This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32362e302f32332d3234203d3e20383334.roa File: 352e3139392e32362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: 1QXdd6mBmXVNffnrIU1AUy68V+ojS5R+WxPDTzSdhBA= Subject key identifier: 15:F3:93:80:A5:7B:0C:C1:AA:F8:CF:3E:ED:67:8F:80:1F:71:82:89 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 6BF2B583578D111024828A9CCFA7D70ED01B291B Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32362e302f32332d3234203d3e20383334.roa Signing time: Mon 24 Nov 2025 08:43:57 +0000 ROA not before: Mon 24 Nov 2025 08:38:57 +0000 ROA not after: Mon 23 Nov 2026 08:43:57 +0000 asID: 834 IP address blocks: 5.199.26.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:f2:b5:83:57:8d:11:10:24:82:8a:9c:cf:a7:d7:0e:d0:1b:29:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 24 08:38:57 2025 GMT Not After : Nov 23 08:43:57 2026 GMT Subject: CN=15F39380A57B0CC1AAF8CF3EED678F801F718289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:d3:b2:04:1f:36:66:a2:ef:2d:2f:98:48: 24:e8:94:7a:47:24:c5:51:28:61:bb:83:94:fb:a6: 43:3b:d5:73:da:a3:57:c4:88:fb:91:ec:f2:41:4f: c3:40:ee:63:7a:88:ba:18:bc:fc:c3:d1:a1:c4:4c: 34:91:28:d5:9b:51:22:7a:ee:94:40:e0:24:7b:33: 3b:d2:6f:95:50:7b:39:a2:ad:be:ae:6e:e1:6c:49: cc:a2:2c:f0:8f:a9:ff:69:08:0e:28:06:da:73:42: be:65:5c:41:7b:d8:94:46:17:1d:1a:ba:6d:97:8c: a5:19:1c:53:2c:1b:17:56:6a:aa:ec:9e:0c:ea:a0: be:2b:68:48:a0:10:11:ef:91:2f:64:74:2a:b7:dc: dc:ff:2b:84:35:b7:ca:5d:3e:e0:27:81:b1:5f:ef: 65:55:5a:b5:e4:9d:a5:b1:d8:d6:11:6e:85:d4:e8: e3:0e:11:4b:0a:e9:57:37:d2:6b:33:d6:ab:59:fb: 2a:52:cd:ff:e3:b2:f9:16:26:e3:21:ca:0a:da:0b: 98:06:3f:51:c4:0a:30:b6:cc:25:1a:3d:48:18:d9: eb:fe:ca:11:af:09:3b:fa:40:e1:57:37:72:66:4f: a5:75:40:12:24:ea:17:8b:75:aa:f0:14:97:03:2f: bf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F3:93:80:A5:7B:0C:C1:AA:F8:CF:3E:ED:67:8F:80:1F:71:82:89 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.26.0/23 Signature Algorithm: sha256WithRSAEncryption 70:09:76:d8:4c:f2:08:e9:9e:46:f9:b7:5a:ae:45:cd:bc:b5: 37:79:9c:a0:59:e5:3b:9b:6c:72:8e:03:0c:c6:ce:d0:36:ae: ee:c1:23:9e:e4:3d:8b:a6:75:cf:29:10:28:44:b5:e5:fa:9d: 6e:25:14:0a:59:ee:9c:9e:6a:bf:88:e3:82:d7:ed:a2:9c:c2: 3d:35:67:25:c0:8b:ba:14:da:27:87:7d:84:f9:4a:40:a3:c9: 53:9f:2f:4f:a8:f3:74:25:ec:fc:5b:e9:6d:ca:ff:7d:3d:59: 9f:f0:ea:ca:f0:bc:24:ba:cd:8c:bb:c6:d8:34:45:d9:0c:92: 0c:b0:e6:3f:1f:e9:b9:b6:e5:f3:a9:41:6e:4a:bf:a1:29:08: 4f:33:f7:db:c4:ac:59:35:b1:6d:dd:4a:f2:99:a9:88:8e:30: a7:3a:d4:d5:81:43:2e:f5:e6:be:43:75:12:f7:dc:9d:ff:bf: 33:ec:b9:9c:6d:28:73:df:92:df:10:5f:83:e8:1f:d6:7f:45: 19:54:3b:1b:f6:36:69:93:9e:92:8b:fa:a2:4c:c4:68:8e:8d: 6c:e8:99:68:75:6a:cf:7f:99:e2:7c:62:6e:5a:d9:91:cd:d5: 09:d4:a8:30:e3:2e:40:6c:c0:87:57:0e:ea:28:1c:ad:3e:69: a6:7b:a6:58 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUa/K1g1eNERAkgoqcz6fXDtAbKRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMjQwODM4NTdaFw0yNjExMjMwODQzNTdaMDMxMTAvBgNV BAMTKDE1RjM5MzgwQTU3QjBDQzFBQUY4Q0YzRUVENjc4RjgwMUY3MTgyODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2B9OyBB82ZqLvLS+YSCTolHpH JMVRKGG7g5T7pkM71XPao1fEiPuR7PJBT8NA7mN6iLoYvPzD0aHETDSRKNWbUSJ6 7pRA4CR7MzvSb5VQezmirb6ubuFsScyiLPCPqf9pCA4oBtpzQr5lXEF72JRGFx0a um2XjKUZHFMsGxdWaqrsngzqoL4raEigEBHvkS9kdCq33Nz/K4Q1t8pdPuAngbFf 72VVWrXknaWx2NYRboXU6OMOEUsK6Vc30msz1qtZ+ypSzf/jsvkWJuMhygraC5gG P1HECjC2zCUaPUgY2ev+yhGvCTv6QOFXN3JmT6V1QBIk6heLdarwFJcDL7/nAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUFfOTgKV7DMGq+M8+7WePgB9xgokwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzNjJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHGjANBgkq hkiG9w0BAQsFAAOCAQEAcAl22EzyCOmeRvm3Wq5Fzby1N3mcoFnlO5tsco4DDMbO 0Dau7sEjnuQ9i6Z1zykQKES15fqdbiUUClnunJ5qv4jjgtftopzCPTVnJcCLuhTa J4d9hPlKQKPJU58vT6jzdCXs/Fvpbcr/fT1Zn/DqyvC8JLrNjLvG2DRF2QySDLDm Px/pubbl86lBbkq/oSkITzP328SsWTWxbd1K8pmpiI4wpzrU1YFDLvXmvkN1Evfc nf+/M+y5nG0oc9+S3xBfg+gf1n9FGVQ7G/Y2aZOekov6okzEaI6NbOiZaHVqz3+Z 4nxiblrZkc3VCdSoMOMuQGzAh1cO6igcrT5ppnumWA== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:35 2025 by rpki-client