This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31362e302f32332d3234203d3e20383334.roa File: 352e3139392e31362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: Da5zDILo7xWpg3k8NOQbgYfWtG5uUHcM8lvrX6kAPLE= Subject key identifier: 60:4B:4D:1F:5B:EF:CD:D7:06:D7:50:D2:2F:C9:F1:80:A7:4B:19:73 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 5EA4E524BB17459165876C05376FBD9CE23D726A Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31362e302f32332d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:23 +0000 ROA not before: Mon 08 Dec 2025 11:30:23 +0000 ROA not after: Mon 07 Dec 2026 11:35:23 +0000 asID: 834 IP address blocks: 5.199.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:a4:e5:24:bb:17:45:91:65:87:6c:05:37:6f:bd:9c:e2:3d:72:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:23 2025 GMT Not After : Dec 7 11:35:23 2026 GMT Subject: CN=604B4D1F5BEFCDD706D750D22FC9F180A74B1973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:59:3f:63:69:21:f7:6b:d7:69:60:ee:a1: dd:18:4f:46:24:e7:77:9d:5c:cd:6b:bb:ac:67:39: 84:c0:82:e4:66:ba:61:c8:a2:b1:9e:25:2f:20:59: cb:a4:57:f1:47:fc:f3:3c:4c:d4:b2:d8:d6:44:f7: 09:ef:36:25:1c:2b:bb:d6:b2:0f:66:b7:b0:1a:02: 07:8a:9c:42:80:31:0b:48:d3:3a:f2:a9:3c:f1:f5: e9:d6:84:af:66:fa:4b:0d:be:ad:41:8f:87:3b:35: 8e:dc:46:fc:cc:3d:03:ac:1e:52:b5:75:57:49:e1: a7:ec:2c:ec:8b:9e:d2:23:16:79:d2:66:43:aa:c2: 11:a5:33:bf:2d:3c:86:9c:f9:2a:17:30:f2:45:c8: 15:fb:ac:e4:d0:a5:c5:c4:42:af:55:a9:24:3b:31: 12:91:c7:66:9b:97:c1:af:4b:58:43:48:ae:84:99: 03:27:a1:22:01:df:19:db:ce:3a:4e:7e:39:b4:b9: 44:65:58:c2:44:bf:ad:b2:a2:de:59:48:6d:67:7d: c5:0b:fc:f8:91:0c:fe:8a:65:c1:89:0b:1f:84:7f: 92:a7:21:75:85:3f:10:11:64:83:59:00:22:94:57: f6:0d:17:2a:6a:b6:fc:76:27:56:46:da:ff:55:bd: f6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:4D:1F:5B:EF:CD:D7:06:D7:50:D2:2F:C9:F1:80:A7:4B:19:73 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.16.0/23 Signature Algorithm: sha256WithRSAEncryption 92:8a:29:ef:84:37:94:50:7e:65:67:03:a8:2f:98:00:a8:6a: 8c:96:3f:4b:2f:3e:0d:ea:6e:06:5b:8c:9a:54:63:d6:76:e0: 66:67:b9:52:cf:d7:94:fd:cf:f4:5b:80:3b:f3:2a:10:7b:51: 0d:8a:80:36:0b:03:0c:36:31:87:a2:11:a4:4c:31:8d:0c:af: 9a:41:f4:40:5f:22:07:d8:7a:ae:46:78:ee:99:30:08:d5:6b: bf:20:ad:4c:a1:90:c3:30:37:8a:6e:c3:13:4a:cc:c1:98:3d: 07:db:c0:bc:a6:36:ba:e1:2f:60:98:ad:a3:cd:99:a7:ca:ed: f6:a6:1e:cb:ee:b7:79:02:b4:30:ac:79:6b:ca:4f:9c:23:9d: 7f:4b:d8:b6:7e:70:5b:44:7d:99:6d:34:53:18:bd:9e:b8:59: 85:45:8c:ab:f6:a8:1a:d4:97:25:61:12:db:97:1f:23:e1:5a: f7:fd:44:b8:d3:42:03:c2:d4:bf:0b:ea:65:a6:7c:24:29:c3: 1f:39:71:3b:bf:38:5c:b0:e7:b0:f8:76:7a:0b:d5:16:84:a2: 09:cc:78:31:e3:02:8f:5b:ac:95:65:b6:d5:41:59:3f:99:1d: 1c:af:f5:81:e4:9b:b2:b5:3d:d0:dc:c4:5b:5b:87:c5:c6:c9: 4f:79:d5:42 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUXqTlJLsXRZFlh2wFN2+9nOI9cmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjNaFw0yNjEyMDcxMTM1MjNaMDMxMTAvBgNV BAMTKDYwNEI0RDFGNUJFRkNERDcwNkQ3NTBEMjJGQzlGMTgwQTc0QjE5NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAVk/Y2kh92vXaWDuod0YT0Yk 53edXM1ru6xnOYTAguRmumHIorGeJS8gWcukV/FH/PM8TNSy2NZE9wnvNiUcK7vW sg9mt7AaAgeKnEKAMQtI0zryqTzx9enWhK9m+ksNvq1Bj4c7NY7cRvzMPQOsHlK1 dVdJ4afsLOyLntIjFnnSZkOqwhGlM78tPIac+SoXMPJFyBX7rOTQpcXEQq9VqSQ7 MRKRx2abl8GvS1hDSK6EmQMnoSIB3xnbzjpOfjm0uURlWMJEv62yot5ZSG1nfcUL /PiRDP6KZcGJCx+Ef5KnIXWFPxARZINZACKUV/YNFypqtvx2J1ZG2v9VvfYbAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUYEtNH1vvzdcG11DSL8nxgKdLGXMwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzNjJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHEDANBgkq hkiG9w0BAQsFAAOCAQEAkoop74Q3lFB+ZWcDqC+YAKhqjJY/Sy8+DepuBluMmlRj 1nbgZme5Us/XlP3P9FuAO/MqEHtRDYqANgsDDDYxh6IRpEwxjQyvmkH0QF8iB9h6 rkZ47pkwCNVrvyCtTKGQwzA3im7DE0rMwZg9B9vAvKY2uuEvYJito82Zp8rt9qYe y+63eQK0MKx5a8pPnCOdf0vYtn5wW0R9mW00Uxi9nrhZhUWMq/aoGtSXJWES25cf I+Fa9/1EuNNCA8LUvwvqZaZ8JCnDHzlxO784XLDnsPh2egvVFoSiCcx4MeMCj1us lWW21UFZP5kdHK/1geSbsrU90NzEW1uHxcbJT3nVQg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:59 2025 by rpki-client