This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32322d3234203d3e20383334.roa File: 352e3139392e382e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: drQZmGogqeo3DDz/7imygJ/8r5KWWZO6Is6TgK1B5n4= Subject key identifier: 7A:BA:08:D3:C9:02:F0:FA:72:47:54:48:2E:B7:CA:45:31:5C:76:82 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 54ACD776420C156FD2164D467C296DC5E89AA241 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32322d3234203d3e20383334.roa Signing time: Mon 24 Nov 2025 11:07:10 +0000 ROA not before: Mon 24 Nov 2025 11:02:10 +0000 ROA not after: Mon 23 Nov 2026 11:07:10 +0000 asID: 834 IP address blocks: 5.199.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 18:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ac:d7:76:42:0c:15:6f:d2:16:4d:46:7c:29:6d:c5:e8:9a:a2:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Nov 24 11:02:10 2025 GMT Not After : Nov 23 11:07:10 2026 GMT Subject: CN=7ABA08D3C902F0FA724754482EB7CA45315C7682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:ee:86:de:b7:d1:84:0c:90:d5:87:0a:8a: 7d:c2:35:6d:6b:3a:fe:89:24:8f:a5:3e:7f:aa:15: 07:50:7d:b6:fc:30:09:7f:d4:c8:6f:17:69:c4:0e: 56:19:86:b9:7e:48:d1:8b:51:95:db:11:c2:57:ab: af:07:41:4d:7d:1b:f3:2b:c1:b7:2b:2d:29:3b:30: 39:14:76:75:dd:de:56:8c:2c:56:06:37:a4:78:94: 77:51:7e:ab:04:ed:95:0a:c4:81:a6:0b:e2:68:86: a5:77:4e:52:06:e4:8a:10:a8:53:e5:64:c9:9c:14: bf:d9:19:86:55:54:f1:76:97:0b:31:71:6e:4b:79: ef:60:b3:c2:fd:08:c1:b8:3c:34:90:46:2a:ef:3a: 3c:e2:94:05:4b:17:41:94:84:ce:6e:fb:49:5f:3c: 09:2b:9d:29:6c:a8:b1:33:9c:63:21:a8:7d:29:fa: db:f8:0b:e6:87:85:c6:5f:32:4e:4b:7d:eb:f3:7c: dd:e8:cb:e2:aa:f8:58:1d:6c:1f:4f:21:31:d2:a3: f3:d0:02:11:23:8d:d3:ac:f9:63:3e:8f:9a:1a:6a: 99:3b:82:7b:84:ff:f2:73:f4:2b:7f:8b:f2:f9:4a: 38:c0:a4:07:63:f4:bf:d0:93:a0:72:c5:db:58:0c: 44:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:BA:08:D3:C9:02:F0:FA:72:47:54:48:2E:B7:CA:45:31:5C:76:82 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.8.0/22 Signature Algorithm: sha256WithRSAEncryption 1d:98:1c:31:c5:c3:3a:c2:39:e0:04:37:93:73:27:09:e5:6c: 94:31:d1:06:99:be:fa:ba:fa:27:9c:12:b2:ce:20:49:25:ca: 24:fe:28:3e:93:e2:e2:a4:9e:eb:c1:24:fa:c4:57:e1:73:29: ce:97:03:99:6e:a2:bd:fb:10:db:18:b5:79:3d:87:56:ec:f6: 90:5c:e3:07:4e:cb:07:39:42:f6:bb:4d:59:ec:ff:38:df:b1: 85:de:ee:81:f1:75:6e:fc:42:4d:69:ca:18:3c:7a:65:17:ae: be:41:fe:5b:23:a5:c4:42:9e:d6:f3:46:b8:d4:5a:9b:ec:e8: 7e:13:29:85:89:ba:7b:ef:95:4a:2b:19:71:7a:76:31:98:eb: eb:7d:de:00:f0:fc:44:71:ca:ae:f1:cc:a4:58:03:b2:c7:78: 01:ce:94:53:2a:18:68:9b:87:8f:ee:b1:ca:76:ce:36:e1:1f: e1:89:1b:2d:9c:9c:7c:e6:5d:5c:f3:b4:c8:c2:3f:fa:dd:86: da:09:5b:e5:a3:b9:b0:de:3e:4f:5a:4e:14:87:20:ee:4d:ba: 2f:4c:19:ec:d1:c8:77:e4:ad:86:b4:bb:79:8f:22:ad:92:3d: 9a:b9:af:3f:05:33:7d:6f:40:e0:27:aa:cd:65:c9:31:62:a2: 8c:a5:bb:ea -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUVKzXdkIMFW/SFk1GfCltxeiaokEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTExMjQxMTAyMTBaFw0yNjExMjMxMTA3MTBaMDMxMTAvBgNV BAMTKDdBQkEwOEQzQzkwMkYwRkE3MjQ3NTQ0ODJFQjdDQTQ1MzE1Qzc2ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtIe6G3rfRhAyQ1YcKin3CNW1r Ov6JJI+lPn+qFQdQfbb8MAl/1MhvF2nEDlYZhrl+SNGLUZXbEcJXq68HQU19G/Mr wbcrLSk7MDkUdnXd3laMLFYGN6R4lHdRfqsE7ZUKxIGmC+JohqV3TlIG5IoQqFPl ZMmcFL/ZGYZVVPF2lwsxcW5Lee9gs8L9CMG4PDSQRirvOjzilAVLF0GUhM5u+0lf PAkrnSlsqLEznGMhqH0p+tv4C+aHhcZfMk5LfevzfN3oy+Kq+FgdbB9PITHSo/PQ AhEjjdOs+WM+j5oaapk7gnuE//Jz9Ct/i/L5SjjApAdj9L/Qk6ByxdtYDESPAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUeroI08kC8PpyR1RILrfKRTFcdoIwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzgyZTMw MmYzMjMyMmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIFxwgwDQYJKoZI hvcNAQELBQADggEBAB2YHDHFwzrCOeAEN5NzJwnlbJQx0QaZvvq6+iecErLOIEkl yiT+KD6T4uKknuvBJPrEV+FzKc6XA5luor37ENsYtXk9h1bs9pBc4wdOywc5Qva7 TVns/zjfsYXe7oHxdW78Qk1pyhg8emUXrr5B/lsjpcRCntbzRrjUWpvs6H4TKYWJ unvvlUorGXF6djGY6+t93gDw/ERxyq7xzKRYA7LHeAHOlFMqGGibh4/uscp2zjbh H+GJGy2cnHzmXVzztMjCP/rdhtoJW+WjubDePk9aThSHIO5Nui9MGezRyHfkrYa0 u3mPIq2SPZq5rz8FM31vQOAnqs1lyTFiooylu+o= -----END CERTIFICATE-----Generated at Fri Nov 28 06:10:41 2025 by rpki-client