This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32342d3234203d3e20313336373837.roa File: 352e3235332e3233342e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: IvRfUAmptxuAIJ5C3j1/HVKhqg1NaW+0fQ6O4gFqoRk= Subject key identifier: F0:85:B4:6F:E0:5D:17:C0:DD:61:36:8C:9C:35:8E:62:EC:49:CF:E0 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2755577BAADAB42617CA0EF052BFA7DC62340E81 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:18 +0000 ROA not before: Fri 28 Nov 2025 11:44:18 +0000 ROA not after: Fri 27 Nov 2026 11:49:18 +0000 asID: 136787 IP address blocks: 5.253.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:55:57:7b:aa:da:b4:26:17:ca:0e:f0:52:bf:a7:dc:62:34:0e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:18 2025 GMT Not After : Nov 27 11:49:18 2026 GMT Subject: CN=F085B46FE05D17C0DD61368C9C358E62EC49CFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ea:e8:42:86:60:13:2d:71:01:00:37:73:02: f2:82:e2:ff:d5:b1:48:38:5d:40:7f:25:07:f2:cc: c0:3a:ce:c8:35:16:60:e2:5c:22:0f:5e:9c:1c:ff: 82:f1:88:70:de:26:56:22:64:0c:cb:75:1a:87:76: ce:8f:c6:5f:15:5b:83:d3:07:02:d2:9c:da:1d:29: 1e:1b:a6:e5:73:70:8e:56:7f:23:d9:e2:7b:e2:8c: e6:ce:aa:cf:a9:e0:16:d6:ba:21:a3:9a:a0:68:8c: dd:f3:c9:29:4b:66:1a:b9:86:3a:ef:b8:87:bc:8e: 00:66:d1:0a:fc:57:d0:84:a6:bd:3f:b7:b3:55:6e: b6:16:9d:44:33:a5:f8:2a:70:00:d3:e0:a7:1d:bd: bd:71:d8:52:65:8d:2c:e1:e4:4c:89:06:f3:41:28: 87:60:88:86:e6:8a:ef:b2:b3:03:44:f8:99:6d:cf: f9:07:34:40:b2:91:75:c4:fd:68:70:ef:31:74:fe: 67:5a:06:d4:13:be:25:3b:bc:5f:ee:9e:3e:29:59: 04:c2:97:51:f1:0d:58:6c:ee:a2:09:cf:fc:90:a1: 26:2c:8b:c5:c6:4b:5e:59:8a:2e:63:fb:f3:24:88: 01:54:37:42:dd:58:fe:e2:d8:16:93:c7:56:a6:d4: 8b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:B4:6F:E0:5D:17:C0:DD:61:36:8C:9C:35:8E:62:EC:49:CF:E0 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233342e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.234.0/24 Signature Algorithm: sha256WithRSAEncryption 89:d9:f4:3a:dc:a6:9e:ef:3e:99:08:7b:05:85:80:97:ad:db: c9:27:b6:bf:f9:e8:76:d5:1f:f4:10:6b:52:87:ee:2f:8f:2a: 05:18:70:99:d7:c9:02:20:86:1e:c3:fc:39:5c:28:18:9b:a2: 74:65:7d:90:f1:14:56:43:bd:02:00:80:e6:9d:8d:5e:61:d6: 23:d2:18:18:a3:a6:f5:0a:e2:86:03:4b:08:ee:0c:cb:c9:77: 00:69:eb:c2:82:95:ca:29:50:4f:3e:f8:bf:58:30:bd:36:ae: 07:d9:41:d2:c2:0f:8c:7c:be:15:90:6e:77:ca:c4:2a:3e:d0: 02:61:34:4e:85:08:78:eb:b3:ff:d0:2f:d9:7d:c5:36:bc:51: 26:9b:7b:ad:05:42:ee:9e:9d:70:df:08:c1:45:89:b1:ec:9a: 74:e6:40:2c:55:92:d0:18:b3:18:7e:46:a9:7d:21:6a:b2:5e: 83:d0:04:d2:4f:d5:ec:02:c1:28:34:d4:d9:29:a4:a8:9c:c0: 06:61:6e:a1:b3:d9:81:21:41:6f:c9:c7:3c:aa:32:63:c1:31: de:36:4f:08:9e:de:5e:52:f4:8e:92:3c:ad:92:94:a3:5b:6a: 20:19:3d:00:99:71:81:18:5d:0c:f5:bb:e1:72:6b:c5:9a:b3: 80:91:fa:ff -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUJ1VXe6ratCYXyg7wUr+n3GI0DoEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MThaFw0yNjExMjcxMTQ5MThaMDMxMTAvBgNV BAMTKEYwODVCNDZGRTA1RDE3QzBERDYxMzY4QzlDMzU4RTYyRUM0OUNGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl6uhChmATLXEBADdzAvKC4v/V sUg4XUB/JQfyzMA6zsg1FmDiXCIPXpwc/4LxiHDeJlYiZAzLdRqHds6Pxl8VW4PT BwLSnNodKR4bpuVzcI5WfyPZ4nvijObOqs+p4BbWuiGjmqBojN3zySlLZhq5hjrv uIe8jgBm0Qr8V9CEpr0/t7NVbrYWnUQzpfgqcADT4Kcdvb1x2FJljSzh5EyJBvNB KIdgiIbmiu+yswNE+Jltz/kHNECykXXE/Whw7zF0/mdaBtQTviU7vF/unj4pWQTC l1HxDVhs7qIJz/yQoSYsi8XGS15Zii5j+/MkiAFUN0LdWP7i2BaTx1am1IvnAgMB AAGjggJCMIICPjAdBgNVHQ4EFgQU8IW0b+BdF8DdYTaMnDWOYuxJz+AwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMzMmUz MjMzMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/eowDQYJKoZIhvcNAQELBQADggEBAInZ9Drcpp7vPpkIewWFgJet28kn tr/56HbVH/QQa1KH7i+PKgUYcJnXyQIghh7D/DlcKBibonRlfZDxFFZDvQIAgOad jV5h1iPSGBijpvUK4oYDSwjuDMvJdwBp68KClcopUE8++L9YML02rgfZQdLCD4x8 vhWQbnfKxCo+0AJhNE6FCHjrs//QL9l9xTa8USabe60FQu6enXDfCMFFibHsmnTm QCxVktAYsxh+Rql9IWqyXoPQBNJP1ewCwSg01NkppKicwAZhbqGz2YEhQW/Jxzyq MmPBMd42Twie3l5S9I6SPK2SlKNbaiAZPQCZcYEYXQz1u+Fya8Was4CR+v8= -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:06 2025 by rpki-client