This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131392e302f32342d3234203d3e20313336373837.roa File: 352e3133332e3131392e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: g8AOOEncN3pu76/NcA8+ss/NWJaAqPqIdxlX3qNsgas= Subject key identifier: 01:C6:11:23:C3:CC:F5:A6:19:32:35:53:CA:AA:20:2A:2C:09:3D:51 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 58AA9FF029E1479EE0A636ADBC935A8398C932C9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131392e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:39 +0000 ROA not before: Fri 28 Nov 2025 11:44:39 +0000 ROA not after: Fri 27 Nov 2026 11:49:39 +0000 asID: 136787 IP address blocks: 5.133.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:aa:9f:f0:29:e1:47:9e:e0:a6:36:ad:bc:93:5a:83:98:c9:32:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:39 2025 GMT Not After : Nov 27 11:49:39 2026 GMT Subject: CN=01C61123C3CCF5A619323553CAAA202A2C093D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:64:21:bb:45:1b:2e:00:48:7f:37:66:d2: 38:b8:27:36:c2:0d:33:79:d7:2c:28:7d:5a:4d:86: 82:c8:5c:8b:0c:ea:19:39:6e:a7:9f:e7:02:91:96: 70:b2:36:6c:a3:cf:f4:b2:56:64:b1:e8:fe:5d:80: 8a:a7:59:88:a1:ca:8d:8f:20:78:81:21:0e:aa:48: e3:40:1a:87:18:56:d6:59:67:35:c6:ce:19:5f:fa: 9c:ec:0c:e0:88:b0:76:64:22:61:7f:34:6e:73:55: f9:37:b9:a9:b9:cc:ad:6f:f8:75:b6:dd:63:07:b6: 17:8b:1b:af:64:e2:9c:cf:23:19:17:9f:5e:43:02: 0d:af:6b:5f:ee:79:72:11:12:8d:4b:86:87:d5:93: c3:69:15:a7:d2:a4:93:3c:d3:57:5d:25:96:3f:05: 07:f8:40:10:1a:40:55:76:e1:b3:71:c5:d5:94:25: d1:fc:52:04:b8:45:2f:e2:ed:62:5b:72:6c:f7:74: 71:45:95:f3:00:00:17:2c:8a:f6:b5:1d:48:c0:17: 45:70:62:3e:90:a2:d0:9a:03:97:f1:69:0a:7f:ed: 22:b2:f8:1c:7c:4f:0d:22:93:19:f4:27:03:d5:a6: ed:d2:2e:56:10:f4:02:d6:02:15:8c:92:ce:1f:3e: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:C6:11:23:C3:CC:F5:A6:19:32:35:53:CA:AA:20:2A:2C:09:3D:51 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3133332e3131392e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.133.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:70:7b:d0:06:48:30:78:c7:86:52:ea:d6:73:e5:75:9d:f5: f8:3f:26:79:87:9d:1e:4d:3f:10:ea:42:c1:3c:52:37:bb:7c: 15:b8:8c:62:3d:f5:59:fd:b7:27:37:3e:74:ea:8c:92:e3:cc: 58:d3:87:4c:c9:1f:9a:19:1b:ec:e3:77:2a:1c:9f:03:a2:03: a4:0d:bd:fc:51:8a:10:53:27:dc:d3:90:6f:36:b8:ce:ef:f6: 08:1b:eb:1e:f9:25:80:c6:ae:67:a8:85:6a:75:b7:e2:38:df: 19:bd:da:de:1f:9a:4b:e0:e4:ca:44:0c:de:c2:45:40:ed:f9: 36:8d:de:40:05:7e:c1:b5:15:64:ce:3f:0c:0a:93:16:9d:8a: 20:49:e6:97:a4:06:ad:d5:ba:61:28:ac:47:a5:c9:c6:f1:3d: 60:d8:8c:9d:a7:c7:c4:9c:04:c2:d2:f2:bc:ad:d1:f6:3b:49: 2d:49:dd:f0:9b:be:c4:2a:1e:22:b4:17:ab:9e:26:b9:3f:c9: dd:38:1c:ef:a5:d1:32:c3:ca:0d:9b:3f:7c:3c:f2:8d:a7:c2: bd:9c:ca:49:3d:6d:a7:90:c4:74:22:e2:bb:31:21:5e:ca:71: 2d:e3:09:cf:ff:d9:e1:34:c3:18:8b:ac:fa:85:bd:33:02:74: c3:a0:31:80 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUWKqf8CnhR57gpjatvJNag5jJMskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MzlaFw0yNjExMjcxMTQ5MzlaMDMxMTAvBgNV BAMTKDAxQzYxMTIzQzNDQ0Y1QTYxOTMyMzU1M0NBQUEyMDJBMkMwOTNENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspGQhu0UbLgBIfzdm0ji4JzbC DTN51ywofVpNhoLIXIsM6hk5bqef5wKRlnCyNmyjz/SyVmSx6P5dgIqnWYihyo2P IHiBIQ6qSONAGocYVtZZZzXGzhlf+pzsDOCIsHZkImF/NG5zVfk3uam5zK1v+HW2 3WMHtheLG69k4pzPIxkXn15DAg2va1/ueXIREo1LhofVk8NpFafSpJM801ddJZY/ BQf4QBAaQFV24bNxxdWUJdH8UgS4RS/i7WJbcmz3dHFFlfMAABcsiva1HUjAF0Vw Yj6QotCaA5fxaQp/7SKy+Bx8Tw0ikxn0JwPVpu3SLlYQ9ALWAhWMks4fPiGjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUAcYRI8PM9aYZMjVTyqogKiwJPVEwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzMzMzMmUz MTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAFhXcwDQYJKoZIhvcNAQELBQADggEBADxwe9AGSDB4x4ZS6tZz5XWd9fg/ JnmHnR5NPxDqQsE8Uje7fBW4jGI99Vn9tyc3PnTqjJLjzFjTh0zJH5oZG+zjdyoc nwOiA6QNvfxRihBTJ9zTkG82uM7v9ggb6x75JYDGrmeohWp1t+I43xm92t4fmkvg 5MpEDN7CRUDt+TaN3kAFfsG1FWTOPwwKkxadiiBJ5pekBq3VumEorEelycbxPWDY jJ2nx8ScBMLS8ryt0fY7SS1J3fCbvsQqHiK0F6ueJrk/yd04HO+l0TLDyg2bP3w8 8o2nwr2cykk9baeQxHQi4rsxIV7KcS3jCc//2eE0wxiLrPqFvTMCdMOgMYA= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:09 2025 by rpki-client