This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3134382e302f32332d3332203d3e203531313637.roa File: 352e3138302e3134382e302f32332d3332203d3e203531313637.roa (raw, json) Hash identifier: sU5s4IxsqnCxDXS48R7XoG1iInDWz6lEc3BHpjf3kio= Subject key identifier: 0F:6A:B7:D4:65:73:76:4D:E5:B6:AB:2A:E9:21:F9:11:93:41:04:BD Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 4F2CEACD8AF738D85AB50C79B3C5C2DDE67AC2C5 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3134382e302f32332d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:53 +0000 ROA not before: Fri 28 Nov 2025 11:44:53 +0000 ROA not after: Fri 27 Nov 2026 11:49:53 +0000 asID: 51167 IP address blocks: 5.180.148.0/23 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:2c:ea:cd:8a:f7:38:d8:5a:b5:0c:79:b3:c5:c2:dd:e6:7a:c2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:53 2025 GMT Not After : Nov 27 11:49:53 2026 GMT Subject: CN=0F6AB7D46573764DE5B6AB2AE921F911934104BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:10:57:81:59:8a:9a:30:00:18:d5:0b:87:bd: 95:6f:cf:46:11:35:ac:7e:97:a2:77:c3:23:2d:50: ce:61:e4:02:00:db:3e:31:d3:be:f0:07:c0:c8:46: df:65:ac:ad:ab:69:6e:27:ce:06:e2:b4:c1:15:40: 62:53:1b:2e:c5:f2:f1:50:bf:98:9f:39:e2:ad:31: 4d:e9:fe:8e:2c:fd:86:1d:8a:cd:d8:8e:27:9b:55: a7:d3:f5:e4:a7:55:2f:47:99:a5:ef:83:71:a5:d6: cf:83:15:86:89:9c:00:2d:db:a9:9e:64:fd:fe:b1: 81:35:a2:95:ff:af:65:b3:73:35:4d:23:7e:85:0b: ca:38:03:cf:67:4b:a2:42:4b:a9:b9:bf:8d:f2:7b: 2b:b5:3a:1f:ca:f0:ec:ff:88:cb:9d:4a:4b:db:64: 69:f1:54:fe:b2:3e:62:f2:25:a0:a6:50:00:4d:71: 5f:43:1c:4c:7e:d6:7d:d9:d8:f6:4c:1b:4d:d2:06: a3:d2:25:c1:37:f9:08:ea:21:6f:42:5f:b4:24:bf: 69:6a:25:39:99:07:cd:11:cd:a0:93:0f:18:bb:49: 67:da:49:73:46:48:12:5a:a5:db:bf:a5:5a:be:8b: 21:21:bb:47:78:9f:cf:90:60:41:eb:4f:c2:1a:7c: 31:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:B7:D4:65:73:76:4D:E5:B6:AB:2A:E9:21:F9:11:93:41:04:BD X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3134382e302f32332d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.148.0/23 Signature Algorithm: sha256WithRSAEncryption 01:2b:0c:d8:79:d6:fe:7c:69:fe:57:d8:4a:7c:c8:0b:0b:17: 11:60:df:ae:86:e6:93:2f:22:12:07:c3:92:ab:17:84:69:f1: a8:64:1a:ff:cd:11:25:32:6b:09:c7:c2:c7:80:ce:56:6c:f6: d4:12:cd:21:fa:e5:50:4b:97:7b:18:2b:f0:7b:e1:1a:a7:fc: 6c:34:5a:85:b7:87:9f:82:98:4b:04:64:0d:17:44:bd:56:38: ad:13:33:74:42:8c:3f:4b:6d:ea:41:73:6b:dd:87:a1:ab:55: 97:44:bb:f3:4e:6d:96:bd:3b:1a:bb:d6:d3:0e:46:47:05:e8: a5:00:6f:81:28:80:c2:c3:ff:35:80:dc:43:79:3a:dd:50:63: 38:9d:c1:09:e8:5e:1e:02:27:9b:d4:15:fb:37:22:2a:dc:4f: a4:a8:ac:0f:55:e9:03:dd:8d:90:6f:ce:1c:d5:63:e3:1b:f8: 12:e8:e5:27:56:48:f6:3c:76:a8:7b:01:7e:ee:7b:73:68:79: 76:2d:02:97:cc:38:a5:bb:a0:8b:c8:e5:90:e7:e7:c4:15:a3: 3d:b8:4b:22:50:54:c0:e4:ac:32:ff:3d:84:7b:5d:c7:4a:87: 25:c3:34:1b:a9:0f:44:26:97:ef:06:65:cd:b4:75:b2:05:f0: 82:10:5a:bc -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUTyzqzYr3ONhatQx5s8XC3eZ6wsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTNaFw0yNjExMjcxMTQ5NTNaMDMxMTAvBgNV BAMTKDBGNkFCN0Q0NjU3Mzc2NERFNUI2QUIyQUU5MjFGOTExOTM0MTA0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1EFeBWYqaMAAY1QuHvZVvz0YR Nax+l6J3wyMtUM5h5AIA2z4x077wB8DIRt9lrK2raW4nzgbitMEVQGJTGy7F8vFQ v5ifOeKtMU3p/o4s/YYdis3YjiebVafT9eSnVS9HmaXvg3Gl1s+DFYaJnAAt26me ZP3+sYE1opX/r2WzczVNI36FC8o4A89nS6JCS6m5v43yeyu1Oh/K8Oz/iMudSkvb ZGnxVP6yPmLyJaCmUABNcV9DHEx+1n3Z2PZMG03SBqPSJcE3+QjqIW9CX7Qkv2lq JTmZB80RzaCTDxi7SWfaSXNGSBJapdu/pVq+iyEhu0d4n8+QYEHrT8IafDFjAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUD2q31GVzdk3ltqsq6SH5EZNBBL0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMwMmUz MTM0MzgyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQBBbSUMA0GCSqGSIb3DQEBCwUAA4IBAQABKwzYedb+fGn+V9hKfMgLCxcRYN+u huaTLyISB8OSqxeEafGoZBr/zRElMmsJx8LHgM5WbPbUEs0h+uVQS5d7GCvwe+Ea p/xsNFqFt4efgphLBGQNF0S9VjitEzN0Qow/S23qQXNr3Yehq1WXRLvzTm2WvTsa u9bTDkZHBeilAG+BKIDCw/81gNxDeTrdUGM4ncEJ6F4eAieb1BX7NyIq3E+kqKwP VekD3Y2Qb84c1WPjG/gS6OUnVkj2PHaoewF+7ntzaHl2LQKXzDilu6CLyOWQ5+fE FaM9uEsiUFTA5Kwy/z2Ee13HSoclwzQbqQ9EJpfvBmXNtHWyBfCCEFq8 -----END CERTIFICATE-----Generated at Tue Dec 16 14:00:27 2025 by rpki-client