This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e20383334.roa File: 352e3139392e332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: LuHiWgF744mIC/O+xB6A+EN+ekFdr7moP5JKCZvgq1U= Subject key identifier: 6B:AF:E8:CE:76:58:12:09:12:D6:6F:35:7C:A4:77:AA:32:C6:CC:94 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 4D171079013B225AF75A87071B1934E076A8D132 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e20383334.roa Signing time: Sun 25 Jan 2026 11:58:53 +0000 ROA not before: Sun 25 Jan 2026 11:53:53 +0000 ROA not after: Sun 24 Jan 2027 11:58:53 +0000 asID: 834 IP address blocks: 5.199.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:17:10:79:01:3b:22:5a:f7:5a:87:07:1b:19:34:e0:76:a8:d1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 25 11:53:53 2026 GMT Not After : Jan 24 11:58:53 2027 GMT Subject: CN=6BAFE8CE7658120912D66F357CA477AA32C6CC94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8d:38:76:9a:47:7d:16:01:bd:10:4d:34:ee: 9d:35:22:59:7d:40:b3:70:9f:9b:a0:9b:2b:cc:18: 38:4d:41:8a:ff:c5:27:2f:5e:47:63:c2:be:4d:0a: 08:79:8a:3e:87:bd:54:b6:ed:4e:6c:21:c3:d3:bd: 6b:00:45:52:98:0d:b0:a3:a8:ee:64:8e:f8:4a:0e: 17:0e:71:f3:f6:cd:70:40:a4:3f:56:08:fe:a0:1f: 81:ed:45:c2:fb:3a:8a:8e:51:0b:51:8c:53:8b:87: 7e:1c:ef:0b:eb:09:7a:fa:28:d3:95:1d:21:46:28: 71:f0:fc:b4:67:60:8e:3f:8c:05:a8:ca:87:67:2c: 27:86:06:ef:ed:08:33:8d:5a:43:67:4f:89:a4:29: 41:ac:94:68:95:59:00:0d:fd:f5:e8:a6:25:df:64: 03:65:82:e3:6c:ba:d1:f0:26:d9:51:e6:db:c6:70: 07:17:6f:0c:c8:30:27:22:23:da:13:a3:55:3c:5f: af:84:dc:1b:94:bd:f2:0f:56:08:06:39:b1:c3:82: 2e:50:7a:dd:49:a6:6b:fb:e9:90:1a:e5:be:e9:fc: ee:28:25:e0:5f:9d:45:0d:11:7f:11:cb:a3:0c:7c: ce:64:8f:7f:5f:41:26:e6:86:6b:1f:46:fe:93:7f: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AF:E8:CE:76:58:12:09:12:D6:6F:35:7C:A4:77:AA:32:C6:CC:94 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.3.0/24 Signature Algorithm: sha256WithRSAEncryption c4:42:76:ed:16:8e:0a:17:64:ea:a3:9e:c7:89:33:ba:75:24: 98:3c:65:7a:3a:02:fc:e9:9b:4b:5c:56:9f:4d:78:ca:84:ab: 72:57:c9:05:cb:6e:f8:f1:a5:8f:e4:a7:8e:e0:c7:1d:71:0b: ee:34:b9:bf:0e:a1:28:2d:a4:e1:15:bc:c6:76:3f:35:7a:39: ad:a6:d2:a4:65:85:9b:0a:d5:8d:ba:a8:98:b4:d3:81:94:9a: e6:06:33:a8:b4:2c:b6:f2:e2:2e:cc:7d:47:e3:3a:af:6f:1e: ae:57:9e:43:ba:ab:67:58:28:5d:2e:27:18:14:ee:e5:34:cf: a0:f8:bd:e9:32:e0:3f:83:c4:00:b8:fa:d2:aa:9a:a0:08:cd: 6d:d2:53:b7:92:6e:04:de:4e:6e:12:d6:47:53:63:9f:2b:61: 36:c4:a6:7b:45:2a:40:0a:df:2e:e6:9f:4a:35:bf:45:92:5e: 98:1e:e5:f1:79:cf:c9:de:d2:01:69:16:87:86:bf:25:e7:a5: 32:ef:45:00:c4:ea:ec:da:e1:9c:7f:51:8f:33:60:4a:c4:6b: 44:5c:bd:a1:16:19:9a:73:32:3a:95:39:1d:7d:38:43:13:e7: fe:df:07:af:96:08:d8:33:41:09:f8:ae:95:2d:f6:32:82:2f: bb:ef:1f:65 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUTRcQeQE7Ilr3WocHGxk04Hao0TIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjUxMTUzNTNaFw0yNzAxMjQxMTU4NTNaMDMxMTAvBgNV BAMTKDZCQUZFOENFNzY1ODEyMDkxMkQ2NkYzNTdDQTQ3N0FBMzJDNkNDOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjTh2mkd9FgG9EE007p01Ill9 QLNwn5ugmyvMGDhNQYr/xScvXkdjwr5NCgh5ij6HvVS27U5sIcPTvWsARVKYDbCj qO5kjvhKDhcOcfP2zXBApD9WCP6gH4HtRcL7OoqOUQtRjFOLh34c7wvrCXr6KNOV HSFGKHHw/LRnYI4/jAWoyodnLCeGBu/tCDONWkNnT4mkKUGslGiVWQAN/fXopiXf ZANlguNsutHwJtlR5tvGcAcXbwzIMCciI9oTo1U8X6+E3BuUvfIPVggGObHDgi5Q et1Jpmv76ZAa5b7p/O4oJeBfnUUNEX8Ry6MMfM5kj39fQSbmhmsfRv6Tf7KzAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUa6/oznZYEgkS1m81fKR3qjLGzJQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxwMwDQYJKoZI hvcNAQELBQADggEBAMRCdu0WjgoXZOqjnseJM7p1JJg8ZXo6Avzpm0tcVp9NeMqE q3JXyQXLbvjxpY/kp47gxx1xC+40ub8OoSgtpOEVvMZ2PzV6Oa2m0qRlhZsK1Y26 qJi004GUmuYGM6i0LLby4i7MfUfjOq9vHq5XnkO6q2dYKF0uJxgU7uU0z6D4veky 4D+DxAC4+tKqmqAIzW3SU7eSbgTeTm4S1kdTY58rYTbEpntFKkAK3y7mn0o1v0WS Xpge5fF5z8ne0gFpFoeGvyXnpTLvRQDE6uza4Zx/UY8zYErEa0RcvaEWGZpzMjqV OR19OEMT5/7fB6+WCNgzQQn4rpUt9jKCL7vvH2U= -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:09 2026 by rpki-client