This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31312e302f32342d3234203d3e203537303433.roa File: 352e3139392e31312e302f32342d3234203d3e203537303433.roa (raw, json) Hash identifier: 7NHIsBloTjJJcqDinqFhtpqxn97T792oi+5KLodVPvs= Subject key identifier: A1:45:EF:59:1C:42:12:3B:30:29:9B:65:EE:B6:E2:58:D3:55:32:54 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 6FB29700B15102304A1BBA97125E6FEC137C5D68 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31312e302f32342d3234203d3e203537303433.roa Signing time: Tue 27 Jan 2026 13:03:35 +0000 ROA not before: Tue 27 Jan 2026 12:58:35 +0000 ROA not after: Tue 26 Jan 2027 13:03:35 +0000 asID: 57043 IP address blocks: 5.199.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 23:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:b2:97:00:b1:51:02:30:4a:1b:ba:97:12:5e:6f:ec:13:7c:5d:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 27 12:58:35 2026 GMT Not After : Jan 26 13:03:35 2027 GMT Subject: CN=A145EF591C42123B30299B65EEB6E258D3553254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8f:a6:0f:11:f4:62:4f:9d:0f:c3:ba:d9:90: 85:c5:c5:ce:8e:44:44:ad:9f:82:d7:bb:68:e3:c0: 05:d7:99:13:78:1b:8f:02:4a:da:34:1a:a5:df:c1: 6d:c3:22:ae:84:99:5a:85:86:b0:44:bd:14:3c:42: 9c:89:cb:83:41:30:d5:ba:24:c9:6e:9c:bd:f4:a7: a1:ce:80:51:93:b4:3f:b2:e3:c3:e2:07:40:a3:35: 0e:27:fd:6a:ad:2d:29:8c:de:71:40:0c:d2:3e:d9: bb:a4:a1:4b:aa:2d:80:12:81:14:ba:a2:e5:40:84: 0d:bc:c4:f0:79:2d:a6:85:cc:1c:38:5f:35:76:0b: 3d:87:0c:92:e7:10:a4:95:06:26:38:d3:61:bd:4d: 21:55:9d:73:92:8b:66:fd:db:f6:a2:09:ff:a9:a5: dd:d2:38:9d:b0:3c:95:20:a5:26:58:14:e5:7d:f9: 50:8e:81:8d:28:55:06:ca:8c:5f:9b:fa:de:d5:9f: 1f:68:d9:11:40:1b:76:79:d4:82:a7:16:1a:94:0d: 52:eb:cc:84:d1:82:36:9b:a1:dd:5d:91:b8:ad:10: f6:a4:0e:cf:14:8c:51:6f:6a:1d:89:c2:9f:0a:85: 07:11:53:15:31:9a:fa:e4:8a:cd:96:d8:b4:83:3d: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:EF:59:1C:42:12:3B:30:29:9B:65:EE:B6:E2:58:D3:55:32:54 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31312e302f32342d3234203d3e203537303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.11.0/24 Signature Algorithm: sha256WithRSAEncryption 45:7b:7c:92:ac:a4:b9:f1:ca:e6:59:ec:17:7c:1d:a6:ab:a2: 21:ee:d9:e0:0d:5a:40:5c:b2:73:a5:8a:ee:79:9c:8d:85:c6: 2d:62:11:f2:b5:9a:f8:79:92:36:92:dd:cf:07:c2:94:ac:6f: 70:d5:06:1e:0d:e1:11:66:19:66:43:0b:d1:d1:ea:8b:4d:8f: 7b:10:88:15:dc:07:5a:10:c2:8f:d0:33:72:2a:f3:80:06:88: 52:43:18:05:63:19:38:94:29:43:36:20:55:95:e8:5b:6b:06: 7c:57:88:f0:0e:bc:29:49:8f:ed:d3:c3:df:43:e1:2d:94:8c: fc:78:d7:44:ac:eb:01:4f:37:f7:e8:67:18:fc:4c:69:3a:51: 2c:cc:27:1f:58:5c:78:06:b6:6d:c7:2f:7d:6b:20:4a:21:08: 0c:15:35:6c:1a:02:c6:7c:a9:b6:d1:b7:16:e2:1a:fc:34:46: 95:46:9a:23:a6:50:ec:b4:3b:6c:4b:fd:14:40:33:27:20:d6: 78:3a:f5:95:46:32:03:a9:67:3a:9d:63:c0:ff:ab:48:8c:fd: ca:c3:b3:d5:0c:41:02:4a:a6:4b:18:f7:a8:28:f5:de:9a:22: 2e:a8:4b:84:c5:b8:0a:ca:1f:80:c2:99:2a:f6:d1:b7:b2:99: 96:c6:30:99 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUb7KXALFRAjBKG7qXEl5v7BN8XWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjcxMjU4MzVaFw0yNzAxMjYxMzAzMzVaMDMxMTAvBgNV BAMTKEExNDVFRjU5MUM0MjEyM0IzMDI5OUI2NUVFQjZFMjU4RDM1NTMyNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwj6YPEfRiT50Pw7rZkIXFxc6O REStn4LXu2jjwAXXmRN4G48CSto0GqXfwW3DIq6EmVqFhrBEvRQ8QpyJy4NBMNW6 JMlunL30p6HOgFGTtD+y48PiB0CjNQ4n/WqtLSmM3nFADNI+2bukoUuqLYASgRS6 ouVAhA28xPB5LaaFzBw4XzV2Cz2HDJLnEKSVBiY402G9TSFVnXOSi2b92/aiCf+p pd3SOJ2wPJUgpSZYFOV9+VCOgY0oVQbKjF+b+t7Vnx9o2RFAG3Z51IKnFhqUDVLr zITRgjabod1dkbitEPakDs8UjFFvah2Jwp8KhQcRUxUxmvrkis2W2LSDPWxNAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUoUXvWRxCEjswKZtl7rbiWNNVMlQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzczMDM0MzMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxwsw DQYJKoZIhvcNAQELBQADggEBAEV7fJKspLnxyuZZ7Bd8HaaroiHu2eANWkBcsnOl iu55nI2Fxi1iEfK1mvh5kjaS3c8HwpSsb3DVBh4N4RFmGWZDC9HR6otNj3sQiBXc B1oQwo/QM3Iq84AGiFJDGAVjGTiUKUM2IFWV6FtrBnxXiPAOvClJj+3Tw99D4S2U jPx410Ss6wFPN/foZxj8TGk6USzMJx9YXHgGtm3HL31rIEohCAwVNWwaAsZ8qbbR txbiGvw0RpVGmiOmUOy0O2xL/RRAMycg1ng69ZVGMgOpZzqdY8D/q0iM/crDs9UM QQJKpksY96go9d6aIi6oS4TFuArKH4DCmSr20beymZbGMJk= -----END CERTIFICATE-----Generated at Fri Jan 30 08:44:10 2026 by rpki-client