This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20323131343037.roa File: 352e3138312e3137382e302f32342d3234203d3e20323131343037.roa (raw, json) Hash identifier: ZDllGUXVe/6CLnyZKlVzsZQO2/HcMQSuJbzKZRUKzJU= Subject key identifier: 7A:DE:43:DA:49:5A:38:E2:26:F1:68:46:9D:DB:24:75:A9:F8:DF:22 Certificate issuer: /CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Certificate serial: 4BF8252BD88B84EDD319B930828F66BA343BBDAF Authority key identifier: 70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20323131343037.roa Signing time: Fri 21 Nov 2025 11:55:12 +0000 ROA not before: Fri 21 Nov 2025 11:50:12 +0000 ROA not after: Fri 20 Nov 2026 11:55:12 +0000 asID: 211407 IP address blocks: 5.181.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.mft rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 04:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f8:25:2b:d8:8b:84:ed:d3:19:b9:30:82:8f:66:ba:34:3b:bd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70cbd7a9817e470009c0f40ea1e370aa79b5fd91 Validity Not Before: Nov 21 11:50:12 2025 GMT Not After : Nov 20 11:55:12 2026 GMT Subject: CN=7ADE43DA495A38E226F168469DDB2475A9F8DF22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1c:82:cc:a3:6a:85:f9:e7:c6:be:a4:2c:dd: 3c:86:f8:f5:fa:6e:2a:3f:99:a9:60:a4:05:78:ce: 4b:31:2b:a2:33:ad:c8:81:f0:5e:5b:bf:fe:cc:79: d2:79:47:0b:01:bd:db:be:f3:1d:e6:c4:cf:2d:d6: 08:91:e1:48:94:bc:d0:82:0b:28:d4:46:52:61:0b: 04:43:df:bd:ec:0e:e7:aa:ee:dd:af:d7:9a:52:1d: 6f:dd:ad:ed:a9:6d:04:42:00:b1:e9:9b:aa:be:d8: 47:1c:e4:14:36:15:fc:5e:09:8f:9f:59:bc:66:2d: 23:f7:fe:e6:95:02:85:e0:40:86:55:c7:25:06:e6: 21:d0:0f:f4:e2:07:f8:41:0b:51:5a:27:8d:50:07: 40:76:62:a8:51:17:30:fd:07:58:7d:cd:14:df:9a: 6a:ad:49:4e:a3:93:a1:46:17:59:64:47:21:fb:73: 50:9a:de:85:27:3c:b4:2a:74:fd:db:52:3d:14:ab: 65:74:21:4d:70:0d:80:83:2c:9a:07:18:3a:8c:3f: 9c:32:2a:a6:ac:c4:0e:c9:04:3a:13:91:e1:a3:a0: 6c:78:ad:b0:5f:24:7f:83:e2:23:e0:7d:74:e3:a0: 8c:4d:b3:3c:d0:d4:d7:6b:06:ee:28:8a:2c:a5:b3: 17:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DE:43:DA:49:5A:38:E2:26:F1:68:46:9D:DB:24:75:A9:F8:DF:22 X509v3 Authority Key Identifier: keyid:70:CB:D7:A9:81:7E:47:00:09:C0:F4:0E:A1:E3:70:AA:79:B5:FD:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/70CBD7A9817E470009C0F40EA1E370AA79B5FD91.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvXqYF-RwAJwPQOoeNwqnm1_ZE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/b7332af0-dd73-4755-9d20-693ea8289f8a/0/352e3138312e3137382e302f32342d3234203d3e20323131343037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.178.0/24 Signature Algorithm: sha256WithRSAEncryption bb:1b:7c:a3:3f:b1:ac:2f:1c:14:0e:fb:3f:0c:a1:6e:5c:5f: e8:87:f6:39:a9:a1:bf:8b:1d:f2:24:d8:ce:82:fc:d2:a9:6e: 94:bd:d0:93:54:c4:7c:cc:6c:3e:c7:68:17:f0:ff:08:51:fb: 32:02:1d:a7:69:62:63:37:e0:58:9d:d4:14:43:16:7c:c7:94: 79:40:9c:d4:34:01:88:f1:f9:cf:fb:41:1a:d0:79:37:c7:27: a5:71:e4:3e:4a:03:ff:6c:23:10:e6:50:55:4b:a8:0e:86:a5: ff:5d:b7:93:17:7d:ef:4a:d6:43:2d:57:19:bb:90:37:cf:66: 1f:97:ce:1c:0a:c1:b4:06:0e:a9:9f:1c:06:4a:33:d7:40:bc: ea:8e:42:ce:f4:7b:43:7d:84:8a:14:92:01:39:e5:ba:17:6a: 5f:5a:9b:7a:69:53:7b:68:9d:dc:bf:67:ed:49:95:0b:1f:15: 60:f7:cb:7e:63:32:f9:fe:72:5d:13:6e:7e:50:e7:5c:ca:b6: fa:dd:d6:7d:94:e3:bb:e4:3f:3e:6a:dd:b2:9f:51:6f:81:a3: ae:1f:6a:10:c2:09:20:78:65:ba:e5:fe:be:50:24:43:86:3c: 7c:bc:59:08:bf:ec:26:03:c2:b9:b3:8d:02:37:96:4e:89:9c: fd:23:2c:04 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUS/glK9iLhO3TGbkwgo9mujQ7va8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzBjYmQ3YTk4MTdlNDcwMDA5YzBmNDBlYTFlMzcwYWE3 OWI1ZmQ5MTAeFw0yNTExMjExMTUwMTJaFw0yNjExMjAxMTU1MTJaMDMxMTAvBgNV BAMTKDdBREU0M0RBNDk1QTM4RTIyNkYxNjg0NjlEREIyNDc1QTlGOERGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHILMo2qF+efGvqQs3TyG+PX6 bio/malgpAV4zksxK6IzrciB8F5bv/7MedJ5RwsBvdu+8x3mxM8t1giR4UiUvNCC CyjURlJhCwRD373sDueq7t2v15pSHW/dre2pbQRCALHpm6q+2Ecc5BQ2FfxeCY+f WbxmLSP3/uaVAoXgQIZVxyUG5iHQD/TiB/hBC1FaJ41QB0B2YqhRFzD9B1h9zRTf mmqtSU6jk6FGF1lkRyH7c1Ca3oUnPLQqdP3bUj0Uq2V0IU1wDYCDLJoHGDqMP5wy KqasxA7JBDoTkeGjoGx4rbBfJH+D4iPgfXTjoIxNszzQ1NdrBu4oiiylsxdpAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUet5D2klaOOIm8WhGndskdan43yIwHwYDVR0j BBgwFoAUcMvXqYF+RwAJwPQOoeNwqnm1/ZEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYjczMzJhZjAtZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5 ZjhhLzAvNzBDQkQ3QTk4MTdFNDcwMDA5QzBGNDBFQTFFMzcwQUE3OUI1RkQ5MS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NNdlhxWUYtUndBSndQUU9vZU53cW5t MV9aRS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYjczMzJhZjAt ZGQ3My00NzU1LTlkMjAtNjkzZWE4Mjg5ZjhhLzAvMzUyZTMxMzgzMTJlMzEzNzM4 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTMxMzQzMDM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA BbWyMA0GCSqGSIb3DQEBCwUAA4IBAQC7G3yjP7GsLxwUDvs/DKFuXF/oh/Y5qaG/ ix3yJNjOgvzSqW6UvdCTVMR8zGw+x2gX8P8IUfsyAh2naWJjN+BYndQUQxZ8x5R5 QJzUNAGI8fnP+0Ea0Hk3xyelceQ+SgP/bCMQ5lBVS6gOhqX/XbeTF33vStZDLVcZ u5A3z2Yfl84cCsG0Bg6pnxwGSjPXQLzqjkLO9HtDfYSKFJIBOeW6F2pfWpt6aVN7 aJ3cv2ftSZULHxVg98t+YzL5/nJdE25+UOdcyrb63dZ9lOO75D8+at2yn1FvgaOu H2oQwgkgeGW65f6+UCRDhjx8vFkIv+wmA8K5s40CN5ZOiZz9IywE -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:54 2025 by rpki-client