This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa File: 352e3235322e3134332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 8sNcBrtvN9aGZkIIJmV4Y2a7kzN29OtRRtQsh3Mz09Y= Subject key identifier: A6:A3:C0:16:9C:4A:BF:9A:74:7D:A5:0E:78:FA:68:2D:19:B6:9A:8E Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7AF1A3F026BF864D6E2FA051C139BE2D210DF6D1 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 21 Nov 2025 15:49:12 +0000 ROA not before: Fri 21 Nov 2025 15:44:12 +0000 ROA not after: Fri 20 Nov 2026 15:49:12 +0000 asID: 136787 IP address blocks: 5.252.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f1:a3:f0:26:bf:86:4d:6e:2f:a0:51:c1:39:be:2d:21:0d:f6:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 21 15:44:12 2025 GMT Not After : Nov 20 15:49:12 2026 GMT Subject: CN=A6A3C0169C4ABF9A747DA50E78FA682D19B69A8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:6a:a3:af:6e:77:22:86:a8:a2:04:c1:0d: b8:13:f7:f4:94:8d:4a:ff:2f:95:09:9d:b2:c0:fa: 43:2a:e9:19:bd:d5:e7:d7:62:83:a9:95:f4:58:e4: 6e:be:21:2d:48:c2:21:47:1b:ed:27:64:f5:f6:bb: 1d:cc:df:f7:c5:46:09:d6:b7:6b:2f:3c:90:cd:38: 31:12:fb:c0:e0:78:0e:e8:11:6d:e2:e6:01:2f:d1: b6:98:3e:0d:b6:06:5a:57:ba:41:c7:54:84:a9:bc: c6:ab:1c:9f:fa:5e:07:8c:02:cb:7b:bd:ca:0a:15: 2a:00:bb:7a:b0:a2:73:ae:7d:eb:60:54:bc:78:8f: ea:ac:ae:a0:f1:28:f9:81:05:7a:fa:37:e1:1f:75: f3:dd:0e:a0:30:36:b8:30:7e:a2:b9:46:16:19:6a: 67:30:c6:6b:92:30:74:01:98:53:98:7c:e1:b2:a0: 4a:b0:36:ce:8b:99:61:91:95:db:33:7f:21:b0:26: 35:6f:86:8e:a6:81:28:7c:df:f1:8d:e7:13:8d:91: 3d:c9:99:81:17:15:4b:0a:65:cf:e0:3d:2d:5a:dd: fe:59:60:8d:70:b3:73:f5:ab:b2:8a:54:98:cc:0d: 8e:c3:43:f1:77:99:1a:3c:9f:5e:07:8f:4f:9c:54: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A3:C0:16:9C:4A:BF:9A:74:7D:A5:0E:78:FA:68:2D:19:B6:9A:8E X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235322e3134332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.252.143.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ca:d6:78:38:a8:a8:c6:15:36:c3:bb:ec:f4:11:43:fe:fc: 98:7f:b4:12:7b:5e:ab:3f:60:c8:33:0b:b4:49:95:c6:28:95: f4:97:bd:c4:53:8a:2d:e6:5b:46:d5:75:7a:74:a9:ce:77:74: 7f:7e:33:b4:41:a9:94:24:63:96:81:47:af:64:12:c0:a2:5f: 30:f7:14:65:b1:25:28:53:3f:2e:ee:ca:c6:75:93:5c:aa:91: 19:32:aa:e0:b9:26:99:4e:d3:e4:13:c6:ec:d9:d9:3b:b4:1f: 6a:ec:62:c8:c5:46:43:88:fe:99:89:78:f7:4c:81:0a:9c:2f: a4:87:22:67:f9:91:98:2a:de:46:43:96:32:16:7a:33:5f:9d: 65:02:66:fb:67:b8:96:7f:19:a5:4b:04:b7:87:0f:c0:20:9c: 41:91:ff:cf:06:b6:a0:ce:35:f6:ac:ec:43:cb:6c:f6:0c:d7: 5d:99:f6:dd:f3:0b:b7:8b:0d:21:0d:2d:ae:55:bd:b8:5d:14: 99:ce:55:d2:9e:59:58:a3:6f:ec:74:7a:e7:42:62:91:d1:b3: 5b:a6:44:8f:31:7c:30:6c:25:12:a1:68:ca:31:a6:09:e9:49: 4f:bb:8e:c8:f2:d8:2d:98:98:1b:64:94:dc:0a:54:b4:3b:0b: 7d:a0:68:4c -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUevGj8Ca/hk1uL6BRwTm+LSEN9tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjExNTQ0MTJaFw0yNjExMjAxNTQ5MTJaMDMxMTAvBgNV BAMTKEE2QTNDMDE2OUM0QUJGOUE3NDdEQTUwRTc4RkE2ODJEMTlCNjlBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6mqjr253IoaoogTBDbgT9/SU jUr/L5UJnbLA+kMq6Rm91efXYoOplfRY5G6+IS1IwiFHG+0nZPX2ux3M3/fFRgnW t2svPJDNODES+8DgeA7oEW3i5gEv0baYPg22BlpXukHHVISpvMarHJ/6XgeMAst7 vcoKFSoAu3qwonOufetgVLx4j+qsrqDxKPmBBXr6N+EfdfPdDqAwNrgwfqK5RhYZ amcwxmuSMHQBmFOYfOGyoEqwNs6LmWGRldszfyGwJjVvho6mgSh83/GN5xONkT3J mYEXFUsKZc/gPS1a3f5ZYI1ws3P1q7KKVJjMDY7DQ/F3mRo8n14Hj0+cVECjAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUpqPAFpxKv5p0faUOePpoLRm2mo4wHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMyMmUz MTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/I8wDQYJKoZIhvcNAQELBQADggEBAEXK1ng4qKjGFTbDu+z0EUP+/Jh/ tBJ7Xqs/YMgzC7RJlcYolfSXvcRTii3mW0bVdXp0qc53dH9+M7RBqZQkY5aBR69k EsCiXzD3FGWxJShTPy7uysZ1k1yqkRkyquC5JplO0+QTxuzZ2Tu0H2rsYsjFRkOI /pmJePdMgQqcL6SHImf5kZgq3kZDljIWejNfnWUCZvtnuJZ/GaVLBLeHD8AgnEGR /88GtqDONfas7EPLbPYM112Z9t3zC7eLDSENLa5VvbhdFJnOVdKeWVijb+x0eudC YpHRs1umRI8xfDBsJRKhaMoxpgnpSU+7jsjy2C2YmBtklNwKVLQ7C32gaEw= -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:37 2025 by rpki-client