This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131382e302f32342d3234203d3e20313336373837.roa File: 352e3133332e3131382e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: K9bDp6MBcufYWmSW2sjyJG/hvnw7GrHlIszWEN4bhbc= Subject key identifier: 6A:9F:15:21:55:FF:7F:FF:D3:89:FC:26:3E:1F:2A:53:73:27:BC:96 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4EF09A9AB99FD938A5A7C21B2454BA48E64F3D0A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131382e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 136787 IP address blocks: 5.133.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:f0:9a:9a:b9:9f:d9:38:a5:a7:c2:1b:24:54:ba:48:e6:4f:3d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=6A9F152155FF7FFFD389FC263E1F2A537327BC96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:55:ba:50:3f:ed:9a:12:ea:14:d2:c5:92: 88:2c:be:99:a6:1b:91:7d:6d:b3:af:40:04:cd:b5: ce:94:43:96:cb:b6:ab:fd:e0:a7:86:ee:81:2e:4a: f3:9c:64:2b:f1:b2:1b:cf:fa:da:b2:e8:6d:5e:f9: d3:30:06:04:15:b1:fa:ae:20:f3:9a:1f:da:7c:63: 6b:cf:44:4c:3f:06:9b:88:d2:63:ef:f5:5f:91:26: f8:da:9e:98:0b:4b:95:79:c9:65:1b:6c:40:b1:d0: 65:1d:a9:41:f2:85:e3:55:d5:06:7c:fa:a4:10:3b: 3e:27:41:25:13:1d:e8:2c:4f:67:74:65:88:a5:6f: c4:d9:d5:ab:4d:66:27:61:18:62:cc:e6:f5:81:fe: de:7d:11:6b:6b:6b:68:98:6f:57:33:18:80:be:1f: fb:01:59:2a:c2:48:6a:33:54:90:cf:d8:4a:48:69: 0e:7d:0a:d3:c3:a2:37:69:3e:e9:d4:aa:18:9c:67: 60:3f:38:83:88:44:36:3f:87:f9:1d:f2:51:06:58: eb:e6:6d:3d:e8:67:d4:e0:fb:e6:2a:bc:0b:1e:84: 78:34:3f:df:32:22:24:00:99:50:a2:d6:2c:64:0b: 61:76:86:00:d4:7f:68:72:78:ce:3f:8e:db:b0:0b: 11:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9F:15:21:55:FF:7F:FF:D3:89:FC:26:3E:1F:2A:53:73:27:BC:96 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131382e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.118.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:bc:22:5d:b5:14:11:61:62:3c:bd:35:bc:2e:48:d7:47:30: 63:f0:29:4a:83:fd:10:8b:7f:cc:0c:7f:9e:9d:da:f0:ee:2d: b7:8a:6e:b1:da:ea:5e:89:13:4d:8e:98:85:db:7f:c6:02:b0: 4f:bd:1a:8a:8c:7f:90:64:be:91:49:76:4c:cb:7b:bd:b6:14: 3a:49:d0:21:97:33:57:a2:6a:48:64:65:1f:db:d8:91:e4:3c: 47:fb:1e:1d:37:38:69:4d:47:14:eb:0f:fb:c4:18:08:21:a5: d3:1e:f1:d5:62:20:91:87:71:b6:1f:21:5f:30:54:4d:17:a1: 48:c5:85:e9:5b:2e:18:20:70:f0:8e:ba:6d:26:b1:95:f1:35: 8d:dc:b9:bd:2b:5d:0c:ba:91:46:20:3b:7e:bf:9d:ca:a3:78: 75:fc:49:5f:8d:e0:ca:e5:5f:17:87:13:a4:ce:7c:9c:41:a0: 39:73:24:79:dc:c1:c7:91:e4:bf:34:dc:40:90:b2:25:0e:c5: de:8c:46:26:70:a4:f5:74:39:53:64:8b:92:b9:81:82:71:96: 72:b1:61:c8:c2:e6:4a:27:3f:6f:fa:91:d3:4e:c9:f7:55:36: 59:7c:47:33:24:39:1c:31:73:30:89:63:43:c0:23:be:07:7d: 56:c3:de:21 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUTvCamrmf2Tilp8IbJFS6SOZPPQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDZBOUYxNTIxNTVGRjdGRkZEMzg5RkMyNjNFMUYyQTUzNzMyN0JDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiclW6UD/tmhLqFNLFkogsvpmm G5F9bbOvQATNtc6UQ5bLtqv94KeG7oEuSvOcZCvxshvP+tqy6G1e+dMwBgQVsfqu IPOaH9p8Y2vPREw/BpuI0mPv9V+RJvjanpgLS5V5yWUbbECx0GUdqUHyheNV1QZ8 +qQQOz4nQSUTHegsT2d0ZYilb8TZ1atNZidhGGLM5vWB/t59EWtra2iYb1czGIC+ H/sBWSrCSGozVJDP2EpIaQ59CtPDojdpPunUqhicZ2A/OIOIRDY/h/kd8lEGWOvm bT3oZ9Tg++YqvAsehHg0P98yIiQAmVCi1ixkC2F2hgDUf2hyeM4/jtuwCxHXAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUap8VIVX/f//TifwmPh8qU3MnvJYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzMzMzMmUz MTMxMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAFhXYwDQYJKoZIhvcNAQELBQADggEBABy8Il21FBFhYjy9NbwuSNdHMGPw KUqD/RCLf8wMf56d2vDuLbeKbrHa6l6JE02OmIXbf8YCsE+9GoqMf5BkvpFJdkzL e722FDpJ0CGXM1eiakhkZR/b2JHkPEf7Hh03OGlNRxTrD/vEGAghpdMe8dViIJGH cbYfIV8wVE0XoUjFhelbLhggcPCOum0msZXxNY3cub0rXQy6kUYgO36/ncqjeHX8 SV+N4MrlXxeHE6TOfJxBoDlzJHncwceR5L803ECQsiUOxd6MRiZwpPV0OVNki5K5 gYJxlnKxYcjC5konP2/6kdNOyfdVNll8RzMkORwxczCJY0PAI74HfVbD3iE= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:13 2025 by rpki-client