This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35362e302f32312d3234203d3e20383334.roa File: 352e3139392e35362e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: Ves5nsdxvHbo/oohphp+DbGl1TIfV1a7RkiSb9/w7fA= Subject key identifier: 94:A8:88:42:04:F4:BD:E4:69:8E:74:1C:06:AC:35:A9:02:69:0B:BC Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 11A85FBCE6EE0870F701775DC19727BA77BD0A4D Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35362e302f32312d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:22 +0000 ROA not before: Mon 08 Dec 2025 11:30:22 +0000 ROA not after: Mon 07 Dec 2026 11:35:22 +0000 asID: 834 IP address blocks: 5.199.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:a8:5f:bc:e6:ee:08:70:f7:01:77:5d:c1:97:27:ba:77:bd:0a:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:22 2025 GMT Not After : Dec 7 11:35:22 2026 GMT Subject: CN=94A8884204F4BDE4698E741C06AC35A902690BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:62:cc:cd:9a:06:ad:50:8a:18:57:95:61:18: be:42:6e:70:26:58:81:e9:5a:ac:5c:69:e2:7b:ae: ee:54:a7:d8:e2:c1:88:f2:2a:45:ee:58:5d:60:d9: 76:28:7d:e2:c6:25:e7:42:29:56:28:72:0f:37:fc: ae:73:e4:e4:4c:d8:de:b9:46:06:51:41:be:4a:74: 0a:fe:b2:08:c6:c5:a5:f1:bd:4c:ba:69:0c:b3:e1: 2c:c4:c8:e1:bf:3c:04:52:44:27:9d:c5:93:13:a5: 2a:66:05:a0:83:92:a3:59:ad:0a:c6:20:93:e4:f6: bd:70:15:7d:74:d0:a9:85:bc:20:e9:92:1b:29:98: 68:27:3d:50:13:77:72:15:66:a8:ba:4a:73:27:9a: 67:b9:b8:fb:b7:d1:d9:3a:03:af:ab:c1:54:33:65: 08:a2:3f:11:1d:e1:e8:1a:0a:3e:55:c6:79:dd:ff: d9:c4:db:f3:d7:ff:20:66:69:a5:30:1b:f5:ab:71: bb:ca:cc:ca:37:fd:96:40:13:9b:13:62:1b:d2:9c: 72:88:c6:e5:59:5f:7b:ef:03:82:73:75:c0:62:3f: d5:7a:2c:55:0c:d5:01:b3:ab:49:66:75:00:4a:32: ad:6e:85:79:2a:6d:85:a0:3a:d9:4c:80:d1:95:ac: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A8:88:42:04:F4:BD:E4:69:8E:74:1C:06:AC:35:A9:02:69:0B:BC X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35362e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.56.0/21 Signature Algorithm: sha256WithRSAEncryption c8:f3:f5:41:cc:fc:44:ec:e8:ff:f0:bc:79:7c:20:0a:18:41: 27:e4:06:e8:58:b0:e1:bd:16:17:0e:d2:b6:bf:63:7c:a2:fe: 61:d9:f8:23:fc:c3:61:19:94:e2:26:65:c6:0d:61:ff:99:80: 4c:93:2e:15:3f:70:82:62:29:0f:6f:56:96:f0:18:5a:d3:16: b3:35:5e:f3:9e:fe:d4:1e:90:5d:c5:c2:c3:48:67:cf:d3:f1: 40:60:d4:c1:80:c8:4f:d8:c2:f6:29:7a:d9:dd:e8:51:32:ca: 45:23:57:14:ab:88:8e:d1:d6:2f:15:16:87:33:8e:5e:4a:bf: 57:43:0d:ec:2d:64:98:06:e7:d3:2d:54:0c:e3:1b:ec:63:3b: c5:c8:e1:21:87:fb:31:dd:d0:13:56:20:6f:e6:66:31:b2:d1: 34:5c:9a:f4:8c:b7:ea:bc:ca:73:64:f7:39:ad:c1:1a:e3:4e: 9b:e4:5e:dd:57:e9:27:c3:01:27:58:74:f4:a4:96:57:4a:f1: 34:74:0c:77:5f:15:f9:8c:ef:ae:f9:bd:85:df:8d:27:2c:84: 7c:be:fc:81:84:84:be:af:05:2c:34:1d:f2:ce:0e:a4:9b:e6: 31:74:22:9b:a0:14:e8:ac:71:d2:64:31:d1:fa:f1:87:fc:da: c5:94:c7:7a -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUEahfvObuCHD3AXddwZcnune9Ck0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjJaFw0yNjEyMDcxMTM1MjJaMDMxMTAvBgNV BAMTKDk0QTg4ODQyMDRGNEJERTQ2OThFNzQxQzA2QUMzNUE5MDI2OTBCQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGYszNmgatUIoYV5VhGL5CbnAm WIHpWqxcaeJ7ru5Up9jiwYjyKkXuWF1g2XYofeLGJedCKVYocg83/K5z5ORM2N65 RgZRQb5KdAr+sgjGxaXxvUy6aQyz4SzEyOG/PARSRCedxZMTpSpmBaCDkqNZrQrG IJPk9r1wFX100KmFvCDpkhspmGgnPVATd3IVZqi6SnMnmme5uPu30dk6A6+rwVQz ZQiiPxEd4egaCj5Vxnnd/9nE2/PX/yBmaaUwG/WrcbvKzMo3/ZZAE5sTYhvSnHKI xuVZX3vvA4JzdcBiP9V6LFUM1QGzq0lmdQBKMq1uhXkqbYWgOtlMgNGVrOdbAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUlKiIQgT0veRpjnQcBqw1qQJpC7wwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzNjJl MzAyZjMyMzEyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAwXHODANBgkq hkiG9w0BAQsFAAOCAQEAyPP1Qcz8ROzo//C8eXwgChhBJ+QG6Fiw4b0WFw7Str9j fKL+Ydn4I/zDYRmU4iZlxg1h/5mATJMuFT9wgmIpD29WlvAYWtMWszVe857+1B6Q XcXCw0hnz9PxQGDUwYDIT9jC9il62d3oUTLKRSNXFKuIjtHWLxUWhzOOXkq/V0MN 7C1kmAbn0y1UDOMb7GM7xcjhIYf7Md3QE1Ygb+ZmMbLRNFya9Iy36rzKc2T3Oa3B GuNOm+Re3VfpJ8MBJ1h09KSWV0rxNHQMd18V+Yzvrvm9hd+NJyyEfL78gYSEvq8F LDQd8s4OpJvmMXQim6AU6Kxx0mQx0frxh/zaxZTHeg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:26:58 2025 by rpki-client