This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33302e302f32332d3234203d3e20383334.roa File: 352e3139392e33302e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: fPqruqouvMuWEJp1QghOeAtZOckYMcszE0YEHA6HLqY= Subject key identifier: AC:A5:8E:14:D0:40:88:F4:B8:E0:6C:86:C9:81:4C:00:00:BE:89:68 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1536136E7AA6843BF5495A890AF1FA5CEE7B2905 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33302e302f32332d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:23 +0000 ROA not before: Mon 08 Dec 2025 11:30:23 +0000 ROA not after: Mon 07 Dec 2026 11:35:23 +0000 asID: 834 IP address blocks: 5.199.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:36:13:6e:7a:a6:84:3b:f5:49:5a:89:0a:f1:fa:5c:ee:7b:29:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:23 2025 GMT Not After : Dec 7 11:35:23 2026 GMT Subject: CN=ACA58E14D04088F4B8E06C86C9814C0000BE8968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:72:77:23:cd:3a:a0:6d:27:eb:9d:4c:fd: 47:63:14:9a:90:e0:54:9a:75:aa:63:e2:83:87:fc: 41:2a:79:78:25:61:ff:6e:bb:cc:fc:48:85:ad:e5: c0:f5:21:14:6e:d8:14:dc:59:51:c4:75:eb:46:e5: 2a:5d:8a:f4:47:11:81:23:65:2c:97:ea:87:cb:59: ea:73:ad:5b:3b:c5:3d:92:d0:af:8f:16:52:3b:ac: 65:6b:08:bd:8f:2f:2e:d9:17:c7:60:c1:96:b6:61: e7:3a:49:a8:55:d6:89:c4:cc:b5:30:38:b8:54:2a: ff:39:c1:eb:30:be:05:2f:50:0a:fc:28:2b:ae:2f: f0:54:a8:6a:8a:a4:85:08:80:05:36:bd:89:b6:65: 02:ea:f6:00:87:98:df:d3:84:33:1e:75:fc:70:6f: 6c:ef:89:b4:5c:14:41:ea:92:96:04:57:47:81:0b: 5b:cb:65:40:24:03:c1:e9:d8:69:b6:00:db:8e:f7: 1e:c3:d0:73:24:8b:86:6d:19:ee:47:1d:ae:a9:4a: ac:10:4b:d1:cc:4b:aa:57:48:bd:ca:9f:35:4d:b6: 25:f3:de:ac:4e:f2:a9:0d:c8:11:e5:0a:33:bd:6d: cf:2b:8b:74:9d:d7:35:0c:f3:f9:43:7d:4b:77:3f: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:8E:14:D0:40:88:F4:B8:E0:6C:86:C9:81:4C:00:00:BE:89:68 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33302e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.30.0/23 Signature Algorithm: sha256WithRSAEncryption b5:e6:5e:86:72:3c:71:3f:ce:d9:07:2f:55:76:9a:5d:c1:82: 5b:10:6b:d0:d2:42:92:1c:36:89:4a:70:82:f4:55:d1:f4:ac: 99:aa:17:f6:d3:65:cb:6d:cb:db:04:2d:b3:38:74:7a:cc:4c: 73:f3:e2:0d:eb:dd:dd:5f:c6:8f:b5:db:bf:6f:02:aa:e0:1e: 5a:10:f9:e6:ee:7b:d9:07:42:bb:56:86:ef:78:2c:93:9f:bc: 95:32:c2:02:7e:36:da:39:5b:51:fd:09:8f:ea:92:2d:92:54: d9:97:ff:6f:46:80:31:94:5c:1a:bf:d4:66:82:37:2e:b5:38: d1:57:a6:9c:1a:ba:64:fc:ca:27:96:51:91:d5:ae:31:6e:47: fe:f5:c8:be:08:7a:65:14:a5:c0:a9:5e:de:34:67:e7:0f:97: 32:e5:5f:13:96:0a:9e:d9:91:0c:af:88:df:89:97:b2:4d:ab: 35:0f:04:93:46:81:d6:5e:5e:55:fa:8b:96:85:a0:1c:18:ba: 1c:d9:46:03:1c:1e:49:17:cc:c3:0b:2c:79:b1:bd:26:5d:2d: 25:26:b7:ae:3e:46:0f:c7:46:48:89:52:e6:3e:7e:77:84:9e: 23:35:e6:73:55:c1:0c:5d:4d:e9:53:a3:12:21:61:5c:33:67: fd:fc:36:1d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUFTYTbnqmhDv1SVqJCvH6XO57KQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjNaFw0yNjEyMDcxMTM1MjNaMDMxMTAvBgNV BAMTKEFDQTU4RTE0RDA0MDg4RjRCOEUwNkM4NkM5ODE0QzAwMDBCRTg5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8c3J3I806oG0n651M/UdjFJqQ 4FSadapj4oOH/EEqeXglYf9uu8z8SIWt5cD1IRRu2BTcWVHEdetG5SpdivRHEYEj ZSyX6ofLWepzrVs7xT2S0K+PFlI7rGVrCL2PLy7ZF8dgwZa2Yec6SahV1onEzLUw OLhUKv85weswvgUvUAr8KCuuL/BUqGqKpIUIgAU2vYm2ZQLq9gCHmN/ThDMedfxw b2zvibRcFEHqkpYEV0eBC1vLZUAkA8Hp2Gm2ANuO9x7D0HMki4ZtGe5HHa6pSqwQ S9HMS6pXSL3KnzVNtiXz3qxO8qkNyBHlCjO9bc8ri3Sd1zUM8/lDfUt3P7ldAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUrKWOFNBAiPS44GyGyYFMAAC+iWgwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMzMDJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHHjANBgkq hkiG9w0BAQsFAAOCAQEAteZehnI8cT/O2QcvVXaaXcGCWxBr0NJCkhw2iUpwgvRV 0fSsmaoX9tNly23L2wQtszh0esxMc/PiDevd3V/Gj7Xbv28CquAeWhD55u572QdC u1aG73gsk5+8lTLCAn422jlbUf0Jj+qSLZJU2Zf/b0aAMZRcGr/UZoI3LrU40Vem nBq6ZPzKJ5ZRkdWuMW5H/vXIvgh6ZRSlwKle3jRn5w+XMuVfE5YKntmRDK+I34mX sk2rNQ8Ek0aB1l5eVfqLloWgHBi6HNlGAxweSRfMwwssebG9Jl0tJSa3rj5GD8dG SIlS5j5+d4SeIzXmc1XBDF1N6VOjEiFhXDNn/fw2HQ== -----END CERTIFICATE-----Generated at Mon Dec 15 23:27:58 2025 by rpki-client