This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32332e302f32342d3234203d3e203230343733.roa File: 352e3139392e32332e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: 85emnoFIIZEck9qOCD8+fBhi9DyMDr+qHWMNX3Pl9pc= Subject key identifier: D9:7D:CD:F7:54:63:40:9E:2F:A1:B2:2E:85:9F:83:2F:83:43:0F:14 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 451FFF28CDDCB426F0BC77F5240D371B70F884F3 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32332e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 08:42:56 +0000 ROA not before: Mon 24 Nov 2025 08:37:56 +0000 ROA not after: Mon 23 Nov 2026 08:42:56 +0000 asID: 20473 IP address blocks: 5.199.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1f:ff:28:cd:dc:b4:26:f0:bc:77:f5:24:0d:37:1b:70:f8:84:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 24 08:37:56 2025 GMT Not After : Nov 23 08:42:56 2026 GMT Subject: CN=D97DCDF75463409E2FA1B22E859F832F83430F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9e:c7:0e:26:35:31:54:fc:6d:66:5f:28:37: fc:46:29:02:4a:39:54:18:3f:a1:fd:46:3b:95:6f: 4a:c8:ae:09:e4:f1:9f:0a:ff:03:dd:e9:ae:6c:62: 8f:5e:d6:3c:d9:e6:52:bb:45:6e:4a:3c:bd:94:f5: f6:71:b3:8d:4e:66:fc:e7:85:07:65:35:c5:0a:31: 4b:57:6a:e8:01:9c:ad:6c:0e:88:00:2b:a7:85:d8: 50:87:2c:05:7d:26:5a:c7:9a:e6:6b:f5:1d:56:e1: 1b:c4:84:a9:4c:19:19:f9:2b:79:0e:8e:1a:d5:ba: 50:d5:4e:42:ad:3a:f7:cb:3e:9d:d8:42:ae:c3:4c: e9:d2:68:b8:02:eb:ca:64:dd:b7:2f:bc:51:5d:2b: 9d:d4:e2:29:df:e2:6c:ae:d8:f3:44:cf:cd:d6:9a: 83:6d:b6:63:8d:00:32:41:0c:ee:18:cf:10:1a:e6: a7:37:77:46:d0:ec:f5:eb:bd:80:21:6a:a2:4d:c7: af:d9:0d:a2:c9:bc:76:cb:7e:f2:e8:2c:77:bc:f3: cd:1d:aa:c8:ce:ff:54:44:06:72:c8:3e:12:b4:74: 3a:91:f0:40:12:3c:94:28:7f:a8:18:c1:fe:04:73: 0e:1e:51:0f:70:e8:30:55:f8:31:cd:c4:89:db:69: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:CD:F7:54:63:40:9E:2F:A1:B2:2E:85:9F:83:2F:83:43:0F:14 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32332e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.23.0/24 Signature Algorithm: sha256WithRSAEncryption 50:04:86:8b:49:0e:f8:b1:fa:ca:99:67:31:9f:9d:60:c6:95: 09:f3:7b:d0:d7:41:5f:de:c6:a2:45:47:de:a1:04:00:a4:a1: fc:c1:48:ec:24:9c:95:2b:dd:c7:0b:33:31:52:17:a1:36:dc: 49:cb:ea:3c:f5:e4:21:d5:ee:10:60:23:56:98:cb:46:a0:4c: 0f:d2:ef:55:1e:1f:88:0c:ef:64:38:77:ce:0c:a9:29:43:9e: 81:71:7b:fe:95:85:ce:38:30:06:e8:e4:ac:6d:3c:53:c3:68: b5:dc:b7:1f:8a:95:ce:c2:a4:b6:e3:d4:4f:36:e5:a6:13:01: 5c:5d:ca:35:80:d2:93:d6:7f:28:50:e9:c7:2b:8e:c1:6f:c4: ac:f9:e5:c2:4d:71:fe:34:8b:61:6e:1b:a3:83:dd:0f:4c:34: 07:11:02:55:f6:a7:5d:8c:aa:f3:be:c7:08:f0:11:ab:59:99: 79:43:df:8b:08:66:91:90:d0:22:4d:ec:ce:0b:f1:7e:fa:28: 5f:7b:79:74:67:6d:06:8d:b7:c6:89:95:8f:25:4d:cd:27:34: 56:84:e1:e4:73:17:cd:a3:b5:eb:c8:40:fc:b1:a9:37:5f:f2: eb:f6:5a:ba:b6:17:b8:27:f4:8a:5e:95:11:65:a2:40:e6:bb: 99:cb:57:48 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIURR//KM3ctCbwvHf1JA03G3D4hPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMjQwODM3NTZaFw0yNjExMjMwODQyNTZaMDMxMTAvBgNV BAMTKEQ5N0RDREY3NTQ2MzQwOUUyRkExQjIyRTg1OUY4MzJGODM0MzBGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnscOJjUxVPxtZl8oN/xGKQJK OVQYP6H9RjuVb0rIrgnk8Z8K/wPd6a5sYo9e1jzZ5lK7RW5KPL2U9fZxs41OZvzn hQdlNcUKMUtXaugBnK1sDogAK6eF2FCHLAV9JlrHmuZr9R1W4RvEhKlMGRn5K3kO jhrVulDVTkKtOvfLPp3YQq7DTOnSaLgC68pk3bcvvFFdK53U4inf4myu2PNEz83W moNttmONADJBDO4YzxAa5qc3d0bQ7PXrvYAhaqJNx6/ZDaLJvHbLfvLoLHe8880d qsjO/1REBnLIPhK0dDqR8EASPJQof6gYwf4Ecw4eUQ9w6DBV+DHNxInbaSENAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU2X3N91RjQJ4vobIuhZ+DL4NDDxQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzMzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxxcw DQYJKoZIhvcNAQELBQADggEBAFAEhotJDvix+sqZZzGfnWDGlQnze9DXQV/exqJF R96hBACkofzBSOwknJUr3ccLMzFSF6E23EnL6jz15CHV7hBgI1aYy0agTA/S71Ue H4gM72Q4d84MqSlDnoFxe/6Vhc44MAbo5KxtPFPDaLXctx+Klc7CpLbj1E825aYT AVxdyjWA0pPWfyhQ6ccrjsFvxKz55cJNcf40i2FuG6OD3Q9MNAcRAlX2p12MqvO+ xwjwEatZmXlD34sIZpGQ0CJN7M4L8X76KF97eXRnbQaNt8aJlY8lTc0nNFaE4eRz F82jtevIQPyxqTdf8uv2Wrq2F7gn9IpelRFlokDmu5nLV0g= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:24 2025 by rpki-client