This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32382e302f32342d3234203d3e20383334.roa File: 352e3139392e32382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: VKO1/Y2P39P54zppO8RILo/fVZmfRKe6TarQjjwDzwo= Subject key identifier: 1F:46:D3:68:3A:53:B0:C1:00:F0:25:DA:24:F8:A7:24:CC:31:86:F8 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 23BFED1A402B26F7832BB0699C8992D91B93F8D1 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32382e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:23 +0000 ROA not before: Mon 08 Dec 2025 11:30:23 +0000 ROA not after: Mon 07 Dec 2026 11:35:23 +0000 asID: 834 IP address blocks: 5.199.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:ed:1a:40:2b:26:f7:83:2b:b0:69:9c:89:92:d9:1b:93:f8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:23 2025 GMT Not After : Dec 7 11:35:23 2026 GMT Subject: CN=1F46D3683A53B0C100F025DA24F8A724CC3186F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:7f:33:07:02:49:f3:86:e1:1b:4a:c3:b0: d6:f7:8d:b5:cc:0f:1b:26:3d:de:0c:ab:09:ff:64: ca:91:95:2b:95:26:7b:34:f1:e3:f8:4c:c6:f7:f0: 29:7b:c0:89:c3:df:8d:03:59:2b:c4:54:a7:b3:bc: f4:c0:77:54:3d:33:74:e8:8c:79:3d:a6:b0:e2:62: 44:01:ef:32:79:8d:15:c3:c7:03:38:2d:82:ac:18: 03:d5:6a:66:c6:cb:1b:3e:0d:14:aa:a1:78:09:0e: c9:61:c0:f8:49:b9:d5:39:1c:df:f8:1d:97:3f:10: 3a:d0:78:d0:ab:79:f4:53:f5:ef:2b:15:e3:72:b0: 95:a4:78:fd:0f:12:54:ee:f3:c1:4f:83:a3:6a:39: 42:bb:17:22:44:71:7a:e9:bf:9e:cb:18:83:7b:a0: 6a:83:6c:90:ad:2a:1b:7f:e9:1a:40:07:05:98:25: e4:6e:40:b7:30:3d:8c:aa:a5:4c:7a:74:8d:1e:52: ad:56:a5:cf:d0:3a:59:b0:d6:d7:40:12:e3:0d:6c: 92:5c:f9:29:0b:2a:ec:60:b5:0d:b4:a8:ca:93:8d: fd:03:12:be:21:1f:5b:f0:42:81:9b:9a:b8:fa:32: 51:db:2e:66:30:7a:28:53:e8:e3:85:9c:93:d9:64: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:46:D3:68:3A:53:B0:C1:00:F0:25:DA:24:F8:A7:24:CC:31:86:F8 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e32382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.28.0/24 Signature Algorithm: sha256WithRSAEncryption 91:e0:2a:fb:e6:47:aa:d2:84:64:b7:4d:d5:eb:47:05:9d:84: ce:0f:e9:94:dd:30:08:a4:96:12:08:59:7f:8c:12:7a:6a:0c: 6a:86:f5:75:a6:09:ac:19:08:df:82:9f:2e:bb:53:9f:9b:d4: 66:93:46:d1:9e:ac:08:43:21:28:8d:6b:0c:f0:db:d2:5c:22: fb:8a:86:78:87:0a:b1:e2:49:5b:15:2f:3f:8d:12:aa:b1:14: 43:62:8c:c1:4a:ed:67:5e:ed:c8:25:27:f3:ff:79:6f:ea:8c: 3f:6c:7f:03:b6:68:e9:fc:1b:d1:9a:ed:f8:46:3b:6b:b7:b8: 9b:6b:6e:a6:bf:9c:a0:54:f3:2d:1d:90:48:9e:49:18:71:2a: a2:f5:7d:f2:6b:c1:b0:8f:6a:4c:de:13:d4:be:28:57:d9:c4: ef:31:d2:1f:4b:31:80:bd:0d:28:6b:4e:ae:97:ae:2a:78:45: 74:9f:48:51:33:ca:7a:3c:e6:5c:30:b1:34:d9:c6:94:c4:30: 59:79:61:1e:36:6c:cb:10:b5:46:eb:bb:2b:6d:93:4a:97:99: 95:98:d1:57:fa:46:c8:e6:b3:13:8f:d7:24:da:f8:01:8a:c6: 53:37:01:a8:b4:90:68:4d:82:d9:90:f2:0d:31:0a:8b:b8:29: b4:93:cc:f5 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUI7/tGkArJveDK7BpnImS2RuT+NEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjNaFw0yNjEyMDcxMTM1MjNaMDMxMTAvBgNV BAMTKDFGNDZEMzY4M0E1M0IwQzEwMEYwMjVEQTI0RjhBNzI0Q0MzMTg2RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmMn8zBwJJ84bhG0rDsNb3jbXM DxsmPd4Mqwn/ZMqRlSuVJns08eP4TMb38Cl7wInD340DWSvEVKezvPTAd1Q9M3To jHk9prDiYkQB7zJ5jRXDxwM4LYKsGAPVambGyxs+DRSqoXgJDslhwPhJudU5HN/4 HZc/EDrQeNCrefRT9e8rFeNysJWkeP0PElTu88FPg6NqOUK7FyJEcXrpv57LGIN7 oGqDbJCtKht/6RpABwWYJeRuQLcwPYyqpUx6dI0eUq1Wpc/QOlmw1tdAEuMNbJJc +SkLKuxgtQ20qMqTjf0DEr4hH1vwQoGbmrj6MlHbLmYweihT6OOFnJPZZCOtAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUH0bTaDpTsMEA8CXaJPinJMwxhvgwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzIzODJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAXHHDANBgkq hkiG9w0BAQsFAAOCAQEAkeAq++ZHqtKEZLdN1etHBZ2Ezg/plN0wCKSWEghZf4wS emoMaob1daYJrBkI34KfLrtTn5vUZpNG0Z6sCEMhKI1rDPDb0lwi+4qGeIcKseJJ WxUvP40SqrEUQ2KMwUrtZ17tyCUn8/95b+qMP2x/A7Zo6fwb0Zrt+EY7a7e4m2tu pr+coFTzLR2QSJ5JGHEqovV98mvBsI9qTN4T1L4oV9nE7zHSH0sxgL0NKGtOrpeu KnhFdJ9IUTPKejzmXDCxNNnGlMQwWXlhHjZsyxC1Ruu7K22TSpeZlZjRV/pGyOaz E4/XJNr4AYrGUzcBqLSQaE2C2ZDyDTEKi7gptJPM9Q== -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:26 2025 by rpki-client