This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31392e302f32342d3234203d3e203136323736.roa File: 352e3138322e31392e302f32342d3234203d3e203136323736.roa (raw, json) Hash identifier: 6SJ5zF8Bsfns3xeq7/004qwZrh/WQH/0Hm3NTCa9uMU= Subject key identifier: B0:71:E8:3D:83:CB:01:9F:DC:70:D2:C0:DD:EC:13:6F:39:E2:AD:E2 Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 7C0397E59F854A2DCB59B42635F48A195837B765 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31392e302f32342d3234203d3e203136323736.roa Signing time: Thu 27 Nov 2025 15:56:24 +0000 ROA not before: Thu 27 Nov 2025 15:51:24 +0000 ROA not after: Thu 26 Nov 2026 15:56:24 +0000 asID: 16276 IP address blocks: 5.182.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:03:97:e5:9f:85:4a:2d:cb:59:b4:26:35:f4:8a:19:58:37:b7:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 27 15:51:24 2025 GMT Not After : Nov 26 15:56:24 2026 GMT Subject: CN=B071E83D83CB019FDC70D2C0DDEC136F39E2ADE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:de:97:ff:16:8e:97:17:87:16:78:9e:9a: cc:cf:2f:4c:1f:c9:36:a9:ac:33:5a:74:96:54:f9: b6:27:7f:cb:7a:67:bd:fa:43:1c:93:aa:06:8d:01: c0:07:08:f2:dd:84:6a:d3:d1:a5:b5:11:96:c5:74: 3c:45:f0:0c:96:f5:65:88:43:74:a5:b9:f0:79:29: 4c:77:77:38:8e:16:4b:a3:5f:41:1b:a3:c9:30:46: 0d:ba:f7:95:7f:ad:71:a1:31:31:77:2a:48:35:5d: b4:72:a0:73:26:c5:8d:d5:26:00:2a:9e:de:cc:40: a1:9c:ea:72:bd:dd:1d:0a:7f:f5:6f:81:18:e1:a3: 74:a5:a5:c7:f7:07:44:c3:bc:e2:57:cb:be:dc:90: 61:84:ab:00:38:75:ee:2e:bb:dc:3f:0f:ee:65:48: de:02:13:41:33:bd:b7:00:75:31:d8:ec:c5:58:45: 1f:97:f9:45:3f:25:f5:f5:90:21:92:52:5c:64:75: 9a:24:17:1a:c3:6b:fd:98:f8:00:4a:56:5d:1e:a6: 3d:39:1b:cd:45:41:91:c6:24:22:a6:af:1c:84:b3: c2:f3:53:99:36:74:eb:57:a6:1c:c0:0f:6d:59:42: b7:14:84:c7:2b:2f:96:04:d0:d5:1b:ab:f0:78:94: 31:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:71:E8:3D:83:CB:01:9F:DC:70:D2:C0:DD:EC:13:6F:39:E2:AD:E2 X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138322e31392e302f32342d3234203d3e203136323736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.19.0/24 Signature Algorithm: sha256WithRSAEncryption bd:55:e8:3b:54:b8:6f:56:c5:28:88:56:f6:c0:b0:9a:4b:9c: f2:42:06:c2:68:57:45:d0:a1:eb:07:92:54:39:3a:bd:ee:96: 27:c4:c6:fb:05:6f:4c:33:35:b4:cd:89:77:2a:2f:58:81:71: 2d:10:58:01:24:03:7e:13:40:56:7c:9f:79:48:2f:17:4e:92: be:55:ce:23:b9:7f:52:e4:61:f4:aa:d2:69:14:0d:3c:21:0d: 83:91:97:42:f6:30:73:d4:eb:84:74:ce:6a:4f:a4:aa:c8:75: 17:f7:49:e9:43:d5:2f:b4:6a:a6:4b:07:21:e4:9c:61:59:e0: 40:d7:31:fd:ea:bb:65:16:f2:a6:e6:71:61:53:0f:80:90:c3: 43:42:f5:35:ea:35:5d:74:0b:1b:3c:c8:52:f8:64:7b:7c:33: 41:c8:55:b2:21:5d:03:78:45:ab:55:7f:b1:e5:e5:ab:c1:ce: 31:d3:aa:5e:df:ff:47:19:0a:dd:1f:b7:bd:f5:f1:b1:6d:2a: b2:cc:38:d4:d5:a7:aa:8b:d8:63:33:4b:42:49:23:96:83:85: c2:db:81:a1:22:84:db:c1:ab:7f:50:4f:ba:aa:33:22:60:06: fe:92:00:0f:f7:9e:f1:b0:78:88:3e:1d:3a:bf:1e:30:43:a4: 27:29:5b:53 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUfAOX5Z+FSi3LWbQmNfSKGVg3t2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjcxNTUxMjRaFw0yNjExMjYxNTU2MjRaMDMxMTAvBgNV BAMTKEIwNzFFODNEODNDQjAxOUZEQzcwRDJDMERERUMxMzZGMzlFMkFERTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcd6X/xaOlxeHFniemszPL0wf yTaprDNadJZU+bYnf8t6Z736QxyTqgaNAcAHCPLdhGrT0aW1EZbFdDxF8AyW9WWI Q3SlufB5KUx3dziOFkujX0Ebo8kwRg2695V/rXGhMTF3Kkg1XbRyoHMmxY3VJgAq nt7MQKGc6nK93R0Kf/VvgRjho3Slpcf3B0TDvOJXy77ckGGEqwA4de4uu9w/D+5l SN4CE0EzvbcAdTHY7MVYRR+X+UU/JfX1kCGSUlxkdZokFxrDa/2Y+ABKVl0epj05 G81FQZHGJCKmrxyEs8LzU5k2dOtXphzAD21ZQrcUhMcrL5YE0NUbq/B4lDGZAgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUsHHoPYPLAZ/ccNLA3ewTbznireIwHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3Jz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMyMmUz MTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0g AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME AAW2EzANBgkqhkiG9w0BAQsFAAOCAQEAvVXoO1S4b1bFKIhW9sCwmkuc8kIGwmhX RdCh6weSVDk6ve6WJ8TG+wVvTDM1tM2JdyovWIFxLRBYASQDfhNAVnyfeUgvF06S vlXOI7l/UuRh9KrSaRQNPCENg5GXQvYwc9TrhHTOak+kqsh1F/dJ6UPVL7RqpksH IeScYVngQNcx/eq7ZRbypuZxYVMPgJDDQ0L1Neo1XXQLGzzIUvhke3wzQchVsiFd A3hFq1V/seXlq8HOMdOqXt//RxkK3R+3vfXxsW0qssw41NWnqovYYzNLQkkjloOF wtuBoSKE28Grf1BPuqozImAG/pIAD/ee8bB4iD4dOr8eMEOkJylbUw== -----END CERTIFICATE-----Generated at Fri Dec 5 04:28:04 2025 by rpki-client