This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233332e302f32342d3234203d3e20313336373837.roa File: 352e3235332e3233332e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: FAyiqZVat3W2q9LtRf+E3Fg73jr/J8pccA5Hh33JbJM= Subject key identifier: 30:30:34:20:4B:D6:16:9F:0A:E0:CB:AD:3F:3B:0F:AB:E0:35:B9:B6 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 68F5914BC1B73A945D869C9FFEE86A8C4C4B6083 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233332e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:52 +0000 ROA not before: Fri 28 Nov 2025 11:44:52 +0000 ROA not after: Fri 27 Nov 2026 11:49:52 +0000 asID: 136787 IP address blocks: 5.253.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:f5:91:4b:c1:b7:3a:94:5d:86:9c:9f:fe:e8:6a:8c:4c:4b:60:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:52 2025 GMT Not After : Nov 27 11:49:52 2026 GMT Subject: CN=303034204BD6169F0AE0CBAD3F3B0FABE035B9B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:d2:9c:cb:42:77:91:95:ca:94:6b:c0:eb: ca:0d:16:19:4a:be:d0:7a:2e:a3:26:68:f8:77:57: 11:3b:c5:24:7e:5e:3f:5a:0b:a3:63:2c:50:05:1f: 61:32:37:f8:8b:a7:58:12:e5:bc:60:62:e0:ea:9f: 96:40:1d:f6:89:86:a0:3e:b5:93:fd:c2:31:1e:20: bc:c3:38:2d:e3:63:3a:1b:0b:da:52:12:e9:47:1d: 39:06:df:6c:18:73:9c:c8:b4:b8:47:04:86:ea:55: ee:e8:44:c4:ed:6c:12:b5:aa:7f:4e:95:b1:56:b2: da:18:c7:ef:3d:b9:d0:59:35:ce:be:de:68:d6:37: f5:13:c1:e8:1c:68:ba:68:87:98:ef:67:01:9f:6b: 08:d3:64:c4:e8:e0:a1:69:96:75:0d:e5:43:30:14: 36:c8:21:83:df:50:39:2b:c4:aa:35:05:8c:7c:21: 00:bd:22:6c:57:e1:f9:5a:a3:94:3f:78:ea:43:8e: 28:50:98:85:6b:f2:41:7c:fa:bb:60:60:83:5a:3f: eb:a8:b6:31:ea:80:fb:7c:07:68:6d:e7:ae:1c:2d: 57:ea:10:e0:cc:2e:23:98:b6:d6:25:ed:13:1a:c2: 43:79:91:28:66:99:fe:f9:02:47:f2:67:83:b9:4a: 2e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:30:34:20:4B:D6:16:9F:0A:E0:CB:AD:3F:3B:0F:AB:E0:35:B9:B6 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233332e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.233.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:5a:c0:7c:e0:e6:b2:7c:89:b8:99:6e:dd:4f:ab:e4:12:3a: 42:01:73:ad:df:b9:db:c2:b1:d1:a4:aa:fd:5e:44:c1:6e:bf: c3:de:63:30:1f:c6:85:49:1d:30:ab:bb:4a:d5:23:8c:d5:12: 0d:12:ba:59:4f:3c:33:29:89:33:96:de:89:2c:8b:a4:b7:c1: 0b:aa:97:55:aa:60:0c:3c:e1:5f:d5:a1:51:54:1a:5c:d9:21: e3:7d:74:e5:08:f4:21:39:42:78:bf:3e:14:23:91:e7:0f:18: 66:74:a7:6e:aa:e9:6d:8d:9a:46:d0:eb:60:63:3b:3d:2e:d3: f6:2e:dc:50:4e:5d:6e:51:c7:3a:d5:b7:6a:7f:b0:20:42:74: 99:66:c4:e9:be:b5:b8:62:8d:dd:05:da:df:00:48:94:66:49: f8:48:91:28:ef:2e:02:16:5c:fc:5c:ca:5e:48:8d:06:63:41: c8:1d:dc:ac:36:be:e2:11:cc:c1:cf:27:35:b2:21:de:b3:6c: fb:83:d1:6f:27:b8:8f:a6:a8:83:17:1f:83:88:c7:e5:5d:7a: 5c:7e:1b:d9:a2:14:eb:c0:dd:cd:93:d4:a8:7a:04:86:46:ab: 99:4b:f9:30:bb:0f:df:20:b1:a9:83:6e:04:ba:cb:2e:61:3c: a1:f0:17:f1 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUaPWRS8G3OpRdhpyf/uhqjExLYIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NTJaFw0yNjExMjcxMTQ5NTJaMDMxMTAvBgNV BAMTKDMwMzAzNDIwNEJENjE2OUYwQUUwQ0JBRDNGM0IwRkFCRTAzNUI5QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdp9Kcy0J3kZXKlGvA68oNFhlK vtB6LqMmaPh3VxE7xSR+Xj9aC6NjLFAFH2EyN/iLp1gS5bxgYuDqn5ZAHfaJhqA+ tZP9wjEeILzDOC3jYzobC9pSEulHHTkG32wYc5zItLhHBIbqVe7oRMTtbBK1qn9O lbFWstoYx+89udBZNc6+3mjWN/UTwegcaLpoh5jvZwGfawjTZMTo4KFplnUN5UMw FDbIIYPfUDkrxKo1BYx8IQC9ImxX4flao5Q/eOpDjihQmIVr8kF8+rtgYINaP+uo tjHqgPt8B2ht564cLVfqEODMLiOYttYl7RMawkN5kShmmf75AkfyZ4O5Si7LAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUMDA0IEvWFp8K4MutPzsPq+A1ubYwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMzMmUz MjMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/ekwDQYJKoZIhvcNAQELBQADggEBAA9awHzg5rJ8ibiZbt1Pq+QSOkIB c63fudvCsdGkqv1eRMFuv8PeYzAfxoVJHTCru0rVI4zVEg0SullPPDMpiTOW3oks i6S3wQuql1WqYAw84V/VoVFUGlzZIeN9dOUI9CE5Qni/PhQjkecPGGZ0p26q6W2N mkbQ62BjOz0u0/Yu3FBOXW5RxzrVt2p/sCBCdJlmxOm+tbhijd0F2t8ASJRmSfhI kSjvLgIWXPxcyl5IjQZjQcgd3Kw2vuIRzMHPJzWyId6zbPuD0W8nuI+mqIMXH4OI x+Vdelx+G9miFOvA3c2T1Kh6BIZGq5lL+TC7D98gsamDbgS6yy5hPKHwF/E= -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:01 2025 by rpki-client