This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31302e302f32342d3234203d3e20383334.roa File: 352e3139392e31302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: qPrPRmasqBaOj5lKQQyKW/6vq0UTC14zkASnJ/4EFKA= Subject key identifier: 96:0A:D3:0B:EC:18:08:59:DD:21:9E:A7:0E:B1:EA:B4:FA:70:48:2A Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 627EE16515B86A1071A5C248E5812FFC2B570D78 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31302e302f32342d3234203d3e20383334.roa Signing time: Tue 27 Jan 2026 13:06:02 +0000 ROA not before: Tue 27 Jan 2026 13:01:02 +0000 ROA not after: Tue 26 Jan 2027 13:06:02 +0000 asID: 834 IP address blocks: 5.199.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:7e:e1:65:15:b8:6a:10:71:a5:c2:48:e5:81:2f:fc:2b:57:0d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 27 13:01:02 2026 GMT Not After : Jan 26 13:06:02 2027 GMT Subject: CN=960AD30BEC180859DD219EA70EB1EAB4FA70482A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:8f:83:7a:01:e9:d3:57:fa:bd:7d:20:8a: 96:37:b0:2e:02:43:93:26:4b:68:16:a8:42:bc:64: 50:5a:ac:9a:3d:5f:58:7b:b5:9c:57:0e:b6:9b:57: e7:12:98:1f:2d:e1:68:7e:a9:11:c5:7c:67:e7:f5: 46:b3:11:1e:fe:4f:24:0a:15:3d:db:6a:a4:3a:00: be:9f:5b:3e:7e:0a:5c:8b:00:80:d1:8a:10:0e:a4: 57:06:88:d3:f7:9e:06:ff:ad:43:f6:ae:40:60:95: ad:b1:e3:e4:7c:7e:22:31:06:a5:aa:6a:3e:69:91: 7f:44:9a:70:e6:b2:af:25:95:3e:f3:2c:aa:81:34: e9:fd:5f:df:dd:35:da:c0:01:96:5f:9e:b2:53:df: c0:bf:2a:9f:6a:7f:ab:fc:40:b6:62:96:d9:22:33: 4b:0a:c6:78:8c:34:4a:92:8b:0a:0e:ca:a9:b5:d7: 8b:8f:3d:fd:e9:06:1e:04:70:ee:25:49:98:84:95: fe:d4:2a:9c:c3:9a:e4:0d:2a:4d:49:54:58:49:1d: fb:13:d5:99:fa:0a:34:1d:2f:55:c5:76:bf:5c:a5: 85:33:c1:4b:80:8a:ab:94:a2:0d:82:00:02:8b:87: 72:2a:db:29:43:b0:08:cc:3f:bb:08:43:4c:4f:cb: 50:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0A:D3:0B:EC:18:08:59:DD:21:9E:A7:0E:B1:EA:B4:FA:70:48:2A X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.10.0/24 Signature Algorithm: sha256WithRSAEncryption 74:30:cf:67:9f:c3:db:6f:48:f3:16:f9:50:ae:e8:f5:c3:1b: 21:00:2d:22:3b:c0:99:e0:61:a7:02:09:ad:b2:9c:d1:33:57: 53:b1:75:38:6a:ae:d3:e8:dc:01:63:d6:4d:fc:ba:47:3d:29: 6e:ec:5d:e5:8d:11:c8:43:42:35:83:28:e3:9e:14:87:1f:23: a6:70:05:8c:8e:3d:3d:3f:8b:a3:76:45:12:d1:0c:cd:19:db: 4b:a1:a4:c4:bb:0c:3a:6d:b8:ff:2d:81:d9:17:55:9e:72:c5: ae:e9:e2:48:8a:fb:e0:19:fe:71:f0:9e:1c:9e:bb:48:15:13: f4:49:b7:f5:44:f9:92:c7:43:db:bc:96:45:53:9c:1d:3e:79: 40:9e:91:10:a8:3c:74:e3:c6:aa:1a:19:ea:eb:6f:77:ab:05: fe:a5:79:dd:ac:9f:b9:bd:05:ac:2b:15:10:f5:23:10:90:1d: 86:16:77:7c:9e:ef:bb:d7:cc:5d:b5:ca:3a:0f:b8:36:66:e8: 9d:cf:25:34:db:ad:19:81:02:be:83:71:2c:64:57:c0:f6:ed: bf:2b:38:30:b4:49:8c:e9:8f:00:af:ad:83:1e:3d:36:4c:7d: 83:29:06:e6:8c:87:e4:83:2d:0e:db:b4:37:11:13:80:d4:eb: 96:79:15:72 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUYn7hZRW4ahBxpcJI5YEv/CtXDXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjcxMzAxMDJaFw0yNzAxMjYxMzA2MDJaMDMxMTAvBgNV BAMTKDk2MEFEMzBCRUMxODA4NTlERDIxOUVBNzBFQjFFQUI0RkE3MDQ4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCL3I+DegHp01f6vX0gipY3sC4C Q5MmS2gWqEK8ZFBarJo9X1h7tZxXDrabV+cSmB8t4Wh+qRHFfGfn9UazER7+TyQK FT3baqQ6AL6fWz5+ClyLAIDRihAOpFcGiNP3ngb/rUP2rkBgla2x4+R8fiIxBqWq aj5pkX9EmnDmsq8llT7zLKqBNOn9X9/dNdrAAZZfnrJT38C/Kp9qf6v8QLZiltki M0sKxniMNEqSiwoOyqm114uPPf3pBh4EcO4lSZiElf7UKpzDmuQNKk1JVFhJHfsT 1Zn6CjQdL1XFdr9cpYUzwUuAiquUog2CAAKLh3Iq2ylDsAjMP7sIQ0xPy1D7AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUlgrTC+wYCFndIZ6nDrHqtPpwSCowHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHCjANBgkq hkiG9w0BAQsFAAOCAQEAdDDPZ5/D229I8xb5UK7o9cMbIQAtIjvAmeBhpwIJrbKc 0TNXU7F1OGqu0+jcAWPWTfy6Rz0pbuxd5Y0RyENCNYMo454Uhx8jpnAFjI49PT+L o3ZFEtEMzRnbS6GkxLsMOm24/y2B2RdVnnLFruniSIr74Bn+cfCeHJ67SBUT9Em3 9UT5ksdD27yWRVOcHT55QJ6REKg8dOPGqhoZ6utvd6sF/qV53ayfub0FrCsVEPUj EJAdhhZ3fJ7vu9fMXbXKOg+4Nmbonc8lNNutGYECvoNxLGRXwPbtvys4MLRJjOmP AK+tgx49Nkx9gykG5oyH5IMtDtu0NxETgNTrlnkVcg== -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:55 2026 by rpki-client