This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33362e302f32332d3234203d3e20383334.roa File: 352e3139392e33362e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: e6C7uP4SsF+Xwc+yfszvXNHVIvJ/eTTJStryEC703oI= Subject key identifier: 38:15:AA:A8:84:3D:A1:BC:60:84:41:65:1F:03:3D:03:EB:0E:45:D1 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 125A5DECA506A35C6CA05C86E17B45CC0E155BA9 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33362e302f32332d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 10:30:38 +0000 ROA not before: Fri 14 Nov 2025 10:25:38 +0000 ROA not after: Fri 13 Nov 2026 10:30:38 +0000 asID: 834 IP address blocks: 5.199.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5a:5d:ec:a5:06:a3:5c:6c:a0:5c:86:e1:7b:45:cc:0e:15:5b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:25:38 2025 GMT Not After : Nov 13 10:30:38 2026 GMT Subject: CN=3815AAA8843DA1BC608441651F033D03EB0E45D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:4b:69:c4:1d:cf:b7:9d:09:7c:ba:6e:89: b5:39:40:c9:58:94:0f:4a:21:ce:be:62:b0:b6:dc: d2:52:1b:12:47:14:3e:a9:42:fe:0d:e2:ae:79:39: 33:70:6b:5d:03:ac:c4:45:49:48:90:ed:f3:97:73: a5:cd:eb:8f:de:5e:b9:90:e7:4c:a2:ae:51:d7:09: de:2f:07:1f:24:d5:7a:c0:e6:29:d2:05:aa:03:bc: 7e:3e:dd:2f:6c:86:36:7b:58:8d:37:90:bc:7d:d6: 26:05:c6:23:24:94:c9:d3:f0:ce:f9:f6:84:57:04: a7:69:d9:07:9c:c9:1c:f1:90:fe:b3:f4:17:99:2e: 70:cf:d2:b5:98:a8:02:f6:c9:e2:d6:42:af:38:5d: 6b:73:c2:48:8d:b8:db:e6:0c:b7:c8:ee:8d:a7:d3: 18:99:ea:ab:9c:01:47:46:81:0a:22:7f:85:86:57: 4b:75:52:18:50:80:b4:76:64:ab:ee:9e:7f:9b:cf: 0d:5d:4f:18:8a:3c:f3:15:0e:6d:fa:c7:2e:51:67: 59:5c:66:2f:eb:72:39:97:b7:51:c0:c9:1c:6d:3a: ed:86:01:48:26:95:de:87:bb:c6:d4:d6:fd:91:bf: 22:97:3c:ad:64:b7:45:b6:87:d6:10:a2:f2:a5:f1: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:15:AA:A8:84:3D:A1:BC:60:84:41:65:1F:03:3D:03:EB:0E:45:D1 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33362e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.36.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:5c:0f:0b:b8:3f:24:05:f1:82:d5:2a:f4:0d:be:00:8e:27: c8:b0:ee:26:b9:f9:1c:8d:ee:eb:fe:85:16:9e:da:1f:bb:f4: a7:df:7c:71:98:db:ae:7f:8c:81:c2:bd:b4:f7:78:e5:c1:db: ab:52:8d:25:d1:1c:fe:56:11:4c:e6:19:05:e3:18:f0:14:37: 5b:b3:dd:67:41:9b:c3:e8:ff:18:00:03:e3:e2:cb:9c:eb:08: 5f:df:96:69:0f:e1:9e:13:53:28:9c:d5:8e:a4:0a:1c:f0:19: c4:52:c1:3f:32:99:35:0e:50:ee:60:a9:5b:da:2d:80:78:58: 6c:f9:2d:09:50:01:2d:e0:e7:cd:f7:51:81:b4:46:9c:09:02: 5e:51:2c:6f:42:93:dc:56:73:16:c5:51:d6:84:7a:a9:52:91: e2:e2:29:25:61:9a:f5:49:06:56:fb:5e:e7:f6:32:5b:de:fa: cc:5d:2d:76:06:62:52:ac:2b:43:e9:2d:e4:9c:c7:1a:a1:7e: 53:f3:48:f4:80:7d:d8:03:6c:80:8b:3f:92:77:35:5a:fa:fb: 89:61:f9:eb:17:31:6c:aa:6d:95:0f:ba:9a:6e:5f:2a:f8:6c: ab:4a:43:cc:2a:48:97:c6:32:ea:3b:3b:6e:c3:c3:cc:62:2a: 31:ff:47:0d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUElpd7KUGo1xsoFyG4XtFzA4VW6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDI1MzhaFw0yNjExMTMxMDMwMzhaMDMxMTAvBgNV BAMTKDM4MTVBQUE4ODQzREExQkM2MDg0NDE2NTFGMDMzRDAzRUIwRTQ1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD4ktpxB3Pt50JfLpuibU5QMlY lA9KIc6+YrC23NJSGxJHFD6pQv4N4q55OTNwa10DrMRFSUiQ7fOXc6XN64/eXrmQ 50yirlHXCd4vBx8k1XrA5inSBaoDvH4+3S9shjZ7WI03kLx91iYFxiMklMnT8M75 9oRXBKdp2QecyRzxkP6z9BeZLnDP0rWYqAL2yeLWQq84XWtzwkiNuNvmDLfI7o2n 0xiZ6qucAUdGgQoif4WGV0t1UhhQgLR2ZKvunn+bzw1dTxiKPPMVDm36xy5RZ1lc Zi/rcjmXt1HAyRxtOu2GAUgmld6Hu8bU1v2RvyKXPK1kt0W2h9YQovKl8bbfAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUOBWqqIQ9obxghEFlHwM9A+sORdEwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMzNjJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHJDANBgkq hkiG9w0BAQsFAAOCAQEAHVwPC7g/JAXxgtUq9A2+AI4nyLDuJrn5HI3u6/6FFp7a H7v0p998cZjbrn+MgcK9tPd45cHbq1KNJdEc/lYRTOYZBeMY8BQ3W7PdZ0Gbw+j/ GAAD4+LLnOsIX9+WaQ/hnhNTKJzVjqQKHPAZxFLBPzKZNQ5Q7mCpW9otgHhYbPkt CVABLeDnzfdRgbRGnAkCXlEsb0KT3FZzFsVR1oR6qVKR4uIpJWGa9UkGVvte5/Yy W976zF0tdgZiUqwrQ+kt5JzHGqF+U/NI9IB92ANsgIs/knc1Wvr7iWH56xcxbKpt lQ+6mm5fKvhsq0pDzCpIl8Yy6js7bsPDzGIqMf9HDQ== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:41 2025 by rpki-client