This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31322e302f32332d3234203d3e20383334.roa File: 352e3139392e31322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: w5fYhqiORwySyVzI+lwW/lcap/TpvK9njxSZiAI7jCo= Subject key identifier: 15:E9:62:3B:57:8B:3B:DB:5A:32:85:DF:0D:88:DC:E2:90:16:F9:1E Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 69297BDDD641DA7355EA70C92E8C3F3B0D3D4B7F Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31322e302f32332d3234203d3e20383334.roa Signing time: Mon 24 Nov 2025 11:07:10 +0000 ROA not before: Mon 24 Nov 2025 11:02:10 +0000 ROA not after: Mon 23 Nov 2026 11:07:10 +0000 asID: 834 IP address blocks: 5.199.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:29:7b:dd:d6:41:da:73:55:ea:70:c9:2e:8c:3f:3b:0d:3d:4b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 24 11:02:10 2025 GMT Not After : Nov 23 11:07:10 2026 GMT Subject: CN=15E9623B578B3BDB5A3285DF0D88DCE29016F91E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e3:a1:e5:43:6e:c6:e4:70:1f:9e:b4:1c:09: 6e:ef:c1:ca:39:ee:a1:49:13:2b:b7:e4:6c:c6:23: a9:09:6b:e5:62:0d:a0:85:60:ac:49:63:9f:8a:4d: cb:a0:c2:1a:67:9a:38:a4:2e:30:b9:2d:e8:40:87: 41:2f:d8:7a:0d:e1:54:e8:33:7b:e4:af:3e:22:e4: 02:71:c8:06:6f:93:b2:14:85:c4:7e:fb:d6:51:c7: e0:62:d0:35:88:03:58:a0:db:2e:ef:ad:fa:e8:2a: c3:8f:6b:7f:10:85:0f:6a:d0:bf:72:f2:1a:8b:8b: b6:2a:9f:0d:6f:02:2e:a1:a1:af:6c:16:90:8e:a5: de:f8:f9:85:81:8b:58:d3:0a:44:3b:fa:19:b2:fa: 40:bc:f7:ba:0a:cc:06:c0:6d:de:6c:ee:89:23:13: 46:d2:93:12:5d:18:8e:ba:74:ae:17:b2:b2:69:46: e4:8e:e2:ba:ae:d4:45:46:7f:a1:98:62:23:55:dc: ac:d4:94:dd:20:07:e0:2d:81:a1:e8:22:75:24:10: e8:b1:7b:22:61:f5:9f:cf:77:fa:cf:ec:bc:df:40: a9:7d:63:df:df:35:8e:6b:6c:80:d7:77:64:2d:8e: 58:df:99:89:85:cb:15:08:25:7c:7c:64:bb:d4:65: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E9:62:3B:57:8B:3B:DB:5A:32:85:DF:0D:88:DC:E2:90:16:F9:1E X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.12.0/23 Signature Algorithm: sha256WithRSAEncryption 27:41:05:ed:66:41:54:d3:91:7c:93:00:71:83:ec:a4:6f:4f: c3:1a:4b:54:4d:ca:fd:85:4e:3f:cb:71:72:b0:1f:ff:3c:6d: a8:27:d8:fa:2e:05:48:d5:88:ab:61:c5:78:02:99:bf:df:87: 2e:ec:a1:38:74:6d:8b:32:fa:9d:91:93:e6:58:25:b9:de:26: 01:af:c0:93:a9:f9:44:11:78:fe:49:95:b3:16:8b:5a:21:29: 55:05:ef:23:0f:c1:ec:ec:f3:51:3c:35:06:fd:48:e1:5f:62: 4b:ae:4c:66:72:00:d4:74:27:83:39:d8:88:e4:5c:16:6c:ed: 6b:58:a3:1a:e2:19:0c:f9:e4:ec:0e:de:eb:2e:6d:9f:2b:40: 84:48:ea:7a:1d:2d:d3:23:d3:a3:0c:ca:ec:52:0c:23:65:69: f6:b7:c0:63:ed:f1:f6:f3:09:d4:b9:04:6e:0c:13:0e:f7:52: 8f:ab:a1:7d:0e:0a:1d:5f:59:38:a1:33:c3:e4:6c:1f:b0:1f: e0:95:d1:6d:c4:32:57:2d:1d:f6:85:a3:07:de:8a:f6:03:cf: 25:35:f5:d8:40:20:a8:96:b7:a4:3a:34:72:60:62:25:11:d4: 17:04:f3:b5:82:55:78:92:4d:73:72:ea:ca:ed:8c:13:16:9b: 3b:90:86:4e -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUaSl73dZB2nNV6nDJLow/Ow09S38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMjQxMTAyMTBaFw0yNjExMjMxMTA3MTBaMDMxMTAvBgNV BAMTKDE1RTk2MjNCNTc4QjNCREI1QTMyODVERjBEODhEQ0UyOTAxNkY5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB46HlQ27G5HAfnrQcCW7vwco5 7qFJEyu35GzGI6kJa+ViDaCFYKxJY5+KTcugwhpnmjikLjC5LehAh0Ev2HoN4VTo M3vkrz4i5AJxyAZvk7IUhcR++9ZRx+Bi0DWIA1ig2y7vrfroKsOPa38QhQ9q0L9y 8hqLi7Yqnw1vAi6hoa9sFpCOpd74+YWBi1jTCkQ7+hmy+kC897oKzAbAbd5s7okj E0bSkxJdGI66dK4XsrJpRuSO4rqu1EVGf6GYYiNV3KzUlN0gB+AtgaHoInUkEOix eyJh9Z/Pd/rP7LzfQKl9Y9/fNY5rbIDXd2QtjljfmYmFyxUIJXx8ZLvUZa11AgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUFeliO1eLO9taMoXfDYjc4pAW+R4wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzMjJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHDDANBgkq hkiG9w0BAQsFAAOCAQEAJ0EF7WZBVNORfJMAcYPspG9PwxpLVE3K/YVOP8txcrAf /zxtqCfY+i4FSNWIq2HFeAKZv9+HLuyhOHRtizL6nZGT5lglud4mAa/Ak6n5RBF4 /kmVsxaLWiEpVQXvIw/B7OzzUTw1Bv1I4V9iS65MZnIA1HQngznYiORcFmzta1ij GuIZDPnk7A7e6y5tnytAhEjqeh0t0yPTowzK7FIMI2Vp9rfAY+3x9vMJ1LkEbgwT DvdSj6uhfQ4KHV9ZOKEzw+RsH7Af4JXRbcQyVy0d9oWjB96K9gPPJTX12EAgqJa3 pDo0cmBiJRHUFwTztYJVeJJNc3Lqyu2MExabO5CGTg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:42 2025 by rpki-client