This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323132333335.roa File: 352e3138312e3138342e302f32342d3234203d3e20323132333335.roa (raw, json) Hash identifier: UCQA4MebhnFRuGzYIjyz+Oaxw3thh569/39f5fjzuDM= Subject key identifier: 60:A1:FD:B5:8C:1F:12:2F:8F:1D:F5:D1:32:1B:F8:2A:6D:BD:58:98 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 6C7015F3AC95A0D71D7C4224F91A1FED66526290 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323132333335.roa Signing time: Tue 09 Dec 2025 13:55:14 +0000 ROA not before: Tue 09 Dec 2025 13:50:14 +0000 ROA not after: Tue 08 Dec 2026 13:55:14 +0000 asID: 212335 IP address blocks: 5.181.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:70:15:f3:ac:95:a0:d7:1d:7c:42:24:f9:1a:1f:ed:66:52:62:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Dec 9 13:50:14 2025 GMT Not After : Dec 8 13:55:14 2026 GMT Subject: CN=60A1FDB58C1F122F8F1DF5D1321BF82A6DBD5898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:ba:83:88:69:61:75:4f:e2:fe:59:de:26: dc:7e:4c:b4:4a:d1:73:ae:58:bd:67:05:99:bb:9f: be:8d:ee:a8:aa:3a:6b:6f:44:58:73:41:2a:7e:cc: d2:e6:9c:80:b1:6e:f9:d6:80:67:a2:52:42:77:cd: af:fc:ef:ea:d8:3d:b5:30:4e:72:7e:d3:48:62:31: 8a:ef:57:dd:9f:5d:74:23:80:af:22:d0:f1:84:0e: da:83:1d:77:3a:77:f5:01:36:cc:b0:40:f7:60:54: db:6a:40:f3:02:51:74:b3:ee:69:bb:a7:a2:f6:e7: 3c:bb:75:a1:43:04:19:dd:3f:2a:35:4f:23:70:f4: 85:e5:8b:22:ee:9c:59:b5:31:e3:09:7e:2c:36:a7: dd:37:a7:96:4e:13:85:8b:02:cb:33:21:78:5e:d4: 14:15:40:bf:94:f8:a4:ba:47:a7:33:01:55:f4:55: 4d:17:f6:85:24:49:e8:3c:c1:eb:16:64:9f:a1:3d: 1b:45:1b:14:f2:8b:9d:ba:af:af:e4:1a:86:49:26: 3e:0e:9f:3a:04:b2:db:b6:55:ff:55:b0:79:38:88: 23:8b:c9:f6:35:50:9c:7b:c7:e8:a9:1a:ba:5e:db: 4f:84:d8:df:26:6e:84:1c:51:30:1f:17:97:83:68: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:FD:B5:8C:1F:12:2F:8F:1D:F5:D1:32:1B:F8:2A:6D:BD:58:98 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138342e302f32342d3234203d3e20323132333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.184.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:59:24:ec:65:64:19:59:21:02:48:2d:6b:8f:e0:de:56:d1: ee:64:58:60:0d:b0:64:ce:0b:70:ee:09:5e:ba:f2:20:db:c1: c3:ed:74:63:88:1f:79:0d:34:7a:29:6a:ca:57:04:bf:b3:db: d8:b8:89:37:17:06:3f:e2:ba:b4:83:9c:75:f1:78:c4:e2:12: c3:09:71:94:f7:24:40:10:af:32:d3:2f:3f:ca:5b:7b:2e:3c: fa:88:3f:b8:83:15:85:bb:50:a6:42:48:3f:71:ab:0e:26:67: ea:74:5d:04:a0:d0:a0:bb:da:5b:8d:de:d9:99:f6:27:fb:ca: 53:32:64:9e:98:85:34:68:3f:6d:1a:8a:d8:b7:67:5b:a2:93: a2:2e:97:b2:f4:76:8c:35:b8:4b:d4:5b:75:a3:2b:cd:b5:75: 45:e0:2b:74:88:db:8c:c5:c4:b6:6c:07:64:c9:d2:ac:46:91: ef:c1:d4:9f:8d:db:1c:9e:55:53:68:0f:80:79:35:2f:17:6b: 94:09:29:a6:69:81:ba:87:2d:cd:76:c9:ee:f3:d7:03:43:0e: 45:be:49:9b:c8:2d:e2:4a:0f:78:c6:f2:fe:13:cf:aa:6d:e0: 67:93:84:64:70:ea:7d:6d:aa:4e:f0:a9:f7:a6:6c:9c:08:85: 05:ea:b6:27 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbHAV86yVoNcdfEIk+Rof7WZSYpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTEyMDkxMzUwMTRaFw0yNjEyMDgxMzU1MTRaMDMxMTAvBgNV BAMTKDYwQTFGREI1OEMxRjEyMkY4RjFERjVEMTMyMUJGODJBNkRCRDU4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwkLqDiGlhdU/i/lneJtx+TLRK 0XOuWL1nBZm7n76N7qiqOmtvRFhzQSp+zNLmnICxbvnWgGeiUkJ3za/87+rYPbUw TnJ+00hiMYrvV92fXXQjgK8i0PGEDtqDHXc6d/UBNsywQPdgVNtqQPMCUXSz7mm7 p6L25zy7daFDBBndPyo1TyNw9IXliyLunFm1MeMJfiw2p903p5ZOE4WLAsszIXhe 1BQVQL+U+KS6R6czAVX0VU0X9oUkSeg8wesWZJ+hPRtFGxTyi526r6/kGoZJJj4O nzoEstu2Vf9VsHk4iCOLyfY1UJx7x+ipGrpe20+E2N8mboQcUTAfF5eDaCiLAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUYKH9tYwfEi+PHfXRMhv4Km29WJgwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM0 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMyMzMzMzM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA BbW4MA0GCSqGSIb3DQEBCwUAA4IBAQCKWSTsZWQZWSECSC1rj+DeVtHuZFhgDbBk zgtw7gleuvIg28HD7XRjiB95DTR6KWrKVwS/s9vYuIk3FwY/4rq0g5x18XjE4hLD CXGU9yRAEK8y0y8/ylt7Ljz6iD+4gxWFu1CmQkg/casOJmfqdF0EoNCgu9pbjd7Z mfYn+8pTMmSemIU0aD9tGorYt2dbopOiLpey9HaMNbhL1Ft1oyvNtXVF4Ct0iNuM xcS2bAdkydKsRpHvwdSfjdscnlVTaA+AeTUvF2uUCSmmaYG6hy3Ndsnu89cDQw5F vkmbyC3iSg94xvL+E8+qbeBnk4RkcOp9bapO8Kn3pmycCIUF6rYn -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:59 2025 by rpki-client