This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33382e302f32342d3234203d3e20383334.roa File: 352e3139392e33382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 0362QmgMfp+pm0iSet6T13/ixlJ04OKieIWwibbcZkk= Subject key identifier: EB:D2:8C:CE:C8:59:9F:80:C3:03:6A:B3:77:36:79:2A:54:30:92:E5 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 07FC777F6E3CA6818898C4FAB3AE04BF0458B749 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33382e302f32342d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 10:30:38 +0000 ROA not before: Fri 14 Nov 2025 10:25:38 +0000 ROA not after: Fri 13 Nov 2026 10:30:38 +0000 asID: 834 IP address blocks: 5.199.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fc:77:7f:6e:3c:a6:81:88:98:c4:fa:b3:ae:04:bf:04:58:b7:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:25:38 2025 GMT Not After : Nov 13 10:30:38 2026 GMT Subject: CN=EBD28CCEC8599F80C3036AB37736792A543092E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d6:b6:34:db:c7:dd:c6:f9:97:5a:d0:48:b5: 52:f7:03:12:92:cf:4f:f6:bf:72:92:06:5f:07:5f: 04:4b:3b:4c:09:68:2c:38:a9:22:00:19:a7:7a:c8: 68:49:80:66:bb:22:26:1b:28:20:f0:3c:4a:d4:69: d4:f1:da:89:6d:9f:09:ed:5b:f7:cf:79:8c:10:7c: 33:80:9f:54:3e:0b:b2:6f:b2:d2:c8:bf:38:74:31: 42:e5:14:3e:3f:d0:84:89:09:28:42:0a:0d:48:5e: 2e:49:6a:6e:26:e9:a3:07:e5:88:b7:c6:ac:6e:c0: 43:6c:93:85:77:78:0f:d6:62:dd:73:72:93:a8:46: 10:b0:e6:53:6a:70:ad:a2:23:a1:0a:d7:09:56:5e: 3b:bf:e0:eb:1f:d1:cf:d3:e3:6c:5c:a0:3f:5e:08: 90:19:9e:df:eb:24:a5:fc:a6:cb:c9:9c:f5:8d:91: f7:a1:8d:b8:73:9a:73:73:86:d7:ef:fd:bd:cf:37: 19:96:b8:1e:45:4f:2e:f9:bf:3c:e2:95:7c:6e:1b: 04:4f:5d:6d:2c:d6:24:8d:2c:64:a5:dc:69:ba:df: 2f:43:9f:87:73:ff:9e:e4:47:4e:7e:3a:cb:55:94: 3d:06:40:d4:5e:73:6c:d4:29:64:d8:bd:de:30:3c: d9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D2:8C:CE:C8:59:9F:80:C3:03:6A:B3:77:36:79:2A:54:30:92:E5 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.38.0/24 Signature Algorithm: sha256WithRSAEncryption 68:70:1c:fd:82:e8:36:cb:97:7f:43:0c:a0:6d:43:54:7d:66: 32:9f:1b:a0:17:6d:f1:8f:de:93:bf:d7:d6:84:6b:8f:92:ad: 49:10:e5:72:dd:e4:ed:a9:25:b3:b4:46:72:0c:8b:ff:f9:20: 24:97:b1:64:08:92:71:a3:50:26:de:38:8d:58:25:e9:3b:ff: 50:88:ce:5f:f3:8c:df:d2:9f:1e:24:cb:e7:b5:ff:9b:f4:07: 62:1a:66:ed:46:60:41:c5:83:24:1f:d7:5f:46:db:a8:cf:44: de:ae:31:22:d9:d5:d3:31:04:67:ed:fd:49:d8:7a:8b:2e:2f: 2c:4a:07:36:81:de:5c:a1:40:24:bf:55:cf:27:3b:0e:3c:9b: 3e:1f:f7:d6:ad:c3:70:16:f0:d7:ce:20:9c:39:27:7d:2f:23: 99:d2:ab:88:7c:1a:ad:1e:e4:31:66:17:e8:95:93:2f:dc:67: e9:75:aa:c9:5e:97:78:be:f0:16:02:4f:f4:e8:52:f3:e1:05: c7:86:a4:72:b5:28:0b:90:4f:8b:fb:a4:31:4e:46:06:6f:d7: d8:2f:8d:a2:65:a5:31:5f:79:b0:fd:68:28:7d:3b:7b:a8:89: ea:4e:7f:67:66:43:a7:ac:ac:0d:fb:b7:a5:a2:0b:34:38:0d: 49:fd:8f:98 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUB/x3f248poGImMT6s64EvwRYt0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDI1MzhaFw0yNjExMTMxMDMwMzhaMDMxMTAvBgNV BAMTKEVCRDI4Q0NFQzg1OTlGODBDMzAzNkFCMzc3MzY3OTJBNTQzMDkyRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR1rY028fdxvmXWtBItVL3AxKS z0/2v3KSBl8HXwRLO0wJaCw4qSIAGad6yGhJgGa7IiYbKCDwPErUadTx2oltnwnt W/fPeYwQfDOAn1Q+C7JvstLIvzh0MULlFD4/0ISJCShCCg1IXi5Jam4m6aMH5Yi3 xqxuwENsk4V3eA/WYt1zcpOoRhCw5lNqcK2iI6EK1wlWXju/4Osf0c/T42xcoD9e CJAZnt/rJKX8psvJnPWNkfehjbhzmnNzhtfv/b3PNxmWuB5FTy75vzzilXxuGwRP XW0s1iSNLGSl3Gm63y9Dn4dz/57kR05+OstVlD0GQNRec2zUKWTYvd4wPNkhAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQU69KMzshZn4DDA2qzdzZ5KlQwkuUwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMzODJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHJjANBgkq hkiG9w0BAQsFAAOCAQEAaHAc/YLoNsuXf0MMoG1DVH1mMp8boBdt8Y/ek7/X1oRr j5KtSRDlct3k7akls7RGcgyL//kgJJexZAiScaNQJt44jVgl6Tv/UIjOX/OM39Kf HiTL57X/m/QHYhpm7UZgQcWDJB/XX0bbqM9E3q4xItnV0zEEZ+39Sdh6iy4vLEoH NoHeXKFAJL9Vzyc7DjybPh/31q3DcBbw184gnDknfS8jmdKriHwarR7kMWYX6JWT L9xn6XWqyV6XeL7wFgJP9OhS8+EFx4akcrUoC5BPi/ukMU5GBm/X2C+NomWlMV95 sP1oKH07e6iJ6k5/Z2ZDp6ysDfu3paILNDgNSf2PmA== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:41 2025 by rpki-client