This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa File: 352e3235332e3233352e302f32342d3234203d3e20313336373837.roa (raw, json) Hash identifier: 3OQUHpT0Vzk1bXaGvzgdVETZl0N4u5N+JQrtxwVpB7A= Subject key identifier: 8E:E7:62:65:61:CB:00:29:0F:80:56:76:88:EE:3A:65:CF:CB:37:14 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7EA49634F28C3738E39B380BAD90D362A8AE107C Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa Signing time: Fri 28 Nov 2025 11:49:49 +0000 ROA not before: Fri 28 Nov 2025 11:44:49 +0000 ROA not after: Fri 27 Nov 2026 11:49:49 +0000 asID: 136787 IP address blocks: 5.253.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:a4:96:34:f2:8c:37:38:e3:9b:38:0b:ad:90:d3:62:a8:ae:10:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:49 2025 GMT Not After : Nov 27 11:49:49 2026 GMT Subject: CN=8EE7626561CB00290F80567688EE3A65CFCB3714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:56:5d:0e:6a:32:70:38:d8:c5:78:d8:96: 54:c5:92:ed:d2:bd:b1:ca:2d:0b:0b:3b:3b:af:4b: 02:70:50:7d:27:79:90:7f:b4:24:b9:17:df:1b:69: 30:1e:ce:54:28:4b:aa:90:8e:3e:50:94:1c:c4:a4: eb:16:23:e5:82:5a:d4:69:db:8d:6b:20:09:20:d8: f0:8f:73:bb:00:a3:e4:01:4b:37:a4:a8:3a:e3:f3: 2b:09:9d:fe:be:13:18:d2:3a:37:a2:20:8c:28:e5: 36:56:45:6e:88:e4:60:e7:4b:2f:f3:f2:83:73:f6: 43:8a:17:e9:8f:20:47:54:27:d6:6b:51:40:03:70: 37:31:de:85:51:1d:18:6a:d4:a4:8c:49:c1:c4:96: 42:d4:b6:eb:e3:24:4d:de:c8:e2:d5:fb:77:db:1c: 01:c4:1c:dc:fd:33:29:11:03:c8:1e:81:b9:5b:11: 78:48:f7:39:fc:a2:33:a8:0f:1d:19:3a:64:d3:2c: c7:ac:49:73:d0:78:d0:3d:49:2d:b1:f8:5f:b7:42: 3f:c9:2f:4e:b3:7e:ac:ca:20:bf:fb:bc:fa:e1:a0: c1:73:d6:48:b5:60:e6:4e:92:96:a2:19:11:3e:87: 7d:47:60:7f:6e:59:97:09:76:21:45:41:f5:10:14: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E7:62:65:61:CB:00:29:0F:80:56:76:88:EE:3A:65:CF:CB:37:14 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3235332e3233352e302f32342d3234203d3e20313336373837.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.235.0/24 Signature Algorithm: sha256WithRSAEncryption b2:ec:d0:33:68:7e:15:99:35:41:c4:d4:ba:9a:ff:af:0c:34: d4:37:bd:34:64:08:ca:95:48:58:3f:ea:a7:20:4a:49:11:4a: 3f:c2:a3:9d:11:3d:35:b4:f2:fc:c6:02:15:a8:89:7a:ff:dc: 1a:12:48:85:d9:74:39:e6:5c:bd:e4:98:ef:82:a3:5e:56:43: 44:c1:56:27:23:9a:c5:e6:5c:04:7a:71:56:26:0d:82:55:0f: b4:18:93:f7:a4:fb:23:1b:8a:8c:01:87:12:62:d5:6a:e2:e2: e1:69:e5:63:60:23:fc:3b:84:79:41:2b:65:79:7d:17:22:21: 81:a3:a0:29:ae:45:9f:66:b4:f5:b3:8e:65:fd:44:d0:8c:6a: 4c:d0:a4:0d:e0:8c:c7:6f:1e:c6:c0:96:6c:75:78:3e:56:42: fc:ff:7a:a4:bc:b2:73:46:d7:ee:46:58:14:23:b0:f8:45:2b: 31:1a:a1:6e:28:6d:f4:9d:df:0b:ca:fa:7e:2c:6e:43:7a:09: d2:ca:22:f6:8d:a7:a7:e3:0c:0f:f7:32:20:86:60:0b:a0:a2: f5:09:1b:c7:c7:e0:ff:47:84:c2:2d:16:36:76:e0:60:ee:fd: 9b:ea:63:14:ce:d3:a2:a5:eb:87:f8:77:3d:6d:d9:90:26:85: b8:d4:d1:d7 -----BEGIN CERTIFICATE----- MIIFODCCBCCgAwIBAgIUfqSWNPKMNzjjmzgLrZDTYqiuEHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDlaFw0yNjExMjcxMTQ5NDlaMDMxMTAvBgNV BAMTKDhFRTc2MjY1NjFDQjAwMjkwRjgwNTY3Njg4RUUzQTY1Q0ZDQjM3MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU/lZdDmoycDjYxXjYllTFku3S vbHKLQsLOzuvSwJwUH0neZB/tCS5F98baTAezlQoS6qQjj5QlBzEpOsWI+WCWtRp 241rIAkg2PCPc7sAo+QBSzekqDrj8ysJnf6+ExjSOjeiIIwo5TZWRW6I5GDnSy/z 8oNz9kOKF+mPIEdUJ9ZrUUADcDcx3oVRHRhq1KSMScHElkLUtuvjJE3eyOLV+3fb HAHEHNz9MykRA8gegblbEXhI9zn8ojOoDx0ZOmTTLMesSXPQeNA9SS2x+F+3Qj/J L06zfqzKIL/7vPrhoMFz1ki1YOZOkpaiGRE+h31HYH9uWZcJdiFFQfUQFEy/AgMB AAGjggJCMIICPjAdBgNVHQ4EFgQUjudiZWHLACkPgFZ2iO46Zc/LNxQwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzIzNTMzMmUz MjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzNzM4Mzcucm9hMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAF/eswDQYJKoZIhvcNAQELBQADggEBALLs0DNofhWZNUHE1Lqa/68MNNQ3 vTRkCMqVSFg/6qcgSkkRSj/Co50RPTW08vzGAhWoiXr/3BoSSIXZdDnmXL3kmO+C o15WQ0TBVicjmsXmXAR6cVYmDYJVD7QYk/ek+yMbiowBhxJi1Wri4uFp5WNgI/w7 hHlBK2V5fRciIYGjoCmuRZ9mtPWzjmX9RNCMakzQpA3gjMdvHsbAlmx1eD5WQvz/ eqS8snNG1+5GWBQjsPhFKzEaoW4obfSd3wvK+n4sbkN6CdLKIvaNp6fjDA/3MiCG YAugovUJG8fH4P9HhMItFjZ24GDu/ZvqYxTO06Kl64f4dz1t2ZAmhbjU0dc= -----END CERTIFICATE-----Generated at Sat Dec 6 15:53:50 2025 by rpki-client