This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e33322e302f32322d3234203d3e20323031333431.roa File: 352e3138312e33322e302f32322d3234203d3e20323031333431.roa (raw, json) Hash identifier: qUV+cNRBQSmXxTe0RCoBXtuPCGJF6GDgtVCVNlTM8T0= Subject key identifier: CF:0E:C7:6D:F6:BE:91:B0:D5:44:58:DD:2C:04:4A:74:47:28:D7:9A Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 1D5C6F0C12ED0B8CD3E08902C74C4092A2A3A426 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e33322e302f32322d3234203d3e20323031333431.roa Signing time: Fri 21 Nov 2025 15:49:07 +0000 ROA not before: Fri 21 Nov 2025 15:44:07 +0000 ROA not after: Fri 20 Nov 2026 15:49:07 +0000 asID: 201341 IP address blocks: 5.181.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:5c:6f:0c:12:ed:0b:8c:d3:e0:89:02:c7:4c:40:92:a2:a3:a4:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:07 2025 GMT Not After : Nov 20 15:49:07 2026 GMT Subject: CN=CF0EC76DF6BE91B0D54458DD2C044A744728D79A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:53:96:e1:63:12:d1:d2:78:1c:10:df:a9: d5:27:2f:5e:29:6c:23:c2:0c:b4:e7:97:f5:f8:71: af:30:bb:40:b7:61:3b:2f:79:48:d0:34:7b:5c:9f: 40:36:74:5a:3a:84:7c:cc:ae:7f:89:2f:53:c5:23: f1:fa:dd:8f:18:e4:b2:6b:a3:a2:b1:86:85:db:f4: 12:a0:23:94:9f:96:c0:0f:c9:64:00:df:02:64:fd: 43:4f:59:05:64:8b:9a:8b:19:10:10:80:00:c7:a5: 3b:ac:55:c8:52:df:29:31:33:37:7f:de:72:fa:7b: 5e:22:6f:6a:19:73:2b:01:6b:4d:73:8c:39:24:6a: 66:9a:98:34:bd:ce:2d:5a:b5:90:5d:3a:a5:17:2a: 98:2e:d7:6f:eb:34:cf:57:b4:f7:29:fe:53:4f:82: b5:60:b2:8c:01:84:49:5d:d7:f5:9e:9b:53:71:00: 97:64:fb:37:d4:19:bb:02:77:3d:f7:ca:2b:d7:2b: 26:2f:fd:3f:2f:ad:cf:fb:ce:fc:ad:41:b5:0d:e2: 9a:d8:4f:41:c6:2f:c9:55:80:ce:d8:f6:70:84:fe: 49:48:bd:62:76:c9:aa:d4:0b:ba:11:9f:da:df:51: cd:44:1b:30:d3:a9:05:7c:f7:e8:1c:ff:d2:a2:3e: 5f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:0E:C7:6D:F6:BE:91:B0:D5:44:58:DD:2C:04:4A:74:47:28:D7:9A X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e33322e302f32322d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.32.0/22 Signature Algorithm: sha256WithRSAEncryption 81:d5:50:f7:4e:be:0f:56:51:e4:7a:78:45:7d:a3:cf:27:cd: 45:29:65:2d:9e:d1:56:4e:bf:cd:15:01:37:6a:b4:06:c7:b4: ef:ae:2a:17:98:d1:97:5e:2b:a7:2d:e7:61:95:7f:8c:28:a8: de:4a:22:5a:83:41:b9:56:1c:42:26:2d:3b:9c:b0:29:8c:37: e1:2a:a1:3b:35:86:d8:34:2e:da:57:df:4d:d8:15:69:16:ad: cb:c1:34:f0:66:a8:9e:fc:14:a8:19:b4:d3:5e:c7:a8:39:8c: e8:ef:2d:d4:fe:12:0b:c2:34:d0:0c:ee:5c:d6:25:04:f0:24: ed:a1:32:e3:ee:fc:94:c1:45:8c:96:07:85:fc:6e:48:25:e6: d2:d1:c2:ec:21:ad:d7:ac:e8:99:36:24:b4:1f:0f:49:93:ee: 84:8f:98:e7:fe:7f:08:c6:28:de:b1:0e:4e:38:ea:4a:8a:52: b6:18:bd:da:b6:ef:94:64:ec:b6:04:92:47:2f:2d:c0:28:e9: 40:18:29:3f:b9:0f:83:2f:ce:2f:ff:de:7f:22:2b:d0:dd:1c: 0d:d7:8c:93:4b:40:a4:42:a2:d0:52:1e:51:4b:9a:71:76:fb: 69:c8:15:1f:45:fd:00:0e:97:83:7e:e3:d2:2d:f4:a9:8a:53: e1:3d:c2:7e -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUHVxvDBLtC4zT4IkCx0xAkqKjpCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDdaFw0yNjExMjAxNTQ5MDdaMDMxMTAvBgNV BAMTKENGMEVDNzZERjZCRTkxQjBENTQ0NThERDJDMDQ0QTc0NDcyOEQ3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6EVOW4WMS0dJ4HBDfqdUnL14p bCPCDLTnl/X4ca8wu0C3YTsveUjQNHtcn0A2dFo6hHzMrn+JL1PFI/H63Y8Y5LJr o6KxhoXb9BKgI5SflsAPyWQA3wJk/UNPWQVki5qLGRAQgADHpTusVchS3ykxMzd/ 3nL6e14ib2oZcysBa01zjDkkamaamDS9zi1atZBdOqUXKpgu12/rNM9XtPcp/lNP grVgsowBhEld1/Wem1NxAJdk+zfUGbsCdz33yivXKyYv/T8vrc/7zvytQbUN4prY T0HGL8lVgM7Y9nCE/klIvWJ2yarUC7oRn9rfUc1EGzDTqQV89+gc/9KiPl+dAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUzw7Hbfa+kbDVRFjdLARKdEco15owHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMxMmUz MzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCBbUgMA0GCSqGSIb3DQEBCwUAA4IBAQCB1VD3Tr4PVlHkenhFfaPPJ81FKWUt ntFWTr/NFQE3arQGx7TvrioXmNGXXiunLedhlX+MKKjeSiJag0G5VhxCJi07nLAp jDfhKqE7NYbYNC7aV99N2BVpFq3LwTTwZqie/BSoGbTTXseoOYzo7y3U/hILwjTQ DO5c1iUE8CTtoTLj7vyUwUWMlgeF/G5IJebS0cLsIa3XrOiZNiS0Hw9Jk+6Ej5jn /n8IxijesQ5OOOpKilK2GL3atu+UZOy2BJJHLy3AKOlAGCk/uQ+DL84v/95/IivQ 3RwN14yTS0CkQqLQUh5RS5pxdvtpyBUfRf0ADpeDfuPSLfSpilPhPcJ+ -----END CERTIFICATE-----Generated at Sat Dec 6 18:41:38 2025 by rpki-client