This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32302e302f32342d3234203d3e20383334.roa File: 352e3139392e32302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: MVaV1lWLXic5Tl718sGKt/ggKhigg0Z/J6vFB/3TtrU= Subject key identifier: 6B:19:65:38:25:A9:5B:34:B1:F5:52:7D:B8:52:FE:9E:4B:59:B7:04 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 385AAB4A986A8240992015BB43AA062136ACE66E Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32302e302f32342d3234203d3e20383334.roa Signing time: Thu 05 Feb 2026 07:29:58 +0000 ROA not before: Thu 05 Feb 2026 07:24:58 +0000 ROA not after: Thu 04 Feb 2027 07:29:58 +0000 asID: 834 IP address blocks: 5.199.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5a:ab:4a:98:6a:82:40:99:20:15:bb:43:aa:06:21:36:ac:e6:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 5 07:24:58 2026 GMT Not After : Feb 4 07:29:58 2027 GMT Subject: CN=6B19653825A95B34B1F5527DB852FE9E4B59B704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:38:24:48:2f:8f:c7:3a:f9:e5:4b:98:e7:59: 29:37:5e:31:fc:51:37:ed:75:68:df:97:21:7a:11: cc:31:9a:29:6b:d1:e1:ff:af:25:90:23:46:77:35: ca:8a:c0:c9:ae:cd:59:da:1d:ea:49:1a:d6:61:59: 00:fa:e0:07:65:30:e6:20:fa:0e:91:29:92:49:be: 24:87:84:d6:94:d8:e8:4c:9b:b8:d8:76:0f:9c:88: 1c:0e:a7:ae:b5:c9:32:40:25:d1:89:89:98:80:fe: a4:af:22:1b:a9:08:7d:e1:5e:d9:38:61:6c:88:73: 3e:75:95:be:4d:35:27:38:1e:a0:61:2f:58:d8:82: 5b:8a:71:0a:0e:2d:95:c4:74:04:24:a3:b1:a9:bd: 14:4c:b8:8f:12:4c:c1:bf:ec:94:9b:3a:31:ef:6d: 9f:86:5a:21:96:b3:60:b6:8d:7c:6a:f9:32:cf:0e: a9:5f:2f:8c:fd:18:9f:97:47:0e:3c:77:bf:cd:0e: d3:7a:c4:7b:89:90:91:7d:76:fe:8c:b9:b8:b2:74: e9:cb:cf:df:0d:93:78:31:62:b7:22:7c:cd:f6:64: 7f:d1:10:c4:e8:39:90:fa:56:bc:65:f4:95:93:de: eb:a9:70:ef:06:cf:25:2e:f2:67:41:ea:21:60:c3: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:19:65:38:25:A9:5B:34:B1:F5:52:7D:B8:52:FE:9E:4B:59:B7:04 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.20.0/24 Signature Algorithm: sha256WithRSAEncryption dd:4f:cc:08:f5:fd:d0:7f:cd:20:e2:2a:cc:82:66:b5:e4:50: d6:97:6b:83:3e:07:9c:0b:16:00:0d:65:ee:c1:d1:ae:e6:c4: 24:8a:8b:d4:5b:1f:55:4e:5a:07:4f:94:da:39:cd:0f:62:d9: 8b:bf:bd:0e:51:35:85:52:1e:86:bc:ad:90:23:c1:75:63:15: 49:aa:5d:80:12:36:89:ac:6d:d8:cd:3f:32:69:04:c6:69:79: ad:6b:26:9f:3f:d3:67:8e:0e:2f:cc:33:f0:06:4d:d3:09:df: ea:68:a0:1a:10:3d:88:49:5f:dd:87:c8:a6:84:3f:1f:d3:12: 6e:72:22:7c:a0:d0:da:9d:a6:8d:b0:44:23:68:a5:b9:63:2b: 81:cc:b4:2d:40:26:fb:20:83:f3:ca:3b:f5:14:ec:8e:db:27: 1b:6e:c2:6a:12:a3:03:91:a1:01:ed:3b:9e:f5:e6:af:e5:e9: 6c:54:c7:ae:a0:3e:53:c3:d1:78:7b:51:84:21:76:06:8f:a1: 9a:9e:25:59:db:ed:89:7e:1b:77:7f:5d:06:d6:a1:e4:a1:51: 37:f5:c7:87:74:32:42:a5:48:47:64:27:29:c8:2a:78:33:82: e5:c0:0b:bd:3e:4f:0d:14:d8:05:0c:50:c8:71:38:a0:7d:78: fa:5d:88:f2 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUOFqrSphqgkCZIBW7Q6oGITas5m4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDUwNzI0NThaFw0yNzAyMDQwNzI5NThaMDMxMTAvBgNV BAMTKDZCMTk2NTM4MjVBOTVCMzRCMUY1NTI3REI4NTJGRTlFNEI1OUI3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOOCRIL4/HOvnlS5jnWSk3XjH8 UTftdWjflyF6Ecwxmilr0eH/ryWQI0Z3NcqKwMmuzVnaHepJGtZhWQD64AdlMOYg +g6RKZJJviSHhNaU2OhMm7jYdg+ciBwOp661yTJAJdGJiZiA/qSvIhupCH3hXtk4 YWyIcz51lb5NNSc4HqBhL1jYgluKcQoOLZXEdAQko7GpvRRMuI8STMG/7JSbOjHv bZ+GWiGWs2C2jXxq+TLPDqlfL4z9GJ+XRw48d7/NDtN6xHuJkJF9dv6MubiydOnL z98Nk3gxYrcifM32ZH/REMToOZD6Vrxl9JWT3uupcO8GzyUu8mdB6iFgw+vTAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUaxllOCWpWzSx9VJ9uFL+nktZtwQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHFDANBgkq hkiG9w0BAQsFAAOCAQEA3U/MCPX90H/NIOIqzIJmteRQ1pdrgz4HnAsWAA1l7sHR rubEJIqL1FsfVU5aB0+U2jnND2LZi7+9DlE1hVIehrytkCPBdWMVSapdgBI2iaxt 2M0/MmkExml5rWsmnz/TZ44OL8wz8AZN0wnf6migGhA9iElf3YfIpoQ/H9MSbnIi fKDQ2p2mjbBEI2iluWMrgcy0LUAm+yCD88o79RTsjtsnG27CahKjA5GhAe07nvXm r+XpbFTHrqA+U8PReHtRhCF2Bo+hmp4lWdvtiX4bd39dBtah5KFRN/XHh3QyQqVI R2QnKcgqeDOC5cALvT5PDRTYBQxQyHE4oH14+l2I8g== -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:08 2026 by rpki-client