This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20313336373837.roa File: 352e3138322e31362e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: gGre3frSPbYwgp9c8bFg4CXoXrlM1kUiGrAdwwuR3ds= Subject key identifier: BD:F2:FC:98:D9:86:12:03:1B:7C:C4:ED:C0:1B:AA:41:E9:5E:F5:ED Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 37ED27DB15B68A94BC7F6C140A394DEC430E8057 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:47 +0000 ROA not before: Fri 28 Nov 2025 11:44:47 +0000 ROA not after: Fri 27 Nov 2026 11:49:47 +0000 asID: 136787 IP address blocks: 5.182.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ed:27:db:15:b6:8a:94:bc:7f:6c:14:0a:39:4d:ec:43:0e:80:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:47 2025 GMT Not After : Nov 27 11:49:47 2026 GMT Subject: CN=BDF2FC98D98612031B7CC4EDC01BAA41E95EF5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:42:a0:4b:e5:3f:ed:d3:ff:fb:bc:34:ed: 43:97:a3:4d:92:ab:5e:3f:1d:26:4a:c0:21:ee:94: 7f:d5:fb:6e:05:8c:2a:82:f4:84:49:9d:a4:44:f3: 87:58:5e:45:b3:92:85:f7:95:95:0e:61:d9:01:bf: fc:9c:c0:a2:60:32:4c:41:52:00:c5:7f:f9:5b:3b: 18:6a:66:16:e2:35:6e:2a:d6:10:90:9d:51:6a:1c: 27:56:46:72:ef:c1:03:1d:7a:77:31:25:db:df:75: 54:49:03:b7:0a:45:c0:20:05:23:93:39:40:3f:54: c6:99:4c:a4:74:e5:f9:06:d4:08:7d:b3:aa:ca:ec: df:d2:2d:f8:96:61:13:39:1e:bf:90:67:8b:71:3e: c1:f0:92:fe:1c:87:45:49:3e:e2:04:45:3b:c0:06: 24:50:1e:0e:d2:47:a4:ba:0e:9f:5a:92:da:80:87: 0d:ac:b4:92:65:40:41:85:59:54:e3:cc:99:b5:6d: 5c:ce:d4:66:8d:dc:44:5e:b3:e8:9b:fd:61:8b:e1: 63:2e:64:fe:e3:30:59:d6:89:cc:fa:aa:95:60:47: 83:e1:57:c0:53:db:ee:40:e2:ed:0f:03:bd:0a:35: 6f:a3:11:1e:a9:97:d8:ab:d0:3e:b7:e9:56:a2:39: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F2:FC:98:D9:86:12:03:1B:7C:C4:ED:C0:1B:AA:41:E9:5E:F5:ED X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31362e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.16.0/24 Signature Algorithm: sha256WithRSAEncryption 67:72:c0:7b:fc:8b:af:f6:4a:9a:e9:51:e2:76:74:de:04:6b: 05:e9:b4:96:19:20:fb:3d:e9:4b:57:7f:27:25:a9:9b:15:fa: 25:57:a4:fe:df:82:d8:9f:ed:0d:0f:84:79:a6:6a:4d:b7:f3: 1c:98:28:f6:7f:d6:97:44:f9:db:56:ed:1f:95:18:d2:c6:2e: 43:80:88:26:1e:18:55:72:b8:cc:a9:29:48:8e:8d:0a:02:ef: be:ec:42:a4:c5:25:12:1e:36:8f:42:fe:8f:55:b9:b9:ee:bc: b2:ed:e5:5e:52:f8:06:a9:11:12:9b:e6:6f:cc:dd:56:34:d9: f9:ee:57:39:79:40:33:eb:54:e3:0e:8f:fe:9a:ba:80:e3:5f: 9f:1f:09:21:47:8c:65:d9:62:df:fe:17:4d:dc:a0:a9:f1:f4: 26:0a:74:a1:e0:dd:3d:2d:29:5e:92:2b:32:b3:45:36:ab:bf: 0a:b9:b3:dc:82:d9:62:d7:5f:9d:4e:21:45:26:76:e8:57:ac: 67:18:f5:18:92:4d:13:df:26:9a:f1:6a:52:24:f5:63:e5:ee: 3e:a0:0e:b0:eb:2b:bb:39:18:2d:c6:e9:0a:9f:c6:fe:dc:2a: 0a:d5:59:f6:e8:33:ab:ac:85:2a:3b:03:a1:d7:b8:04:5b:2d: 9b:b4:2b:2a -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUN+0n2xW2ipS8f2wUCjlN7EMOgFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDdaFw0yNjExMjcxMTQ5NDdaMDMxMTAvBgNV BAMTKEJERjJGQzk4RDk4NjEyMDMxQjdDQzRFREMwMUJBQTQxRTk1RUY1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSB0KgS+U/7dP/+7w07UOXo02S q14/HSZKwCHulH/V+24FjCqC9IRJnaRE84dYXkWzkoX3lZUOYdkBv/ycwKJgMkxB UgDFf/lbOxhqZhbiNW4q1hCQnVFqHCdWRnLvwQMdencxJdvfdVRJA7cKRcAgBSOT OUA/VMaZTKR05fkG1Ah9s6rK7N/SLfiWYRM5Hr+QZ4txPsHwkv4ch0VJPuIERTvA BiRQHg7SR6S6Dp9aktqAhw2stJJlQEGFWVTjzJm1bVzO1GaN3ERes+ib/WGL4WMu ZP7jMFnWicz6qpVgR4PhV8BT2+5A4u0PA70KNW+jER6pl9ir0D636VaiOfD9AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUvfL8mNmGEgMbfMTtwBuqQele9e0wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMyMmUz MTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABbYQMA0GCSqGSIb3DQEBCwUAA4IBAQBncsB7/Iuv9kqa6VHidnTeBGsF6bSW GSD7PelLV38nJambFfolV6T+34LYn+0ND4R5pmpNt/McmCj2f9aXRPnbVu0flRjS xi5DgIgmHhhVcrjMqSlIjo0KAu++7EKkxSUSHjaPQv6PVbm57ryy7eVeUvgGqRES m+ZvzN1WNNn57lc5eUAz61TjDo/+mrqA41+fHwkhR4xl2WLf/hdN3KCp8fQmCnSh 4N09LSlekisys0U2q78KubPcgtli11+dTiFFJnboV6xnGPUYkk0T3yaa8WpSJPVj 5e4+oA6w6yu7ORgtxukKn8b+3CoK1Vn26DOrrIUqOwOh17gEWy2btCsq -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:56 2025 by rpki-client