This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31392e302f32342d3234203d3e20383334.roa File: 352e3139392e31392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: YHNMwXkl9GPt+lBnjQQbGk82zfAgvDp4O6qFC4SNsHk= Subject key identifier: 8C:26:8E:22:43:58:01:D0:11:5F:86:90:4E:40:C6:C8:AC:C7:F5:A7 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 5279DDEDF4846DD46BF6DDD8106E30DF56ADEFDD Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31392e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:23 +0000 ROA not before: Mon 08 Dec 2025 11:30:23 +0000 ROA not after: Mon 07 Dec 2026 11:35:23 +0000 asID: 834 IP address blocks: 5.199.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:79:dd:ed:f4:84:6d:d4:6b:f6:dd:d8:10:6e:30:df:56:ad:ef:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:23 2025 GMT Not After : Dec 7 11:35:23 2026 GMT Subject: CN=8C268E22435801D0115F86904E40C6C8ACC7F5A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:c5:93:04:a3:58:54:48:75:5e:fe:25:c0:06: bc:49:a2:b3:4c:e3:37:2f:bd:84:7b:36:f3:7c:10: 00:33:23:8c:bc:e4:40:db:7b:e9:8c:5d:cf:b7:e0: 05:29:12:11:67:29:ff:0a:ad:0a:e0:ce:17:51:76: 48:17:8e:1c:ed:8c:a4:64:03:bb:d7:a5:b5:ce:99: 05:9b:96:20:8d:fb:56:ce:24:47:97:b2:df:e7:23: b5:f2:99:bf:79:01:70:22:68:de:f6:1f:64:ba:91: 6d:06:24:1f:1e:8f:13:85:78:7e:0c:32:d1:87:50: a4:d1:94:ce:8d:93:fc:52:59:60:3f:b6:c2:5e:2b: 57:f6:ad:b3:16:a7:30:3b:c6:44:0c:28:8e:7d:a1: 31:34:f9:3a:78:99:d7:7b:fd:0f:69:37:fc:73:5e: 8f:01:bc:a4:1a:45:da:c2:62:5c:cd:93:25:88:33: 25:62:5c:e2:5c:62:ff:f5:c6:be:af:e5:e8:55:d8: bc:2b:f5:a5:34:3b:18:a5:3c:43:57:d1:78:5c:eb: 41:58:4b:80:10:e2:ab:c3:21:34:61:f0:d8:36:12: 20:32:d8:e0:6c:a5:ae:cb:c3:82:ac:89:68:24:06: c1:a3:b7:13:aa:dd:87:b4:11:f7:16:27:17:8d:76: e0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:26:8E:22:43:58:01:D0:11:5F:86:90:4E:40:C6:C8:AC:C7:F5:A7 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.19.0/24 Signature Algorithm: sha256WithRSAEncryption 27:73:c3:ce:c6:55:7a:b1:01:f3:b7:e4:ee:4e:9d:a5:9f:d9: 39:ba:a9:ce:5b:7d:52:03:07:2b:11:dd:6f:ed:c5:09:44:aa: 17:67:57:df:98:e8:85:b2:a5:88:5a:b9:58:8c:31:b2:0b:78: ab:d2:d4:be:f3:af:95:c4:ec:72:77:f7:da:a3:1c:70:d5:24: 12:36:9d:a6:36:20:c1:f4:f3:5c:57:bf:b2:de:19:4b:d7:cd: 15:67:d1:fe:3d:fd:81:7c:d8:4d:45:64:ce:80:4a:14:68:10: 05:83:dd:a8:2e:60:02:2a:bb:ee:b4:4f:c5:57:ac:85:17:78: f9:9e:3b:71:22:28:eb:09:a9:da:2f:60:cc:d8:94:2b:ea:7f: ba:78:af:20:68:46:36:e1:63:1b:56:20:f7:50:46:1d:f0:0d: bc:12:6b:71:2d:8d:1f:00:db:38:6a:53:8e:94:e6:b0:5c:aa: e3:61:45:2f:4d:8f:eb:7f:9d:ca:85:b7:ea:1c:7c:ea:04:b3: 74:01:25:cd:0e:6f:7d:97:db:ad:d3:f9:37:5b:01:c7:19:1c: ed:90:87:e7:95:7b:4f:a5:8b:19:4b:51:55:de:82:2a:b8:28: 78:98:87:4c:65:b4:4b:15:b6:33:13:a0:02:4d:95:f5:0c:5f: 76:f0:ed:09 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUUnnd7fSEbdRr9t3YEG4w31at790wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjNaFw0yNjEyMDcxMTM1MjNaMDMxMTAvBgNV BAMTKDhDMjY4RTIyNDM1ODAxRDAxMTVGODY5MDRFNDBDNkM4QUNDN0Y1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5xZMEo1hUSHVe/iXABrxJorNM 4zcvvYR7NvN8EAAzI4y85EDbe+mMXc+34AUpEhFnKf8KrQrgzhdRdkgXjhztjKRk A7vXpbXOmQWbliCN+1bOJEeXst/nI7Xymb95AXAiaN72H2S6kW0GJB8ejxOFeH4M MtGHUKTRlM6Nk/xSWWA/tsJeK1f2rbMWpzA7xkQMKI59oTE0+Tp4mdd7/Q9pN/xz Xo8BvKQaRdrCYlzNkyWIMyViXOJcYv/1xr6v5ehV2Lwr9aU0OxilPENX0Xhc60FY S4AQ4qvDITRh8Ng2EiAy2OBspa7Lw4KsiWgkBsGjtxOq3Ye0EfcWJxeNduBXAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUjCaOIkNYAdARX4aQTkDGyKzH9acwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzOTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHEzANBgkq hkiG9w0BAQsFAAOCAQEAJ3PDzsZVerEB87fk7k6dpZ/ZObqpzlt9UgMHKxHdb+3F CUSqF2dX35johbKliFq5WIwxsgt4q9LUvvOvlcTscnf32qMccNUkEjadpjYgwfTz XFe/st4ZS9fNFWfR/j39gXzYTUVkzoBKFGgQBYPdqC5gAiq77rRPxVeshRd4+Z47 cSIo6wmp2i9gzNiUK+p/univIGhGNuFjG1Yg91BGHfANvBJrcS2NHwDbOGpTjpTm sFyq42FFL02P63+dyoW36hx86gSzdAElzQ5vfZfbrdP5N1sBxxkc7ZCH55V7T6WL GUtRVd6CKrgoeJiHTGW0SxW2MxOgAk2V9QxfdvDtCQ== -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:26 2025 by rpki-client