This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131362e302f32342d3234203d3e20313336373837.roa File: 352e3133332e3131362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: zC0QClgZmfk+fImwmHsNY3hRvLWZFo/Ms/9f2TLitZs= Subject key identifier: FA:D9:0E:36:AD:88:5A:45:93:4E:07:23:7E:67:DA:DC:27:DE:A9:96 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 380CEFF3726730F0712DCB2A061FDFE66C5C8C6B Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 136787 IP address blocks: 5.133.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0c:ef:f3:72:67:30:f0:71:2d:cb:2a:06:1f:df:e6:6c:5c:8c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=FAD90E36AD885A45934E07237E67DADC27DEA996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b5:45:7f:56:e4:49:78:85:f5:fa:f6:d0:dc: 16:88:07:2c:ba:38:be:ab:dd:bc:1a:3d:ad:a8:55: b7:be:77:b2:42:78:84:08:30:e9:b2:d3:96:06:78: 49:fe:85:c9:1e:3c:bb:4d:e4:81:ef:cc:8c:31:a2: fc:29:2e:a6:e3:71:57:71:a3:a1:ec:b0:90:1e:76: 9e:15:a7:cb:ed:81:3c:d6:72:8f:5c:4f:00:b4:ad: 50:fd:1b:cc:c5:96:1e:4e:0e:88:e4:b1:ad:92:f5: 42:cc:7b:48:e7:d9:8d:4e:99:97:d3:0e:f3:3d:39: 33:fc:d0:46:11:a3:63:5f:ae:aa:83:c9:55:f4:2d: 41:45:ce:bf:48:4d:c1:48:10:c8:df:df:5a:da:3d: 88:0f:b6:db:7b:f9:c7:9a:ef:ca:44:fd:d6:78:9f: 93:fd:51:e3:28:85:9f:9e:09:cc:eb:98:0e:51:a2: df:60:95:cd:50:c8:12:ba:68:75:77:8f:2d:be:4d: 2b:68:fd:c0:4f:46:4d:41:2a:6e:f3:45:d7:b5:e2: 58:f7:09:c0:0e:c9:49:ca:89:e5:5b:eb:ae:b4:d6: 3f:7c:e1:06:d4:ff:84:77:99:33:16:6f:de:4f:73: 3b:20:f5:ea:8b:68:75:4d:bc:9b:79:05:d2:11:ea: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:0E:36:AD:88:5A:45:93:4E:07:23:7E:67:DA:DC:27:DE:A9:96 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.116.0/24 Signature Algorithm: sha256WithRSAEncryption 17:45:64:2e:9f:89:b3:2f:dd:bd:ed:2a:e2:b1:b4:c3:f8:d1: b6:bd:63:89:12:ad:bb:51:35:11:40:57:13:76:dc:d3:01:09: 02:d0:46:8e:43:10:70:3f:a4:ca:92:e8:ac:65:e9:98:e5:26: 0a:2d:d7:01:24:15:4b:97:aa:a4:dc:56:d9:57:2f:cc:95:ca: 8d:31:23:c5:78:01:98:87:e7:03:f7:98:f6:a9:52:aa:1e:94: 2c:20:a6:c7:b1:c8:2f:7c:f0:3f:9f:d2:ab:1d:fa:58:9c:87: 90:d1:b1:4e:b9:9b:5e:3b:82:19:b7:a1:4e:4d:33:b2:8a:37: 9d:06:61:cc:0f:cc:64:5f:91:bf:29:67:45:06:72:53:a3:85: 46:0d:e2:15:63:25:1b:43:19:8f:f8:a5:d9:b5:1d:e8:30:0b: a0:2b:a6:f4:a3:8b:7a:3f:c1:28:10:c6:0c:53:90:eb:05:42: 79:41:c9:94:86:7b:2c:61:45:dd:c5:08:54:14:2f:64:7e:7c: 9e:75:a3:98:cd:95:d5:78:70:0b:be:27:37:15:07:3b:35:57: 1b:98:f5:4c:ae:13:ef:a9:25:d8:2d:09:34:d8:38:60:59:d8: 84:e7:9d:a7:92:d6:79:64:59:da:b5:54:b0:1b:c3:39:a1:4c: 90:c0:fa:85 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUOAzv83JnMPBxLcsqBh/f5mxcjGswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKEZBRDkwRTM2QUQ4ODVBNDU5MzRFMDcyMzdFNjdEQURDMjdERUE5OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDetUV/VuRJeIX1+vbQ3BaIByy6 OL6r3bwaPa2oVbe+d7JCeIQIMOmy05YGeEn+hckePLtN5IHvzIwxovwpLqbjcVdx o6HssJAedp4Vp8vtgTzWco9cTwC0rVD9G8zFlh5ODojksa2S9ULMe0jn2Y1OmZfT DvM9OTP80EYRo2NfrqqDyVX0LUFFzr9ITcFIEMjf31raPYgPttt7+cea78pE/dZ4 n5P9UeMohZ+eCczrmA5Rot9glc1QyBK6aHV3jy2+TSto/cBPRk1BKm7zRde14lj3 CcAOyUnKieVb66601j984QbU/4R3mTMWb95Pczsg9eqLaHVNvJt5BdIR6jZpAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU+tkONq2IWkWTTgcjfmfa3CfeqZYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzMzMzMmUz MTMxMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAFhXQwDQYJKoZIhvcNAQELBQADggEBABdFZC6fibMv3b3tKuKxtMP40ba9 Y4kSrbtRNRFAVxN23NMBCQLQRo5DEHA/pMqS6Kxl6ZjlJgot1wEkFUuXqqTcVtlX L8yVyo0xI8V4AZiH5wP3mPapUqoelCwgpsexyC988D+f0qsd+lich5DRsU65m147 ghm3oU5NM7KKN50GYcwPzGRfkb8pZ0UGclOjhUYN4hVjJRtDGY/4pdm1HegwC6Ar pvSji3o/wSgQxgxTkOsFQnlByZSGeyxhRd3FCFQUL2R+fJ51o5jNldV4cAu+JzcV Bzs1VxuY9UyuE++pJdgtCTTYOGBZ2ITnnaeS1nlkWdq1VLAbwzmhTJDA+oU= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:54 2025 by rpki-client