This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31372e302f32342d3332203d3e203531313637.roa File: 352e3138322e31372e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: dPSz2K+/UY6Rd5y4DWKdVGvHoRW5pQelCd8H80dGWGc= Subject key identifier: 5E:E6:E4:10:D2:06:31:1F:BB:67:1E:63:96:3B:85:ED:B3:8C:8D:A8 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 11F963E3CEAE48BC7593CD068ADD68AD71691DBC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31372e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 51167 IP address blocks: 5.182.17.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f9:63:e3:ce:ae:48:bc:75:93:cd:06:8a:dd:68:ad:71:69:1d:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=5EE6E410D206311FBB671E63963B85EDB38C8DA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:d5:30:05:76:d2:33:97:53:39:29:32:22: a4:71:63:96:29:43:95:21:86:eb:2e:45:bb:7b:bb: 5c:33:30:35:4e:e4:5c:b3:c8:6e:a3:63:0d:cc:77: 76:0c:80:2b:64:d1:bf:a4:0a:ff:8b:16:28:47:8f: e2:dc:51:61:62:72:3a:65:cb:42:20:ad:4f:85:ba: b8:5b:62:a4:98:96:ab:19:95:3d:3a:3d:be:59:51: 73:19:d8:01:19:d3:91:1a:50:18:37:f5:b1:fe:95: 70:7f:bc:8f:cd:7f:41:8c:80:d7:c2:d1:35:f3:80: 53:7c:9b:bf:14:a7:bb:1b:ec:a7:28:17:3a:d0:9a: 01:ac:ba:6e:b8:07:2a:f8:f4:f6:c2:04:9e:2a:ce: c9:85:12:35:b6:ae:ef:95:8d:c7:11:3e:f1:60:dd: a6:f2:a9:0d:c1:c7:ec:cc:20:f4:72:9c:b5:5c:63: b1:5f:36:27:df:9f:89:de:ec:ee:ee:54:57:92:90: a9:64:e2:f6:f6:f5:9e:70:ae:8a:43:33:c5:c5:b2: 28:22:e3:2e:bf:0e:19:a4:47:77:a2:83:56:18:1f: a3:71:aa:6e:f7:65:8a:ad:8a:0d:94:13:47:55:70: a4:fd:51:45:a1:55:38:76:4b:65:f5:c0:31:15:8b: 0a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E6:E4:10:D2:06:31:1F:BB:67:1E:63:96:3B:85:ED:B3:8C:8D:A8 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31372e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.17.0/24 Signature Algorithm: sha256WithRSAEncryption 30:13:6a:a0:29:e2:dd:1c:80:68:fc:08:62:91:7c:34:c3:a5: 02:2f:c1:fc:8c:c3:02:48:ed:64:e8:35:83:f4:a0:70:b9:a4: 8c:c1:95:eb:9e:03:99:f5:06:8e:68:72:7c:58:35:0b:b3:74: da:07:53:33:8d:f8:16:fe:80:fa:5f:1a:ad:71:e8:17:b6:c3: 26:07:91:fd:86:e8:b6:ec:4a:c6:78:e1:83:0f:57:81:f6:af: 52:63:c4:ae:2d:ef:74:ac:55:b9:67:72:ba:a9:37:be:54:9b: 82:6f:85:27:5a:45:03:af:42:2c:df:ba:ef:f1:77:d1:4d:19: 87:24:a2:fe:fe:07:91:46:7c:86:0f:01:60:91:24:4e:ba:0a: 4b:a0:54:d5:31:93:0d:32:db:ef:30:cb:ce:ea:28:72:9f:80: db:cd:d1:38:e8:39:41:ac:c9:99:b1:9c:f4:9b:94:7b:6a:47: ac:9f:66:2f:7d:a9:d8:ff:e0:71:c9:11:25:aa:0d:f0:99:84: e7:59:3b:cf:e7:fc:a0:9a:ed:2a:3c:f6:e3:8c:5a:cf:78:5d: aa:15:d0:e2:a0:aa:d9:73:3a:6d:f2:62:cd:48:18:63:12:67: 9c:de:93:8c:33:62:22:95:a5:54:ea:19:9f:7f:00:f0:ef:26: 06:de:10:84 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUEflj486uSLx1k80Git1orXFpHbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKDVFRTZFNDEwRDIwNjMxMUZCQjY3MUU2Mzk2M0I4NUVEQjM4QzhEQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE19UwBXbSM5dTOSkyIqRxY5Yp Q5UhhusuRbt7u1wzMDVO5FyzyG6jYw3Md3YMgCtk0b+kCv+LFihHj+LcUWFicjpl y0IgrU+FurhbYqSYlqsZlT06Pb5ZUXMZ2AEZ05EaUBg39bH+lXB/vI/Nf0GMgNfC 0TXzgFN8m78Up7sb7KcoFzrQmgGsum64Byr49PbCBJ4qzsmFEjW2ru+VjccRPvFg 3abyqQ3Bx+zMIPRynLVcY7FfNiffn4ne7O7uVFeSkKlk4vb29Z5wropDM8XFsigi 4y6/DhmkR3eig1YYH6Nxqm73ZYqtig2UE0dVcKT9UUWhVTh2S2X1wDEViwrtAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUXubkENIGMR+7Zx5jljuF7bOMjagwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMyMmUz MTM3MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzUzMTMxMzYzNy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAW2ETANBgkqhkiG9w0BAQsFAAOCAQEAMBNqoCni3RyAaPwIYpF8NMOlAi/B/IzD AkjtZOg1g/SgcLmkjMGV654DmfUGjmhyfFg1C7N02gdTM434Fv6A+l8arXHoF7bD JgeR/YbotuxKxnjhgw9XgfavUmPEri3vdKxVuWdyuqk3vlSbgm+FJ1pFA69CLN+6 7/F30U0ZhySi/v4HkUZ8hg8BYJEkTroKS6BU1TGTDTLb7zDLzuoocp+A283ROOg5 QazJmbGc9JuUe2pHrJ9mL32p2P/gcckRJaoN8JmE51k7z+f8oJrtKjz244xaz3hd qhXQ4qCq2XM6bfJizUgYYxJnnN6TjDNiIpWlVOoZn38A8O8mBt4QhA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:05:56 2025 by rpki-client