This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e203633313939.roa File: 352e3232362e3139302e302f32342d3234203d3e203633313939.roa (raw, json) Hash identifier: 2DnoHFrcYgZYTX09bTGRwV4k6M3RH4U3hsvU0Uso1jI= Subject key identifier: D8:BE:E7:F7:FF:68:A9:1E:9A:97:52:F8:B1:AD:1C:80:81:85:5F:E1 Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 67D27A830111F03A510AFCB9A689088730370B6B Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e203633313939.roa Signing time: Wed 07 Jan 2026 11:36:32 +0000 ROA not before: Wed 07 Jan 2026 11:31:32 +0000 ROA not after: Wed 06 Jan 2027 11:36:32 +0000 asID: 63199 IP address blocks: 5.226.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d2:7a:83:01:11:f0:3a:51:0a:fc:b9:a6:89:08:87:30:37:0b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Jan 7 11:31:32 2026 GMT Not After : Jan 6 11:36:32 2027 GMT Subject: CN=D8BEE7F7FF68A91E9A9752F8B1AD1C8081855FE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:5e:b8:ea:d0:f2:f2:07:51:ed:71:e9:ac: 0c:14:d0:65:84:4c:4e:ed:d4:77:50:0e:d1:e3:c5: cd:d6:12:00:82:14:c9:f4:05:cf:8b:39:62:9a:ff: f5:76:da:15:39:61:71:2d:ee:9a:d7:d6:33:90:0d: 8e:a7:4b:f7:39:c1:b1:34:77:72:e1:9d:7c:ba:05: 56:66:69:e3:67:47:55:10:5d:74:9a:85:5f:7a:c9: ac:bd:c3:72:83:00:09:b4:ce:d1:ae:a3:3c:34:f8: f2:1b:c1:96:79:91:0d:25:1f:ec:9a:7d:6d:d3:97: 64:cf:f5:aa:1a:76:e6:68:d4:c3:9e:dc:f5:34:08: 13:84:25:6a:88:b1:bf:fc:af:12:6e:f6:af:df:51: 5a:ab:16:59:eb:a2:4b:ff:6d:6a:ad:dd:26:7a:19: 62:e2:43:c9:cc:1e:f0:39:23:4f:b5:5e:84:22:d8: 48:2f:1a:7f:4d:9a:06:d7:4d:29:bb:07:4c:da:d9: a6:15:80:e3:3a:0b:4a:23:79:f9:47:91:35:84:52: 2b:9d:d1:07:78:77:85:21:42:cd:dd:b5:81:dc:99: 95:01:85:d7:97:1b:cb:1c:f7:de:86:40:ef:47:a1: e6:ef:ce:0f:3d:0b:ad:f3:98:42:94:bf:1f:4a:a4: c1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:E7:F7:FF:68:A9:1E:9A:97:52:F8:B1:AD:1C:80:81:85:5F:E1 X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3139302e302f32342d3234203d3e203633313939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.190.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b5:e4:2b:00:bc:4e:35:97:d6:cb:6a:7a:28:fe:1d:24:ac: 03:10:10:d4:81:c4:4b:76:8b:16:8d:9b:04:e2:ad:2d:bb:5d: 9d:1a:80:3e:83:8e:57:80:71:e4:fd:56:85:65:22:d0:da:49: c1:dc:66:0b:13:8a:a0:71:29:d2:76:7d:60:c8:5d:97:04:0e: 80:ca:dd:a4:32:da:92:22:19:c0:8d:8f:c3:a4:49:10:4e:d4: 12:e9:9f:52:44:e1:ac:fc:70:33:78:4f:3a:60:c4:d2:12:08: d5:58:c2:b6:60:57:75:b5:66:39:0b:c6:a1:e5:73:66:5d:9f: d8:af:94:74:8d:a3:21:47:ef:ac:95:13:8e:fd:13:f5:65:96: 0a:45:53:92:10:18:ac:d4:ae:b2:95:7d:07:5c:f4:eb:db:d7: 95:1c:15:88:16:17:ec:ba:da:f5:ea:b6:4b:23:00:f7:c1:c4: e8:c8:90:9b:06:77:af:80:8f:26:8f:1c:ae:7b:ed:3c:09:e8: f3:08:7b:29:05:f7:86:1d:8e:63:9a:39:73:69:a6:d0:35:ba: 3d:0f:35:08:4b:10:49:6b:df:df:d8:8e:29:8b:08:26:fd:3b: 1f:41:70:25:1e:bd:40:1d:d1:36:ca:e3:29:88:ed:7a:25:eb: 1c:8a:ab:9c -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUZ9J6gwER8DpRCvy5pokIhzA3C2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNjAxMDcxMTMxMzJaFw0yNzAxMDYxMTM2MzJaMDMxMTAvBgNV BAMTKEQ4QkVFN0Y3RkY2OEE5MUU5QTk3NTJGOEIxQUQxQzgwODE4NTVGRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+r1646tDy8gdR7XHprAwU0GWE TE7t1HdQDtHjxc3WEgCCFMn0Bc+LOWKa//V22hU5YXEt7prX1jOQDY6nS/c5wbE0 d3LhnXy6BVZmaeNnR1UQXXSahV96yay9w3KDAAm0ztGuozw0+PIbwZZ5kQ0lH+ya fW3Tl2TP9aoaduZo1MOe3PU0CBOEJWqIsb/8rxJu9q/fUVqrFlnrokv/bWqt3SZ6 GWLiQ8nMHvA5I0+1XoQi2EgvGn9NmgbXTSm7B0za2aYVgOM6C0ojeflHkTWEUiud 0Qd4d4UhQs3dtYHcmZUBhdeXG8sc996GQO9Hoebvzg89C63zmEKUvx9KpMGBAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQU2L7n9/9oqR6al1L4sa0cgIGFX+EwHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzUyZTMyMzIzNjJlMzEzOTMw MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXi vjANBgkqhkiG9w0BAQsFAAOCAQEAlbXkKwC8TjWX1stqeij+HSSsAxAQ1IHES3aL Fo2bBOKtLbtdnRqAPoOOV4Bx5P1WhWUi0NpJwdxmCxOKoHEp0nZ9YMhdlwQOgMrd pDLakiIZwI2Pw6RJEE7UEumfUkThrPxwM3hPOmDE0hII1VjCtmBXdbVmOQvGoeVz Zl2f2K+UdI2jIUfvrJUTjv0T9WWWCkVTkhAYrNSuspV9B1z069vXlRwViBYX7Lra 9eq2SyMA98HE6MiQmwZ3r4CPJo8crnvtPAno8wh7KQX3hh2OY5o5c2mm0DW6PQ81 CEsQSWvf39iOKYsIJv07H0FwJR69QB3RNsrjKYjteiXrHIqrnA== -----END CERTIFICATE-----Generated at Mon Jan 19 17:10:29 2026 by rpki-client