This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134322e302f32342d3234203d3e20313336373837.roa File: 352e3235322e3134322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 70MdE+tmyVtCNSc/86zeLTHFDIMXwm3lUeaHVHwPBAk= Subject key identifier: 10:B1:CA:B4:9B:4E:E9:73:02:F3:87:0F:C5:E8:12:8A:02:79:BF:02 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 5954A6F3D793236766FF2A936AC40D08D2FFCC72 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:02 +0000 ROA not before: Fri 21 Nov 2025 15:44:02 +0000 ROA not after: Fri 20 Nov 2026 15:49:02 +0000 asID: 136787 IP address blocks: 5.252.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:54:a6:f3:d7:93:23:67:66:ff:2a:93:6a:c4:0d:08:d2:ff:cc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:02 2025 GMT Not After : Nov 20 15:49:02 2026 GMT Subject: CN=10B1CAB49B4EE97302F3870FC5E8128A0279BF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:11:49:b1:07:76:94:52:1b:bc:81:f8:3a: f5:cc:e5:52:51:46:a7:c6:7a:c9:74:f6:e1:30:95: 28:b3:b7:c7:bf:7b:29:c5:a9:6d:a6:1e:68:1e:12: 34:3f:ea:85:2a:2d:b9:8d:e2:3a:7d:f8:ec:73:0b: eb:f8:76:53:46:3f:f9:6c:93:71:e0:b0:b6:76:2a: 1f:08:c1:ff:8c:83:e6:b8:d8:6f:e5:56:88:f5:3b: 05:66:3c:88:fc:56:58:c7:34:97:ce:af:24:4f:82: 43:c1:b6:6b:be:db:21:3d:b6:d5:24:08:7a:e1:bc: c2:44:7f:86:f6:c1:a1:c7:ec:7e:aa:33:e6:45:a3: d5:6c:bc:42:07:8e:2e:62:7f:f7:df:c5:1d:d8:ff: 30:67:4c:85:1e:e5:bb:a7:27:6d:29:dd:ab:5f:97: 4d:89:fb:9a:6c:94:85:cd:96:0e:1e:e9:91:e6:f2: ed:b4:80:34:b4:00:dc:09:83:ee:9c:af:7d:e7:d3: 0f:e8:7b:9c:9d:6a:61:4a:02:a9:d3:62:ac:34:e4: 69:46:46:c2:71:d9:37:50:97:31:db:bb:3e:d4:20: a7:a8:37:e6:11:1b:03:c4:d7:e1:b5:cf:74:e9:4b: d8:a5:63:34:7e:d6:11:d8:8a:53:0e:d1:4f:f1:b8: 01:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B1:CA:B4:9B:4E:E9:73:02:F3:87:0F:C5:E8:12:8A:02:79:BF:02 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.142.0/24 Signature Algorithm: sha256WithRSAEncryption 43:a3:94:46:d4:df:97:00:27:f2:b0:5f:25:48:35:e9:9d:8c: 2c:64:b5:fa:9a:19:ee:57:99:b9:8d:4a:06:df:ed:ab:4d:d1: 33:dd:77:93:b4:aa:1b:f7:7b:d7:49:5e:95:14:1f:f1:98:08: 90:84:24:bc:19:ae:4e:6a:19:b8:72:2e:db:d1:73:1a:b0:ad: 35:6f:ed:f3:a9:d2:fb:a9:fa:06:c5:7a:ed:5d:cf:f2:4c:d6: 77:56:59:da:d3:fb:f1:ba:01:2f:38:bd:00:6d:98:57:19:18: 31:11:6a:bf:fa:2c:09:8e:c8:0a:b5:6f:d3:ec:29:49:03:92: 17:67:d4:f9:7d:96:ca:2c:d2:de:f2:79:6d:5b:f6:03:36:7f: b5:97:be:22:8e:70:90:96:94:0b:be:b0:5f:90:34:d3:26:da: b6:15:83:09:c1:ad:ff:59:8a:15:19:c1:43:f8:b2:a2:01:c6: 3f:b4:f4:fe:e6:8f:74:60:1d:71:96:c0:2d:ac:46:90:c6:e9: c5:a8:19:a0:85:ac:7b:15:2c:6b:66:be:0c:19:b0:34:22:dd: 7d:23:bd:f0:73:ba:75:c8:ef:1c:68:43:c0:f4:00:7c:16:21: a2:44:73:b0:b3:08:32:13:9b:5f:99:91:fa:fd:8c:56:80:7b: 28:f8:e7:d6 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUWVSm89eTI2dm/yqTasQNCNL/zHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MDJaFw0yNjExMjAxNTQ5MDJaMDMxMTAvBgNV BAMTKDEwQjFDQUI0OUI0RUU5NzMwMkYzODcwRkM1RTgxMjhBMDI3OUJGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJYxFJsQd2lFIbvIH4OvXM5VJR RqfGesl09uEwlSizt8e/eynFqW2mHmgeEjQ/6oUqLbmN4jp9+OxzC+v4dlNGP/ls k3HgsLZ2Kh8Iwf+Mg+a42G/lVoj1OwVmPIj8VljHNJfOryRPgkPBtmu+2yE9ttUk CHrhvMJEf4b2waHH7H6qM+ZFo9VsvEIHji5if/ffxR3Y/zBnTIUe5bunJ20p3atf l02J+5pslIXNlg4e6ZHm8u20gDS0ANwJg+6cr33n0w/oe5ydamFKAqnTYqw05GlG RsJx2TdQlzHbuz7UIKeoN+YRGwPE1+G1z3TpS9ilYzR+1hHYilMO0U/xuAGLAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUELHKtJtO6XMC84cPxegSigJ5vwIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMyMmUz MTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/I4wDQYJKoZIhvcNAQELBQADggEBAEOjlEbU35cAJ/KwXyVINemdjCxk tfqaGe5XmbmNSgbf7atN0TPdd5O0qhv3e9dJXpUUH/GYCJCEJLwZrk5qGbhyLtvR cxqwrTVv7fOp0vup+gbFeu1dz/JM1ndWWdrT+/G6AS84vQBtmFcZGDERar/6LAmO yAq1b9PsKUkDkhdn1Pl9lsos0t7yeW1b9gM2f7WXviKOcJCWlAu+sF+QNNMm2rYV gwnBrf9ZihUZwUP4sqIBxj+09P7mj3RgHXGWwC2sRpDG6cWoGaCFrHsVLGtmvgwZ sDQi3X0jvfBzunXI7xxoQ8D0AHwWIaJEc7CzCDITm1+Zkfr9jFaAeyj459Y= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:08 2025 by rpki-client