This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32342e302f32342d3234203d3e203230343733.roa File: 352e3139392e32342e302f32342d3234203d3e203230343733.roa (raw, json) Hash identifier: q7+glSxlm2qX+H1QjBKKgOd1wGs12LGnA8QDd8YyJhE= Subject key identifier: DF:75:63:E7:01:C0:EA:4B:CD:1C:AD:7E:C9:46:BD:03:F3:37:BD:B1 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 0789B3A4EBC20491162BA3951B33DB7861B7EA7C Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32342e302f32342d3234203d3e203230343733.roa Signing time: Mon 24 Nov 2025 08:42:55 +0000 ROA not before: Mon 24 Nov 2025 08:37:55 +0000 ROA not after: Mon 23 Nov 2026 08:42:55 +0000 asID: 20473 IP address blocks: 5.199.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:89:b3:a4:eb:c2:04:91:16:2b:a3:95:1b:33:db:78:61:b7:ea:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 24 08:37:55 2025 GMT Not After : Nov 23 08:42:55 2026 GMT Subject: CN=DF7563E701C0EA4BCD1CAD7EC946BD03F337BDB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c7:74:20:c2:c1:3a:90:a3:86:31:06:be:29: b5:f4:ea:7e:0d:00:07:62:98:e7:c5:13:a0:33:6e: f5:b2:ee:20:7a:47:0f:12:db:cf:bc:52:78:3f:49: e3:90:fe:f4:fe:ac:45:0b:1e:bf:14:09:a9:24:7f: 02:a7:63:22:d6:7e:e6:c9:79:fd:51:dc:00:03:f4: 10:c4:e6:0c:06:c2:ee:c3:a0:4e:d4:c2:54:03:18: e9:83:2d:fb:80:12:ab:7b:a9:eb:b4:eb:73:f4:c5: e3:f8:8d:e4:c7:c5:0a:5c:96:90:84:33:16:70:7c: e5:2e:81:9c:cd:34:0a:8a:26:15:d8:49:1c:05:bb: 10:46:bc:d2:13:40:bf:a0:f0:10:d3:b3:8c:d3:e6: 0f:94:92:03:2c:47:7a:58:92:c2:0c:cb:62:df:84: 5f:5e:75:6b:4e:0e:24:c2:b4:09:eb:01:fd:93:57: f2:5d:05:ff:f1:d5:34:7a:63:92:6a:19:96:50:e1: 1b:b2:bf:ee:c3:bb:9d:47:fb:fe:ce:43:c9:83:86: bc:b9:28:7d:54:df:33:2c:9b:e3:29:99:3d:2f:f5: f3:d8:08:86:0e:91:f7:76:1b:e7:27:eb:f3:d1:43: 30:a7:ff:66:3e:94:63:cb:a9:ec:36:44:c5:09:83: 18:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:75:63:E7:01:C0:EA:4B:CD:1C:AD:7E:C9:46:BD:03:F3:37:BD:B1 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32342e302f32342d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.24.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:a6:91:15:99:27:ee:53:48:fa:85:2d:b4:dc:6b:39:0a:8d: 06:32:3a:b8:83:e4:e4:22:bf:54:a4:6e:80:83:7b:f6:16:d3: b7:83:68:fb:ea:24:04:69:98:4d:35:fd:c4:ed:94:00:b8:bc: 51:97:61:48:44:5f:04:3b:22:c6:33:60:d2:d3:e8:20:e7:96: 20:e8:4a:22:b0:fa:72:d4:ef:aa:16:1a:d3:4f:38:28:15:dd: 29:c1:54:66:53:44:ab:d4:f0:48:59:8c:43:d7:59:46:e4:2d: f6:b9:a0:f4:0d:21:a8:cf:e2:6a:cf:f4:38:61:c3:28:a2:b7: 5e:c3:91:45:f9:08:1f:30:aa:58:1b:bb:03:46:f9:28:e1:ef: b3:a7:ed:12:a5:2e:aa:89:ca:0a:25:bc:f3:10:d4:ef:a8:12: 2b:fb:57:66:02:4b:1d:f9:99:9b:1f:51:f4:5f:1f:42:5c:c0: 92:2a:cf:93:eb:7b:9b:47:c6:86:6b:85:88:12:4c:01:11:7b: be:58:d7:b2:ba:32:38:f5:3b:a5:bb:85:00:ca:f6:85:51:f4: 29:f0:01:b5:2a:3a:48:de:bb:1f:fc:78:ef:6a:cf:72:6e:7c: da:52:1e:80:ee:bc:ff:e5:90:e0:4d:ac:40:1f:be:87:43:13: e5:38:45:22 -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUB4mzpOvCBJEWK6OVGzPbeGG36nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMjQwODM3NTVaFw0yNjExMjMwODQyNTVaMDMxMTAvBgNV BAMTKERGNzU2M0U3MDFDMEVBNEJDRDFDQUQ3RUM5NDZCRDAzRjMzN0JEQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzx3QgwsE6kKOGMQa+KbX06n4N AAdimOfFE6AzbvWy7iB6Rw8S28+8Ung/SeOQ/vT+rEULHr8UCakkfwKnYyLWfubJ ef1R3AAD9BDE5gwGwu7DoE7UwlQDGOmDLfuAEqt7qeu063P0xeP4jeTHxQpclpCE MxZwfOUugZzNNAqKJhXYSRwFuxBGvNITQL+g8BDTs4zT5g+UkgMsR3pYksIMy2Lf hF9edWtODiTCtAnrAf2TV/JdBf/x1TR6Y5JqGZZQ4Ruyv+7Du51H+/7OQ8mDhry5 KH1U3zMsm+MpmT0v9fPYCIYOkfd2G+cn6/PRQzCn/2Y+lGPLqew2RMUJgxg7AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU33Vj5wHA6kvNHK1+yUa9A/M3vbEwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzMucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxxgw DQYJKoZIhvcNAQELBQADggEBABumkRWZJ+5TSPqFLbTcazkKjQYyOriD5OQiv1Sk boCDe/YW07eDaPvqJARpmE01/cTtlAC4vFGXYUhEXwQ7IsYzYNLT6CDnliDoSiKw +nLU76oWGtNPOCgV3SnBVGZTRKvU8EhZjEPXWUbkLfa5oPQNIajP4mrP9Dhhwyii t17DkUX5CB8wqlgbuwNG+Sjh77On7RKlLqqJygolvPMQ1O+oEiv7V2YCSx35mZsf UfRfH0JcwJIqz5Pre5tHxoZrhYgSTAERe75Y17K6Mjj1O6W7hQDK9oVR9CnwAbUq Okjeux/8eO9qz3JufNpSHoDuvP/lkOBNrEAfvodDE+U4RSI= -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:23 2025 by rpki-client