a1:a1:4c:bf:4d:23:f0:37:66:35:32:38:4a:46: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:53:13:2A:C3:CA:46:C1:BA:05:4A:B0:DC:DE:D7:A0:0D:5A:C3:4A X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/33372e34342e3234362e302f32332d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.44.246.0/23 Signature Algorithm: sha256WithRSAEncryption 46:1c:64:86:c7:a3:0d:21:97:e7:2f:85:e7:b0:d5:db:27:30: c4:b0:f1:2d:54:1e:8f:55:1f:d3:d5:0e:77:c2:b1:c5:dc:dc: 06:50:1c:1c:87:b0:8c:7a:fd:c1:b4:ed:fa:aa:76:cb:de:8c: 63:56:ef:e7:c2:f3:45:36:18:2a:c9:2e:8e:d8:b5:a6:dc:7e: 7e:cb:c4:16:bc:26:af:65:2f:78:24:15:8a:16:24:8d:6d:d4: cd:36:c7:26:19:b4:48:fb:d7:59:37:32:57:ed:f7:98:c4:d3: dc:3b:4b:1d:c2:1a:ca:3c:30:52:bc:9b:a1:74:de:60:41:36: 67:9d:0d:1d:0b:36:52:70:15:3b:57:37:89:e4:36:72:63:77: 08:db:23:6b:6e:65:75:34:f0:4b:2a:a5:52:71:69:85:12:29: ce:35:d9:9a:b1:aa:57:a1:f5:99:43:c6:26:7f:d5:8b:90:49: 20:32:54:1f:39:af:01:fa:08:6f:f7:39:79:99:b2:4b:46:27: cf:91:ae:05:bf:e7:a9:66:c3:4d:c9:df:28:1e:65:41:20:40: 0c:66:6d:af:62:31:be:5c:20:a7:5a:89:53:19:57:d0:a8:60: 42:d9:22:17:f1:a3:ff:9c:a8:6b:0b:09:9e:38:d5:55:fb:43: fd:c2:52:14 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUNmikm0KlHNdullfi3I8Myu2tWswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTEyMjkwOTQ1MjRaFw0yNjEyMjgwOTUwMjRaMDMxMTAvBgNV BAMTKEYzNTMxMzJBQzNDQTQ2QzFCQTA1NEFCMERDREVEN0EwMEQ1QUMzNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJG79s3ABnsYAn5TFI+sLczvV+ SkBvxxpPEPvZJw7C/5sqDmtvyURGsMVSwB5HjB03aWZrKO/ZZWAcWvnMRjNrL9Gn TLOUgemD8t0cpzgsF+3ulKshfC6J69qc3ZMKplr5qMQO+yAWm0ExqWOgmER72KDM R+IXins6nv0dRNiDDC+0lPsvP73MKO1+JnVMCbJluoa9dWI9m3mwo4QCFfQ0PWMn sivBlIzkJCEGN+I2EGfpEjIXgZRFiol6TvUsEEUHwj5+ewTetwK8hpprg0qZrBVQ YpIVqm0ErVSnWcP6qdXvJ75gTjC21e8zMQYw1NGhoUy/TSPwN2Y1MjhKRhW/AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU81MTKsPKRsG6BUqw3N7XoA1aw0owHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzMzNzJlMzQzNDJlMzIzNDM2 MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEASUs 9jANBgkqhkiG9w0BAQsFAAOCAQEARhxkhsejDSGX5y+F57DV2ycwxLDxLVQej1Uf 09UOd8KxxdzcBlAcHIewjHr9wbTt+qp2y96MY1bv58LzRTYYKskujti1ptx+fsvE Frwmr2UveCQVihYkjW3UzTbHJhm0SPvXWTcyV+33mMTT3DtLHcIayjwwUryboXTe YEE2Z50NHQs2UnAVO1c3ieQ2cmN3CNsja25ldTTwSyqlUnFphRIpzjXZmrGqV6H1 mUPGJn/Vi5BJIDJUHzmvAfoIb/c5eZmyS0Ynz5GuBb/nqWbDTcnfKB5lQSBADGZt r2Ixvlwgp1qJUxlX0KhgQtkiF/Gj/5yoawsJnjjVVftD/cJSFA== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:56 2026 by rpki-client