This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203430303231.roa File: 352e3138302e3135312e302f32342d3332203d3e203430303231.roa (raw, json) Hash identifier: ZPhIi09FOylcSlfzEoW9qBWYYFVTikS22b8uAvt2j3U= Subject key identifier: 25:BF:03:54:4C:6C:04:E6:FF:E9:BC:18:39:11:1E:CF:B4:5D:3E:05 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7C9429CB8C3D85E061C68BC371E077F880F54B30 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203430303231.roa Signing time: Fri 28 Nov 2025 11:49:43 +0000 ROA not before: Fri 28 Nov 2025 11:44:43 +0000 ROA not after: Fri 27 Nov 2026 11:49:43 +0000 asID: 40021 IP address blocks: 5.180.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:38:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:94:29:cb:8c:3d:85:e0:61:c6:8b:c3:71:e0:77:f8:80:f5:4b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:43 2025 GMT Not After : Nov 27 11:49:43 2026 GMT Subject: CN=25BF03544C6C04E6FFE9BC1839111ECFB45D3E05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:e6:19:d0:65:4f:ea:f3:40:52:a3:5a:36: 91:37:59:4a:f2:4b:a2:17:73:2d:b6:af:b1:cd:47: 7a:c9:3b:1b:b9:15:1c:2b:27:ca:d0:6d:50:ca:c7: d2:86:e0:92:f5:3a:77:e5:86:2e:80:ae:ec:1c:b6: 05:4b:87:b2:73:06:7c:7b:58:f2:f6:9b:8c:f7:7d: 6a:32:81:47:03:1e:86:1f:ad:7f:b3:60:73:94:12: 7b:9b:34:cb:a0:df:c5:70:ec:80:4d:44:3a:4e:6f: 10:8d:12:03:e3:b5:03:d5:e6:50:40:43:a8:ca:b4: dd:1e:42:3c:41:43:fb:a8:ae:7f:d4:40:ca:e4:04: 6c:a6:d8:a1:54:23:2b:49:2a:d7:89:d9:e5:04:a6: d5:7f:5d:ab:8e:f2:3a:9c:6d:1e:5c:f1:0f:00:9c: 83:d0:2d:3f:5c:69:08:e4:14:de:44:67:19:7a:5b: 40:f6:5f:2d:ac:da:a8:c9:cb:02:79:53:34:dd:40: 34:12:60:d4:18:d0:8e:9a:f3:a3:7b:aa:ea:fe:82: 5a:90:a1:6b:00:23:dd:f9:ad:4f:90:bc:5d:94:2b: d1:c2:58:58:72:ec:66:1f:a1:8a:06:26:e5:c2:d2: b8:3b:d6:7b:f1:88:0c:00:d3:e6:8a:72:14:1e:b1: a3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:BF:03:54:4C:6C:04:E6:FF:E9:BC:18:39:11:1E:CF:B4:5D:3E:05 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203430303231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.151.0/24 Signature Algorithm: sha256WithRSAEncryption 32:39:da:5d:6f:80:6b:09:a2:e7:b3:47:04:41:4c:19:f3:fd: a7:64:d9:b3:d1:e5:67:74:1d:0c:0c:21:0b:ac:64:8b:6d:e6: eb:0d:f7:03:1e:03:ec:4e:fe:1e:62:6a:de:9c:86:16:3f:28: a9:af:06:12:3e:23:ed:35:e9:37:ba:5b:79:e4:93:0d:d1:e2: af:68:c0:34:5d:b4:95:10:57:d1:6a:45:61:b4:f0:50:7e:13: 2a:53:6e:cd:be:6a:15:d3:40:d4:44:af:fc:fd:5b:6f:77:d6: 92:9a:33:72:4e:01:07:26:eb:93:27:fc:6a:7c:da:7b:0e:ae: fd:2e:71:2d:ff:33:85:62:28:c5:a4:e3:e2:ee:bd:c5:43:93: ac:fa:cc:ca:64:02:e9:f8:63:29:6d:8c:6d:dd:e5:7e:49:b4: b0:78:c3:e4:2a:99:5d:e0:8c:73:fc:00:02:8c:01:3f:6b:bf: d3:9f:13:00:2b:ff:3e:4e:d6:49:9f:b3:46:01:4d:d6:2c:01: 87:0a:e5:c4:a5:24:96:97:91:e5:2a:26:4f:dc:fb:02:66:95: ee:ec:7d:00:14:a9:11:32:bb:65:0a:dc:e7:7d:9d:be:37:bb: 08:06:f9:81:94:6b:5b:23:8c:57:d9:98:ea:27:20:80:32:6d: b4:3b:b5:37 -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUfJQpy4w9heBhxovDceB3+ID1SzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0NDNaFw0yNjExMjcxMTQ5NDNaMDMxMTAvBgNV BAMTKDI1QkYwMzU0NEM2QzA0RTZGRkU5QkMxODM5MTExRUNGQjQ1RDNFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5CuYZ0GVP6vNAUqNaNpE3WUry S6IXcy22r7HNR3rJOxu5FRwrJ8rQbVDKx9KG4JL1Onflhi6AruwctgVLh7JzBnx7 WPL2m4z3fWoygUcDHoYfrX+zYHOUEnubNMug38Vw7IBNRDpObxCNEgPjtQPV5lBA Q6jKtN0eQjxBQ/uorn/UQMrkBGym2KFUIytJKteJ2eUEptV/XauO8jqcbR5c8Q8A nIPQLT9caQjkFN5EZxl6W0D2Xy2s2qjJywJ5UzTdQDQSYNQY0I6a86N7qur+glqQ oWsAI935rU+QvF2UK9HCWFhy7GYfoYoGJuXC0rg71nvxiAwA0+aKchQesaOjAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUJb8DVExsBOb/6bwYOREez7RdPgUwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMwMmUz MTM1MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNDMwMzAzMjMxLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABbSXMA0GCSqGSIb3DQEBCwUAA4IBAQAyOdpdb4BrCaLns0cEQUwZ8/2nZNmz 0eVndB0MDCELrGSLbebrDfcDHgPsTv4eYmrenIYWPyiprwYSPiPtNek3ult55JMN 0eKvaMA0XbSVEFfRakVhtPBQfhMqU27NvmoV00DURK/8/Vtvd9aSmjNyTgEHJuuT J/xqfNp7Dq79LnEt/zOFYijFpOPi7r3FQ5Os+szKZALp+GMpbYxt3eV+SbSweMPk Kpld4Ixz/AACjAE/a7/TnxMAK/8+TtZJn7NGAU3WLAGHCuXEpSSWl5HlKiZP3PsC ZpXu7H0AFKkRMrtlCtznfZ2+N7sIBvmBlGtbI4xX2ZjqJyCAMm20O7U3 -----END CERTIFICATE-----Generated at Fri Dec 5 14:50:33 2025 by rpki-client