This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e203235313938.roa File: 352e3139392e332e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: sqhE+ZIkxeIT3WBcQVH8OwR/DpijD0Jp/HrUaOEDhYE= Subject key identifier: B5:08:2B:9D:8F:D5:9C:4D:1B:B4:A8:A4:3A:4C:F0:84:E7:13:68:1C Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 510CE14EE6EF9D621B10213E7DBF3DB8F181D654 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e203235313938.roa Signing time: Mon 17 Nov 2025 04:25:15 +0000 ROA not before: Mon 17 Nov 2025 04:20:15 +0000 ROA not after: Mon 16 Nov 2026 04:25:15 +0000 asID: 25198 IP address blocks: 5.199.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0c:e1:4e:e6:ef:9d:62:1b:10:21:3e:7d:bf:3d:b8:f1:81:d6:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 17 04:20:15 2025 GMT Not After : Nov 16 04:25:15 2026 GMT Subject: CN=B5082B9D8FD59C4D1BB4A8A43A4CF084E713681C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a3:66:27:db:c0:e5:23:f2:44:6c:11:08:58: 9b:05:56:34:fe:f5:e6:6d:ca:6a:80:1b:97:86:7a: f1:df:11:2d:bf:c9:f8:b2:01:67:0d:50:7c:37:1d: 55:93:69:a7:10:40:d8:6f:41:fe:18:9e:69:13:ef: 4f:8b:ea:36:d5:b0:ec:08:9a:98:20:d3:35:c6:d5: 3a:46:be:97:a4:9d:3a:17:f2:b8:4d:6e:f5:db:e3: 30:80:54:ae:f6:fc:b0:8f:6b:2a:03:18:79:ad:e5: 5b:56:71:d3:f3:91:de:f5:92:f8:75:2f:dd:63:a4: df:43:67:ab:f9:43:b0:78:08:02:97:8e:91:e3:a8: 5d:2c:63:9e:53:24:6d:04:21:a4:75:57:e9:ac:15: e0:ad:a6:21:eb:9b:47:c1:a4:07:6c:a7:ef:66:d0: 31:f0:34:59:92:77:99:0a:f8:3d:0a:62:01:93:ae: 71:10:a1:89:e5:b4:1f:67:73:6c:6e:c9:20:97:00: cd:a4:95:7c:58:5a:05:78:fc:36:26:ac:5d:33:f9: 8b:51:47:2b:fa:e9:c0:54:3f:94:53:13:e4:b2:c5: 44:e8:fb:3e:ab:bb:f2:c0:1b:97:84:fe:14:4d:06: d7:02:6c:35:bd:ee:f8:f4:64:c3:59:5d:da:a3:97: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:08:2B:9D:8F:D5:9C:4D:1B:B4:A8:A4:3A:4C:F0:84:E7:13:68:1C X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.3.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:fe:32:ab:b4:11:d7:75:61:3b:0f:f6:8b:47:df:57:39:0f: 9e:24:04:75:f4:84:38:e2:77:ff:fb:d2:48:d8:2e:49:0d:28: 0c:08:84:f4:69:b6:7a:5a:bc:c1:20:13:6e:c9:00:28:ec:0a: 10:60:b3:55:aa:0d:eb:a9:6c:bc:01:04:3c:bb:45:91:ee:83: c1:60:1d:a3:75:31:1c:7f:ed:0f:48:fc:78:3e:62:a2:68:64: 33:28:ce:cc:96:8c:ac:34:f1:f1:4a:5d:63:00:92:e2:f9:78: ed:8a:1e:ab:8f:aa:2a:4c:a7:40:de:ea:c7:74:4c:4d:ab:3b: bc:e0:18:2d:45:87:11:02:4e:cc:47:2d:fa:49:c8:39:5a:6e: 7b:31:1d:4b:d0:38:38:f4:72:7a:fb:7a:2b:28:b2:92:c9:20: be:61:72:b1:1d:4d:af:72:d3:c1:67:7d:52:52:49:bf:9a:87: 21:f0:24:30:c7:7a:8c:e2:8e:12:c7:30:ab:fc:81:39:e8:be: 5e:52:3a:8c:0b:20:10:89:f7:26:8b:e0:bc:c3:77:a4:84:57: 98:47:ae:fe:57:76:a1:41:1b:84:31:4e:51:24:8b:c7:ee:aa: 89:16:e2:ed:3d:18:39:05:8c:15:ce:58:ea:8d:16:da:0e:cd: 0a:be:3d:49 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUUQzhTubvnWIbECE+fb89uPGB1lQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTcwNDIwMTVaFw0yNjExMTYwNDI1MTVaMDMxMTAvBgNV BAMTKEI1MDgyQjlEOEZENTlDNEQxQkI0QThBNDNBNENGMDg0RTcxMzY4MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4o2Yn28DlI/JEbBEIWJsFVjT+ 9eZtymqAG5eGevHfES2/yfiyAWcNUHw3HVWTaacQQNhvQf4YnmkT70+L6jbVsOwI mpgg0zXG1TpGvpeknToX8rhNbvXb4zCAVK72/LCPayoDGHmt5VtWcdPzkd71kvh1 L91jpN9DZ6v5Q7B4CAKXjpHjqF0sY55TJG0EIaR1V+msFeCtpiHrm0fBpAdsp+9m 0DHwNFmSd5kK+D0KYgGTrnEQoYnltB9nc2xuySCXAM2klXxYWgV4/DYmrF0z+YtR Ryv66cBUP5RTE+SyxUTo+z6ru/LAG5eE/hRNBtcCbDW97vj0ZMNZXdqjl9Y9AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUtQgrnY/VnE0btKikOkzwhOcTaBwwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABccDMA0G CSqGSIb3DQEBCwUAA4IBAQBN/jKrtBHXdWE7D/aLR99XOQ+eJAR19IQ44nf/+9JI 2C5JDSgMCIT0abZ6WrzBIBNuyQAo7AoQYLNVqg3rqWy8AQQ8u0WR7oPBYB2jdTEc f+0PSPx4PmKiaGQzKM7MloysNPHxSl1jAJLi+Xjtih6rj6oqTKdA3urHdExNqzu8 4BgtRYcRAk7MRy36Scg5Wm57MR1L0Dg49HJ6+3orKLKSySC+YXKxHU2vctPBZ31S Ukm/moch8CQwx3qM4o4SxzCr/IE56L5eUjqMCyAQifcmi+C8w3ekhFeYR67+V3ah QRuEMU5RJIvH7qqJFuLtPRg5BYwVzljqjRbaDs0Kvj1J -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:49 2025 by rpki-client