This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323034313334.roa File: 352e3138312e3137362e302f32342d3234203d3e20323034313334.roa (raw, json) Hash identifier: 2dGSHmu7Z8T3M9YvOtmY+3oAisgZlblaM48cniZIhRo= Subject key identifier: 46:B6:13:F2:E1:18:56:1E:C8:E7:96:2D:34:9D:DA:BA:C9:6D:F1:9D Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 68067C2697011686BE1C800F78CD1D1E261E2F1C Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323034313334.roa Signing time: Tue 18 Nov 2025 18:07:06 +0000 ROA not before: Tue 18 Nov 2025 18:02:06 +0000 ROA not after: Tue 17 Nov 2026 18:07:06 +0000 asID: 204134 IP address blocks: 5.181.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:06:7c:26:97:01:16:86:be:1c:80:0f:78:cd:1d:1e:26:1e:2f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 18 18:02:06 2025 GMT Not After : Nov 17 18:07:06 2026 GMT Subject: CN=46B613F2E118561EC8E7962D349DDABAC96DF19D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:07:48:12:1d:ae:30:7f:de:e2:0e:71:5b:6f: 9f:1f:87:55:08:6f:cd:3c:0a:aa:2c:49:0b:e7:4f: 53:df:83:d0:e4:d4:08:1e:64:1e:18:e6:a3:d6:fe: 38:bc:6d:27:da:58:93:1c:59:71:fb:d2:eb:ad:00: aa:01:d7:fb:27:ae:9f:bb:37:32:6a:7f:0d:c5:06: e7:7d:98:26:58:f2:f8:f8:84:64:36:a3:09:5d:7b: d2:54:e7:f4:fe:b1:f6:f1:b3:e8:82:fc:58:1d:50: 10:d7:f9:11:aa:13:c4:de:1e:7e:c3:58:76:46:c6: 4d:63:96:9d:c8:64:93:d7:d8:f1:43:42:df:56:f3: bb:19:c3:41:85:4d:85:f2:ff:5f:50:cb:24:b0:b0: 59:85:92:89:f6:c7:ca:e8:aa:fc:c8:05:14:e3:2b: be:2b:48:ca:ee:0a:00:4f:e3:e6:ac:76:5b:06:97: 30:21:57:27:56:6d:c9:c7:53:af:a8:ee:e4:37:9b: fd:95:6c:10:49:39:20:d8:94:e7:dc:54:c3:a8:af: bc:08:1b:af:e4:81:5c:c6:35:5b:09:fe:d3:f0:19: fe:9a:27:9e:a7:d0:6a:a2:32:b2:22:e8:cd:42:30: da:9e:7c:f5:11:dc:ed:9a:f2:ed:c7:ca:2f:aa:6b: c4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:13:F2:E1:18:56:1E:C8:E7:96:2D:34:9D:DA:BA:C9:6D:F1:9D X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137362e302f32342d3234203d3e20323034313334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.176.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b7:45:45:7b:c4:6f:11:29:30:5a:2f:54:7d:52:31:c7:61: 8d:ea:d7:f3:7c:aa:0f:9d:85:92:6e:93:06:71:91:43:e2:8c: 5a:d1:bc:a5:81:0b:22:71:f0:db:13:a9:f1:67:26:b4:ee:01: 37:e4:e3:54:f1:67:ba:cd:ad:46:ec:71:f0:c6:8f:7d:69:b7: 09:51:75:a1:e6:00:e6:b8:2c:dd:cc:ec:ed:e6:ed:d0:fa:c3: 61:ef:5f:3d:eb:7e:35:df:d1:11:97:81:33:b6:87:f4:41:f2: 7c:31:2f:5a:65:42:eb:59:b4:c1:d6:23:b0:b6:7b:0c:c1:73: 10:aa:62:b6:12:21:cb:ba:83:8c:71:23:a8:6f:61:c0:c7:ac: 5e:44:8c:73:67:d1:c1:c3:b3:14:df:95:2d:43:dc:3d:f8:37: c0:78:30:82:5b:2e:0c:b3:4e:a0:54:c1:89:f7:9d:f7:2d:13: 9e:8e:f8:ef:29:bd:7d:8a:06:90:ce:4e:51:56:0e:4c:90:b9: 1e:f6:57:ef:e5:e7:e3:9f:87:b3:63:da:ff:24:93:2f:3f:78: 3a:46:39:f5:03:28:71:7f:4e:ef:39:b2:ab:9b:15:4b:a8:92: b2:08:63:2b:83:d2:26:e6:c3:56:4b:e2:49:7c:58:cf:16:d5: 65:3e:9c:6e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUaAZ8JpcBFoa+HIAPeM0dHiYeLxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMTgxODAyMDZaFw0yNjExMTcxODA3MDZaMDMxMTAvBgNV BAMTKDQ2QjYxM0YyRTExODU2MUVDOEU3OTYyRDM0OUREQUJBQzk2REYxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9B0gSHa4wf97iDnFbb58fh1UI b808CqosSQvnT1Pfg9Dk1AgeZB4Y5qPW/ji8bSfaWJMcWXH70uutAKoB1/snrp+7 NzJqfw3FBud9mCZY8vj4hGQ2owlde9JU5/T+sfbxs+iC/FgdUBDX+RGqE8TeHn7D WHZGxk1jlp3IZJPX2PFDQt9W87sZw0GFTYXy/19QyySwsFmFkon2x8roqvzIBRTj K74rSMruCgBP4+asdlsGlzAhVydWbcnHU6+o7uQ3m/2VbBBJOSDYlOfcVMOor7wI G6/kgVzGNVsJ/tPwGf6aJ56n0GqiMrIi6M1CMNqefPUR3O2a8u3Hyi+qa8R5AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQURrYT8uEYVh7I55YtNJ3auslt8Z0wHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzUyZTMxMzgzMTJlMzEzNzM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM0MzEzMzM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA BbWwMA0GCSqGSIb3DQEBCwUAA4IBAQBIt0VFe8RvESkwWi9UfVIxx2GN6tfzfKoP nYWSbpMGcZFD4oxa0bylgQsicfDbE6nxZya07gE35ONU8We6za1G7HHwxo99abcJ UXWh5gDmuCzdzOzt5u3Q+sNh7189634139ERl4Eztof0QfJ8MS9aZULrWbTB1iOw tnsMwXMQqmK2EiHLuoOMcSOob2HAx6xeRIxzZ9HBw7MU35UtQ9w9+DfAeDCCWy4M s06gVMGJ9533LROejvjvKb19igaQzk5RVg5MkLke9lfv5efjn4ezY9r/JJMvP3g6 Rjn1Ayhxf07vObKrmxVLqJKyCGMrg9Im5sNWS+JJfFjPFtVlPpxu -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:48 2025 by rpki-client