This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e36342e302f32322d3234203d3e20323031333431.roa File: 352e3138312e36342e302f32322d3234203d3e20323031333431.roa (raw, json) Hash identifier: 1HIS3tZ3BZXyBefU7gNE0zG5uFKNt5Eq0/8npmSz51s= Subject key identifier: 0E:50:C4:88:96:16:AE:9E:D1:A3:CC:02:A4:57:98:39:E3:DF:D9:15 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 291D51B8CFACE352A3A2C32111B796FCBB58FD38 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e36342e302f32322d3234203d3e20323031333431.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 201341 IP address blocks: 5.181.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:1d:51:b8:cf:ac:e3:52:a3:a2:c3:21:11:b7:96:fc:bb:58:fd:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=0E50C4889616AE9ED1A3CC02A4579839E3DFD915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:ea:4e:27:2c:ed:ec:0c:c0:35:af:2e:49: 26:b7:ac:b5:09:44:c7:38:51:02:63:6e:20:26:3a: 0b:72:33:da:5f:3e:e9:63:8c:72:25:92:5b:a7:9e: 21:7b:f0:38:bf:03:a9:e8:2c:6b:ff:7d:f2:bd:12: 0a:41:34:60:0f:7d:26:57:0e:0d:5c:c4:98:23:c1: aa:f0:25:b2:83:87:74:56:09:bb:11:4f:fd:c6:a4: ba:61:87:69:aa:67:ba:b8:44:14:11:c3:0c:56:fc: a2:3a:f3:02:da:9e:fc:a1:b0:8d:e7:90:7e:fa:4d: 5d:27:aa:e2:d5:9e:b5:79:fc:36:50:7c:a8:e9:94: 0d:0b:12:de:0f:a3:19:7d:92:14:ec:b8:db:c5:89: 24:6f:34:19:76:df:0c:7b:61:1a:7d:08:40:9b:44: fd:e9:67:f1:d4:e7:29:7d:48:a3:4f:d0:db:35:04: 75:61:d7:59:c7:07:2c:99:8e:c2:a2:9c:85:ce:03: dd:bd:6e:a6:11:df:32:b0:82:7a:7c:69:28:34:e6: 9f:93:3d:d9:6f:2b:b3:2e:e2:5d:67:61:03:18:5f: fc:52:20:c9:ac:04:b0:6a:36:69:78:91:06:1e:ed: 15:00:42:2f:2c:c7:af:71:97:18:4a:5f:5d:35:ab: f9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:50:C4:88:96:16:AE:9E:D1:A3:CC:02:A4:57:98:39:E3:DF:D9:15 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138312e36342e302f32322d3234203d3e20323031333431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.64.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:2e:ee:90:68:e3:33:e4:1e:58:17:68:db:16:1f:a6:cb:f8: 0b:ed:58:7a:5d:f0:c5:99:6a:ca:6f:4d:77:3f:8f:3a:7b:70: 37:f0:10:2b:88:95:1c:c7:bb:a6:cd:16:33:73:d0:89:2e:74: 88:e7:12:84:a3:43:ba:54:28:44:a4:3a:70:21:b0:33:a8:86: 92:21:07:bd:49:1e:16:c8:3f:e2:61:8a:76:c6:1c:e6:2e:6c: 78:42:37:81:33:c9:c4:06:64:f6:b0:12:0c:69:04:f6:66:3e: 4b:d6:31:41:d2:de:ed:90:25:85:56:96:71:cb:5a:91:16:f7: 69:e0:bd:8f:56:e6:f2:dd:6a:7f:82:3f:3a:11:ab:41:40:12: fc:9c:7e:36:a9:97:fc:d7:c5:a9:93:66:22:e1:31:95:bd:d4: 66:4f:47:42:6a:27:2e:b5:a0:a2:2d:51:8e:34:52:1f:43:e2: 73:a6:e8:12:06:66:4a:93:05:80:dc:7a:cf:22:8f:f0:9a:1f: 22:d6:4f:d4:db:a3:64:9a:af:e5:be:2c:aa:97:1e:08:f5:b0: 45:88:0c:ac:03:10:99:9e:c5:9f:3b:e0:f8:17:40:86:94:e5: 14:25:5f:a6:c2:27:12:54:da:40:09:ee:f6:30:dd:fb:ec:64: 6c:4a:9c:dc -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUKR1RuM+s41KjosMhEbeW/LtY/TgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDBFNTBDNDg4OTYxNkFFOUVEMUEzQ0MwMkE0NTc5ODM5RTNERkQ5MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFUepOJyzt7AzANa8uSSa3rLUJ RMc4UQJjbiAmOgtyM9pfPuljjHIlklunniF78Di/A6noLGv/ffK9EgpBNGAPfSZX Dg1cxJgjwarwJbKDh3RWCbsRT/3GpLphh2mqZ7q4RBQRwwxW/KI68wLanvyhsI3n kH76TV0nquLVnrV5/DZQfKjplA0LEt4Poxl9khTsuNvFiSRvNBl23wx7YRp9CECb RP3pZ/HU5yl9SKNP0Ns1BHVh11nHByyZjsKinIXOA929bqYR3zKwgnp8aSg05p+T PdlvK7Mu4l1nYQMYX/xSIMmsBLBqNml4kQYe7RUAQi8sx69xlxhKX101q/llAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUDlDEiJYWrp7Ro8wCpFeYOePf2RUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMxMmUz NjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMDMxMzMzNDMxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQCBbVAMA0GCSqGSIb3DQEBCwUAA4IBAQBOLu6QaOMz5B5YF2jbFh+my/gL7Vh6 XfDFmWrKb013P486e3A38BAriJUcx7umzRYzc9CJLnSI5xKEo0O6VChEpDpwIbAz qIaSIQe9SR4WyD/iYYp2xhzmLmx4QjeBM8nEBmT2sBIMaQT2Zj5L1jFB0t7tkCWF VpZxy1qRFvdp4L2PVuby3Wp/gj86EatBQBL8nH42qZf818Wpk2Yi4TGVvdRmT0dC aicutaCiLVGONFIfQ+JzpugSBmZKkwWA3HrPIo/wmh8i1k/U26Nkmq/lviyqlx4I 9bBFiAysAxCZnsWfO+D4F0CGlOUUJV+mwicSVNpACe72MN377GRsSpzc -----END CERTIFICATE-----Generated at Sat Dec 6 16:42:16 2025 by rpki-client