This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35362e302f32342d3234203d3e2039343537.roa File: 352e3139392e35362e302f32342d3234203d3e2039343537.roa (raw, json) Hash identifier: jeFvPrZZlnOXcQ0YYF2wj9rjOfmik7mDuulOexJBPMg= Subject key identifier: 76:B7:CA:52:E3:83:3A:6F:DB:F9:22:68:E3:E4:61:7B:22:F0:43:52 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 04F7FA27C27A40874EE489CD964EB825A8D495E8 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35362e302f32342d3234203d3e2039343537.roa Signing time: Thu 08 Jan 2026 15:10:36 +0000 ROA not before: Thu 08 Jan 2026 15:05:36 +0000 ROA not after: Thu 07 Jan 2027 15:10:36 +0000 asID: 9457 IP address blocks: 5.199.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:f7:fa:27:c2:7a:40:87:4e:e4:89:cd:96:4e:b8:25:a8:d4:95:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 8 15:05:36 2026 GMT Not After : Jan 7 15:10:36 2027 GMT Subject: CN=76B7CA52E3833A6FDBF92268E3E4617B22F04352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:8d:40:32:87:30:c9:0f:04:5d:42:69:80: 9a:08:f2:8a:81:61:ca:c1:2a:e9:0a:0d:8c:64:4f: f5:f3:ed:54:7b:1c:e8:4e:f3:25:39:88:a2:32:d8: bb:5d:4e:ac:61:ff:d6:12:60:41:2b:e8:ae:9c:ea: b9:b6:f3:97:fe:c7:22:ba:1a:bb:2b:15:2e:65:2d: 02:7f:83:41:bf:5f:0f:31:b8:31:8f:fe:b5:95:54: 60:d8:f1:89:ea:66:d2:d5:0e:b8:d5:6c:f1:1f:21: 71:92:0c:0e:7f:19:3e:5f:26:30:40:fe:7d:af:70: 1d:5a:31:02:8d:63:b2:58:cc:df:31:5d:36:9f:3b: 9c:d0:f4:c8:a4:c9:94:6f:1b:18:81:52:a1:5d:64: 54:54:fc:be:cf:7c:e9:3d:50:1c:88:ef:6a:b8:de: f7:52:5c:a9:76:07:4b:15:b2:55:cb:79:ef:05:3a: 62:93:d6:7c:ca:3f:d4:4e:ee:0f:70:2e:ae:09:fb: ca:41:5a:2e:3d:8d:cd:52:bf:be:c4:95:be:e9:b5: e4:de:f6:97:0b:10:b3:05:97:b0:fa:c8:79:cb:29: 80:ae:e7:9a:f0:2c:50:b3:b5:2e:71:97:6b:57:1e: e9:50:89:51:21:96:3b:c5:e1:29:da:b2:ad:23:10: 68:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B7:CA:52:E3:83:3A:6F:DB:F9:22:68:E3:E4:61:7B:22:F0:43:52 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35362e302f32342d3234203d3e2039343537.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.56.0/24 Signature Algorithm: sha256WithRSAEncryption 27:eb:fb:a3:3c:c9:09:d8:f8:4c:95:ee:c4:7d:16:ba:92:23: 9a:f8:69:05:7c:ef:e1:5f:8b:93:ae:60:7f:19:68:14:76:36: 65:ac:37:61:cb:e8:59:e0:50:53:6c:17:1b:5d:5f:3c:f5:1c: 31:fb:78:a8:69:d6:40:55:97:7b:a4:21:98:b0:51:bc:ca:6f: ff:42:1b:d0:ba:01:67:39:93:01:08:1b:c3:a2:b8:85:aa:34: d0:97:fd:6a:b4:69:e3:4e:7a:64:d5:48:b5:79:93:e3:a6:5a: b9:dd:62:27:02:6c:70:2e:63:2b:f9:f5:e0:ab:30:6e:f3:1f: 6d:18:40:6f:2a:91:58:4f:68:47:06:fc:bb:3e:ec:96:56:ab: 0c:55:2e:7b:d0:7d:ff:15:86:e9:b5:9d:6f:df:95:ad:36:e8: e9:ed:1d:a6:b0:f3:2a:80:0e:6b:0d:f0:a8:90:9b:8e:0a:a9: 6d:eb:f4:ce:e2:fc:8a:8b:15:83:39:2b:c3:6d:1b:25:d5:76: 29:39:48:ca:0e:72:0d:07:40:09:1c:47:07:03:35:c1:17:8d: 47:29:aa:8b:0a:33:1c:76:bd:05:44:2e:db:cf:80:90:8e:87: ad:1e:b8:28:ce:2e:3d:31:23:bb:c3:08:15:0d:b4:da:68:45: 62:a0:ad:31 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUBPf6J8J6QIdO5InNlk64JajUlegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDgxNTA1MzZaFw0yNzAxMDcxNTEwMzZaMDMxMTAvBgNV BAMTKDc2QjdDQTUyRTM4MzNBNkZEQkY5MjI2OEUzRTQ2MTdCMjJGMDQzNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqV41AMocwyQ8EXUJpgJoI8oqB YcrBKukKDYxkT/Xz7VR7HOhO8yU5iKIy2LtdTqxh/9YSYEEr6K6c6rm285f+xyK6 GrsrFS5lLQJ/g0G/Xw8xuDGP/rWVVGDY8YnqZtLVDrjVbPEfIXGSDA5/GT5fJjBA /n2vcB1aMQKNY7JYzN8xXTafO5zQ9MikyZRvGxiBUqFdZFRU/L7PfOk9UByI72q4 3vdSXKl2B0sVslXLee8FOmKT1nzKP9RO7g9wLq4J+8pBWi49jc1Sv77Elb7pteTe 9pcLELMFl7D6yHnLKYCu55rwLFCztS5xl2tXHulQiVEhljvF4Snasq0jEGhvAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUdrfKUuODOm/b+SJo4+RheyLwQ1IwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzNjJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzQzNTM3LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABcc4MA0G CSqGSIb3DQEBCwUAA4IBAQAn6/ujPMkJ2PhMle7EfRa6kiOa+GkFfO/hX4uTrmB/ GWgUdjZlrDdhy+hZ4FBTbBcbXV889Rwx+3ioadZAVZd7pCGYsFG8ym//QhvQugFn OZMBCBvDoriFqjTQl/1qtGnjTnpk1Ui1eZPjplq53WInAmxwLmMr+fXgqzBu8x9t GEBvKpFYT2hHBvy7PuyWVqsMVS570H3/FYbptZ1v35WtNujp7R2msPMqgA5rDfCo kJuOCqlt6/TO4vyKixWDOSvDbRsl1XYpOUjKDnINB0AJHEcHAzXBF41HKaqLCjMc dr0FRC7bz4CQjoetHrgozi49MSO7wwgVDbTaaEVioK0x -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:31 2026 by rpki-client