This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31392e302f32342d3234203d3e20323035353437.roa File: 352e3139392e31392e302f32342d3234203d3e20323035353437.roa (raw, json) Hash identifier: Tr4f8xMmuGiPj/0KURX0RgUVUSK2Hy0KA7vj0aCIpX4= Subject key identifier: 01:97:6B:A0:30:42:92:78:7D:38:40:C0:DD:5C:15:0B:F8:29:95:02 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 6B9E9F742B41FFF9EC93F6F66C398FB70BAFB8E0 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31392e302f32342d3234203d3e20323035353437.roa Signing time: Thu 22 Jan 2026 11:34:33 +0000 ROA not before: Thu 22 Jan 2026 11:29:33 +0000 ROA not after: Thu 21 Jan 2027 11:34:33 +0000 asID: 205547 IP address blocks: 5.199.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9e:9f:74:2b:41:ff:f9:ec:93:f6:f6:6c:39:8f:b7:0b:af:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Jan 22 11:29:33 2026 GMT Not After : Jan 21 11:34:33 2027 GMT Subject: CN=01976BA0304292787D3840C0DD5C150BF8299502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:87:1d:cf:7c:11:36:79:70:d8:97:1d:9b:34: 8d:62:5b:f5:ed:d0:01:31:b4:77:b7:d6:f4:03:dd: 59:aa:b5:62:e1:d7:19:e5:08:7f:63:cc:e0:04:4e: 62:f5:27:ab:53:bd:f4:90:ae:09:85:94:55:ad:68: d6:7c:6e:21:28:6b:46:53:b0:1a:19:9e:48:a2:13: 2e:f5:d7:96:ae:5f:50:06:ad:16:a4:89:55:01:a4: a4:85:53:03:6f:76:73:71:07:98:92:cc:99:6d:52: 8c:cd:10:5d:69:68:d6:4a:57:20:08:be:6a:40:8f: 72:ce:1b:d1:bb:1b:02:09:82:2c:b3:26:62:50:2f: f8:3c:71:da:33:dd:8b:31:09:01:0b:17:36:8e:03: 72:0d:40:6c:0a:28:04:9e:58:b0:c5:0b:f2:37:db: a1:ad:29:f0:bc:70:8f:e3:1e:db:86:8f:20:5e:d5: 0f:95:52:49:47:cf:bc:9c:76:8d:39:31:78:33:8b: ab:1f:11:86:8a:75:5d:74:01:81:74:fc:f6:ac:ea: c7:43:d2:95:9d:02:b4:e7:77:9c:73:ac:3f:a8:f3: 97:9c:e6:8f:49:b8:55:41:3c:2b:82:82:25:b4:6c: a5:1e:0e:44:cd:ca:a2:f2:87:a1:ce:73:c4:ea:50: f1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:97:6B:A0:30:42:92:78:7D:38:40:C0:DD:5C:15:0B:F8:29:95:02 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31392e302f32342d3234203d3e20323035353437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.19.0/24 Signature Algorithm: sha256WithRSAEncryption 70:ed:d5:22:74:4c:56:63:e0:be:a0:25:5d:de:eb:79:73:6e: 8f:3c:6e:0a:0b:44:75:0f:9a:33:c2:da:07:1e:66:19:25:8f: 96:a3:c5:6a:b9:c9:d2:3a:91:5c:11:04:a2:45:91:25:8d:0d: 3a:ac:37:d5:33:16:58:af:a6:c0:ff:ca:e5:e7:43:a5:0f:7b: bd:2c:e5:05:19:ba:b0:13:57:ba:d7:f2:2e:5d:b4:bc:cb:6f: 7b:22:47:91:29:ca:82:35:e0:cb:de:cb:e7:ab:89:a0:ca:03: bf:02:29:0e:19:da:a4:b2:f4:43:26:a8:a7:97:96:fd:87:69: 74:85:68:fd:ed:3d:41:97:96:df:39:fa:64:e8:3f:42:65:2e: 04:0d:39:85:e1:d4:41:b3:77:86:79:00:ae:8f:95:42:1b:02: 14:c5:61:4e:4b:a9:79:79:e0:24:fa:bf:9b:4e:bf:e5:88:78: 25:22:d4:e4:6a:30:2b:4e:bb:0f:ad:34:a8:ff:22:0d:b1:6a: 2e:45:e0:81:39:bb:2b:ea:6c:06:2a:77:3a:a6:8b:0e:fc:1a: 62:69:29:d9:c7:e4:e8:11:c7:a8:4d:fd:bd:9d:4d:9a:15:78: 4a:60:54:a0:7e:0e:24:1b:42:63:1b:4b:5a:a0:55:8d:9d:29: 1e:34:67:e0 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUa56fdCtB//nsk/b2bDmPtwuvuOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNjAxMjIxMTI5MzNaFw0yNzAxMjExMTM0MzNaMDMxMTAvBgNV BAMTKDAxOTc2QkEwMzA0MjkyNzg3RDM4NDBDMERENUMxNTBCRjgyOTk1MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhx3PfBE2eXDYlx2bNI1iW/Xt 0AExtHe31vQD3VmqtWLh1xnlCH9jzOAETmL1J6tTvfSQrgmFlFWtaNZ8biEoa0ZT sBoZnkiiEy7115auX1AGrRakiVUBpKSFUwNvdnNxB5iSzJltUozNEF1paNZKVyAI vmpAj3LOG9G7GwIJgiyzJmJQL/g8cdoz3YsxCQELFzaOA3INQGwKKASeWLDFC/I3 26GtKfC8cI/jHtuGjyBe1Q+VUklHz7ycdo05MXgzi6sfEYaKdV10AYF0/Pas6sdD 0pWdArTnd5xzrD+o85ec5o9JuFVBPCuCgiW0bKUeDkTNyqLyh6HOc8TqUPHxAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUAZdroDBCknh9OEDA3VwVC/gplQIwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzNTM1MzQzNy5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXH EzANBgkqhkiG9w0BAQsFAAOCAQEAcO3VInRMVmPgvqAlXd7reXNujzxuCgtEdQ+a M8LaBx5mGSWPlqPFarnJ0jqRXBEEokWRJY0NOqw31TMWWK+mwP/K5edDpQ97vSzl BRm6sBNXutfyLl20vMtveyJHkSnKgjXgy97L56uJoMoDvwIpDhnapLL0Qyaop5eW /YdpdIVo/e09QZeW3zn6ZOg/QmUuBA05heHUQbN3hnkAro+VQhsCFMVhTkupeXng JPq/m06/5Yh4JSLU5GowK067D600qP8iDbFqLkXggTm7K+psBip3OqaLDvwaYmkp 2cfk6BHHqE39vZ1NmhV4SmBUoH4OJBtCYxtLWqBVjZ0pHjRn4A== -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:46 2026 by rpki-client