This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138362e302f32342d3234203d3e20323036313530.roa File: 352e3138312e3138362e302f32342d3234203d3e20323036313530.roa (raw, json) Hash identifier: QGg1o/UsEXwX7QWOmnciGR0lfU5zaV2UWyNlVxa/Ka8= Subject key identifier: 1A:E9:E7:FA:3B:6C:81:52:22:52:FD:41:94:C8:BC:26:91:C6:66:F3 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 3306026766EE118F82D238A662A5E8AEBD6925A9 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138362e302f32342d3234203d3e20323036313530.roa Signing time: Thu 15 Jan 2026 14:27:25 +0000 ROA not before: Thu 15 Jan 2026 14:22:25 +0000 ROA not after: Thu 14 Jan 2027 14:27:25 +0000 asID: 206150 IP address blocks: 5.181.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Jan 2026 07:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:06:02:67:66:ee:11:8f:82:d2:38:a6:62:a5:e8:ae:bd:69:25:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Jan 15 14:22:25 2026 GMT Not After : Jan 14 14:27:25 2027 GMT Subject: CN=1AE9E7FA3B6C81522252FD4194C8BC2691C666F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:19:51:ba:d7:8b:09:60:93:11:44:10:70:ab: f3:92:14:0a:b3:64:d3:0b:a2:85:ab:63:52:84:89: ba:69:8a:62:32:b3:76:a9:b8:a8:16:d9:54:40:44: 98:3d:5f:13:2a:18:aa:d5:97:bd:b7:40:69:9a:40: 44:e6:00:33:06:dc:7d:b2:a6:20:63:3a:b4:44:e8: de:20:ba:75:b0:33:49:0f:05:25:0c:d0:60:ee:b1: e3:85:82:36:3a:90:98:6f:d5:68:e3:f2:96:3e:ed: e8:09:d9:a7:43:59:a1:02:e9:31:9a:29:1c:a8:f1: 32:c7:45:a3:d5:5e:c4:25:a0:30:28:7e:92:5a:0b: 89:7c:a4:71:f0:ed:5c:51:9c:6e:39:ef:dd:87:d9: fe:c8:49:7b:a7:37:48:b4:c9:99:33:b8:81:85:4b: 65:1d:68:59:64:30:05:f7:e9:17:7e:93:82:b7:d7: 58:15:96:e2:f2:3d:d5:12:47:cd:1b:88:79:82:41: 02:3f:21:dc:6c:97:fe:01:4c:a9:9e:49:c0:20:45: a4:82:b9:2a:e9:5d:b1:64:22:82:30:5f:65:25:35: 39:e2:05:2f:96:88:1f:ef:c4:86:29:f2:44:8a:05: 74:23:3c:d7:d3:3a:19:22:94:33:34:8b:b5:59:3f: 17:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E9:E7:FA:3B:6C:81:52:22:52:FD:41:94:C8:BC:26:91:C6:66:F3 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138362e302f32342d3234203d3e20323036313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.186.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ff:89:7c:fc:1e:3e:ef:81:91:51:5c:fc:67:50:16:cc:ae: 47:25:2e:82:a6:62:6e:31:34:dc:c8:4d:4d:61:71:7b:a0:29: e9:7b:55:82:d2:f1:56:24:b7:70:f9:1d:ed:15:f6:eb:75:82: b4:75:46:0d:07:4f:5d:29:f1:d1:a6:d4:77:e9:0b:13:02:1a: a3:b2:ef:8b:f9:f8:01:dd:7e:ff:3b:c1:1b:7c:5a:b3:1c:c3: 7c:22:1f:d5:fa:be:8b:4c:b2:c0:48:db:aa:92:1d:1f:0f:9e: 00:6e:67:bd:1c:d6:e2:d4:dc:46:df:76:ad:00:65:15:78:a2: 2e:e4:06:4d:ab:7f:39:b0:4c:4e:fc:57:34:da:4b:1d:cf:8c: d2:1a:0a:27:52:94:39:96:eb:e5:53:2a:27:df:be:25:f9:73: 72:62:98:79:0a:91:1f:19:66:89:1f:08:bd:9e:34:8d:73:ae: 44:42:48:6a:e9:14:8f:cd:b2:44:0d:4d:b7:cb:75:84:50:c0: 88:43:2f:f2:13:5f:c5:9c:ef:cd:35:f7:bd:b4:d6:73:67:5b: 37:7d:95:f7:84:f0:cd:44:59:ed:c7:b5:7d:cc:4e:5f:b3:57: 04:74:1c:95:52:30:f1:cc:8b:9b:7a:ae:a5:cb:60:ba:32:c8: 22:f7:2d:18 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUMwYCZ2buEY+C0jimYqXorr1pJakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNjAxMTUxNDIyMjVaFw0yNzAxMTQxNDI3MjVaMDMxMTAvBgNV BAMTKDFBRTlFN0ZBM0I2QzgxNTIyMjUyRkQ0MTk0QzhCQzI2OTFDNjY2RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkGVG614sJYJMRRBBwq/OSFAqz ZNMLooWrY1KEibppimIys3apuKgW2VRARJg9XxMqGKrVl723QGmaQETmADMG3H2y piBjOrRE6N4gunWwM0kPBSUM0GDuseOFgjY6kJhv1Wjj8pY+7egJ2adDWaEC6TGa KRyo8TLHRaPVXsQloDAofpJaC4l8pHHw7VxRnG45792H2f7ISXunN0i0yZkzuIGF S2UdaFlkMAX36Rd+k4K311gVluLyPdUSR80biHmCQQI/Idxsl/4BTKmeScAgRaSC uSrpXbFkIoIwX2UlNTniBS+WiB/vxIYp8kSKBXQjPNfTOhkilDM0i7VZPxehAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUGunn+jtsgVIiUv1BlMi8JpHGZvMwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM2 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM2MzEzNTMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA BbW6MA0GCSqGSIb3DQEBCwUAA4IBAQCR/4l8/B4+74GRUVz8Z1AWzK5HJS6CpmJu MTTcyE1NYXF7oCnpe1WC0vFWJLdw+R3tFfbrdYK0dUYNB09dKfHRptR36QsTAhqj su+L+fgB3X7/O8EbfFqzHMN8Ih/V+r6LTLLASNuqkh0fD54Abme9HNbi1NxG33at AGUVeKIu5AZNq385sExO/Fc02ksdz4zSGgonUpQ5luvlUyon374l+XNyYph5CpEf GWaJHwi9njSNc65EQkhq6RSPzbJEDU23y3WEUMCIQy/yE1/FnO/NNfe9tNZzZ1s3 fZX3hPDNRFntx7V9zE5fs1cEdByVUjDxzIubeq6ly2C6Msgi9y0Y -----END CERTIFICATE-----Generated at Fri Jan 16 18:53:39 2026 by rpki-client