This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35372e302f32342d3234203d3e20383334.roa File: 352e3139392e35372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: rCo+A1qjsNQbFaYplyy+LHgKA18IbzpEJOpvqgcvHf0= Subject key identifier: A7:83:36:91:67:30:12:6A:DF:55:A4:F8:F5:20:09:4F:D8:CA:BD:A6 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 6E6F05371C9D9758056363F2E9353C82EB3CA857 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35372e302f32342d3234203d3e20383334.roa Signing time: Thu 08 Jan 2026 15:11:45 +0000 ROA not before: Thu 08 Jan 2026 15:06:45 +0000 ROA not after: Thu 07 Jan 2027 15:11:45 +0000 asID: 834 IP address blocks: 5.199.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:6f:05:37:1c:9d:97:58:05:63:63:f2:e9:35:3c:82:eb:3c:a8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 8 15:06:45 2026 GMT Not After : Jan 7 15:11:45 2027 GMT Subject: CN=A78336916730126ADF55A4F8F520094FD8CABDA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:26:79:41:27:97:28:f9:2e:88:ee:78:df:1d: ed:6f:b9:85:74:cf:c1:fe:58:0a:9f:76:42:bb:43: 2f:bb:f4:93:cd:c0:cf:10:ed:88:89:0d:dd:d6:7a: 2f:18:4b:51:51:72:37:44:f9:4d:3d:57:2b:58:d2: 2d:48:8d:7e:b8:35:6d:c9:c1:f2:f5:27:19:60:90: 69:66:22:01:6a:b7:9e:87:32:35:48:76:d8:0f:ba: 45:a7:0f:d3:3a:e3:5b:f4:b7:1b:7e:e4:f0:a4:53: 0a:06:a9:85:a4:49:d7:9f:8c:04:a8:7b:3f:c9:d1: 05:df:5d:a3:13:88:af:e3:b6:bd:da:9f:3c:e9:9b: 8c:e8:70:43:1d:ae:45:64:e2:13:eb:c6:64:e1:00: 7f:c6:16:d2:80:f2:81:9c:08:a8:35:6c:d2:84:79: 48:72:92:26:c6:96:54:5e:f3:90:f1:0d:b9:ac:f3: bc:4e:b3:e1:7c:4a:4c:db:79:97:5b:11:03:f5:0b: 3e:14:c4:5a:e8:a7:f8:0c:50:46:2f:12:f4:c4:10: 6a:5d:16:8c:4c:cf:1e:c6:1a:66:5c:7c:46:72:f9: fc:f5:52:1e:5a:42:94:90:88:46:4a:3e:5b:62:4a: 0e:54:4d:62:e6:76:9a:d8:bf:be:37:7c:38:06:4f: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:83:36:91:67:30:12:6A:DF:55:A4:F8:F5:20:09:4F:D8:CA:BD:A6 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.57.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ea:5a:b4:60:d6:2d:a8:19:19:b6:5e:b8:97:6d:4d:1d:0c: 64:04:49:d5:44:46:88:30:fc:95:8d:71:12:92:6e:e6:63:bd: 34:e5:75:72:8e:dc:5d:e0:55:a1:00:fe:77:59:b6:bf:ca:46: 63:cc:a1:d5:ca:bc:f0:07:e0:00:3a:2a:ea:bb:00:a9:c1:5b: c5:a0:25:77:63:54:23:82:bb:37:fb:48:3d:5a:b4:04:c9:e2: 10:c2:d6:c9:37:2f:c3:e3:44:e6:a1:cf:f0:66:c2:41:24:08: f4:bc:5b:cd:c6:a2:79:b7:c8:d2:bd:65:08:80:a5:1a:57:09: 17:d6:d2:88:f8:06:5d:f6:92:fb:40:33:6d:7d:a9:96:41:4a: c2:dc:91:62:fb:a0:98:78:01:b7:dc:ae:81:ea:29:25:f5:2b: 08:54:59:c5:96:50:18:6a:39:8c:3d:ee:ec:fe:53:0a:26:82: 5c:8c:a5:d0:ee:85:7c:91:26:9c:69:f9:05:05:21:e7:7a:24: 89:e1:87:e9:5d:aa:4e:c2:f7:9e:83:cc:fa:02:96:98:31:f8: f1:8f:ff:c3:9a:b4:34:10:c4:3b:53:68:7b:d5:2e:6b:eb:41: b7:95:03:83:c8:29:98:41:dd:62:8c:22:42:bc:f0:ed:d9:94: 29:49:ce:3b -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUbm8FNxydl1gFY2Py6TU8gus8qFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDgxNTA2NDVaFw0yNzAxMDcxNTExNDVaMDMxMTAvBgNV BAMTKEE3ODMzNjkxNjczMDEyNkFERjU1QTRGOEY1MjAwOTRGRDhDQUJEQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJnlBJ5co+S6I7njfHe1vuYV0 z8H+WAqfdkK7Qy+79JPNwM8Q7YiJDd3Wei8YS1FRcjdE+U09VytY0i1IjX64NW3J wfL1JxlgkGlmIgFqt56HMjVIdtgPukWnD9M641v0txt+5PCkUwoGqYWkSdefjASo ez/J0QXfXaMTiK/jtr3anzzpm4zocEMdrkVk4hPrxmThAH/GFtKA8oGcCKg1bNKE eUhykibGllRe85DxDbms87xOs+F8SkzbeZdbEQP1Cz4UxFrop/gMUEYvEvTEEGpd FoxMzx7GGmZcfEZy+fz1Uh5aQpSQiEZKPltiSg5UTWLmdprYv743fDgGT/3tAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUp4M2kWcwEmrfVaT49SAJT9jKvaYwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzNzJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHOTANBgkq hkiG9w0BAQsFAAOCAQEApupatGDWLagZGbZeuJdtTR0MZARJ1URGiDD8lY1xEpJu 5mO9NOV1co7cXeBVoQD+d1m2v8pGY8yh1cq88AfgADoq6rsAqcFbxaAld2NUI4K7 N/tIPVq0BMniEMLWyTcvw+NE5qHP8GbCQSQI9LxbzcaiebfI0r1lCIClGlcJF9bS iPgGXfaS+0AzbX2plkFKwtyRYvugmHgBt9yugeopJfUrCFRZxZZQGGo5jD3u7P5T CiaCXIyl0O6FfJEmnGn5BQUh53okieGH6V2qTsL3noPM+gKWmDH48Y//w5q0NBDE O1Noe9Uua+tBt5UDg8gpmEHdYowiQrzw7dmUKUnOOw== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:22 2026 by rpki-client