This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233322e302f32342d3234203d3e20313336373837.roa File: 352e3235332e3233322e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 4lzFgOMuz9vG3R9Soo3FEcnVyi+svH7JdOVPm4tpmtQ= Subject key identifier: 0B:23:21:18:C8:FA:BF:C9:6A:CA:50:68:48:96:9E:6E:49:A5:63:62 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 399E7640FEEAFE93C39F08A3F7003B417784F8FC Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233322e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:20 +0000 ROA not before: Fri 28 Nov 2025 11:44:20 +0000 ROA not after: Fri 27 Nov 2026 11:49:20 +0000 asID: 136787 IP address blocks: 5.253.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:9e:76:40:fe:ea:fe:93:c3:9f:08:a3:f7:00:3b:41:77:84:f8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:20 2025 GMT Not After : Nov 27 11:49:20 2026 GMT Subject: CN=0B232118C8FABFC96ACA506848969E6E49A56362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:02:1f:49:23:f5:be:ef:08:80:15:e8:ac: 45:c1:dc:5b:51:61:89:1f:66:1a:ab:90:73:98:70: fc:03:17:4a:5c:d5:77:56:aa:72:10:6b:26:96:f9: cc:a9:2e:56:af:69:30:15:5e:05:4f:98:b4:65:e0: fe:d1:77:15:4c:48:8d:d3:0b:50:0c:94:2d:01:7d: 16:47:f1:76:29:f9:57:ba:d1:4f:17:ee:1d:93:1e: 35:f9:5c:78:ad:c2:aa:ec:8b:91:1a:fb:d8:a6:cf: f3:a7:6b:de:b9:7a:b0:ea:66:f1:a2:96:66:4c:ab: db:10:34:95:42:a3:10:25:47:f5:12:81:9c:d2:0c: 4d:df:60:d3:33:36:a6:20:b0:1a:bc:93:b9:c4:a8: 2f:4c:9e:2d:5a:02:c8:79:65:19:2f:26:a4:13:4d: cc:c2:4d:1d:2d:7f:2b:e3:fc:1d:ca:5f:62:ed:e2: 54:ef:db:4e:ba:be:d0:f2:31:6b:dd:be:d4:5c:3f: 97:dc:61:d7:5e:01:97:a0:70:da:c3:75:4b:3e:33: 2f:8c:b2:e9:31:fa:53:90:39:9f:4e:cd:e3:84:8d: 25:a3:71:a1:3d:04:28:3a:44:dc:ff:36:da:91:1d: f2:2f:5d:07:1f:e4:74:3a:17:a7:de:ad:c6:26:3f: 0e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:23:21:18:C8:FA:BF:C9:6A:CA:50:68:48:96:9E:6E:49:A5:63:62 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233322e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.232.0/24 Signature Algorithm: sha256WithRSAEncryption a8:d5:0f:37:be:4e:98:bf:d8:ec:68:fa:b1:fa:c7:46:4c:21: c5:35:38:3e:23:00:aa:2b:fb:08:ca:d5:81:8e:fe:d3:0f:c8: e3:a3:e5:fd:27:f8:57:f0:36:b0:88:95:29:8c:29:3c:63:2a: 95:22:23:30:00:f6:12:41:36:82:97:79:a8:d5:8f:57:72:64: 1c:e3:f6:bb:33:e0:b7:84:cf:b9:24:87:61:87:6a:1f:8e:0b: ff:fa:fa:fe:48:3c:f2:4e:86:b1:03:19:93:3b:dc:ac:bb:ba: af:97:66:af:8f:18:01:5b:0e:6a:ce:ef:a6:66:6b:ed:f9:8a: 72:d0:8c:53:09:dc:25:16:58:16:5f:38:8a:24:82:6b:4d:15: d2:f1:84:d4:69:1b:ad:6d:bb:ea:a9:ba:bc:13:77:b2:2f:06: b3:24:ee:2a:63:f6:ab:d7:d7:e9:18:73:ff:24:bd:6f:51:71: 71:ea:00:39:8f:c9:04:ad:8f:cc:95:fc:51:6d:94:72:e2:1b: e0:4c:1b:31:99:53:be:45:bc:45:ec:30:05:ab:aa:f0:71:55: b0:7b:8e:ad:c0:b3:2a:05:05:f5:29:26:0b:20:b8:c9:11:60: 52:2e:7a:f5:bb:13:64:4f:7e:71:6c:6a:21:41:4e:06:ee:0e: c6:8d:aa:68 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUOZ52QP7q/pPDnwij9wA7QXeE+PwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MjBaFw0yNjExMjcxMTQ5MjBaMDMxMTAvBgNV BAMTKDBCMjMyMTE4QzhGQUJGQzk2QUNBNTA2ODQ4OTY5RTZFNDlBNTYzNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tQIfSSP1vu8IgBXorEXB3FtR YYkfZhqrkHOYcPwDF0pc1XdWqnIQayaW+cypLlavaTAVXgVPmLRl4P7RdxVMSI3T C1AMlC0BfRZH8XYp+Ve60U8X7h2THjX5XHitwqrsi5Ea+9imz/Ona965erDqZvGi lmZMq9sQNJVCoxAlR/USgZzSDE3fYNMzNqYgsBq8k7nEqC9Mni1aAsh5ZRkvJqQT TczCTR0tfyvj/B3KX2Lt4lTv2066vtDyMWvdvtRcP5fcYddeAZegcNrDdUs+My+M sukx+lOQOZ9OzeOEjSWjcaE9BCg6RNz/NtqRHfIvXQcf5HQ6F6fercYmPw63AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUCyMhGMj6v8lqylBoSJaebkmlY2IwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMzMmUz MjMzMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/egwDQYJKoZIhvcNAQELBQADggEBAKjVDze+Tpi/2Oxo+rH6x0ZMIcU1 OD4jAKor+wjK1YGO/tMPyOOj5f0n+FfwNrCIlSmMKTxjKpUiIzAA9hJBNoKXeajV j1dyZBzj9rsz4LeEz7kkh2GHah+OC//6+v5IPPJOhrEDGZM73Ky7uq+XZq+PGAFb DmrO76Zma+35inLQjFMJ3CUWWBZfOIokgmtNFdLxhNRpG61tu+qpurwTd7IvBrMk 7ipj9qvX1+kYc/8kvW9RcXHqADmPyQStj8yV/FFtlHLiG+BMGzGZU75FvEXsMAWr qvBxVbB7jq3AsyoFBfUpJgsguMkRYFIuevW7E2RPfnFsaiFBTgbuDsaNqmg= -----END CERTIFICATE-----Generated at Sat Dec 6 16:46:12 2025 by rpki-client