This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32302d3234203d3e20383334.roa File: 352e3139392e34382e302f32302d3234203d3e20383334.roa (raw, json) Hash identifier: KQYYTeYecaAjP4TsoYrv2gNBDDrXQX1i6HAjqN6cgos= Subject key identifier: 93:1C:29:2D:B3:0A:E9:11:F6:8C:45:FB:F9:FF:CC:57:68:53:9E:CD Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 7418EF69B9A096F7E5BD94A91B2FAF2404194BA8 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32302d3234203d3e20383334.roa Signing time: Fri 14 Nov 2025 10:30:38 +0000 ROA not before: Fri 14 Nov 2025 10:25:38 +0000 ROA not after: Fri 13 Nov 2026 10:30:38 +0000 asID: 834 IP address blocks: 5.199.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:18:ef:69:b9:a0:96:f7:e5:bd:94:a9:1b:2f:af:24:04:19:4b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 14 10:25:38 2025 GMT Not After : Nov 13 10:30:38 2026 GMT Subject: CN=931C292DB30AE911F68C45FBF9FFCC5768539ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:d2:5d:51:8f:11:4b:64:4a:d3:2c:48:db: 0f:57:f1:58:3e:30:9a:f9:1d:ac:e5:6d:cb:37:a1: a6:a8:0e:4a:ce:85:ca:8c:2e:84:e2:cc:ef:bd:1c: 91:17:88:fa:a1:56:45:e6:1a:19:b2:a4:b6:4b:e8: c0:2d:7b:3a:19:c8:92:88:80:b3:8f:ea:2f:91:26: ce:02:22:b9:5e:27:4a:a9:6a:81:13:78:94:df:89: 6f:9c:dd:61:de:23:7c:0a:78:05:78:b6:fb:4b:1c: 5e:9c:95:18:18:a6:95:bf:2e:a2:2b:0b:d8:90:6b: cb:d2:ee:35:cd:04:97:76:43:1e:01:a3:d9:60:45: 6e:5d:20:04:16:54:36:58:40:4c:3c:16:42:00:4d: 2d:d7:c8:46:8c:20:b3:53:4a:8a:59:ef:3b:99:6b: 06:a5:9d:0b:91:3c:63:7c:bc:07:5d:8c:ee:32:19: fb:5b:24:b8:bb:30:f4:0c:e4:b5:15:e6:3e:b2:1e: 40:90:f3:a5:fa:21:7c:5a:c7:ba:6b:fc:d7:fe:68: be:04:51:82:b2:c7:6b:db:da:f4:56:3e:ec:69:f3: c1:42:03:e2:dd:cf:9f:f2:ce:ec:6a:67:8a:26:69: 24:d1:5b:e0:f0:d4:3a:da:61:57:5b:a8:3d:b1:50: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1C:29:2D:B3:0A:E9:11:F6:8C:45:FB:F9:FF:CC:57:68:53:9E:CD X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32302d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.48.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:18:1f:e0:54:bc:d1:5f:7b:3d:39:9c:9b:42:8e:f7:4c:2c: e5:2b:22:72:77:39:d5:98:0e:bb:59:5d:2b:6c:84:9e:a1:c0: a4:02:13:be:52:cb:52:42:97:1e:8e:79:e9:70:cb:9c:ff:a3: e7:78:01:e2:c6:41:05:99:22:fa:a2:4e:a4:58:00:9a:b0:58: 4a:97:0d:3f:86:a0:85:87:8e:e7:b6:64:d8:55:38:02:9b:9a: 23:0e:bc:b9:64:67:17:5d:16:ea:8d:f1:9c:67:cf:a7:a4:04: 43:ca:d7:27:ff:6f:47:d5:e5:f2:43:21:68:22:5c:1f:ed:c0: 90:8f:de:9a:ef:f0:55:d4:41:23:26:17:ea:fc:97:42:8d:45: db:6a:40:a0:ce:41:8e:12:b8:a3:d7:f4:39:16:01:7a:df:b1: 95:fb:04:4a:ca:cc:da:c0:9e:91:ea:f4:3d:6b:92:ce:a0:0a: 21:94:99:ef:0d:c5:41:83:b2:c4:e8:e8:2e:5d:0c:57:e2:f6: 8c:50:2c:ea:7a:c5:b6:5d:2c:8a:7f:24:9c:37:57:5a:7a:a4: a0:94:79:61:6d:64:8e:65:72:24:e7:79:3f:5a:1e:07:e4:90: ae:ab:c4:97:4c:4a:91:9d:8b:c1:ad:08:52:5f:bf:33:93:32: e2:50:70:77 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUdBjvabmglvflvZSpGy+vJAQZS6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMTQxMDI1MzhaFw0yNjExMTMxMDMwMzhaMDMxMTAvBgNV BAMTKDkzMUMyOTJEQjMwQUU5MTFGNjhDNDVGQkY5RkZDQzU3Njg1MzlFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzl9JdUY8RS2RK0yxI2w9X8Vg+ MJr5Hazlbcs3oaaoDkrOhcqMLoTizO+9HJEXiPqhVkXmGhmypLZL6MAtezoZyJKI gLOP6i+RJs4CIrleJ0qpaoETeJTfiW+c3WHeI3wKeAV4tvtLHF6clRgYppW/LqIr C9iQa8vS7jXNBJd2Qx4Bo9lgRW5dIAQWVDZYQEw8FkIATS3XyEaMILNTSopZ7zuZ awalnQuRPGN8vAddjO4yGftbJLi7MPQM5LUV5j6yHkCQ86X6IXxax7pr/Nf+aL4E UYKyx2vb2vRWPuxp88FCA+Ldz5/yzuxqZ4omaSTRW+Dw1DraYVdbqD2xUPcbAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUkxwpLbMK6RH2jEX7+f/MV2hTns0wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzQzODJl MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBAXHMDANBgkq hkiG9w0BAQsFAAOCAQEAjhgf4FS80V97PTmcm0KO90ws5Ssicnc51ZgOu1ldK2yE nqHApAITvlLLUkKXHo556XDLnP+j53gB4sZBBZki+qJOpFgAmrBYSpcNP4aghYeO 57Zk2FU4ApuaIw68uWRnF10W6o3xnGfPp6QEQ8rXJ/9vR9Xl8kMhaCJcH+3AkI/e mu/wVdRBIyYX6vyXQo1F22pAoM5BjhK4o9f0ORYBet+xlfsESsrM2sCeker0PWuS zqAKIZSZ7w3FQYOyxOjoLl0MV+L2jFAs6nrFtl0sin8knDdXWnqkoJR5YW1kjmVy JOd5P1oeB+SQrqvEl0xKkZ2Lwa0IUl+/M5My4lBwdw== -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:43 2025 by rpki-client