This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa File: 352e3235322e3134302e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: eGDx2SlfHLMuEUT1e77Aut0BV/YfVoiryZOqRYtr7aI= Subject key identifier: 49:B3:D1:BD:90:9A:CD:47:44:F7:9F:35:9D:C2:4C:64:05:8C:7D:88 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 0C03C8CA836605C85C4A07CD47BE9E5130936BA3 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:11 +0000 ROA not before: Fri 21 Nov 2025 15:44:11 +0000 ROA not after: Fri 20 Nov 2026 15:49:11 +0000 asID: 136787 IP address blocks: 5.252.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:03:c8:ca:83:66:05:c8:5c:4a:07:cd:47:be:9e:51:30:93:6b:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:11 2025 GMT Not After : Nov 20 15:49:11 2026 GMT Subject: CN=49B3D1BD909ACD4744F79F359DC24C64058C7D88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:df:8e:57:17:b7:97:9f:5e:f7:4f:71:02: a0:00:f3:bd:a0:14:32:53:71:e5:30:fa:91:40:a6: 4a:bd:6f:3e:a3:85:f4:7d:11:4d:dd:79:c4:1a:36: f4:fa:86:cc:76:db:64:db:a0:dc:cf:e7:49:c9:a6: d2:28:14:2f:be:42:c7:7b:5c:e4:09:9a:0b:08:3d: 7c:09:f5:cd:b5:e6:6f:88:3a:49:af:aa:f6:24:c5: f6:88:06:b4:7d:38:fb:f5:92:c1:0c:02:9b:c6:a6: 8b:ec:49:fe:8f:9c:97:a7:4a:0e:c4:48:52:3d:58: 29:a9:53:a8:ee:ab:0d:ff:e4:1c:73:cd:59:ea:0e: 71:84:5f:d4:de:fd:49:01:f6:69:84:63:4d:70:2b: d7:a6:95:7a:3d:57:0b:7c:e3:44:c6:4f:1b:8d:d6: ac:75:cb:29:42:c4:3c:9e:95:6d:0d:71:e7:27:46: 53:1f:f1:fd:c1:84:d8:38:8b:fa:25:a5:68:a3:f5: 2f:a3:e7:c6:cb:5b:81:2e:fa:c4:21:33:47:f4:a7: c4:37:d6:4f:5f:fc:33:95:2b:01:46:88:11:cb:10: 45:2d:e5:f4:46:4a:a3:19:bb:ae:83:a6:fc:10:67: 25:e1:95:0d:8a:2c:a7:96:6f:a8:ec:14:ad:4c:8c: da:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:D1:BD:90:9A:CD:47:44:F7:9F:35:9D:C2:4C:64:05:8C:7D:88 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134302e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.140.0/24 Signature Algorithm: sha256WithRSAEncryption 60:e8:18:b2:c6:ef:2b:7f:0d:4a:af:2d:15:df:82:1d:d6:f0: b1:d9:65:36:34:5b:5e:fd:d1:77:0e:b1:50:c3:09:72:a3:3b: 27:16:e4:02:ee:9a:23:43:27:32:07:39:cf:e0:cd:0a:49:28: 9a:ba:69:23:85:7a:0f:f1:9b:15:8a:00:95:7f:83:a3:78:bc: c2:d8:f2:a5:a8:ed:82:e9:04:a4:a1:68:3f:a7:49:6b:97:28: 42:09:7c:6c:57:02:71:eb:1d:d2:4f:37:c5:95:26:d2:cb:b5: db:85:7d:bd:ba:b0:bf:d9:4d:de:6e:3b:55:24:29:9b:5d:18: bf:8d:23:d4:9e:36:a2:35:28:3f:da:64:06:50:81:0b:19:5d: 97:c0:f3:31:b8:46:74:fe:a7:37:ac:85:e0:38:bf:92:76:f5: 05:5c:79:75:49:c6:40:c9:6b:cb:76:2f:6f:cc:22:67:71:86: f2:07:db:7c:0c:ac:60:a0:91:ce:d7:e0:84:b3:3b:58:ae:ab: 2c:79:bf:4c:9e:9f:8f:0f:95:a7:f3:5b:6e:97:d5:21:9a:8e: ab:6a:4b:3a:f6:64:cc:cb:2d:1d:27:f0:a2:04:9f:82:ad:6e: c9:71:0f:c8:cb:f3:dd:63:c4:f8:e4:25:3d:81:e7:02:35:9d: 0e:84:5b:d7 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUDAPIyoNmBchcSgfNR76eUTCTa6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTFaFw0yNjExMjAxNTQ5MTFaMDMxMTAvBgNV BAMTKDQ5QjNEMUJEOTA5QUNENDc0NEY3OUYzNTlEQzI0QzY0MDU4QzdEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2lt+OVxe3l59e909xAqAA872g FDJTceUw+pFApkq9bz6jhfR9EU3decQaNvT6hsx222TboNzP50nJptIoFC++Qsd7 XOQJmgsIPXwJ9c215m+IOkmvqvYkxfaIBrR9OPv1ksEMApvGpovsSf6PnJenSg7E SFI9WCmpU6juqw3/5BxzzVnqDnGEX9Te/UkB9mmEY01wK9emlXo9Vwt840TGTxuN 1qx1yylCxDyelW0NcecnRlMf8f3BhNg4i/olpWij9S+j58bLW4Eu+sQhM0f0p8Q3 1k9f/DOVKwFGiBHLEEUt5fRGSqMZu66DpvwQZyXhlQ2KLKeWb6jsFK1MjNqvAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUSbPRvZCazUdE9581ncJMZAWMfYgwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMyMmUz MTM0MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/IwwDQYJKoZIhvcNAQELBQADggEBAGDoGLLG7yt/DUqvLRXfgh3W8LHZ ZTY0W1790XcOsVDDCXKjOycW5ALumiNDJzIHOc/gzQpJKJq6aSOFeg/xmxWKAJV/ g6N4vMLY8qWo7YLpBKShaD+nSWuXKEIJfGxXAnHrHdJPN8WVJtLLtduFfb26sL/Z Td5uO1UkKZtdGL+NI9SeNqI1KD/aZAZQgQsZXZfA8zG4RnT+pzesheA4v5J29QVc eXVJxkDJa8t2L2/MImdxhvIH23wMrGCgkc7X4ISzO1iuqyx5v0yen48PlafzW26X 1SGajqtqSzr2ZMzLLR0n8KIEn4KtbslxD8jL891jxPjkJT2B5wI1nQ6EW9c= -----END CERTIFICATE-----Generated at Sat Dec 6 15:52:13 2025 by rpki-client