This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32342d3234203d3e20383334.roa File: 352e3139392e382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: V1fCJJpeM1dgS6sRPjwWNnwQvD7ygSQhv08yR3U8nPs= Subject key identifier: 9D:1A:29:6F:94:0F:E5:23:FF:26:18:F5:78:E2:AF:C3:C8:96:54:07 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 07AC43C83E9CCBDC5B1730445B51057B60C6A230 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32342d3234203d3e20383334.roa Signing time: Mon 26 Jan 2026 14:28:18 +0000 ROA not before: Mon 26 Jan 2026 14:23:18 +0000 ROA not after: Mon 25 Jan 2027 14:28:18 +0000 asID: 834 IP address blocks: 5.199.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ac:43:c8:3e:9c:cb:dc:5b:17:30:44:5b:51:05:7b:60:c6:a2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 26 14:23:18 2026 GMT Not After : Jan 25 14:28:18 2027 GMT Subject: CN=9D1A296F940FE523FF2618F578E2AFC3C8965407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:74:47:61:69:82:68:10:d7:38:8b:b8:9c:5f: 00:7e:ed:4d:cd:e2:22:42:be:ac:29:52:01:76:2f: 13:c1:f0:d1:1c:24:63:46:35:4b:b7:85:7d:69:1c: ad:30:74:32:5c:29:4f:b9:4a:c0:75:30:f3:20:06: 02:63:5c:95:6f:33:b9:ea:51:38:ac:10:22:d0:1e: e1:56:53:e9:9b:68:ae:f6:47:06:fb:cd:8d:0f:81: 10:12:c9:82:0e:fa:76:f8:aa:56:13:ed:2c:96:cb: c2:3e:42:c8:0b:97:a3:5d:ff:26:63:82:b2:3d:6b: c0:99:82:bb:99:e1:d0:e0:96:cd:d5:2c:80:a1:0b: 76:6e:be:56:fb:c9:ab:c3:57:50:a3:03:8c:8f:fd: cf:99:f0:c2:4b:9e:9a:f3:8f:8c:73:b9:6c:e9:4d: 46:6a:62:b5:05:21:6f:03:f7:07:f2:80:09:dc:b1: 6b:3e:29:9e:56:1d:34:f1:9c:bc:96:e6:e4:70:d7: 86:a9:a6:e2:fe:66:e2:22:31:24:fa:62:38:18:99: 1d:c9:c0:6a:4f:6d:3e:7e:ac:71:ec:47:7f:ae:95: 5f:61:f8:39:a0:73:d8:20:69:de:27:4d:ce:a5:7c: 67:ab:61:6f:52:c2:16:c8:bc:51:f7:be:f4:97:55: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:1A:29:6F:94:0F:E5:23:FF:26:18:F5:78:E2:AF:C3:C8:96:54:07 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.8.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:c1:a3:28:71:c4:59:da:12:c1:bf:25:27:48:9a:91:82:ea: b9:eb:0d:04:bd:50:42:c6:fe:a1:83:b5:4b:ac:f9:b0:c2:a3: ae:26:c1:ed:32:01:aa:d2:8f:c7:19:3e:1e:10:41:c2:69:71: 20:4b:6b:6a:b2:e6:5a:df:ee:a9:13:c9:57:ff:7a:c8:bb:1d: 6b:08:04:ed:22:ca:f1:d1:88:6f:22:dd:52:80:db:d2:45:a9: 81:39:6c:b2:6b:ef:a1:11:3e:e3:a9:c9:3d:4d:39:05:b4:57: da:5e:7d:db:93:42:12:e9:69:d5:6a:3a:93:9a:6b:f5:21:2c: 6d:0e:e6:4b:d0:38:1d:83:9e:2c:10:c6:d6:61:db:92:c0:e9: 7b:4a:7b:0c:90:64:23:85:07:df:3d:d6:4e:e6:35:c3:da:ee: 1c:54:19:8d:36:79:7e:67:f7:05:f6:c9:2f:7b:05:27:52:27: 1e:b9:97:07:cc:27:2a:06:94:d3:6c:7e:0a:63:6c:9e:62:c6: 2a:ac:8b:86:64:68:d0:15:5e:b3:7a:e8:17:42:a7:5a:89:41: 41:36:92:c0:6c:dd:3e:86:c4:ff:aa:fd:93:47:59:0b:51:ea: 56:7a:92:9d:aa:68:eb:8e:a1:9f:c7:d9:65:ee:7b:03:30:7b: c5:d1:31:c5 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgIUB6xDyD6cy9xbFzBEW1EFe2DGojAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjYxNDIzMThaFw0yNzAxMjUxNDI4MThaMDMxMTAvBgNV BAMTKDlEMUEyOTZGOTQwRkU1MjNGRjI2MThGNTc4RTJBRkMzQzg5NjU0MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdEdhaYJoENc4i7icXwB+7U3N 4iJCvqwpUgF2LxPB8NEcJGNGNUu3hX1pHK0wdDJcKU+5SsB1MPMgBgJjXJVvM7nq UTisECLQHuFWU+mbaK72Rwb7zY0PgRASyYIO+nb4qlYT7SyWy8I+QsgLl6Nd/yZj grI9a8CZgruZ4dDgls3VLIChC3Zuvlb7yavDV1CjA4yP/c+Z8MJLnprzj4xzuWzp TUZqYrUFIW8D9wfygAncsWs+KZ5WHTTxnLyW5uRw14appuL+ZuIiMST6YjgYmR3J wGpPbT5+rHHsR3+ulV9h+Dmgc9ggad4nTc6lfGerYW9SwhbIvFH3vvSXVS0vAgMB AAGjggIzMIICLzAdBgNVHQ4EFgQUnRopb5QP5SP/Jhj1eOKvw8iWVAcwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaMGCCsGAQUFBwELBIGWMIGTMIGQBggrBgEFBQcwC4aBg3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzgyZTMw MmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAFxwgwDQYJKoZI hvcNAQELBQADggEBAH3BoyhxxFnaEsG/JSdImpGC6rnrDQS9UELG/qGDtUus+bDC o64mwe0yAarSj8cZPh4QQcJpcSBLa2qy5lrf7qkTyVf/esi7HWsIBO0iyvHRiG8i 3VKA29JFqYE5bLJr76ERPuOpyT1NOQW0V9pefduTQhLpadVqOpOaa/UhLG0O5kvQ OB2DniwQxtZh25LA6XtKewyQZCOFB9891k7mNcPa7hxUGY02eX5n9wX2yS97BSdS Jx65lwfMJyoGlNNsfgpjbJ5ixiqsi4ZkaNAVXrN66BdCp1qJQUE2ksBs3T6GxP+q /ZNHWQtR6lZ6kp2qaOuOoZ/H2WXuewMwe8XRMcU= -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:08 2026 by rpki-client