This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34302e302f32322d3234203d3e20383334.roa File: 352e3139392e34302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: b4WNSgPJ+dujsy6f+nn3iOru1vonTXKAYcyhtv7+MAQ= Subject key identifier: 2C:5F:D6:77:C2:92:39:7D:48:17:6E:EC:BE:48:92:B1:49:57:82:C4 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 28A552A72A021F9B6CB4207A69E36A4DF6EA219C Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34302e302f32322d3234203d3e20383334.roa Signing time: Fri 06 Feb 2026 04:14:21 +0000 ROA not before: Fri 06 Feb 2026 04:09:21 +0000 ROA not after: Fri 05 Feb 2027 04:14:21 +0000 asID: 834 IP address blocks: 5.199.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a5:52:a7:2a:02:1f:9b:6c:b4:20:7a:69:e3:6a:4d:f6:ea:21:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Feb 6 04:09:21 2026 GMT Not After : Feb 5 04:14:21 2027 GMT Subject: CN=2C5FD677C292397D48176EECBE4892B1495782C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:09:77:c7:17:87:8d:26:c9:85:d2:5a:d4: 35:94:0b:8c:0e:83:50:d9:85:cb:69:f8:b6:29:ef: b2:58:c2:4d:21:6d:38:57:dd:6c:69:74:12:de:4c: 90:e7:6e:8e:27:2e:6b:b9:f7:7c:3a:a2:29:f1:b3: cf:04:b0:49:f5:a6:6a:d2:82:9c:5f:11:c3:f8:9d: 57:f4:bc:02:b2:73:e3:db:80:a7:2f:35:02:6a:4f: 94:9e:75:43:db:cf:ad:fe:c7:fe:2a:aa:c2:2d:8c: 9f:a7:87:7d:b8:21:41:72:ce:c3:45:07:60:b5:46: 73:b1:76:16:58:3f:96:61:83:8c:6a:c9:e0:e0:07: d2:2a:81:81:6c:93:4d:5a:b0:3f:c5:da:64:8f:8a: 58:b3:ce:5d:0c:76:60:ad:fe:da:2a:9e:e5:27:bb: e6:8d:a5:81:ff:52:df:b0:8c:5f:3b:eb:19:6f:78: 4a:b2:05:31:67:d0:02:0e:0d:0b:5e:db:c6:7e:f0: 96:48:6c:72:c6:3e:a5:ca:00:4c:03:68:5c:d2:98: 86:00:5b:7c:82:21:3a:85:3e:b6:d2:91:71:76:80: 77:f0:28:fc:a9:ca:d2:18:14:3d:cf:73:1c:65:35: 4c:7f:f4:c5:aa:26:1d:1a:3a:c6:23:94:50:68:0c: 88:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5F:D6:77:C2:92:39:7D:48:17:6E:EC:BE:48:92:B1:49:57:82:C4 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.40.0/22 Signature Algorithm: sha256WithRSAEncryption dd:7f:e9:af:06:19:a5:93:9c:72:4c:28:71:f7:5a:b0:0b:de: a0:fe:ba:5c:e6:45:60:17:fd:66:e1:3a:18:a2:84:79:a5:ba: fb:a4:1b:08:5f:d2:54:82:60:08:85:d8:ce:03:5a:57:2d:9d: 49:44:ad:d8:6f:79:5b:63:0e:fc:ce:0a:7a:a4:37:92:3b:5c: f6:c2:e4:6c:87:93:32:73:80:e5:41:9a:6c:16:e5:b7:c9:9d: 44:8f:aa:2f:fe:1c:9c:76:6a:59:f6:1d:4b:ea:ab:7b:74:f9: 65:1d:93:a6:42:7b:bc:54:93:25:25:7a:cf:84:99:95:25:d0: 0d:1a:ed:c3:ce:2b:ce:01:24:c8:50:54:0e:42:1e:d7:7f:6d: d7:fd:9c:a6:cd:a8:35:38:2d:fa:d5:eb:8c:bb:e6:1f:47:26: 88:53:da:03:7e:88:88:dc:84:4d:99:d1:d2:98:48:c9:a8:a4: 89:67:24:52:7b:52:1f:05:c4:ab:55:c4:4a:8c:dd:f2:1c:7d: c5:2c:72:1e:77:f2:1c:1f:44:e1:6c:de:3f:62:52:07:e1:f9: 58:7b:59:3f:8f:d0:24:98:5c:24:79:6a:a4:1f:8e:ea:83:3e: 70:1f:68:b9:51:8c:e5:de:5e:ca:0d:41:e1:25:82:09:94:e5: 0b:ba:2d:fd -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUKKVSpyoCH5tstCB6aeNqTfbqIZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAyMDYwNDA5MjFaFw0yNzAyMDUwNDE0MjFaMDMxMTAvBgNV BAMTKDJDNUZENjc3QzI5MjM5N0Q0ODE3NkVFQ0JFNDg5MkIxNDk1NzgyQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohgl3xxeHjSbJhdJa1DWUC4wO g1DZhctp+LYp77JYwk0hbThX3WxpdBLeTJDnbo4nLmu593w6oinxs88EsEn1pmrS gpxfEcP4nVf0vAKyc+PbgKcvNQJqT5SedUPbz63+x/4qqsItjJ+nh324IUFyzsNF B2C1RnOxdhZYP5Zhg4xqyeDgB9IqgYFsk01asD/F2mSPilizzl0MdmCt/toqnuUn u+aNpYH/Ut+wjF876xlveEqyBTFn0AIODQte28Z+8JZIbHLGPqXKAEwDaFzSmIYA W3yCITqFPrbSkXF2gHfwKPypytIYFD3PcxxlNUx/9MWqJh0aOsYjlFBoDIhXAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQULF/Wd8KSOX1IF27svkiSsUlXgsQwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzQzMDJl MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgXHKDANBgkq hkiG9w0BAQsFAAOCAQEA3X/prwYZpZOcckwocfdasAveoP66XOZFYBf9ZuE6GKKE eaW6+6QbCF/SVIJgCIXYzgNaVy2dSUSt2G95W2MO/M4KeqQ3kjtc9sLkbIeTMnOA 5UGabBblt8mdRI+qL/4cnHZqWfYdS+qre3T5ZR2TpkJ7vFSTJSV6z4SZlSXQDRrt w84rzgEkyFBUDkIe139t1/2cps2oNTgt+tXrjLvmH0cmiFPaA36IiNyETZnR0phI yaikiWckUntSHwXEq1XESozd8hx9xSxyHnfyHB9E4WzeP2JSB+H5WHtZP4/QJJhc JHlqpB+O6oM+cB9ouVGM5d5eyg1B4SWCCZTlC7ot/Q== -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:55 2026 by rpki-client