This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32332d3234203d3e2034373636.roa File: 352e3139392e302e302f32332d3234203d3e2034373636.roa (raw, json) Hash identifier: fkd1HaVNJf7l0mlOvixuLlNIhfpcobvMqSMFW5i9M+k= Subject key identifier: A3:0A:4A:57:C8:6E:24:C2:51:8B:5C:B6:52:11:51:52:02:87:E5:8D Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 7C5FDB66C1659DA4A830F23298E835B340518D06 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32332d3234203d3e2034373636.roa Signing time: Wed 19 Nov 2025 09:13:51 +0000 ROA not before: Wed 19 Nov 2025 09:08:51 +0000 ROA not after: Wed 18 Nov 2026 09:13:51 +0000 asID: 4766 IP address blocks: 5.199.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:5f:db:66:c1:65:9d:a4:a8:30:f2:32:98:e8:35:b3:40:51:8d:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 19 09:08:51 2025 GMT Not After : Nov 18 09:13:51 2026 GMT Subject: CN=A30A4A57C86E24C2518B5CB6521151520287E58D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:05:e2:1c:99:be:ef:fe:de:f3:92:02:aa:c3: 12:a6:21:15:ca:00:81:2f:0f:58:f0:ab:63:d1:2c: 1f:ba:38:83:e7:9d:d7:a4:3a:97:ce:0d:93:e0:87: 49:1d:f5:39:3b:91:07:ec:18:20:ea:3b:94:06:56: 6e:bc:f1:11:89:04:10:2e:da:9b:0f:31:f8:74:98: 51:70:6a:d1:24:08:72:42:8a:fb:65:09:9a:88:dd: 88:21:c8:57:6f:6e:12:41:ec:98:0f:76:ff:64:ad: b5:e7:1e:9f:7c:70:0c:2e:24:31:2b:cf:72:48:a3: a9:18:89:07:9f:79:5c:47:5a:22:e0:f0:e5:28:51: 24:a5:30:f6:4b:ed:55:26:8c:11:c5:d9:28:0a:1e: ea:10:af:a9:4a:5c:09:1f:0c:1a:52:ec:aa:45:b2: ff:e0:bc:37:21:0d:10:6a:b1:4d:d4:6c:c9:f0:1a: 40:f2:34:0e:a8:d8:68:57:32:54:dc:54:e0:0f:63: 12:87:a6:99:2e:b3:8e:b8:ba:50:57:b2:18:01:96: 0c:72:6d:9e:b2:83:c6:11:88:52:e5:f1:c9:63:22: 24:93:48:1f:f4:ca:c5:84:7b:e8:56:c8:23:4d:5e: 00:0a:f5:28:2c:0a:f0:1c:0d:27:09:2f:92:24:05: 99:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0A:4A:57:C8:6E:24:C2:51:8B:5C:B6:52:11:51:52:02:87:E5:8D X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e302e302f32332d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.0.0/23 Signature Algorithm: sha256WithRSAEncryption 62:aa:3a:a5:ab:31:b2:3b:23:7d:b4:03:5a:35:0f:64:7e:a7: 7d:ed:a1:02:69:23:89:86:97:65:42:f3:52:8d:50:49:8c:1c: 4a:e7:09:b2:74:ec:2c:fd:c4:48:28:9e:67:ff:06:6c:cb:16: 6c:17:aa:2a:9a:81:df:93:f4:2b:b1:81:e2:d0:a0:78:85:2c: ed:5d:7f:b7:d8:f1:83:62:ce:e4:af:a3:db:d1:d0:50:4d:77: ac:e3:09:06:50:6a:88:65:9c:1a:78:34:f9:0b:ba:37:c5:a7: 73:fc:03:46:9b:e7:f8:33:db:26:d3:45:15:c4:30:ea:d8:1d: 3b:8c:27:a8:50:fc:48:34:5f:d5:c4:44:9e:c7:59:13:c7:53: fe:56:57:70:77:3e:db:4c:71:17:b4:a8:1d:3c:02:91:8b:61: 7d:80:4c:1f:7f:fc:d7:fb:ad:31:7c:08:be:99:ce:69:08:fe: c0:40:df:8e:cc:ff:1f:19:75:ce:f9:4d:7a:d3:78:7e:59:7b: 8a:37:6e:22:dd:b7:3f:37:9f:28:bf:a5:c3:f6:b6:a5:e7:c3: e3:62:c8:3d:4b:6e:cf:ef:ac:41:53:ac:bb:b7:30:e8:4c:4e: 9d:b1:7d:b5:62:bc:3c:99:42:a6:c5:3c:42:8d:82:df:4f:05: 8a:14:6e:3e -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUfF/bZsFlnaSoMPIymOg1s0BRjQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTkwOTA4NTFaFw0yNjExMTgwOTEzNTFaMDMxMTAvBgNV BAMTKEEzMEE0QTU3Qzg2RTI0QzI1MThCNUNCNjUyMTE1MTUyMDI4N0U1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqBeIcmb7v/t7zkgKqwxKmIRXK AIEvD1jwq2PRLB+6OIPnndekOpfODZPgh0kd9Tk7kQfsGCDqO5QGVm688RGJBBAu 2psPMfh0mFFwatEkCHJCivtlCZqI3YghyFdvbhJB7JgPdv9krbXnHp98cAwuJDEr z3JIo6kYiQefeVxHWiLg8OUoUSSlMPZL7VUmjBHF2SgKHuoQr6lKXAkfDBpS7KpF sv/gvDchDRBqsU3UbMnwGkDyNA6o2GhXMlTcVOAPYxKHppkus464ulBXshgBlgxy bZ6yg8YRiFLl8cljIiSTSB/0ysWEe+hWyCNNXgAK9SgsCvAcDScJL5IkBZnTAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUowpKV8huJMJRi1y2UhFRUgKH5Y0wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzAyZTMw MmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM3MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHADANBgkq hkiG9w0BAQsFAAOCAQEAYqo6pasxsjsjfbQDWjUPZH6nfe2hAmkjiYaXZULzUo1Q SYwcSucJsnTsLP3ESCieZ/8GbMsWbBeqKpqB35P0K7GB4tCgeIUs7V1/t9jxg2LO 5K+j29HQUE13rOMJBlBqiGWcGng0+Qu6N8Wnc/wDRpvn+DPbJtNFFcQw6tgdO4wn qFD8SDRf1cREnsdZE8dT/lZXcHc+20xxF7SoHTwCkYthfYBMH3/81/utMXwIvpnO aQj+wEDfjsz/Hxl1zvlNetN4fll7ijduIt23PzefKL+lw/a2pefD42LIPUtuz++s QVOsu7cw6ExOnbF9tWK8PJlCpsU8Qo2C308FihRuPg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:39 2025 by rpki-client