This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e20323035383836.roa File: 352e3139392e332e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: 5o0z6/m5qhC51cnzv2r9K1IxTqAdaDlCpJLCCL1osiI= Subject key identifier: FC:3D:63:1D:F0:F6:A5:F2:D3:9F:93:74:1C:8C:1E:06:2A:4A:A5:B6 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 51441D836BBC0EAB44FC984F29B3C8757237F80E Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e20323035383836.roa Signing time: Thu 13 Nov 2025 07:12:59 +0000 ROA not before: Thu 13 Nov 2025 07:07:59 +0000 ROA not after: Thu 12 Nov 2026 07:12:59 +0000 asID: 205886 IP address blocks: 5.199.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:44:1d:83:6b:bc:0e:ab:44:fc:98:4f:29:b3:c8:75:72:37:f8:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 13 07:07:59 2025 GMT Not After : Nov 12 07:12:59 2026 GMT Subject: CN=FC3D631DF0F6A5F2D39F93741C8C1E062A4AA5B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:53:a8:04:67:e3:0e:48:65:ab:ac:51:6c:ee: 6e:d9:41:5f:a2:11:9b:32:c3:2f:8e:cc:28:79:34: 2d:35:85:f5:97:73:7a:a1:66:68:2e:ce:a6:53:03: 05:2e:2f:e4:c0:82:6d:d8:21:ff:30:06:31:e4:87: c9:c8:cf:6d:ce:0e:da:74:83:13:d9:c1:9d:ca:a4: 84:b4:62:af:27:49:6a:f0:99:ee:e2:54:b6:86:41: a2:a6:6c:64:df:08:2c:a0:e7:59:6b:e4:04:3b:dc: b0:2c:0c:76:6f:e0:3f:df:ae:89:1e:5e:58:ed:e7: 1c:01:ef:64:50:b8:1a:a6:45:7f:39:a7:1b:d0:00: 09:b9:40:f4:66:6b:da:f7:cd:e5:af:0b:0b:72:79: 37:37:35:1f:56:a3:0e:41:ab:a5:14:62:10:4b:91: 7b:ca:62:6b:7d:b6:d0:1a:48:9b:87:67:71:af:ac: d2:8b:77:61:33:d3:83:66:d7:bc:5b:0f:0f:92:27: 7b:bc:45:1a:d7:25:55:df:6f:15:ad:b3:54:8f:7d: 34:1e:0d:6d:5f:05:36:2b:eb:9c:77:c0:83:a3:84: 32:f9:38:ce:61:83:bc:21:fe:59:27:9c:13:19:65: a8:d3:dc:56:8d:68:fa:f8:1a:2d:45:cf:8f:5b:89: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:3D:63:1D:F0:F6:A5:F2:D3:9F:93:74:1C:8C:1E:06:2A:4A:A5:B6 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.3.0/24 Signature Algorithm: sha256WithRSAEncryption be:56:91:1c:6b:16:32:b2:7e:48:34:35:b4:f5:bf:67:c0:32: c8:93:66:33:9f:63:34:df:2f:fe:8a:22:a9:9c:8e:72:5b:da: 8e:54:e5:7b:c5:51:35:ec:6d:20:b0:75:be:b9:8e:4b:7b:6e: 7c:97:e9:37:a9:a1:9a:14:7c:79:a7:9d:a1:ed:22:3d:10:f0: 1e:d4:53:a3:59:d4:43:2e:b7:39:01:85:b7:62:29:02:41:a0: 4e:a8:92:13:a0:c0:da:da:92:5b:33:96:9a:44:57:fa:a2:c1: 88:2b:38:41:48:68:48:7c:cb:30:04:58:d1:fe:09:28:77:8c: a1:ee:d5:05:8a:e2:e2:d4:d1:af:15:f5:0e:8a:67:54:c0:26: b2:d2:e0:fa:58:05:c1:f8:d9:67:0d:ce:e6:7f:21:21:ac:f1: 2b:d8:78:f4:06:90:99:7b:69:d6:d5:75:5b:e0:35:69:85:d9: 3d:5f:f3:73:2b:db:a4:0a:bd:3a:0a:9e:02:8e:5b:0a:91:eb: 29:ce:13:fc:26:9d:8f:a0:90:50:22:00:80:4c:21:00:83:dc: 58:f1:e8:9f:71:4e:4b:33:a0:a5:cf:e1:a7:d3:e8:1a:84:2e: 84:11:c6:7a:81:c2:15:89:e2:94:89:e2:4b:de:dc:89:36:f5: 56:3b:5d:ac -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUUUQdg2u8DqtE/JhPKbPIdXI3+A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTMwNzA3NTlaFw0yNjExMTIwNzEyNTlaMDMxMTAvBgNV BAMTKEZDM0Q2MzFERjBGNkE1RjJEMzlGOTM3NDFDOEMxRTA2MkE0QUE1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkU6gEZ+MOSGWrrFFs7m7ZQV+i EZsywy+OzCh5NC01hfWXc3qhZmguzqZTAwUuL+TAgm3YIf8wBjHkh8nIz23ODtp0 gxPZwZ3KpIS0Yq8nSWrwme7iVLaGQaKmbGTfCCyg51lr5AQ73LAsDHZv4D/froke Xljt5xwB72RQuBqmRX85pxvQAAm5QPRma9r3zeWvCwtyeTc3NR9Wow5Bq6UUYhBL kXvKYmt9ttAaSJuHZ3GvrNKLd2Ez04Nm17xbDw+SJ3u8RRrXJVXfbxWts1SPfTQe DW1fBTYr65x3wIOjhDL5OM5hg7wh/lknnBMZZajT3FaNaPr4Gi1Fz49biT51AgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU/D1jHfD2pfLTn5N0HIweBipKpbYwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMwMzUzODM4MzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxwMw DQYJKoZIhvcNAQELBQADggEBAL5WkRxrFjKyfkg0NbT1v2fAMsiTZjOfYzTfL/6K IqmcjnJb2o5U5XvFUTXsbSCwdb65jkt7bnyX6TepoZoUfHmnnaHtIj0Q8B7UU6NZ 1EMutzkBhbdiKQJBoE6okhOgwNraklszlppEV/qiwYgrOEFIaEh8yzAEWNH+CSh3 jKHu1QWK4uLU0a8V9Q6KZ1TAJrLS4PpYBcH42WcNzuZ/ISGs8SvYePQGkJl7adbV dVvgNWmF2T1f83Mr26QKvToKngKOWwqR6ynOE/wmnY+gkFAiAIBMIQCD3Fjx6J9x TkszoKXP4afT6BqELoQRxnqBwhWJ4pSJ4kve3Ik29VY7Xaw= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:48 2025 by rpki-client