This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35302e302f32342d3234203d3e20383334.roa File: 352e3139392e35302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 4pvsvEQB4HPoy2O4fPwwlSKN7/cMm4rlPkc+wfQm4/8= Subject key identifier: 2F:D3:08:44:7B:AE:35:54:7C:AD:09:85:81:D2:C6:A0:56:7F:30:AC Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 1BA5E0D28AC6B89F77F2FE9C818B624524D951B8 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35302e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:23 +0000 ROA not before: Mon 08 Dec 2025 11:30:23 +0000 ROA not after: Mon 07 Dec 2026 11:35:23 +0000 asID: 834 IP address blocks: 5.199.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:a5:e0:d2:8a:c6:b8:9f:77:f2:fe:9c:81:8b:62:45:24:d9:51:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:23 2025 GMT Not After : Dec 7 11:35:23 2026 GMT Subject: CN=2FD308447BAE35547CAD098581D2C6A0567F30AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:e5:d5:9e:3f:25:9f:3c:fa:47:39:18:7f: 37:c5:f5:bd:ee:72:c8:29:ff:5f:f5:38:1c:1f:28: c3:b0:82:4c:e6:ca:3f:28:a3:91:53:f0:e2:90:1b: 22:ea:40:c3:71:32:d7:fc:d5:47:8f:6f:83:d2:0e: 10:c2:50:14:e0:d9:88:d7:83:26:b0:0d:cc:e4:75: f3:e1:1b:53:5e:59:a7:44:3f:fb:5b:35:3a:d5:04: d8:3b:2f:85:3c:b6:81:4c:30:fa:1e:65:46:f1:86: 9d:4d:37:4b:b3:71:43:9e:78:5e:18:75:ed:f0:5d: 87:d8:07:a7:6b:14:c8:15:b5:e0:d3:28:6d:22:e0: d3:2b:6f:11:92:7e:2c:15:18:80:09:b2:e7:0b:c4: 75:80:e8:86:9e:87:84:c4:ef:ba:39:5f:2a:ab:09: e1:5c:24:e3:23:e0:b7:05:bf:14:97:53:27:9f:7e: 64:3f:f8:e1:91:5d:1b:70:55:37:45:ba:fe:08:92: ca:a3:d1:30:3b:ad:fe:d6:74:b9:ad:81:e9:7f:4d: f8:33:35:c1:cd:f9:25:10:74:47:4f:9d:48:c3:87: 2b:82:75:05:c4:f9:2a:3b:b5:0a:75:90:ef:1e:ae: 86:49:23:b7:45:34:55:50:88:cd:7c:19:22:55:09: f4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D3:08:44:7B:AE:35:54:7C:AD:09:85:81:D2:C6:A0:56:7F:30:AC X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.50.0/24 Signature Algorithm: sha256WithRSAEncryption 35:4e:6e:09:79:cc:c3:aa:d4:86:f1:64:b1:9e:e5:d8:47:7f: 8e:92:a1:6c:0e:ec:d5:62:7f:48:05:be:dd:4b:50:ed:92:e4: 4e:73:94:68:d7:92:11:55:80:6c:5a:a1:a5:f8:68:4f:c5:2c: 9a:53:9c:7e:d7:83:12:17:10:af:5f:68:e8:e8:66:f4:fc:8c: e0:a8:97:ff:c8:76:2b:32:17:33:de:61:c6:a7:90:34:e1:a1: fa:90:95:74:a3:f1:89:2f:80:4c:5b:6b:b2:50:e2:29:02:2b: f3:37:b4:d4:ba:74:42:bf:0c:35:0e:f0:fe:7d:3b:10:0f:0c: 0e:70:66:f7:2c:13:7c:68:64:e7:66:5a:74:4a:3e:02:f9:23: 98:bb:c9:6b:11:a7:78:73:66:f6:e0:d6:67:63:80:14:ad:a9: 07:77:4d:1c:31:1d:2a:7c:69:0c:10:af:97:5c:dd:a7:49:71: b7:f9:0b:aa:d0:b1:23:16:b3:15:33:4d:05:ec:8c:20:53:df: ee:93:b4:17:2c:82:29:26:cc:a7:86:28:82:dd:a3:69:6d:a7: 99:d2:05:11:08:48:a9:f2:d7:64:02:a4:95:2e:a9:71:04:ab: b7:82:39:1d:55:26:00:75:09:b7:d0:fd:7d:9a:56:98:d0:71: ca:b3:fc:1d -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUG6Xg0orGuJ938v6cgYtiRSTZUbgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjNaFw0yNjEyMDcxMTM1MjNaMDMxMTAvBgNV BAMTKDJGRDMwODQ0N0JBRTM1NTQ3Q0FEMDk4NTgxRDJDNkEwNTY3RjMwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ3+XVnj8lnzz6RzkYfzfF9b3u csgp/1/1OBwfKMOwgkzmyj8oo5FT8OKQGyLqQMNxMtf81UePb4PSDhDCUBTg2YjX gyawDczkdfPhG1NeWadEP/tbNTrVBNg7L4U8toFMMPoeZUbxhp1NN0uzcUOeeF4Y de3wXYfYB6drFMgVteDTKG0i4NMrbxGSfiwVGIAJsucLxHWA6Iaeh4TE77o5Xyqr CeFcJOMj4LcFvxSXUyeffmQ/+OGRXRtwVTdFuv4Iksqj0TA7rf7WdLmtgel/Tfgz NcHN+SUQdEdPnUjDhyuCdQXE+So7tQp1kO8eroZJI7dFNFVQiM18GSJVCfTjAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUL9MIRHuuNVR8rQmFgdLGoFZ/MKwwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzMDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHMjANBgkq hkiG9w0BAQsFAAOCAQEANU5uCXnMw6rUhvFksZ7l2Ed/jpKhbA7s1WJ/SAW+3UtQ 7ZLkTnOUaNeSEVWAbFqhpfhoT8UsmlOcfteDEhcQr19o6Ohm9PyM4KiX/8h2KzIX M95hxqeQNOGh+pCVdKPxiS+ATFtrslDiKQIr8ze01Lp0Qr8MNQ7w/n07EA8MDnBm 9ywTfGhk52ZadEo+AvkjmLvJaxGneHNm9uDWZ2OAFK2pB3dNHDEdKnxpDBCvl1zd p0lxt/kLqtCxIxazFTNNBeyMIFPf7pO0FyyCKSbMp4Yogt2jaW2nmdIFEQhIqfLX ZAKklS6pcQSrt4I5HVUmAHUJt9D9fZpWmNBxyrP8HQ== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:01 2025 by rpki-client