This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32332d3234203d3e20383334.roa File: 352e3139392e34382e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: /HVdA2vkZZoStRv5dnhzR7fIJNnXWIkRrCV86w3ycXA= Subject key identifier: 34:CF:C5:18:41:6E:78:F1:4B:2B:EF:2F:33:3F:7C:37:4A:07:BE:52 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 7AC720F14C4A324C277054DA5FCB44984679B5E8 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32332d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:22 +0000 ROA not before: Mon 08 Dec 2025 11:30:22 +0000 ROA not after: Mon 07 Dec 2026 11:35:22 +0000 asID: 834 IP address blocks: 5.199.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:c7:20:f1:4c:4a:32:4c:27:70:54:da:5f:cb:44:98:46:79:b5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:22 2025 GMT Not After : Dec 7 11:35:22 2026 GMT Subject: CN=34CFC518416E78F14B2BEF2F333F7C374A07BE52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:7b:16:d8:f2:41:32:ac:9b:68:a6:82:84: 61:1b:22:84:c5:1d:73:3f:7d:41:a8:d8:a4:a4:1d: 54:9e:ad:ea:ef:fd:69:a0:94:bc:7c:3c:ca:2d:eb: d3:5b:91:25:50:b7:dc:31:b8:77:40:50:2a:a1:2e: c9:13:29:70:74:7f:0b:33:65:21:6b:d2:da:ef:c4: df:a6:ef:cc:29:52:ee:34:b7:b7:90:19:d8:da:2f: 50:49:14:69:aa:f1:de:15:dd:e2:89:e8:6e:7e:ec: 23:e9:3e:dd:78:13:99:8e:bf:75:e6:01:7a:07:c2: 0f:cc:4d:3c:86:27:bd:42:1d:c7:c3:2f:2c:46:03: a3:8a:ab:a8:f1:64:2a:35:03:96:d1:12:1d:c2:92: 58:01:53:52:b8:a7:ec:45:3f:9f:8f:83:56:a8:6e: 41:c4:9f:81:1d:b2:7a:5f:69:f0:28:68:9f:49:60: 49:f1:8b:97:67:8f:1b:f4:60:f1:0b:eb:f2:5e:7e: a3:53:71:20:87:80:85:4e:a5:98:b6:b3:75:cd:17: ec:57:cf:7e:39:2a:e3:73:f2:7e:7f:74:f3:9a:d7: 6f:95:3b:ed:4d:74:6f:16:93:b7:88:28:c2:47:d1: 7a:16:fe:9a:31:9b:8e:43:a7:db:cb:b3:a8:22:18: 76:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CF:C5:18:41:6E:78:F1:4B:2B:EF:2F:33:3F:7C:37:4A:07:BE:52 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e34382e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.48.0/23 Signature Algorithm: sha256WithRSAEncryption ba:81:0e:47:0b:3d:b8:60:47:06:ea:27:59:1f:5e:e5:33:d9: d3:f4:4c:9b:7f:f2:06:9b:ef:af:ed:26:2f:02:0d:60:58:1f: a9:d4:90:c5:99:a8:ec:4b:71:3e:4a:ec:51:67:76:2f:d0:59: 82:3c:20:3b:c6:87:19:12:8f:33:55:b6:69:80:6e:6b:80:cf: 69:38:20:e2:63:28:71:71:ba:bf:58:c0:2b:cf:55:5e:2f:83: 57:20:9b:27:d9:ee:9d:47:b3:1d:8f:62:4b:04:ed:40:fa:ea: be:94:a2:f2:84:10:73:d3:51:e9:c8:c4:17:f5:7a:76:f4:c9: 56:38:7a:92:62:f6:f5:8e:2d:46:0f:e3:29:74:28:e9:71:4e: d7:40:48:3f:de:48:14:af:e9:ec:bf:44:23:18:ca:b9:75:25: d2:ef:3d:8b:c7:23:ca:8e:33:70:d6:3f:a2:a2:de:d2:ca:f1: 62:53:05:f5:0c:62:62:27:d4:c5:28:85:68:62:c0:7e:98:58: 14:84:99:b1:b8:51:db:8c:87:70:de:da:4b:0e:a0:21:b1:63: 94:0b:3f:78:26:12:74:f3:1c:f1:0c:12:56:4b:1c:18:37:66: 98:76:00:73:02:85:6b:c2:b3:a5:e6:30:f9:6f:3a:ce:f7:ee: 8b:76:cf:9f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUescg8UxKMkwncFTaX8tEmEZ5tegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjJaFw0yNjEyMDcxMTM1MjJaMDMxMTAvBgNV BAMTKDM0Q0ZDNTE4NDE2RTc4RjE0QjJCRUYyRjMzM0Y3QzM3NEEwN0JFNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWRnsW2PJBMqybaKaChGEbIoTF HXM/fUGo2KSkHVSererv/WmglLx8PMot69NbkSVQt9wxuHdAUCqhLskTKXB0fwsz ZSFr0trvxN+m78wpUu40t7eQGdjaL1BJFGmq8d4V3eKJ6G5+7CPpPt14E5mOv3Xm AXoHwg/MTTyGJ71CHcfDLyxGA6OKq6jxZCo1A5bREh3CklgBU1K4p+xFP5+Pg1ao bkHEn4EdsnpfafAoaJ9JYEnxi5dnjxv0YPEL6/JefqNTcSCHgIVOpZi2s3XNF+xX z345KuNz8n5/dPOa12+VO+1NdG8Wk7eIKMJH0XoW/poxm45Dp9vLs6giGHZPAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUNM/FGEFuePFLK+8vMz98N0oHvlIwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzQzODJl MzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAQXHMDANBgkq hkiG9w0BAQsFAAOCAQEAuoEORws9uGBHBuonWR9e5TPZ0/RMm3/yBpvvr+0mLwIN YFgfqdSQxZmo7EtxPkrsUWd2L9BZgjwgO8aHGRKPM1W2aYBua4DPaTgg4mMocXG6 v1jAK89VXi+DVyCbJ9nunUezHY9iSwTtQPrqvpSi8oQQc9NR6cjEF/V6dvTJVjh6 kmL29Y4tRg/jKXQo6XFO10BIP95IFK/p7L9EIxjKuXUl0u89i8cjyo4zcNY/oqLe 0srxYlMF9QxiYifUxSiFaGLAfphYFISZsbhR24yHcN7aSw6gIbFjlAs/eCYSdPMc 8QwSVkscGDdmmHYAcwKFa8KzpeYw+W86zvfui3bPnw== -----END CERTIFICATE-----Generated at Mon Dec 15 17:27:25 2025 by rpki-client