This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e322e302f32332d3234203d3e20383334.roa File: 352e3139392e322e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: gnLTy+aelnN87gaq5vL9dN7tqzuDTIazJKcdi5/W5cQ= Subject key identifier: FD:E7:FA:43:FD:D7:4D:5C:68:D7:CB:F9:25:33:42:69:1E:4E:72:0F Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 46EB29E26F12A927234D96BA715B326EAB1FC555 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e322e302f32332d3234203d3e20383334.roa Signing time: Tue 13 Jan 2026 07:08:40 +0000 ROA not before: Tue 13 Jan 2026 07:03:40 +0000 ROA not after: Tue 12 Jan 2027 07:08:40 +0000 asID: 834 IP address blocks: 5.199.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:eb:29:e2:6f:12:a9:27:23:4d:96:ba:71:5b:32:6e:ab:1f:c5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 13 07:03:40 2026 GMT Not After : Jan 12 07:08:40 2027 GMT Subject: CN=FDE7FA43FDD74D5C68D7CBF9253342691E4E720F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1e:8e:25:ed:37:88:40:1a:a6:44:e6:c6:3c: d5:8c:f2:b5:97:3f:ac:7b:46:0c:5b:7c:40:e4:1a: 86:91:96:f0:64:e3:65:5d:22:20:2f:c5:aa:9d:bc: 82:ef:f8:a3:c3:bd:ae:4a:e4:ea:e1:9b:21:a7:b0: 56:50:a7:33:bc:fe:d4:44:dc:2c:25:14:e1:89:06: 6d:87:ee:5a:ec:98:45:05:ca:64:dd:4a:d5:bc:b3: d0:88:2c:a7:d2:1a:16:5a:ae:c9:a7:b5:32:e4:c1: b1:b4:9d:fb:cf:10:3e:1c:97:42:5f:a6:ed:b4:3f: 41:c5:8a:6b:e4:11:6c:14:ca:a3:b5:eb:9f:a0:6f: 9e:19:d3:cc:0f:f5:09:c4:72:73:e3:e0:c5:97:cd: e7:cc:54:d2:53:32:e5:30:1f:d8:04:c2:ad:88:a9: 0a:2d:3b:2d:ff:f6:f8:e9:a7:e2:c4:6f:c7:ab:ac: bf:a6:8c:7c:6f:fa:48:50:13:29:09:85:0c:c5:29: 66:0b:97:bf:1e:e1:11:b6:24:27:f9:0f:aa:fd:2e: de:dc:e7:07:ab:5e:18:15:20:45:7b:03:60:34:94: 1c:6a:73:34:36:a9:24:e9:e7:0b:98:b7:39:15:4b: db:ff:cf:5b:bc:f0:5b:6e:b7:fe:8c:f0:de:d1:88: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E7:FA:43:FD:D7:4D:5C:68:D7:CB:F9:25:33:42:69:1E:4E:72:0F X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e322e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.2.0/23 Signature Algorithm: sha256WithRSAEncryption 43:0a:98:a3:15:30:e8:a1:93:27:9c:35:b2:8b:48:a2:93:e1: b3:3a:22:f8:a3:0a:8f:7e:07:d0:a7:cf:48:c1:cc:ee:94:53: 12:3e:69:e1:ac:36:1e:08:d7:f2:04:29:ff:aa:81:9e:60:2c: ee:73:5f:9d:c0:84:7d:b7:a2:1f:14:be:77:1e:b1:63:b9:23: 4e:b3:51:39:d0:1b:4b:d8:be:32:6b:b3:2f:39:14:00:11:2f: 37:82:56:19:e7:77:81:9d:85:33:c3:6b:65:9e:66:93:0f:61: 49:72:80:1c:6f:44:8f:61:02:57:49:f0:af:d4:24:50:54:9f: 43:d5:86:cd:a6:aa:d3:23:42:55:1f:74:e3:41:61:b1:a0:b9: 34:69:a0:46:b5:6b:c7:c5:99:7d:f7:44:ac:f2:5f:da:dc:dc: 17:08:91:29:10:83:19:3d:7f:05:a0:8a:09:b8:4d:d2:10:93: fe:be:81:f7:d1:83:82:32:3f:b2:5c:7f:a5:8f:67:d6:9b:ac: b9:ff:3b:80:10:fc:f5:ad:b9:89:4b:20:d9:c0:7e:af:2a:bc: 21:e1:4c:8b:40:c0:a3:a2:a9:e3:69:23:a1:47:b1:80:c3:39: 92:3d:8a:fe:43:f1:4e:15:37:25:f0:af:f9:cf:41:97:dd:a8: 47:a1:c2:8f -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIURusp4m8SqScjTZa6cVsybqsfxVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMTMwNzAzNDBaFw0yNzAxMTIwNzA4NDBaMDMxMTAvBgNV BAMTKEZERTdGQTQzRkRENzRENUM2OEQ3Q0JGOTI1MzM0MjY5MUU0RTcyMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Ho4l7TeIQBqmRObGPNWM8rWX P6x7RgxbfEDkGoaRlvBk42VdIiAvxaqdvILv+KPDva5K5OrhmyGnsFZQpzO8/tRE 3CwlFOGJBm2H7lrsmEUFymTdStW8s9CILKfSGhZarsmntTLkwbG0nfvPED4cl0Jf pu20P0HFimvkEWwUyqO165+gb54Z08wP9QnEcnPj4MWXzefMVNJTMuUwH9gEwq2I qQotOy3/9vjpp+LEb8errL+mjHxv+khQEykJhQzFKWYLl78e4RG2JCf5D6r9Lt7c 5werXhgVIEV7A2A0lBxqczQ2qSTp5wuYtzkVS9v/z1u88Ftut/6M8N7RiMT5AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQU/ef6Q/3XTVxo18v5JTNCaR5Ocg8wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIyZTMw MmYzMjMzMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEFxwIwDQYJKoZI hvcNAQELBQADggEBAEMKmKMVMOihkyecNbKLSKKT4bM6IvijCo9+B9Cnz0jBzO6U UxI+aeGsNh4I1/IEKf+qgZ5gLO5zX53AhH23oh8UvncesWO5I06zUTnQG0vYvjJr sy85FAARLzeCVhnnd4GdhTPDa2WeZpMPYUlygBxvRI9hAldJ8K/UJFBUn0PVhs2m qtMjQlUfdONBYbGguTRpoEa1a8fFmX33RKzyX9rc3BcIkSkQgxk9fwWgigm4TdIQ k/6+gffRg4IyP7Jcf6WPZ9abrLn/O4AQ/PWtuYlLINnAfq8qvCHhTItAwKOiqeNp I6FHsYDDOZI9iv5D8U4VNyXwr/nPQZfdqEehwo8= -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:22 2026 by rpki-client