This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa File: 352e3138332e33352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: +8Nu1LNi9Ptqx3OIajcVGyGQ43i5GD+kY5AQx+q+QrE= Subject key identifier: 48:4F:7E:DA:19:B5:F1:1F:25:FE:56:33:B7:AD:95:8B:E8:D8:A8:40 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 29071B425F4D83481A8F5CD8CF706A8F3386FAC2 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:00 +0000 ROA not before: Fri 21 Nov 2025 15:44:00 +0000 ROA not after: Fri 20 Nov 2026 15:49:00 +0000 asID: 136787 IP address blocks: 5.183.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:07:1b:42:5f:4d:83:48:1a:8f:5c:d8:cf:70:6a:8f:33:86:fa:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:00 2025 GMT Not After : Nov 20 15:49:00 2026 GMT Subject: CN=484F7EDA19B5F11F25FE5633B7AD958BE8D8A840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c3:9f:30:58:3f:93:13:20:a3:22:66:97:27: 97:0e:ca:eb:27:3e:66:61:2b:ac:18:fc:bd:b2:13: 78:c4:fa:1c:13:58:c0:e9:db:ff:bc:b6:c1:da:84: ce:4a:56:fb:f4:45:c2:56:f3:ba:68:85:65:57:af: fb:6a:e4:74:c3:2e:9e:c4:5a:ea:5a:13:c9:76:5d: 87:bc:2b:58:dc:fc:82:0d:4b:2f:04:a3:5c:8c:e2: cd:d5:a7:d2:74:35:84:8e:38:1f:35:24:e9:15:f8: 35:10:59:3e:d7:3b:05:70:78:74:84:3d:14:c3:9f: 3b:d0:bc:06:78:f9:34:75:5e:0c:aa:3a:2b:bd:74: be:c2:19:e4:fa:e6:6f:df:16:db:a4:21:7d:c5:f0: 86:da:d0:ff:7f:9d:8e:4b:1f:34:da:5c:f0:aa:4e: 2c:26:99:eb:76:12:8d:3e:dc:b8:86:15:75:ad:39: 0c:e8:fd:4b:bc:3d:3a:c0:a6:21:ba:64:e4:92:c5: 27:19:28:7a:aa:ab:c5:62:50:7e:87:f2:73:74:e2: 21:a1:5a:1d:6f:d4:15:b9:e9:68:dc:39:7c:d2:8a: 54:f0:ab:b0:b4:48:ef:b0:bf:07:ea:11:0f:fc:bc: dd:ef:1b:80:78:35:c7:bd:32:44:51:19:e0:55:e2: 95:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4F:7E:DA:19:B5:F1:1F:25:FE:56:33:B7:AD:95:8B:E8:D8:A8:40 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138332e33352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.35.0/24 Signature Algorithm: sha256WithRSAEncryption 17:42:71:76:4b:30:ea:c9:19:e7:6c:b9:98:4c:ff:0a:eb:09: 7e:bb:26:4b:a5:46:40:b5:fd:28:66:a7:59:d4:84:a5:2f:8c: cf:44:4f:81:f2:ef:f2:de:46:b6:22:96:7c:14:ce:70:07:ec: b7:7e:13:3f:66:ce:27:a7:72:67:9a:df:c0:16:69:7b:51:35: ea:d4:43:8c:55:87:ff:1e:d0:06:a0:32:1d:ed:75:47:0e:d2: 99:00:ed:d8:81:33:de:f5:89:26:88:f6:e6:cd:e6:07:81:82: b4:27:36:78:cb:9f:34:26:c3:05:e6:91:44:17:d4:0a:20:1c: 4d:97:15:74:88:d5:11:b8:b3:0d:26:04:d0:aa:37:33:8b:d8: 32:b1:56:54:9d:45:39:e5:56:fb:88:7d:ed:c6:5e:0f:55:99: ad:79:dd:ba:10:dd:7a:1d:8a:5b:d6:c9:1e:3c:3f:fc:57:8b: d3:c2:ec:1d:8c:25:48:d4:07:b2:6f:cf:c1:80:8a:61:4a:92: 1e:2a:c4:9b:6b:67:74:2e:63:33:8a:ce:1b:aa:c7:f7:66:df: 5e:73:06:0e:db:7f:f5:9b:58:4f:f7:55:8b:31:ec:46:e5:76: 13:21:84:b8:54:41:e9:80:1b:d6:16:55:60:dc:c1:2a:36:a8: a9:bf:f4:73 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUKQcbQl9Ng0gaj1zYz3BqjzOG+sIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDBaFw0yNjExMjAxNTQ5MDBaMDMxMTAvBgNV BAMTKDQ4NEY3RURBMTlCNUYxMUYyNUZFNTYzM0I3QUQ5NThCRThEOEE4NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDw58wWD+TEyCjImaXJ5cOyusn PmZhK6wY/L2yE3jE+hwTWMDp2/+8tsHahM5KVvv0RcJW87pohWVXr/tq5HTDLp7E WupaE8l2XYe8K1jc/IINSy8Eo1yM4s3Vp9J0NYSOOB81JOkV+DUQWT7XOwVweHSE PRTDnzvQvAZ4+TR1XgyqOiu9dL7CGeT65m/fFtukIX3F8Iba0P9/nY5LHzTaXPCq Tiwmmet2Eo0+3LiGFXWtOQzo/Uu8PTrApiG6ZOSSxScZKHqqq8ViUH6H8nN04iGh Wh1v1BW56WjcOXzSilTwq7C0SO+wvwfqEQ/8vN3vG4B4Nce9MkRRGeBV4pW1AgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUSE9+2hm18R8l/lYzt62Vi+jYqEAwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMzMmUz MzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM2MzczODM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABbcjMA0GCSqGSIb3DQEBCwUAA4IBAQAXQnF2SzDqyRnnbLmYTP8K6wl+uyZL pUZAtf0oZqdZ1ISlL4zPRE+B8u/y3ka2IpZ8FM5wB+y3fhM/Zs4np3Jnmt/AFml7 UTXq1EOMVYf/HtAGoDId7XVHDtKZAO3YgTPe9YkmiPbmzeYHgYK0JzZ4y580JsMF 5pFEF9QKIBxNlxV0iNURuLMNJgTQqjczi9gysVZUnUU55Vb7iH3txl4PVZmted26 EN16HYpb1skePD/8V4vTwuwdjCVI1Aeyb8/BgIphSpIeKsSba2d0LmMzis4bqsf3 Zt9ecwYO23/1m1hP91WLMexG5XYTIYS4VEHpgBvWFlVg3MEqNqipv/Rz -----END CERTIFICATE-----Generated at Sat Dec 6 15:46:29 2025 by rpki-client