This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33322e302f32342d3234203d3e20313336373837.roa File: 352e3138332e33322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: ltBDkCy2rvAqdqX0/NuUPeZncPCaFnC16beXz56mlEE= Subject key identifier: A2:B8:BE:7D:96:D4:49:F2:70:80:C0:0C:39:4E:CD:A0:66:8D:02:2F Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 3EB9D40CC536A9F4EA83A9AA3818F20C9D7D8922 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:08 +0000 ROA not before: Fri 21 Nov 2025 15:44:08 +0000 ROA not after: Fri 20 Nov 2026 15:49:08 +0000 asID: 136787 IP address blocks: 5.183.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b9:d4:0c:c5:36:a9:f4:ea:83:a9:aa:38:18:f2:0c:9d:7d:89:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:08 2025 GMT Not After : Nov 20 15:49:08 2026 GMT Subject: CN=A2B8BE7D96D449F27080C00C394ECDA0668D022F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:87:4e:2b:61:60:f2:cd:b5:11:4c:24:69: 02:49:24:b6:9e:6c:e8:00:5f:18:43:48:db:20:23: fb:7f:89:3d:d0:17:a9:0f:e2:cd:09:42:59:5b:32: b6:00:09:65:9b:05:0b:17:0f:c8:6b:4a:71:ae:b7: 24:1f:bb:09:45:66:af:8a:45:0b:cd:f0:02:16:f0: ff:a7:72:53:2c:1b:56:ea:55:e0:75:f3:23:c8:51: 3e:b0:6d:d6:1d:60:43:66:0b:14:f1:d4:5f:9a:e7: db:79:1a:a7:64:ae:1c:a8:37:74:11:aa:d9:38:60: c9:9d:f9:53:d2:5d:d6:55:7e:dc:44:a6:ed:76:ca: 8a:62:fd:e5:c3:d5:30:53:2e:01:c8:ed:3a:e6:73: 53:7f:8d:bf:04:f2:c2:90:c7:a4:10:12:d2:df:f9: 82:0a:15:71:34:f7:68:be:61:0a:27:01:7b:e0:69: d2:b0:58:38:6b:6e:86:1b:14:ef:5f:77:09:eb:0d: 87:8c:8f:78:e6:07:77:38:9d:8d:b6:91:be:71:33: 89:24:6d:3b:84:2f:51:ee:38:55:eb:e4:5d:ea:c7: 82:89:28:27:a2:11:3f:73:35:3e:41:37:9a:32:a7: c5:7d:22:62:fb:0c:83:d8:b8:24:88:99:49:94:98: eb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B8:BE:7D:96:D4:49:F2:70:80:C0:0C:39:4E:CD:A0:66:8D:02:2F X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.32.0/24 Signature Algorithm: sha256WithRSAEncryption 52:de:95:fc:10:40:ef:2e:f6:69:9f:e1:21:36:59:a8:a6:fa: 93:cc:62:3c:43:d2:13:09:e7:b6:42:42:e0:c2:a4:9a:68:a7: 84:87:55:73:37:ac:fb:44:c2:6d:53:2e:6e:57:e8:c1:8e:b1: 66:b4:ff:23:6a:bd:2d:05:41:55:bc:96:b2:1c:44:f1:9b:d2: ea:83:2d:63:dc:ed:51:1b:d0:05:ef:2f:cf:7c:80:4a:80:d3: bd:e9:1d:43:49:d2:8f:e8:f4:cb:1b:88:ca:6a:2b:45:fc:0e: 56:4f:e2:75:34:ed:37:13:ce:2a:5a:e8:5a:d1:f6:6c:5b:e3: 48:0f:28:a0:84:65:e9:9e:a5:8d:0e:0d:8a:10:dc:d6:20:01: aa:17:de:5b:6e:7f:61:f3:08:6f:dd:2e:ee:dc:24:7a:68:15: 5a:a9:ad:b5:ec:90:64:c2:24:e5:ec:03:69:38:f7:22:9b:72: ef:c1:5f:af:25:96:ef:46:58:0d:7e:3c:f1:e7:2a:9f:51:ab: 24:a0:a5:cd:b0:53:45:e2:fd:19:58:6d:0a:9e:84:f2:86:02: 74:f0:72:cb:66:ab:c6:4c:3b:29:a5:59:a5:b0:5c:8e:34:c9: 17:6d:d1:3b:fe:41:96:5c:ba:a5:15:47:5a:26:4c:69:6e:20: 36:a5:74:e6 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUPrnUDMU2qfTqg6mqOBjyDJ19iSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDhaFw0yNjExMjAxNTQ5MDhaMDMxMTAvBgNV BAMTKEEyQjhCRTdEOTZENDQ5RjI3MDgwQzAwQzM5NEVDREEwNjY4RDAyMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTHodOK2Fg8s21EUwkaQJJJLae bOgAXxhDSNsgI/t/iT3QF6kP4s0JQllbMrYACWWbBQsXD8hrSnGutyQfuwlFZq+K RQvN8AIW8P+nclMsG1bqVeB18yPIUT6wbdYdYENmCxTx1F+a59t5GqdkrhyoN3QR qtk4YMmd+VPSXdZVftxEpu12yopi/eXD1TBTLgHI7Trmc1N/jb8E8sKQx6QQEtLf +YIKFXE092i+YQonAXvgadKwWDhrboYbFO9fdwnrDYeMj3jmB3c4nY22kb5xM4kk bTuEL1HuOFXr5F3qx4KJKCeiET9zNT5BN5oyp8V9ImL7DIPYuCSImUmUmOvJAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUori+fZbUSfJwgMAMOU7NoGaNAi8wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMzMmUz MzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABbcgMA0GCSqGSIb3DQEBCwUAA4IBAQBS3pX8EEDvLvZpn+EhNlmopvqTzGI8 Q9ITCee2QkLgwqSaaKeEh1VzN6z7RMJtUy5uV+jBjrFmtP8jar0tBUFVvJayHETx m9Lqgy1j3O1RG9AF7y/PfIBKgNO96R1DSdKP6PTLG4jKaitF/A5WT+J1NO03E84q Wuha0fZsW+NIDyighGXpnqWNDg2KENzWIAGqF95bbn9h8whv3S7u3CR6aBVaqa21 7JBkwiTl7ANpOPcim3LvwV+vJZbvRlgNfjzx5yqfUaskoKXNsFNF4v0ZWG0KnoTy hgJ08HLLZqvGTDsppVmlsFyONMkXbdE7/kGWXLqlFUdaJkxpbiA2pXTm -----END CERTIFICATE-----Generated at Sat Dec 6 15:48:52 2025 by rpki-client