This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31382e302f32342d3234203d3e203437353833.roa File: 352e3138322e31382e302f32342d3234203d3e203437353833.roa (raw, json) Hash identifier: NbKTt7E6OmRQGSpH0tope/ffQ/pqe/zuBVgX6el9Mf8= Subject key identifier: 5F:93:3E:2E:51:A8:1B:A9:15:BE:28:D0:92:80:5F:C0:6A:3F:9D:7B Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 2CBEB0652E6E012BD76F8054AD6D17A133A71B01 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31382e302f32342d3234203d3e203437353833.roa Signing time: Fri 28 Nov 2025 11:49:17 +0000 ROA not before: Fri 28 Nov 2025 11:44:17 +0000 ROA not after: Fri 27 Nov 2026 11:49:17 +0000 asID: 47583 IP address blocks: 5.182.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:be:b0:65:2e:6e:01:2b:d7:6f:80:54:ad:6d:17:a1:33:a7:1b:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:17 2025 GMT Not After : Nov 27 11:49:17 2026 GMT Subject: CN=5F933E2E51A81BA915BE28D092805FC06A3F9D7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:eb:b1:b2:2d:8f:20:b0:7c:dc:7f:e5:8f: de:51:41:a1:ea:34:d8:c3:b3:4c:35:a6:75:57:52: 68:38:54:5a:9e:fa:34:e5:19:f2:ec:d5:22:d8:9e: fe:2e:49:c0:ac:13:51:61:a5:70:7f:1b:c0:e8:33: 76:43:06:27:36:60:83:34:c4:a1:e6:d9:f3:e2:16: 24:34:07:a6:b5:e7:2c:0b:9b:73:be:0b:2f:1e:aa: b4:17:cc:9e:87:07:90:2d:58:0b:9c:cf:91:6d:84: 1e:52:a1:f5:30:ab:1a:37:42:f4:9c:31:c2:5a:e6: 73:65:05:25:d2:5f:ad:c8:95:13:bd:48:78:44:e0: eb:c0:33:25:2a:28:63:ec:22:f0:25:ac:03:d9:ca: ed:9c:85:d1:1d:7c:60:d6:4a:c9:71:40:dc:04:28: 4f:58:0d:7e:7a:67:15:38:91:09:29:5e:28:86:22: cc:d7:7b:31:d9:2b:45:33:e2:fd:0e:97:17:4b:9b: 6d:66:73:f8:95:0c:6a:9a:93:c8:2f:85:d0:78:fe: 22:91:88:38:d3:3f:b1:ac:da:5a:57:96:2e:d0:15: e2:31:8e:4e:eb:a8:86:de:68:f8:ed:bd:de:7f:91: d0:2a:0b:60:d9:91:58:9d:e7:31:37:30:4c:81:d1: e8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:93:3E:2E:51:A8:1B:A9:15:BE:28:D0:92:80:5F:C0:6A:3F:9D:7B X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31382e302f32342d3234203d3e203437353833.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.18.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:94:a6:67:ee:49:34:c6:4b:94:67:49:65:9b:c8:81:70:a5: 23:19:3b:26:04:87:44:56:e5:4d:5d:82:04:79:eb:ad:42:de: ab:4e:8b:92:ee:88:f6:dd:da:c2:2e:78:77:20:4f:b4:67:93: 88:eb:32:e3:3c:d0:a4:5b:bc:cb:46:42:40:4c:bb:38:10:d6: de:5b:21:12:0d:e9:d2:a1:fe:1b:03:d5:59:c5:91:b7:48:0d: 28:c4:29:a6:20:31:b4:ae:a4:8a:a3:e8:63:dd:b0:a6:f9:8f: 99:63:8d:5d:0c:43:31:f2:54:67:c1:d2:fa:58:d3:6c:97:4d: 9b:2a:25:2f:de:8c:5c:b8:53:97:f2:9e:7b:59:89:c1:cb:b9: 11:0b:b2:52:1b:59:a2:7b:0d:58:e0:4f:ec:e4:b9:23:ee:f0: 5e:b1:66:9d:97:71:ad:25:12:23:30:ce:27:fb:ae:c4:f5:92: 3d:72:95:3b:dd:91:9d:87:ed:d5:fa:55:a0:5d:bf:98:80:95: 46:63:62:c5:96:5e:cc:41:2e:fb:39:e2:51:4c:ef:86:ee:87: 7d:5a:20:ec:e9:1c:bf:bf:77:e1:1d:fd:2c:5d:7f:1e:4e:41: fc:3c:e8:88:74:9f:41:60:de:42:11:1e:46:c7:5a:1c:bf:b0: 9a:81:c2:09 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIULL6wZS5uASvXb4BUrW0XoTOnGwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTdaFw0yNjExMjcxMTQ5MTdaMDMxMTAvBgNV BAMTKDVGOTMzRTJFNTFBODFCQTkxNUJFMjhEMDkyODA1RkMwNkEzRjlEN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4euxsi2PILB83H/lj95RQaHq NNjDs0w1pnVXUmg4VFqe+jTlGfLs1SLYnv4uScCsE1FhpXB/G8DoM3ZDBic2YIM0 xKHm2fPiFiQ0B6a15ywLm3O+Cy8eqrQXzJ6HB5AtWAucz5FthB5SofUwqxo3QvSc McJa5nNlBSXSX63IlRO9SHhE4OvAMyUqKGPsIvAlrAPZyu2chdEdfGDWSslxQNwE KE9YDX56ZxU4kQkpXiiGIszXezHZK0Uz4v0OlxdLm21mc/iVDGqak8gvhdB4/iKR iDjTP7Gs2lpXli7QFeIxjk7rqIbeaPjtvd5/kdAqC2DZkVid5zE3MEyB0ehzAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUX5M+LlGoG6kVvijQkoBfwGo/nXswHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMyMmUz MTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNzM1MzgzMy5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAW2EjANBgkqhkiG9w0BAQsFAAOCAQEADJSmZ+5JNMZLlGdJZZvIgXClIxk7JgSH RFblTV2CBHnrrULeq06Lku6I9t3awi54dyBPtGeTiOsy4zzQpFu8y0ZCQEy7OBDW 3lshEg3p0qH+GwPVWcWRt0gNKMQppiAxtK6kiqPoY92wpvmPmWONXQxDMfJUZ8HS +ljTbJdNmyolL96MXLhTl/Kee1mJwcu5EQuyUhtZonsNWOBP7OS5I+7wXrFmnZdx rSUSIzDOJ/uuxPWSPXKVO92RnYft1fpVoF2/mICVRmNixZZezEEu+zniUUzvhu6H fVog7Okcv7934R39LF1/Hk5B/DzoiHSfQWDeQhEeRsdaHL+wmoHCCQ== -----END CERTIFICATE-----Generated at Fri Dec 5 19:00:27 2025 by rpki-client