This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37362e302f32342d3234203d3e20313331313939.roa File: 352e3130342e37362e302f32342d3234203d3e20313331313939.roa (raw, json) Hash identifier: +07nPWqQmBXeqlktUptVUYzMz9GKDPauh065uro8tgk= Subject key identifier: 2A:EB:6B:96:44:8E:42:4C:DA:A6:EA:0E:4A:F3:7E:D2:7B:2A:CE:75 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 6CF2C80A81303422805915F72E1CB22E5E33260B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37362e302f32342d3234203d3e20313331313939.roa Signing time: Fri 28 Nov 2025 11:49:45 +0000 ROA not before: Fri 28 Nov 2025 11:44:45 +0000 ROA not after: Fri 27 Nov 2026 11:49:45 +0000 asID: 131199 IP address blocks: 5.104.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:f2:c8:0a:81:30:34:22:80:59:15:f7:2e:1c:b2:2e:5e:33:26:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:45 2025 GMT Not After : Nov 27 11:49:45 2026 GMT Subject: CN=2AEB6B96448E424CDAA6EA0E4AF37ED27B2ACE75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d5:8c:73:1c:78:cb:af:7b:00:c6:93:85:19: da:36:57:97:e7:40:9f:df:4f:f5:73:cf:31:05:a7: 54:f0:cd:4e:78:11:68:d2:fa:d0:2b:5f:c3:8a:5c: ef:cd:c2:ef:b5:87:04:a5:77:ed:d3:2f:3a:88:61: 37:fe:82:95:29:01:31:40:4a:01:5f:01:e6:05:af: bd:c7:63:45:6d:13:dd:eb:a3:b4:4b:7b:0f:4e:f6: 18:ac:d1:b8:7d:2b:3d:64:ba:62:98:22:43:18:df: 93:12:c7:b6:2e:0d:3f:2d:43:81:bc:6e:0f:d9:1a: 98:28:47:c0:7b:5e:0c:1d:f9:d6:fb:09:c9:68:82: 2b:15:8e:03:e1:84:17:7d:d3:08:f1:2e:f8:99:df: 71:04:33:8b:e0:51:41:2f:98:81:46:e0:15:7d:56: 3d:14:96:33:b1:cd:0b:d4:d0:5a:e2:be:ad:6c:46: 23:50:2d:dd:ed:5e:21:6c:a5:25:12:59:7b:43:48: ac:ef:f5:24:65:a6:64:7c:af:5f:e4:a7:35:2a:e3: 46:d0:65:a5:60:13:c4:52:fe:82:a9:9b:18:1e:63: 7e:c4:d3:41:4e:ad:f2:59:03:e1:35:1d:e9:9d:07: 42:c4:6b:ed:d1:38:c9:54:1d:60:b6:7a:8a:30:06: 48:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:EB:6B:96:44:8E:42:4C:DA:A6:EA:0E:4A:F3:7E:D2:7B:2A:CE:75 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3130342e37362e302f32342d3234203d3e20313331313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.104.76.0/24 Signature Algorithm: sha256WithRSAEncryption c7:22:9e:fb:f9:07:55:90:32:3a:65:4e:b6:d3:a1:79:a6:9d: fd:cd:5f:2e:b1:57:7a:fb:5b:fa:46:54:47:a2:f1:96:6f:fa: 19:a6:8e:ad:03:2a:10:91:75:6e:f7:07:b5:2e:d4:72:29:ed: 9e:a8:d9:d6:a1:01:36:a9:04:30:55:d4:2d:3b:55:35:be:45: 9f:c7:a4:4c:c5:80:30:d9:0f:fe:76:d0:05:c3:54:ef:68:b5: b6:3d:b7:0d:98:e2:d7:74:03:d6:f0:3e:4b:d2:9e:24:b1:d2: 92:42:93:21:46:e9:1e:1e:ff:60:14:a6:7b:4d:e5:ff:35:e5: 7f:3a:b8:cc:24:a1:a4:b9:fa:59:eb:f2:2f:5e:80:fb:1a:f5: da:ee:d8:d2:d4:13:da:b7:15:d0:72:ec:8a:af:74:d1:27:80: 64:69:f8:06:88:05:16:b5:b3:d8:52:b9:3f:c3:d6:6c:00:e3: 19:cb:a7:8a:0f:8a:13:3a:a9:57:85:6e:9b:f5:fb:d7:77:27: 90:31:45:08:08:46:38:01:3d:30:38:5b:ea:d1:98:17:3a:10: d6:82:5d:cd:19:13:eb:b2:08:cc:16:41:6e:dc:37:ba:ce:5d: 93:07:1f:fa:50:a0:07:2c:3d:3b:b6:47:a1:2c:45:64:fc:fa: 45:90:73:1b -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUbPLICoEwNCKAWRX3LhyyLl4zJgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDVaFw0yNjExMjcxMTQ5NDVaMDMxMTAvBgNV BAMTKDJBRUI2Qjk2NDQ4RTQyNENEQUE2RUEwRTRBRjM3RUQyN0IyQUNFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc1YxzHHjLr3sAxpOFGdo2V5fn QJ/fT/VzzzEFp1TwzU54EWjS+tArX8OKXO/Nwu+1hwSld+3TLzqIYTf+gpUpATFA SgFfAeYFr73HY0VtE93ro7RLew9O9his0bh9Kz1kumKYIkMY35MSx7YuDT8tQ4G8 bg/ZGpgoR8B7Xgwd+db7CclogisVjgPhhBd90wjxLviZ33EEM4vgUUEvmIFG4BV9 Vj0UljOxzQvU0Frivq1sRiNQLd3tXiFspSUSWXtDSKzv9SRlpmR8r1/kpzUq40bQ ZaVgE8RS/oKpmxgeY37E00FOrfJZA+E1HemdB0LEa+3ROMlUHWC2eoowBkgdAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUKutrlkSOQkzapuoOSvN+0nsqznUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzMDM0MmUz NzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzMxMzEzOTM5LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABWhMMA0GCSqGSIb3DQEBCwUAA4IBAQDHIp77+QdVkDI6ZU6206F5pp39zV8u sVd6+1v6RlRHovGWb/oZpo6tAyoQkXVu9we1LtRyKe2eqNnWoQE2qQQwVdQtO1U1 vkWfx6RMxYAw2Q/+dtAFw1TvaLW2PbcNmOLXdAPW8D5L0p4ksdKSQpMhRukeHv9g FKZ7TeX/NeV/OrjMJKGkufpZ6/IvXoD7GvXa7tjS1BPatxXQcuyKr3TRJ4BkafgG iAUWtbPYUrk/w9ZsAOMZy6eKD4oTOqlXhW6b9fvXdyeQMUUICEY4AT0wOFvq0ZgX OhDWgl3NGRPrsgjMFkFu3De6zl2TBx/6UKAHLD07tkehLEVk/PpFkHMb -----END CERTIFICATE-----Generated at Sun Dec 7 06:33:41 2025 by rpki-client