This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33392e302f32342d3234203d3e20323035383836.roa File: 352e3139392e33392e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: G0dHN+CXIo4pUkp/sYtiWtOv7C+87LhSJVHOBYplH2Q= Subject key identifier: 86:68:B3:68:26:56:66:CE:7B:70:5A:D7:E9:5F:5C:3C:90:92:C0:44 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1A5415DD809A64C93A8222156F5B922C507CE42C Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33392e302f32342d3234203d3e20323035383836.roa Signing time: Fri 14 Nov 2025 10:22:56 +0000 ROA not before: Fri 14 Nov 2025 10:17:56 +0000 ROA not after: Fri 13 Nov 2026 10:22:56 +0000 asID: 205886 IP address blocks: 5.199.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:54:15:dd:80:9a:64:c9:3a:82:22:15:6f:5b:92:2c:50:7c:e4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:17:56 2025 GMT Not After : Nov 13 10:22:56 2026 GMT Subject: CN=8668B368265666CE7B705AD7E95F5C3C9092C044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1c:f5:da:4c:8e:ff:e5:26:07:71:d6:f1:a1: 7a:ae:a0:4d:5a:bf:9d:c4:e1:bc:7a:e8:15:1e:0e: 60:ba:33:60:bd:9e:bf:2a:92:d7:12:c1:45:8f:c4: 7b:b3:6f:e5:8d:f9:82:68:1f:ab:e8:52:46:b5:ea: 46:86:77:8e:84:84:33:e3:f9:69:bf:95:79:73:b9: c7:0c:6d:35:2a:b5:09:3b:fb:05:e4:e1:a3:b5:e9: d6:94:cc:f7:d9:06:7e:dd:61:d0:9e:76:35:ff:1f: 55:4d:28:78:37:b1:24:64:16:05:a8:9f:58:53:80: cd:6c:5b:7a:5c:7e:e7:99:41:44:d7:d7:b2:ba:51: fe:d0:95:ae:41:bd:63:62:c2:04:15:32:0d:af:8b: cb:0b:8a:83:64:06:75:5c:91:16:c7:a2:68:f7:31: 95:49:b7:08:3b:be:72:71:a2:fe:f0:2d:e3:35:f9: f5:b3:ef:c0:8a:ce:03:d3:ba:93:b4:19:5d:e8:a9: be:89:29:40:76:d2:3f:fd:63:62:b5:78:0e:3b:64: 92:07:e6:37:9a:c5:f0:e2:69:51:f1:08:4a:3b:7c: 62:32:a3:cb:36:a5:69:07:b7:03:00:6c:e1:45:83: 03:21:a0:10:9d:9d:16:74:0c:2a:91:09:5b:a1:32: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:68:B3:68:26:56:66:CE:7B:70:5A:D7:E9:5F:5C:3C:90:92:C0:44 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e33392e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.39.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:e5:64:d3:7c:25:96:bc:0f:42:ae:c9:2b:34:88:cc:42:88: d4:bd:a4:21:40:64:5d:6b:6e:ea:f0:cb:55:c8:ef:08:4a:c9: 24:83:98:bf:ef:6e:67:0f:70:7b:f4:1a:9a:3a:50:7d:30:a7: bf:4c:ca:7f:b0:da:74:04:4c:12:f2:31:30:43:1d:98:36:0a: 6a:13:c7:cf:9c:96:47:2e:0c:7f:a4:7c:42:f4:2e:c7:ec:f2: 7c:c5:68:24:9a:98:28:fb:84:f5:1a:23:93:e4:7e:6b:c7:bc: 2a:8b:34:1f:d4:8c:cb:37:e0:0b:e3:42:61:50:c8:7a:df:93: 70:bf:e2:48:fd:bc:f1:e2:1a:06:95:66:b5:78:ea:b5:c7:08: b5:6f:c0:c6:b9:c9:c9:f9:ed:fc:7e:ed:8a:94:9d:b2:ae:a6: de:ca:4d:7f:0b:1e:db:fc:66:f4:46:40:8b:7f:35:45:ed:d7: 25:b1:8c:61:6d:53:01:04:49:2d:31:ba:6a:27:cb:bc:18:26: f2:ac:78:3f:6a:01:1b:e4:b7:ab:8e:c3:29:5e:37:14:01:3a: 84:6e:88:a3:7e:b6:2a:29:2f:a1:74:90:69:55:ed:8e:4b:cb: 03:0c:a4:6e:e9:04:5b:6c:e1:34:0d:7a:f3:68:3e:56:f3:56: d5:b6:b5:c6 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUGlQV3YCaZMk6giIVb1uSLFB85CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDE3NTZaFw0yNjExMTMxMDIyNTZaMDMxMTAvBgNV BAMTKDg2NjhCMzY4MjY1NjY2Q0U3QjcwNUFEN0U5NUY1QzNDOTA5MkMwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChHPXaTI7/5SYHcdbxoXquoE1a v53E4bx66BUeDmC6M2C9nr8qktcSwUWPxHuzb+WN+YJoH6voUka16kaGd46EhDPj +Wm/lXlzuccMbTUqtQk7+wXk4aO16daUzPfZBn7dYdCedjX/H1VNKHg3sSRkFgWo n1hTgM1sW3pcfueZQUTX17K6Uf7Qla5BvWNiwgQVMg2vi8sLioNkBnVckRbHomj3 MZVJtwg7vnJxov7wLeM1+fWz78CKzgPTupO0GV3oqb6JKUB20j/9Y2K1eA47ZJIH 5jeaxfDiaVHxCEo7fGIyo8s2pWkHtwMAbOFFgwMhoBCdnRZ0DCqRCVuhMmVfAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUhmizaCZWZs57cFrX6V9cPJCSwEQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzMzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM4MzgzNi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH JzANBgkqhkiG9w0BAQsFAAOCAQEAnuVk03wllrwPQq7JKzSIzEKI1L2kIUBkXWtu 6vDLVcjvCErJJIOYv+9uZw9we/QamjpQfTCnv0zKf7DadARMEvIxMEMdmDYKahPH z5yWRy4Mf6R8QvQux+zyfMVoJJqYKPuE9Rojk+R+a8e8Kos0H9SMyzfgC+NCYVDI et+TcL/iSP288eIaBpVmtXjqtccItW/AxrnJyfnt/H7tipSdsq6m3spNfwse2/xm 9EZAi381Re3XJbGMYW1TAQRJLTG6aifLvBgm8qx4P2oBG+S3q47DKV43FAE6hG6I o362KikvoXSQaVXtjkvLAwykbukEW2zhNA1682g+VvNW1ba1xg== -----END CERTIFICATE-----Generated at Fri Nov 28 06:13:41 2025 by rpki-client