This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134312e302f32342d3234203d3e20313336373837.roa File: 352e3235322e3134312e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: vnI+fpQFu5/tykAuyEvBg6rB64bfHSd+vW2CR4VvyUE= Subject key identifier: 11:FC:11:F6:73:90:BE:D6:35:A9:9B:AB:65:32:D3:B9:50:20:34:1C Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7118B7FC1714E5D125238044FBA8D1802949247A Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134312e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:04 +0000 ROA not before: Fri 21 Nov 2025 15:44:04 +0000 ROA not after: Fri 20 Nov 2026 15:49:04 +0000 asID: 136787 IP address blocks: 5.252.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:18:b7:fc:17:14:e5:d1:25:23:80:44:fb:a8:d1:80:29:49:24:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:04 2025 GMT Not After : Nov 20 15:49:04 2026 GMT Subject: CN=11FC11F67390BED635A99BAB6532D3B95020341C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:56:b1:ab:4d:d7:b8:7c:47:36:d8:d8:a3: 71:e6:31:85:b2:08:f5:a1:a3:dd:3c:47:c0:ed:46: c6:a5:64:4b:4e:2c:bd:cb:ff:b0:05:12:b3:8c:19: bd:3c:cd:85:0c:9a:3c:47:e3:7a:4e:73:55:37:91: 4d:f3:45:58:96:0e:58:eb:55:2d:f9:c0:4f:02:f1: 9b:5d:9d:f1:51:4c:8d:13:bf:d3:b4:ff:c1:f4:9f: 04:89:7c:55:c1:fd:d3:bb:8a:93:68:36:9c:82:a0: d0:2b:66:19:6f:ca:8d:3e:35:13:4c:b2:eb:2e:4b: 53:e8:c2:fb:dc:d4:8e:b8:fe:42:06:9a:38:2d:01: ed:aa:8e:73:7c:d5:46:60:7c:2e:d0:4f:26:66:a6: 30:3b:f7:94:91:50:7b:6e:29:46:ff:d2:1e:d8:bf: 3d:40:1e:b4:06:1a:36:67:96:9e:be:5d:31:4a:ed: c7:59:0d:14:34:58:87:02:8f:f7:39:fd:c1:0b:07: 74:17:f9:9d:fc:34:81:f6:6c:70:fc:00:1e:6b:96: ec:da:da:d4:8e:db:e5:d0:0d:1b:68:af:21:e5:a2: fe:58:3e:50:35:e7:1a:99:e8:db:3e:2a:95:a0:54: 6f:e1:f8:4f:6e:d9:3b:6b:f8:e6:c5:f4:c2:8b:1f: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FC:11:F6:73:90:BE:D6:35:A9:9B:AB:65:32:D3:B9:50:20:34:1C X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134312e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.141.0/24 Signature Algorithm: sha256WithRSAEncryption 89:d1:2d:e1:17:8f:08:d4:f5:39:37:e9:a4:3a:36:b6:73:30: 9c:10:b4:8b:25:7d:ae:5d:1f:25:e0:cd:6a:bf:84:51:59:60: ea:70:bd:ba:e5:53:28:c7:1a:a5:91:24:36:b2:1a:9a:cb:93: 87:b6:c7:85:cc:8e:3c:5a:49:d7:47:41:17:4a:f1:29:2f:4f: d6:34:a4:ce:b8:4d:9c:91:a9:a2:53:91:24:19:97:e3:cb:01: 61:83:dd:dc:56:86:20:00:70:a2:8e:c4:7b:ef:c0:e8:5e:73: 53:3d:60:3f:7c:a8:37:5c:21:30:3e:f6:04:7b:7e:2b:ac:02: 27:e5:8e:92:81:b5:f8:7d:d3:91:84:3e:91:39:52:4c:47:33: 0f:90:1c:26:94:54:1e:83:53:ae:fc:0d:d6:52:4b:ef:4e:6e: 7c:39:3d:cc:ed:6a:ab:b0:dd:44:41:6c:ea:e1:c8:30:a0:98: 27:1f:09:bc:e0:1f:5f:4c:23:a7:73:09:8a:52:b2:e1:f4:ee: fc:3d:6a:91:59:c2:25:f5:38:68:82:92:8f:2d:ab:ab:f3:81: 96:6e:29:e2:2d:31:a7:df:81:8b:5f:2b:42:66:47:da:d0:96: 1a:84:fe:1f:6e:e3:f4:40:30:ea:df:a3:b5:e3:b4:aa:9d:41: 17:94:04:c8 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUcRi3/BcU5dElI4BE+6jRgClJJHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDRaFw0yNjExMjAxNTQ5MDRaMDMxMTAvBgNV BAMTKDExRkMxMUY2NzM5MEJFRDYzNUE5OUJBQjY1MzJEM0I5NTAyMDM0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvVaxq03XuHxHNtjYo3HmMYWy CPWho908R8DtRsalZEtOLL3L/7AFErOMGb08zYUMmjxH43pOc1U3kU3zRViWDljr VS35wE8C8ZtdnfFRTI0Tv9O0/8H0nwSJfFXB/dO7ipNoNpyCoNArZhlvyo0+NRNM susuS1Powvvc1I64/kIGmjgtAe2qjnN81UZgfC7QTyZmpjA795SRUHtuKUb/0h7Y vz1AHrQGGjZnlp6+XTFK7cdZDRQ0WIcCj/c5/cELB3QX+Z38NIH2bHD8AB5rluza 2tSO2+XQDRtoryHlov5YPlA15xqZ6Ns+KpWgVG/h+E9u2Ttr+ObF9MKLH8gjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUEfwR9nOQvtY1qZurZTLTuVAgNBwwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMyMmUz MTM0MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/I0wDQYJKoZIhvcNAQELBQADggEBAInRLeEXjwjU9Tk36aQ6NrZzMJwQ tIslfa5dHyXgzWq/hFFZYOpwvbrlUyjHGqWRJDayGprLk4e2x4XMjjxaSddHQRdK 8SkvT9Y0pM64TZyRqaJTkSQZl+PLAWGD3dxWhiAAcKKOxHvvwOhec1M9YD98qDdc ITA+9gR7fiusAifljpKBtfh905GEPpE5UkxHMw+QHCaUVB6DU678DdZSS+9Obnw5 Pcztaquw3URBbOrhyDCgmCcfCbzgH19MI6dzCYpSsuH07vw9apFZwiX1OGiCko8t q6vzgZZuKeItMaffgYtfK0JmR9rQlhqE/h9u4/RAMOrfo7XjtKqdQReUBMg= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:53 2025 by rpki-client