This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31332e302f32342d3234203d3e20383334.roa File: 352e3139392e31332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: /fO/pb63IFHLLJi/NUNpayBMYpx3zKlB4/MsD6X2P5Q= Subject key identifier: B5:50:DB:B2:17:9B:FC:82:F2:73:BA:9F:31:AD:5A:0F:25:CB:B2:B3 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 6C4FFAF8E747FAF05D398066FD3834045BFF5326 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31332e302f32342d3234203d3e20383334.roa Signing time: Tue 03 Feb 2026 05:53:14 +0000 ROA not before: Tue 03 Feb 2026 05:48:14 +0000 ROA not after: Tue 02 Feb 2027 05:53:14 +0000 asID: 834 IP address blocks: 5.199.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:4f:fa:f8:e7:47:fa:f0:5d:39:80:66:fd:38:34:04:5b:ff:53:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 3 05:48:14 2026 GMT Not After : Feb 2 05:53:14 2027 GMT Subject: CN=B550DBB2179BFC82F273BA9F31AD5A0F25CBB2B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:55:94:c2:af:69:2b:5c:f6:ac:be:65:73: 47:8f:04:f9:3e:b1:c1:00:7d:7d:bc:09:32:c3:3b: b0:b5:d1:c4:af:2b:ae:cc:8a:9d:c9:9c:62:0d:61: 7a:f0:77:7d:19:d0:4b:86:36:3e:7d:45:df:e7:5b: 6f:ac:a1:91:41:f7:1f:94:8e:f8:8f:f3:b2:62:ea: 2a:42:d2:fd:ab:48:c5:53:4e:a1:57:43:87:da:eb: fe:b9:6f:94:ec:03:91:2e:a5:bc:89:1e:63:94:c0: 33:14:2d:77:b8:ab:73:70:47:b2:c0:80:7c:1e:ea: 10:3a:9a:c7:cf:5c:51:fe:9d:d6:71:b9:6f:e5:3a: 9f:63:0a:36:e2:0c:a3:55:ca:db:f6:5a:b4:63:cc: 86:0d:b0:21:91:ee:43:91:36:88:e0:34:0b:f0:d8: bb:e9:56:c1:2e:00:3a:6b:a8:dc:f9:20:c3:d5:31: 16:f7:2d:0b:3b:1e:a0:93:af:ca:c4:5a:5b:66:aa: 3b:60:81:db:8a:cc:42:e8:47:e1:99:2c:bf:ca:2b: 63:72:c1:53:37:c1:6a:3d:2b:1d:4c:c2:fa:75:4a: b1:86:7d:82:a2:4c:a5:2b:46:87:07:ec:e7:d1:ce: 90:53:d0:1d:25:54:04:40:c8:bc:09:0b:09:71:f4: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:DB:B2:17:9B:FC:82:F2:73:BA:9F:31:AD:5A:0F:25:CB:B2:B3 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:60:ca:8a:e8:77:6a:6b:13:8e:09:8b:2d:7e:be:f8:b6:20: 2c:2a:c4:7b:7d:40:de:eb:2e:62:eb:76:5f:7a:20:01:4f:3b: 3f:36:29:45:9c:03:00:8c:8b:02:6c:71:46:88:a7:ae:5f:3a: 83:51:29:33:26:f9:5b:6a:eb:1c:50:43:e7:91:69:fa:1c:8d: 02:7d:c4:e7:12:eb:d0:1a:5c:a4:2d:f7:89:79:9f:a4:3f:3f: 58:15:9c:a8:1a:a5:72:75:6d:68:34:73:56:de:48:19:19:9f: 0e:3a:ec:76:71:b3:24:c6:d6:37:38:fd:21:8d:e5:34:68:c1: 6e:a6:57:42:d3:28:92:e3:12:18:82:e6:dc:63:23:82:00:d3: d0:8c:6d:80:1b:57:7b:9a:a7:12:27:ab:cc:fa:db:c9:6d:66: 60:17:26:95:b7:b7:c9:fb:0a:a1:3a:94:e4:12:0c:9d:b8:5f: 6c:c1:95:c7:c4:ba:61:e4:23:a9:b0:f7:dd:47:6f:4b:1b:97: 9e:21:1a:2e:f5:59:46:b3:7e:81:c7:7b:dd:7c:a6:29:62:65: 7a:29:4a:8d:c7:45:bb:a7:ac:b1:da:4f:61:ae:c5:a8:d9:8c: ba:42:85:cf:4a:1d:ed:7b:81:8f:06:91:61:49:5b:2d:dc:07: 67:84:23:54 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUbE/6+OdH+vBdOYBm/Tg0BFv/UyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDMwNTQ4MTRaFw0yNzAyMDIwNTUzMTRaMDMxMTAvBgNV BAMTKEI1NTBEQkIyMTc5QkZDODJGMjczQkE5RjMxQUQ1QTBGMjVDQkIyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNVWUwq9pK1z2rL5lc0ePBPk+ scEAfX28CTLDO7C10cSvK67Mip3JnGINYXrwd30Z0EuGNj59Rd/nW2+soZFB9x+U jviP87Ji6ipC0v2rSMVTTqFXQ4fa6/65b5TsA5EupbyJHmOUwDMULXe4q3NwR7LA gHwe6hA6msfPXFH+ndZxuW/lOp9jCjbiDKNVytv2WrRjzIYNsCGR7kORNojgNAvw 2LvpVsEuADprqNz5IMPVMRb3LQs7HqCTr8rEWltmqjtggduKzELoR+GZLL/KK2Ny wVM3wWo9Kx1Mwvp1SrGGfYKiTKUrRocH7OfRzpBT0B0lVARAyLwJCwlx9C3TAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUtVDbsheb/ILyc7qfMa1aDyXLsrMwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHDTANBgkq hkiG9w0BAQsFAAOCAQEAD2DKiuh3amsTjgmLLX6++LYgLCrEe31A3usuYut2X3og AU87PzYpRZwDAIyLAmxxRoinrl86g1EpMyb5W2rrHFBD55Fp+hyNAn3E5xLr0Bpc pC33iXmfpD8/WBWcqBqlcnVtaDRzVt5IGRmfDjrsdnGzJMbWNzj9IY3lNGjBbqZX QtMokuMSGILm3GMjggDT0IxtgBtXe5qnEierzPrbyW1mYBcmlbe3yfsKoTqU5BIM nbhfbMGVx8S6YeQjqbD33UdvSxuXniEaLvVZRrN+gcd73XymKWJleilKjcdFu6es sdpPYa7FqNmMukKFz0od7XuBjwaRYUlbLdwHZ4QjVA== -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:07 2026 by rpki-client