This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36302e302f32322d3234203d3e20383334.roa File: 352e3139392e36302e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: hRMhnHJPLRMHSKFozgRwma+UtPpTP4ouGJKBgiDHzGw= Subject key identifier: 09:40:8B:7A:D0:BE:DB:F3:48:80:DB:BE:AE:E8:D4:68:B6:FB:B1:4F Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 661D32C9B15451EC53978BABBD5FA78E64AC8F2F Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36302e302f32322d3234203d3e20383334.roa Signing time: Thu 08 Jan 2026 15:11:45 +0000 ROA not before: Thu 08 Jan 2026 15:06:45 +0000 ROA not after: Thu 07 Jan 2027 15:11:45 +0000 asID: 834 IP address blocks: 5.199.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:1d:32:c9:b1:54:51:ec:53:97:8b:ab:bd:5f:a7:8e:64:ac:8f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 8 15:06:45 2026 GMT Not After : Jan 7 15:11:45 2027 GMT Subject: CN=09408B7AD0BEDBF34880DBBEAEE8D468B6FBB14F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5b:cf:bd:de:00:61:d7:22:12:bb:08:12:a3: e4:de:50:cd:8b:74:9b:23:39:e9:09:e7:1c:71:08: de:2a:b0:e0:1d:ea:ea:0e:53:a6:1f:8b:e1:08:fd: 4b:fd:ea:b9:4c:2d:a9:b9:cc:39:e0:6c:06:ae:42: 0f:b5:ed:ff:83:7d:3f:dd:7b:bf:be:30:36:58:57: 0e:e7:8d:6f:13:ac:ff:d0:cd:20:55:08:99:92:bd: 04:a7:b7:8a:fc:f4:76:b0:2a:57:ad:40:73:57:44: b5:c5:d3:c4:ff:0f:a5:aa:40:22:ca:8b:3e:b6:78: fa:b4:15:46:3e:0c:9e:7d:03:52:a4:6b:e3:79:17: 02:de:9d:80:cf:1c:bb:9a:0f:9d:2f:14:d9:cb:82: 0c:55:55:ac:af:1f:2d:89:99:eb:7d:41:c7:78:0e: 2f:55:8b:ac:29:d4:fb:9b:be:df:26:b6:da:4a:b0: 2b:4c:4f:7c:f2:14:41:b3:05:cb:00:7e:02:86:86: 64:3e:58:45:75:1b:ef:2b:ba:f4:45:6e:6c:f9:56: 45:f3:b9:00:8b:4d:48:bb:9e:3a:c7:82:29:52:06: 7f:49:91:ad:4c:64:14:79:2a:29:06:9a:ac:c1:0e: 4d:21:10:41:bb:d2:9e:ce:0a:23:33:85:59:44:7c: ae:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:8B:7A:D0:BE:DB:F3:48:80:DB:BE:AE:E8:D4:68:B6:FB:B1:4F X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e36302e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.60.0/22 Signature Algorithm: sha256WithRSAEncryption db:49:05:53:fa:6e:7f:1a:25:7f:0f:0e:73:e5:c4:77:1b:6b: 08:bc:18:d1:c9:b0:05:01:b6:12:75:07:eb:24:e6:9f:09:87: 65:ab:fe:71:38:63:6c:e3:f4:fd:15:23:4a:1c:d7:aa:0b:8a: 8d:14:c9:b6:f0:48:a8:70:d0:b4:d4:05:9b:b5:e8:1b:76:5f: 43:a3:9c:bf:4a:ad:cc:bd:cf:ad:ac:20:c8:8a:83:09:71:13: 27:08:93:73:43:52:ab:e6:e0:1d:1b:29:36:bd:29:79:a0:8c: 6c:40:5a:8a:4e:d2:ad:79:5f:44:cb:f3:97:f5:6a:9a:fb:9e: 4e:f0:a5:7f:9e:b6:c2:30:a0:8f:d9:3d:8a:9c:c7:af:7c:03: 5c:52:59:48:f4:0f:fe:d1:c1:bd:6d:69:0b:b8:da:34:59:3a: 20:bf:11:87:7a:8e:3f:0e:fd:80:75:d8:e3:da:6b:8c:90:74: a4:e8:59:fa:e0:73:1c:29:26:94:0b:d6:16:50:3b:e3:67:9e: 61:f4:38:46:14:39:54:a0:43:4e:b5:5b:5a:6d:f4:15:64:3a: 9a:ae:09:c7:0d:ed:b4:be:c1:51:56:a9:ac:fb:ed:1d:b8:f0: 41:71:57:d7:67:3e:6f:ab:e5:9b:22:fa:bf:3c:c6:43:fd:bb: 3b:a6:dc:6c -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUZh0yybFUUexTl4urvV+njmSsjy8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMDgxNTA2NDVaFw0yNzAxMDcxNTExNDVaMDMxMTAvBgNV BAMTKDA5NDA4QjdBRDBCRURCRjM0ODgwREJCRUFFRThENDY4QjZGQkIxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvW8+93gBh1yISuwgSo+TeUM2L dJsjOekJ5xxxCN4qsOAd6uoOU6Yfi+EI/Uv96rlMLam5zDngbAauQg+17f+DfT/d e7++MDZYVw7njW8TrP/QzSBVCJmSvQSnt4r89HawKletQHNXRLXF08T/D6WqQCLK iz62ePq0FUY+DJ59A1Kka+N5FwLenYDPHLuaD50vFNnLggxVVayvHy2Jmet9Qcd4 Di9Vi6wp1Pubvt8mttpKsCtMT3zyFEGzBcsAfgKGhmQ+WEV1G+8ruvRFbmz5VkXz uQCLTUi7njrHgilSBn9Jka1MZBR5KikGmqzBDk0hEEG70p7OCiMzhVlEfK5RAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUCUCLetC+2/NIgNu+rujUaLb7sU8wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzYzMDJl MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgXHPDANBgkq hkiG9w0BAQsFAAOCAQEA20kFU/pufxolfw8Oc+XEdxtrCLwY0cmwBQG2EnUH6yTm nwmHZav+cThjbOP0/RUjShzXqguKjRTJtvBIqHDQtNQFm7XoG3ZfQ6Ocv0qtzL3P rawgyIqDCXETJwiTc0NSq+bgHRspNr0peaCMbEBaik7SrXlfRMvzl/VqmvueTvCl f562wjCgj9k9ipzHr3wDXFJZSPQP/tHBvW1pC7jaNFk6IL8Rh3qOPw79gHXY49pr jJB0pOhZ+uBzHCkmlAvWFlA742eeYfQ4RhQ5VKBDTrVbWm30FWQ6mq4Jxw3ttL7B UVaprPvtHbjwQXFX12c+b6vlmyL6vzzGQ/27O6bcbA== -----END CERTIFICATE-----Generated at Sun Jan 18 06:40:21 2026 by rpki-client