This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20383334.roa File: 352e3138322e33342e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: neBYBqGd8Bhto0xHmQY/q2morr0HKf6LEb93IFjrXuQ= Subject key identifier: 3A:33:38:23:92:37:00:D8:1D:B8:60:6D:E1:E9:4D:6D:1B:22:5C:A2 Certificate issuer: /CN=088469d1a33085ff88b3e599d223ca74c2313a3a Certificate serial: 1D4C2897F85D04A8FB5B5AE432BF556D9E7EFBCA Authority key identifier: 08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20383334.roa Signing time: Thu 13 Nov 2025 18:07:35 +0000 ROA not before: Thu 13 Nov 2025 18:02:35 +0000 ROA not after: Thu 12 Nov 2026 18:07:35 +0000 asID: 834 IP address blocks: 5.182.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 05:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4c:28:97:f8:5d:04:a8:fb:5b:5a:e4:32:bf:55:6d:9e:7e:fb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088469d1a33085ff88b3e599d223ca74c2313a3a Validity Not Before: Nov 13 18:02:35 2025 GMT Not After : Nov 12 18:07:35 2026 GMT Subject: CN=3A333823923700D81DB8606DE1E94D6D1B225CA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:d5:55:f0:94:b4:fd:59:2b:e5:92:66:45: 9b:88:8f:aa:62:e6:d6:46:bd:45:da:7b:a9:6b:a6: 1c:83:27:3d:bd:87:ee:bc:09:c7:0e:3e:2a:72:05: 73:95:57:7f:b8:67:21:00:66:9f:dc:5e:9b:dc:85: a0:4f:6b:7b:f4:67:c9:54:c4:80:02:f1:6c:5e:07: 0d:64:bf:1d:bf:12:6c:ca:03:0f:07:1b:bd:e5:82: 2f:2e:00:fc:23:a7:24:62:f1:48:1e:d7:7b:31:dc: 6e:43:32:d2:bb:1b:43:e7:62:a6:a5:ec:5b:da:cf: 5e:38:3c:c3:86:ac:c2:d7:82:40:72:0e:b8:4a:47: e1:d3:bd:e5:f5:1f:54:57:14:7c:cb:6d:19:74:9b: ca:16:e6:f0:45:5a:3f:ef:82:4f:f8:9a:f7:c6:d2: 8b:00:7b:fa:2e:1c:e9:91:9c:bb:96:cb:85:46:cf: 91:7e:04:4a:4c:6d:b7:9b:59:84:64:c9:1f:76:2d: 58:f5:fa:15:43:19:3b:d9:fb:13:29:93:75:8f:cf: b4:96:60:b6:c1:a0:d4:b8:ec:d1:2d:bc:bc:e4:8b: 9b:e7:51:f9:a3:fb:10:ca:db:ee:46:66:c5:58:c8: 13:d4:a4:29:f6:0a:c5:c4:47:96:fa:6e:5e:ff:4b: 1d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:33:38:23:92:37:00:D8:1D:B8:60:6D:E1:E9:4D:6D:1B:22:5C:A2 X509v3 Authority Key Identifier: keyid:08:84:69:D1:A3:30:85:FF:88:B3:E5:99:D2:23:CA:74:C2:31:3A:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/088469D1A33085FF88B3E599D223CA74C2313A3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRp0aMwhf-Is-WZ0iPKdMIxOjo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/5/352e3138322e33342e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.34.0/24 Signature Algorithm: sha256WithRSAEncryption 97:6e:23:45:e2:e2:a9:7f:f7:4c:e3:c5:ad:e9:24:49:53:1d: d3:1c:a7:eb:f8:65:7f:c3:19:36:a1:cc:b1:df:52:75:80:be: 89:4c:ba:73:6e:f5:73:86:1e:a4:75:95:6f:34:a7:35:e3:49: 9d:6f:74:23:aa:ef:49:71:0a:24:67:83:0d:12:eb:e3:bf:d9: f1:87:3e:0a:1d:eb:19:5d:bd:37:83:8a:53:aa:51:82:9f:8d: 89:c8:68:33:c5:9d:ba:f5:d6:19:ef:b4:6b:82:4f:4d:27:76: ed:a9:b1:45:3f:0c:a2:01:b8:a7:59:39:26:63:cd:7f:12:85: b8:ca:68:48:2a:3e:c6:57:e3:a4:ce:ce:af:da:ed:a8:d2:3d: af:83:e2:25:e3:14:7d:09:f1:24:ad:88:8b:32:98:57:45:4f: 23:a1:33:74:c2:38:6c:af:5f:fe:4b:9e:e6:09:d2:5c:3f:96: 3e:60:8e:68:a3:35:bb:5f:b3:f3:90:64:e4:17:9f:c8:2a:27: 35:d4:6a:f6:ff:42:a9:48:99:58:7c:61:1e:a9:65:f5:e2:62: fb:f1:bd:f9:5e:65:d3:23:a2:d7:ac:dc:eb:25:ea:f6:71:9b: 56:fb:b4:b4:d4:8c:ef:c7:ba:fd:06:7f:3f:87:d2:22:06:ab: bb:6d:e5:cc -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUHUwol/hdBKj7W1rkMr9VbZ5++8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg4NDY5ZDFhMzMwODVmZjg4YjNlNTk5ZDIyM2NhNzRj MjMxM2EzYTAeFw0yNTExMTMxODAyMzVaFw0yNjExMTIxODA3MzVaMDMxMTAvBgNV BAMTKDNBMzMzODIzOTIzNzAwRDgxREI4NjA2REUxRTk0RDZEMUIyMjVDQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9dVV8JS0/Vkr5ZJmRZuIj6pi 5tZGvUXae6lrphyDJz29h+68CccOPipyBXOVV3+4ZyEAZp/cXpvchaBPa3v0Z8lU xIAC8WxeBw1kvx2/EmzKAw8HG73lgi8uAPwjpyRi8Uge13sx3G5DMtK7G0PnYqal 7Fvaz144PMOGrMLXgkByDrhKR+HTveX1H1RXFHzLbRl0m8oW5vBFWj/vgk/4mvfG 0osAe/ouHOmRnLuWy4VGz5F+BEpMbbebWYRkyR92LVj1+hVDGTvZ+xMpk3WPz7SW YLbBoNS47NEtvLzki5vnUfmj+xDK2+5GZsVYyBPUpCn2CsXER5b6bl7/Sx3nAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUOjM4I5I3ANgduGBt4elNbRsiXKIwHwYDVR0j BBgwFoAUCIRp0aMwhf+Is+WZ0iPKdMIxOjowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5 OWFmLzUvMDg4NDY5RDFBMzMwODVGRjg4QjNFNTk5RDIyM0NBNzRDMjMxM0EzQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NJUnAwYU13aGYtSXMtV1owaVBLZE1J eE9qby5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4YTAt NjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzUvMzUyZTMxMzgzMjJlMzMzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW2IjANBgkq hkiG9w0BAQsFAAOCAQEAl24jReLiqX/3TOPFrekkSVMd0xyn6/hlf8MZNqHMsd9S dYC+iUy6c271c4YepHWVbzSnNeNJnW90I6rvSXEKJGeDDRLr47/Z8Yc+Ch3rGV29 N4OKU6pRgp+NichoM8WduvXWGe+0a4JPTSd27amxRT8MogG4p1k5JmPNfxKFuMpo SCo+xlfjpM7Or9rtqNI9r4PiJeMUfQnxJK2IizKYV0VPI6EzdMI4bK9f/kue5gnS XD+WPmCOaKM1u1+z85Bk5BefyConNdRq9v9CqUiZWHxhHqll9eJi+/G9+V5l0yOi 16zc6yXq9nGbVvu0tNSM78e6/QZ/P4fSIgaru23lzA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:07:05 2025 by rpki-client