This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138352e302f32342d3234203d3e2034363337.roa File: 352e3232362e3138352e302f32342d3234203d3e2034363337.roa (raw, json) Hash identifier: EK5hsG3gRXHAek4iXi8s4jAj1cLZXBGuH9nPrYMwZyI= Subject key identifier: D3:83:A5:26:2C:B6:36:6E:D9:50:DC:61:69:45:E1:CA:69:08:D0:2D Certificate issuer: /CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Certificate serial: 20BE54D3856399A4006B510F46F00FEADD228F1D Authority key identifier: F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138352e302f32342d3234203d3e2034363337.roa Signing time: Sat 27 Dec 2025 13:55:32 +0000 ROA not before: Sat 27 Dec 2025 13:50:32 +0000 ROA not after: Sat 26 Dec 2026 13:55:32 +0000 asID: 4637 IP address blocks: 5.226.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.mft rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 16:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:be:54:d3:85:63:99:a4:00:6b:51:0f:46:f0:0f:ea:dd:22:8f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f768ff6e681858c0ec19f3a93fa1792cd16ceed3 Validity Not Before: Dec 27 13:50:32 2025 GMT Not After : Dec 26 13:55:32 2026 GMT Subject: CN=D383A5262CB6366ED950DC616945E1CA6908D02D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a5:e6:a7:a8:da:c3:2c:43:6d:c3:28:a1:db: 98:e4:71:2a:67:34:ff:7a:09:35:67:ab:87:5f:1e: f6:20:e3:68:b3:56:cd:2d:42:e6:1a:c7:8e:4b:2d: 1b:ee:45:98:7e:7f:fd:b6:4d:b9:a0:d6:35:bd:3e: 23:d3:fc:42:1e:c7:f4:e3:ae:40:d0:81:ec:d4:97: 89:9e:8b:ae:3e:43:9d:d7:be:eb:da:8f:a4:31:00: 7d:c2:3e:2e:78:a4:76:24:35:15:5b:26:a1:85:33: 75:10:eb:46:03:e6:68:c3:0c:07:19:ca:1b:5b:a3: fa:c8:19:b3:7a:c4:9c:cf:2c:81:35:c1:99:7a:56: 56:8a:3d:70:48:a2:a1:4d:36:a4:9b:3b:a0:3c:f6: c3:65:7d:68:2b:37:68:4f:85:db:ee:07:db:0e:77: 57:0e:3a:6b:62:17:55:69:24:36:f5:09:bb:4e:6f: 24:7d:22:6b:37:77:1a:a7:85:e3:ae:2c:ea:14:72: 6e:cc:a2:e3:73:94:59:82:07:5b:61:2f:51:a2:95: 5d:25:dc:a0:9f:24:5c:6e:fe:77:bb:5a:67:a9:45: fa:1e:eb:3c:c7:f9:b2:59:22:af:1c:04:e9:a0:0b: 45:f6:c4:88:6e:91:04:f1:82:03:39:d6:8d:13:80: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:83:A5:26:2C:B6:36:6E:D9:50:DC:61:69:45:E1:CA:69:08:D0:2D X509v3 Authority Key Identifier: keyid:F7:68:FF:6E:68:18:58:C0:EC:19:F3:A9:3F:A1:79:2C:D1:6C:EE:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/F768FF6E681858C0EC19F3A93FA1792CD16CEED3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92j_bmgYWMDsGfOpP6F5LNFs7tM.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0cc08737-9267-402a-99d4-7aaafea444ed/0/352e3232362e3138352e302f32342d3234203d3e2034363337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.226.185.0/24 Signature Algorithm: sha256WithRSAEncryption b1:9b:99:28:cf:de:43:5e:21:a2:ed:57:31:0b:0f:00:c5:1b: c1:8a:c7:91:6f:5e:cc:49:c6:b1:3b:21:49:1c:e4:eb:b7:30: 64:2f:58:f0:a6:fa:43:c3:84:c5:bd:99:c6:a9:90:e2:1f:33: 7c:c2:89:48:e1:7d:04:e1:9a:99:3e:59:4c:70:a4:2e:2e:e1: c0:e6:e8:f2:0c:80:65:fc:49:7a:dc:1a:0d:49:9d:dd:67:e3: 6f:11:6a:56:8d:52:98:34:53:80:a2:30:e9:09:a8:96:21:8f: bb:1d:ae:91:d3:04:90:5a:77:80:e1:8b:c0:5e:87:9f:1a:e1: ab:b4:41:fe:ef:bb:b7:6a:87:29:10:60:a8:49:22:19:2a:a0: 61:bc:68:e5:94:1e:55:0b:f7:1f:47:23:14:6b:b3:85:ed:24: 5f:6a:09:25:30:91:1a:25:6c:f9:35:6d:27:3e:64:a3:e3:cd: 7a:60:80:1b:eb:48:9f:83:6a:73:17:83:ac:fd:3b:58:47:95: e1:42:ae:3d:ff:6e:f6:20:db:ab:8a:57:86:d9:6a:98:32:c8: 58:23:19:0d:39:35:8c:05:88:8e:3a:0c:e0:37:07:95:2c:04: b4:be:b8:aa:30:63:43:3e:7d:e2:9f:42:d1:af:61:10:09:a5: 96:d4:db:2a -----BEGIN CERTIFICATE----- MIIFLzCCBBegAwIBAgIUIL5U04VjmaQAa1EPRvAP6t0ijx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZjc2OGZmNmU2ODE4NThjMGVjMTlmM2E5M2ZhMTc5MmNk MTZjZWVkMzAeFw0yNTEyMjcxMzUwMzJaFw0yNjEyMjYxMzU1MzJaMDMxMTAvBgNV BAMTKEQzODNBNTI2MkNCNjM2NkVEOTUwREM2MTY5NDVFMUNBNjkwOEQwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSpeanqNrDLENtwyih25jkcSpn NP96CTVnq4dfHvYg42izVs0tQuYax45LLRvuRZh+f/22Tbmg1jW9PiPT/EIex/Tj rkDQgezUl4mei64+Q53Xvuvaj6QxAH3CPi54pHYkNRVbJqGFM3UQ60YD5mjDDAcZ yhtbo/rIGbN6xJzPLIE1wZl6VlaKPXBIoqFNNqSbO6A89sNlfWgrN2hPhdvuB9sO d1cOOmtiF1VpJDb1CbtObyR9Ims3dxqnheOuLOoUcm7MouNzlFmCB1thL1GilV0l 3KCfJFxu/ne7WmepRfoe6zzH+bJZIq8cBOmgC0X2xIhukQTxggM51o0TgPKHAgMB AAGjggI5MIICNTAdBgNVHQ4EFgQU04OlJiy2Nm7ZUNxhaUXhymkI0C0wHwYDVR0j BBgwFoAU92j/bmgYWMDsGfOpP6F5LNFs7tMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGNjMDg3MzctOTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0 NGVkLzAvRjc2OEZGNkU2ODE4NThDMEVDMTlGM0E5M0ZBMTc5MkNEMTZDRUVEMy5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkyal9ibWdZV01Ec0dmT3BQNkY1TE5G czd0TS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGNjMDg3Mzct OTI2Ny00MDJhLTk5ZDQtN2FhYWZlYTQ0NGVkLzAvMzUyZTMyMzIzNjJlMzEzODM1 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMzMzcucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAF4rkw DQYJKoZIhvcNAQELBQADggEBALGbmSjP3kNeIaLtVzELDwDFG8GKx5FvXsxJxrE7 IUkc5Ou3MGQvWPCm+kPDhMW9mcapkOIfM3zCiUjhfQThmpk+WUxwpC4u4cDm6PIM gGX8SXrcGg1Jnd1n428RalaNUpg0U4CiMOkJqJYhj7sdrpHTBJBad4Dhi8Beh58a 4au0Qf7vu7dqhykQYKhJIhkqoGG8aOWUHlUL9x9HIxRrs4XtJF9qCSUwkRolbPk1 bSc+ZKPjzXpggBvrSJ+DanMXg6z9O1hHleFCrj3/bvYg26uKV4bZapgyyFgjGQ05 NYwFiI46DOA3B5UsBLS+uKowY0M+feKfQtGvYRAJpZbU2yo= -----END CERTIFICATE-----Generated at Sun Jan 25 10:50:52 2026 by rpki-client