This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32322d3234203d3e20383334.roa File: 352e3139392e382e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: keIP3e17ZI8LKI6iq06j88qNkNxuQ7A4XRewqaeeLzU= Subject key identifier: 04:EB:0C:21:49:41:9C:D0:8B:51:1B:E1:BC:D1:79:0A:B4:B8:59:BD Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 714AC5740ED1A4E6A070F8EA1F304F714BB4D8AF Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32322d3234203d3e20383334.roa Signing time: Mon 12 Jan 2026 16:59:35 +0000 ROA not before: Mon 12 Jan 2026 16:54:35 +0000 ROA not after: Mon 11 Jan 2027 16:59:35 +0000 asID: 834 IP address blocks: 5.199.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 17:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:4a:c5:74:0e:d1:a4:e6:a0:70:f8:ea:1f:30:4f:71:4b:b4:d8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 12 16:54:35 2026 GMT Not After : Jan 11 16:59:35 2027 GMT Subject: CN=04EB0C2149419CD08B511BE1BCD1790AB4B859BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6a:d5:8c:a0:ff:bc:12:a8:57:be:8d:0c:31: 66:3a:24:3a:52:6e:df:fb:8f:e2:3d:28:0c:e0:04: ec:d4:92:b8:3e:d3:a1:23:ad:ac:6b:84:64:8d:be: 23:44:51:a5:0d:bd:14:82:a2:64:55:71:3f:64:c4: d7:96:10:7c:88:b1:13:7d:41:22:c2:b0:50:79:1a: 27:4c:7f:fb:d4:b5:66:4a:46:cc:80:e5:6d:8f:d7: 1e:44:0c:05:77:12:7d:75:42:f0:1a:1f:a2:a8:a3: 72:86:d6:86:2e:75:5f:b0:b2:80:ef:20:20:0f:bd: 86:49:ed:20:60:c8:25:79:07:17:9f:3b:47:42:17: e9:76:a0:2d:f8:b0:2a:6f:72:ec:44:c5:59:8d:af: ba:19:15:14:79:d1:47:96:e2:a1:39:49:57:a7:75: 27:17:85:68:39:fe:45:2e:66:d0:b3:f4:b7:4f:db: c3:a4:35:4c:de:5b:22:00:ea:f4:d5:5c:3c:8d:ae: 3b:6f:f8:7b:5e:b5:cb:9c:ed:7c:46:78:ce:a5:48: e8:3b:82:7c:15:4d:94:ff:e2:7c:29:22:fd:09:f6: 70:ea:a7:3c:96:74:5b:5a:a6:c0:a4:50:5d:a7:84: a6:7e:7c:5a:a4:26:ca:82:25:78:8a:30:c4:5e:98: 89:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EB:0C:21:49:41:9C:D0:8B:51:1B:E1:BC:D1:79:0A:B4:B8:59:BD X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.8.0/22 Signature Algorithm: sha256WithRSAEncryption 7d:2c:cf:bb:45:f8:48:cd:13:42:d1:d7:5a:f2:3f:94:dc:07: 9a:b6:8b:44:87:1e:0e:21:9e:34:74:53:13:f5:84:eb:25:c2: 7c:78:7a:83:fe:f0:fc:ac:9f:2b:ea:c0:30:90:cc:7b:6a:cf: 9f:bf:9f:db:f4:ce:a9:21:10:56:b7:b0:04:90:e6:b7:8e:d9: cf:56:3c:aa:e8:2f:e1:31:f5:5d:64:a9:ba:c3:97:4b:34:f9: 74:88:ac:56:35:28:49:27:51:6f:e7:ec:01:ce:27:f7:b0:8c: 41:2b:80:5b:09:4f:ba:60:74:56:9d:b3:11:f8:ab:7d:66:7b: 28:e4:fb:df:8a:8e:d9:ea:06:fe:07:bf:13:a8:c1:6e:0f:fc: 27:36:2f:b0:82:82:4d:6c:a9:ce:17:c4:28:33:ae:46:b3:c7: e6:c1:46:c5:14:f0:35:e3:56:f9:e6:14:cb:58:8e:b3:b3:e8: 8a:6e:10:9a:bf:42:94:16:ff:f8:69:ad:d4:38:83:9a:aa:1b: 9c:59:a3:27:a2:c3:28:b9:df:ce:bd:9f:09:b6:63:03:1d:b5: b6:2a:03:3e:e5:29:d5:b8:50:29:bc:b9:c8:12:2d:5d:c1:85: 0c:01:41:19:a4:d7:49:9a:d7:3a:6e:8a:73:5a:8d:02:e6:d7: 89:48:1a:fd -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUcUrFdA7RpOagcPjqHzBPcUu02K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMTIxNjU0MzVaFw0yNzAxMTExNjU5MzVaMDMxMTAvBgNV BAMTKDA0RUIwQzIxNDk0MTlDRDA4QjUxMUJFMUJDRDE3OTBBQjRCODU5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsatWMoP+8EqhXvo0MMWY6JDpS bt/7j+I9KAzgBOzUkrg+06EjraxrhGSNviNEUaUNvRSComRVcT9kxNeWEHyIsRN9 QSLCsFB5GidMf/vUtWZKRsyA5W2P1x5EDAV3En11QvAaH6Koo3KG1oYudV+wsoDv ICAPvYZJ7SBgyCV5BxefO0dCF+l2oC34sCpvcuxExVmNr7oZFRR50UeW4qE5SVen dScXhWg5/kUuZtCz9LdP28OkNUzeWyIA6vTVXDyNrjtv+Htetcuc7XxGeM6lSOg7 gnwVTZT/4nwpIv0J9nDqpzyWdFtapsCkUF2nhKZ+fFqkJsqCJXiKMMRemIl/AgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUBOsMIUlBnNCLURvhvNF5CrS4Wb0wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzgyZTMw MmYzMjMyMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIFxwgwDQYJKoZI hvcNAQELBQADggEBAH0sz7tF+EjNE0LR11ryP5TcB5q2i0SHHg4hnjR0UxP1hOsl wnx4eoP+8PysnyvqwDCQzHtqz5+/n9v0zqkhEFa3sASQ5reO2c9WPKroL+Ex9V1k qbrDl0s0+XSIrFY1KEknUW/n7AHOJ/ewjEErgFsJT7pgdFadsxH4q31meyjk+9+K jtnqBv4HvxOowW4P/Cc2L7CCgk1sqc4XxCgzrkazx+bBRsUU8DXjVvnmFMtYjrOz 6IpuEJq/QpQW//hprdQ4g5qqG5xZoyeiwyi53869nwm2YwMdtbYqAz7lKdW4UCm8 ucgSLV3BhQwBQRmk10ma1zpuinNajQLm14lIGv0= -----END CERTIFICATE-----Generated at Sun Jan 18 06:44:07 2026 by rpki-client