This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e322e302f32342d3234203d3e20323133373334.roa File: 352e3139392e322e302f32342d3234203d3e20323133373334.roa (raw, json) Hash identifier: myll+ujOCi0BJW7dGZpVdak+gI7lTxZo7Gnrh24pnrQ= Subject key identifier: 12:D1:50:97:7C:15:B6:BD:8E:B9:FA:BD:05:94:54:D3:C0:11:4D:B8 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 33AC0C3ED5FCD1655ECD3F6E201F15CCDCAB265D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e322e302f32342d3234203d3e20323133373334.roa Signing time: Sun 25 Jan 2026 11:57:41 +0000 ROA not before: Sun 25 Jan 2026 11:52:41 +0000 ROA not after: Sun 24 Jan 2027 11:57:41 +0000 asID: 213734 IP address blocks: 5.199.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 13:49:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ac:0c:3e:d5:fc:d1:65:5e:cd:3f:6e:20:1f:15:cc:dc:ab:26:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 25 11:52:41 2026 GMT Not After : Jan 24 11:57:41 2027 GMT Subject: CN=12D150977C15B6BD8EB9FABD059454D3C0114DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:04:86:eb:1e:8f:5c:58:c8:20:83:72:1c: 47:98:e3:a3:5c:5f:68:37:b3:00:5a:db:19:db:d6: 41:48:23:48:78:5c:c3:ef:90:bf:e9:04:3b:9e:33: 06:e7:7d:ef:2a:3c:5c:ac:1c:6e:7b:90:c7:54:70: 52:9b:12:64:eb:cd:9e:2b:c8:a5:88:9b:da:d2:d0: 1f:16:14:65:94:40:b1:24:f3:a2:de:96:31:ac:84: c5:4d:ff:bd:4b:d2:db:18:fb:9c:6e:f8:6a:e7:4d: 1b:c3:e8:37:b8:b0:8c:d8:38:64:6b:69:a4:5b:3c: 46:6d:ba:3a:9c:bb:c1:f7:03:07:5c:a9:7a:01:f8: fb:b1:2a:43:35:51:df:05:8a:eb:b0:98:73:80:c4: af:02:4c:2d:42:c3:cc:16:c7:03:5c:b2:14:de:5d: f0:6a:ff:65:cf:e6:98:ca:b9:66:1b:8b:39:61:d7: 7b:1e:4a:31:82:24:57:68:03:29:fd:33:2a:72:c4: 82:54:bb:95:7e:a4:30:d7:f4:51:b6:c3:ab:2f:24: 0c:0f:19:4e:50:9e:5c:9e:ec:16:fc:cb:ac:2f:1b: f4:30:09:54:b1:4b:25:41:99:06:ed:f2:f8:f1:08: 5d:2b:0f:fd:d6:ef:ef:79:98:17:65:06:62:c0:a6: 1c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:D1:50:97:7C:15:B6:BD:8E:B9:FA:BD:05:94:54:D3:C0:11:4D:B8 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e322e302f32342d3234203d3e20323133373334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.2.0/24 Signature Algorithm: sha256WithRSAEncryption 12:ef:84:f0:0d:f6:21:59:82:41:57:f4:02:8c:8e:b6:e1:91: 15:8e:ac:20:f1:bc:75:d6:cb:6c:38:5a:51:80:97:eb:2f:06: a2:04:0a:1b:0d:9f:3a:5e:18:8b:c5:b3:8a:15:8d:a6:4e:d6: 05:6e:37:08:78:ee:87:7c:94:c9:e6:7f:5b:33:e1:a7:3b:b2: 91:dd:59:b2:17:33:d5:69:d6:4f:29:4c:8b:70:90:ca:70:39: 7d:65:90:7a:4f:3e:5b:e6:49:ad:ce:03:49:5f:14:bd:31:8e: 27:12:ac:c1:f4:75:e3:ee:fd:9a:39:cf:f4:be:97:78:ce:83: 38:59:7c:33:4a:b9:3f:f3:8e:94:8e:6d:fa:e6:d5:20:65:f3: 5c:b2:4d:02:3e:53:c4:0c:45:23:3f:63:02:0b:13:53:22:2e: f4:94:3f:c1:e2:89:87:91:43:51:d9:40:63:68:d1:d2:11:61: 60:14:39:a7:8b:db:75:ea:f5:e4:06:2b:4c:ed:ce:94:15:bc: 5f:ef:00:d9:82:54:8d:96:6f:53:8a:09:7e:da:2a:15:0a:74: a7:5a:1d:23:a2:2e:97:2c:d1:36:a7:b9:76:33:3c:da:6f:96: af:43:1e:e9:c1:14:f7:ff:19:53:cc:d2:ec:3a:ac:6a:71:04: 52:d5:06:b5 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUM6wMPtX80WVezT9uIB8VzNyrJl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjUxMTUyNDFaFw0yNzAxMjQxMTU3NDFaMDMxMTAvBgNV BAMTKDEyRDE1MDk3N0MxNUI2QkQ4RUI5RkFCRDA1OTQ1NEQzQzAxMTREQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk+wSG6x6PXFjIIINyHEeY46Nc X2g3swBa2xnb1kFII0h4XMPvkL/pBDueMwbnfe8qPFysHG57kMdUcFKbEmTrzZ4r yKWIm9rS0B8WFGWUQLEk86LeljGshMVN/71L0tsY+5xu+GrnTRvD6De4sIzYOGRr aaRbPEZtujqcu8H3AwdcqXoB+PuxKkM1Ud8FiuuwmHOAxK8CTC1Cw8wWxwNcshTe XfBq/2XP5pjKuWYbizlh13seSjGCJFdoAyn9MypyxIJUu5V+pDDX9FG2w6svJAwP GU5Qnlye7Bb8y6wvG/QwCVSxSyVBmQbt8vjxCF0rD/3W7+95mBdlBmLAphylAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQUEtFQl3wVtr2Oufq9BZRU08ARTbgwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzMzNzMzMzQucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxwIw DQYJKoZIhvcNAQELBQADggEBABLvhPAN9iFZgkFX9AKMjrbhkRWOrCDxvHXWy2w4 WlGAl+svBqIEChsNnzpeGIvFs4oVjaZO1gVuNwh47od8lMnmf1sz4ac7spHdWbIX M9Vp1k8pTItwkMpwOX1lkHpPPlvmSa3OA0lfFL0xjicSrMH0dePu/Zo5z/S+l3jO gzhZfDNKuT/zjpSObfrm1SBl81yyTQI+U8QMRSM/YwILE1MiLvSUP8HiiYeRQ1HZ QGNo0dIRYWAUOaeL23Xq9eQGK0ztzpQVvF/vANmCVI2Wb1OKCX7aKhUKdKdaHSOi Lpcs0TanuXYzPNpvlq9DHunBFPf/GVPM0uw6rGpxBFLVBrU= -----END CERTIFICATE-----Generated at Fri Jan 30 18:40:25 2026 by rpki-client