This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31322e302f32342d3234203d3e20323033303736.roa File: 352e3139392e31322e302f32342d3234203d3e20323033303736.roa (raw, json) Hash identifier: jU7j9nfys6/RWhc3tJjuIp0wWFZ/T2YjlQFlV+l2n3A= Subject key identifier: 97:01:51:B8:42:5E:A0:D2:9A:26:C2:EB:A5:33:96:A6:BA:8C:F6:E3 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 4DEBDC3383174FF058FFB086477684EE00D1902D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31322e302f32342d3234203d3e20323033303736.roa Signing time: Tue 03 Feb 2026 05:51:35 +0000 ROA not before: Tue 03 Feb 2026 05:46:35 +0000 ROA not after: Tue 02 Feb 2027 05:51:35 +0000 asID: 203076 IP address blocks: 5.199.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:eb:dc:33:83:17:4f:f0:58:ff:b0:86:47:76:84:ee:00:d1:90:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 3 05:46:35 2026 GMT Not After : Feb 2 05:51:35 2027 GMT Subject: CN=970151B8425EA0D29A26C2EBA53396A6BA8CF6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:13:54:c9:07:33:b6:cb:a2:8b:b4:a6:3f: 61:f5:ef:dd:ac:31:ca:c3:c1:e6:68:64:df:4a:12: 02:33:46:63:10:13:82:16:b5:2a:c6:20:40:f8:0f: 1d:dc:bc:2d:63:34:eb:d2:37:fb:d8:d3:44:04:c1: 67:ed:d8:fc:b4:21:cb:be:f3:a1:3a:36:07:48:28: 2a:d2:ca:a3:37:5d:12:9d:f9:a7:92:ba:82:8d:ba: 04:83:23:c1:d5:dc:e5:0d:bf:75:2f:00:7c:f0:e2: ed:c3:be:6c:11:6c:c2:b3:bc:ea:49:ab:0f:9c:3b: 9e:e5:39:20:ed:22:a0:46:58:d0:9a:d0:0a:61:cf: 3b:3c:73:c7:92:fc:ac:d5:0f:37:fe:1c:d8:11:db: dd:b3:32:5b:63:44:b1:8a:41:3b:da:60:a8:05:39: ef:73:1c:d4:1b:69:b7:dc:20:bc:7c:2e:79:38:17: 0c:85:c7:9b:00:74:40:6a:4c:c5:d7:f8:b3:eb:c0: 7f:02:34:08:3d:ff:6a:3b:23:92:3f:52:19:a6:d3: e9:49:1b:d6:da:36:ef:d2:d7:58:17:24:f8:d5:ff: 47:c5:10:5f:65:ef:97:38:91:b6:85:e6:83:79:5f: 84:b3:99:55:c1:d4:8f:6b:80:bd:93:d3:12:54:ee: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:51:B8:42:5E:A0:D2:9A:26:C2:EB:A5:33:96:A6:BA:8C:F6:E3 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31322e302f32342d3234203d3e20323033303736.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.12.0/24 Signature Algorithm: sha256WithRSAEncryption cf:35:8c:74:fa:50:17:aa:db:92:83:1b:08:f4:53:bd:3f:ed: 44:81:3e:cb:c1:77:c5:db:e9:e9:b4:a4:55:27:41:95:c4:66: 57:e1:3d:bc:43:30:e4:d7:e2:48:0c:ed:f2:4d:ed:a0:9a:5a: d5:87:b3:02:c8:46:9e:49:a0:aa:d6:3e:6e:b7:1b:75:7d:54: 07:d2:48:4b:4f:af:2c:70:e7:78:f4:60:6c:70:6c:c6:bc:bf: 62:94:23:32:b2:1a:70:27:03:81:91:98:22:2a:fa:47:a9:b2: 00:93:d2:90:0d:d7:cd:30:94:63:70:7f:3d:0b:43:89:76:15: 0f:24:67:da:9f:86:b2:8e:53:25:a9:86:8d:f7:65:89:74:ed: 86:92:12:7a:3f:b3:f0:98:4b:16:2f:07:20:e6:41:38:64:7d: 98:5a:01:79:23:78:66:03:d1:42:e5:d7:85:97:87:99:2d:91: cb:d6:99:0d:da:07:5c:d6:0a:9a:1a:6d:de:dc:07:ec:ff:2f: de:26:49:ba:cd:c2:5e:4a:27:04:ce:b1:68:04:13:0a:b1:89: 6a:de:b0:89:12:a4:c1:3a:fd:b1:d9:06:11:f8:db:37:0f:3e: ce:cb:1f:a6:d9:68:7f:70:4e:c0:ab:ea:d7:d8:ea:00:ea:aa: a5:52:75:b9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUTevcM4MXT/BY/7CGR3aE7gDRkC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDMwNTQ2MzVaFw0yNzAyMDIwNTUxMzVaMDMxMTAvBgNV BAMTKDk3MDE1MUI4NDI1RUEwRDI5QTI2QzJFQkE1MzM5NkE2QkE4Q0Y2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99RNUyQcztsuii7SmP2H1792s McrDweZoZN9KEgIzRmMQE4IWtSrGIED4Dx3cvC1jNOvSN/vY00QEwWft2Py0Icu+ 86E6NgdIKCrSyqM3XRKd+aeSuoKNugSDI8HV3OUNv3UvAHzw4u3DvmwRbMKzvOpJ qw+cO57lOSDtIqBGWNCa0Aphzzs8c8eS/KzVDzf+HNgR292zMltjRLGKQTvaYKgF Oe9zHNQbabfcILx8Lnk4FwyFx5sAdEBqTMXX+LPrwH8CNAg9/2o7I5I/Uhmm0+lJ G9baNu/S11gXJPjV/0fFEF9l75c4kbaF5oN5X4SzmVXB1I9rgL2T0xJU7rspAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUlwFRuEJeoNKaJsLrpTOWprqM9uMwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzMjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMzMwMzczNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH DDANBgkqhkiG9w0BAQsFAAOCAQEAzzWMdPpQF6rbkoMbCPRTvT/tRIE+y8F3xdvp 6bSkVSdBlcRmV+E9vEMw5NfiSAzt8k3toJpa1YezAshGnkmgqtY+brcbdX1UB9JI S0+vLHDnePRgbHBsxry/YpQjMrIacCcDgZGYIir6R6myAJPSkA3XzTCUY3B/PQtD iXYVDyRn2p+Gso5TJamGjfdliXTthpISej+z8JhLFi8HIOZBOGR9mFoBeSN4ZgPR QuXXhZeHmS2Ry9aZDdoHXNYKmhpt3twH7P8v3iZJus3CXkonBM6xaAQTCrGJat6w iRKkwTr9sdkGEfjbNw8+zssfptlof3BOwKvq19jqAOqqpVJ1uQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:04:39 2026 by rpki-client