This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34352e302f32342d3234203d3e20383334.roa
File: 352e3139392e34352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: E5GLSdhiOTT+P7OEBtz6F0ACrsVLFh/MHLQkxtnGLhw=
Subject key identifier: FB:37:61:43:3D:FA:4F:96:A0:14:9C:5F:3F:C8:EC:32:A8:AF:54:D8
Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Certificate serial: 72F833F8842B20DFFD40ADFC7888FA0BF6325F42
Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34352e302f32342d3234203d3e20383334.roa
Signing time: Fri 06 Feb 2026 04:14:21 +0000
ROA not before: Fri 06 Feb 2026 04:09:21 +0000
ROA not after: Fri 05 Feb 2027 04:14:21 +0000
asID: 834
IP address blocks: 5.199.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft
rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 10:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:f8:33:f8:84:2b:20:df:fd:40:ad:fc:78:88:fa:0b:f6:32:5f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76
Validity
Not Before: Feb 6 04:09:21 2026 GMT
Not After : Feb 5 04:14:21 2027 GMT
Subject: CN=FB3761433DFA4F96A0149C5F3FC8EC32A8AF54D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:fb:c4:8d:c0:ed:ed:c3:f4:33:2d:23:29:
63:0a:be:82:c5:28:61:97:ea:75:01:ea:06:2b:5d:
0b:b6:0c:39:81:88:e6:48:4b:c7:00:2e:05:81:cd:
ec:a2:83:bb:8d:a2:70:80:6a:44:a8:6a:28:44:71:
a7:b9:8f:9a:08:d5:ed:3b:38:60:bc:93:52:b7:47:
6f:3f:85:18:01:bb:71:cd:74:d0:7a:b0:74:1f:37:
6b:22:2b:35:30:b2:d3:c4:91:59:ca:49:d3:e0:ab:
cf:01:35:f7:86:25:07:b4:a7:89:ca:60:19:43:ff:
bf:83:c5:0e:78:eb:b7:d6:7e:80:45:63:be:0e:a9:
68:75:0f:ed:64:db:f3:ac:1e:96:cf:83:84:a1:bb:
ee:37:74:64:a9:a6:d4:7f:3f:de:e9:97:a6:a6:bd:
af:d2:8d:62:91:ab:7b:71:b9:53:dc:b0:88:a4:65:
8b:5d:23:9e:cb:4f:98:8b:f0:d3:9e:39:c9:88:ec:
99:78:7a:a2:d0:d5:68:2b:0d:7c:7e:21:8c:a0:10:
08:a0:09:e1:72:69:9b:c2:ae:81:85:30:03:df:86:
54:f2:47:85:0e:9a:9b:e9:ac:44:fc:e8:3c:d1:23:
aa:8b:7f:7c:af:af:13:bb:4b:df:07:1a:f5:aa:30:
98:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:61:43:3D:FA:4F:96:A0:14:9C:5F:3F:C8:EC:32:A8:AF:54:D8
X509v3 Authority Key Identifier:
keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.45.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8d:d8:72:c4:58:c5:ec:ee:cf:b9:52:52:cb:f7:aa:1e:bd:
4d:57:8f:fb:ee:88:e9:f0:77:c1:c7:51:d3:d9:fd:1e:35:b7:
55:0b:24:1c:8e:7a:8a:9c:e7:e2:d5:9a:30:7c:71:6a:03:af:
fc:9c:11:f0:40:4f:3b:ff:62:20:a8:0e:dd:96:82:d7:e1:70:
ea:dd:b2:34:cc:bc:71:98:7c:86:f1:7c:04:cd:02:7a:47:44:
a8:88:e5:f0:ba:cc:42:90:07:55:78:ad:4d:72:ef:58:7c:aa:
a7:5b:41:ec:84:1a:23:2b:2f:af:9a:14:83:6e:25:15:00:31:
e5:19:84:3e:b5:73:4f:b6:20:f8:ae:d4:8a:18:f9:cc:78:1b:
50:ee:a8:e3:5a:9c:43:6b:3f:4f:0f:f5:63:89:11:bb:dd:4a:
94:5e:d0:5f:17:fb:b7:a8:35:4c:60:a2:e3:a9:31:57:a6:78:
71:30:36:dd:09:3b:ca:18:0c:16:71:17:ed:78:e8:96:0f:44:
2f:d6:2c:d2:f4:e1:be:d2:32:ef:55:8f:0e:c7:28:df:86:07:
1d:30:7f:b3:39:39:e5:75:ea:4d:76:e6:ea:cb:2a:af:1b:d5:
04:5f:b8:41:75:52:7d:86:5d:d5:60:03:00:55:80:da:2c:61:
cc:14:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:56 2026 by rpki-client