This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa File: 352e3138332e33332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: z/LFuNG/f+RMajGY0mC8D8+aqX+fFL8XRZda1r52oHk= Subject key identifier: EF:6A:85:A8:E3:16:B2:F6:3C:86:C3:05:38:EB:DE:22:63:87:00:69 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2AD5AF2CEE6C6E0E197252BFE7265EC696AFEE4D Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:03 +0000 ROA not before: Fri 21 Nov 2025 15:44:03 +0000 ROA not after: Fri 20 Nov 2026 15:49:03 +0000 asID: 136787 IP address blocks: 5.183.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d5:af:2c:ee:6c:6e:0e:19:72:52:bf:e7:26:5e:c6:96:af:ee:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:03 2025 GMT Not After : Nov 20 15:49:03 2026 GMT Subject: CN=EF6A85A8E316B2F63C86C30538EBDE2263870069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:c9:c3:a3:b2:20:37:cc:91:1a:61:d2:cd: c3:71:fe:5a:3f:d2:43:e2:89:27:11:cb:dd:de:78: 79:d2:c6:0b:30:84:b0:9f:e3:5d:55:00:2e:e3:cf: ef:14:b6:1a:cf:e6:78:06:13:56:27:cc:17:d6:ef: ac:76:1d:fd:9b:25:4f:fa:03:6c:b1:e7:f9:6e:15: f9:5e:20:56:d2:56:e8:14:a2:d2:65:0a:62:0e:da: c6:49:09:9a:03:af:39:63:1b:ef:c9:63:d2:01:7a: e0:c0:c3:74:17:ee:ed:96:a4:41:09:a8:42:59:f2: c7:ae:1a:06:f9:7a:12:1b:c2:d5:ba:26:d8:d9:05: 62:3b:dc:2a:28:bf:4d:f7:7a:d4:5f:c1:50:2c:ad: 2d:cd:00:4f:a6:1b:61:d4:ff:fc:51:fd:d4:a0:b6: db:ec:b0:a7:15:ce:c1:6b:c7:f8:de:60:a4:4d:ea: a8:29:7c:35:f2:f4:9f:de:64:9f:ca:88:07:eb:7e: 91:f3:29:25:36:4f:b8:6c:4b:ed:f6:92:bc:9a:df: dc:9b:ae:b7:eb:ca:4e:bc:66:4e:4d:da:94:86:e8: 43:03:21:c4:35:fc:c1:47:76:00:50:2f:bb:62:e0: d0:84:83:4c:ab:58:43:7f:78:62:a0:ac:b5:b7:ce: 0d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6A:85:A8:E3:16:B2:F6:3C:86:C3:05:38:EB:DE:22:63:87:00:69 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.33.0/24 Signature Algorithm: sha256WithRSAEncryption 17:79:70:79:41:e0:87:a4:a9:51:d3:59:82:d0:76:ed:aa:a4: c9:17:2d:69:82:2b:52:a8:a0:27:09:ba:da:07:8b:c7:ba:09: 8a:2e:de:8b:46:01:f9:75:71:db:c3:c6:09:e8:bf:ab:71:61: da:d8:c3:89:36:4f:2b:40:a6:a2:fc:eb:3b:59:dc:c3:92:62: ce:71:38:b2:27:aa:53:5e:83:f0:9e:1b:f9:d3:60:01:10:b1: 0c:24:07:27:34:61:da:8c:db:00:ca:bc:d1:0a:ae:ca:c0:eb: a3:ec:44:38:78:c8:87:6a:44:7f:e7:5f:b9:9a:10:fc:4f:ba: 51:d6:48:cf:b9:ab:e8:c8:0b:16:b6:ba:10:01:d0:db:ce:ea: 9b:d0:a0:8b:6c:c6:1d:75:f1:c2:97:74:b3:54:6c:1f:49:e2: db:e1:4f:cc:65:8d:11:8a:9d:34:9c:d4:03:d3:d9:94:6c:34: 76:10:ce:4e:93:95:2b:46:ea:14:2c:ca:5b:4e:1f:d1:52:16: 47:3d:28:d3:dd:d7:3e:b3:b5:6c:07:a2:65:05:68:f2:1d:ef: d8:35:63:65:38:0f:bd:c6:72:c9:ff:4a:79:23:18:d6:60:92: 07:5e:e2:e9:12:d1:21:3d:ca:d3:0d:bd:0c:cf:56:3b:03:48: ef:47:37:c0 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUKtWvLO5sbg4ZclK/5yZexpav7k0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDNaFw0yNjExMjAxNTQ5MDNaMDMxMTAvBgNV BAMTKEVGNkE4NUE4RTMxNkIyRjYzQzg2QzMwNTM4RUJERTIyNjM4NzAwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJQ8nDo7IgN8yRGmHSzcNx/lo/ 0kPiiScRy93eeHnSxgswhLCf411VAC7jz+8UthrP5ngGE1YnzBfW76x2Hf2bJU/6 A2yx5/luFfleIFbSVugUotJlCmIO2sZJCZoDrzljG+/JY9IBeuDAw3QX7u2WpEEJ qEJZ8seuGgb5ehIbwtW6JtjZBWI73Coov033etRfwVAsrS3NAE+mG2HU//xR/dSg ttvssKcVzsFrx/jeYKRN6qgpfDXy9J/eZJ/KiAfrfpHzKSU2T7hsS+32krya39yb rrfryk68Zk5N2pSG6EMDIcQ1/MFHdgBQL7ti4NCEg0yrWEN/eGKgrLW3zg0fAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQU72qFqOMWsvY8hsMFOOveImOHAGkwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMzMmUz MzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABbchMA0GCSqGSIb3DQEBCwUAA4IBAQAXeXB5QeCHpKlR01mC0HbtqqTJFy1p gitSqKAnCbraB4vHugmKLt6LRgH5dXHbw8YJ6L+rcWHa2MOJNk8rQKai/Os7WdzD kmLOcTiyJ6pTXoPwnhv502ABELEMJAcnNGHajNsAyrzRCq7KwOuj7EQ4eMiHakR/ 51+5mhD8T7pR1kjPuavoyAsWtroQAdDbzuqb0KCLbMYddfHCl3SzVGwfSeLb4U/M ZY0Rip00nNQD09mUbDR2EM5Ok5UrRuoULMpbTh/RUhZHPSjT3dc+s7VsB6JlBWjy He/YNWNlOA+9xnLJ/0p5IxjWYJIHXuLpEtEhPcrTDb0Mz1Y7A0jvRzfA -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:03 2025 by rpki-client