This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35322e302f32322d3234203d3e20383334.roa File: 352e3139392e35322e302f32322d3234203d3e20383334.roa (raw, json) Hash identifier: yOMF9ncpMbXqxqFVgp30gZwEFTJaHtod63YV8FljE7Y= Subject key identifier: 33:E1:80:4F:CF:CA:B9:70:67:7E:C6:BE:04:C6:30:C0:FE:C7:B4:15 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 0567DFEBC2BF2507D4795DAACE348FB4683BF163 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35322e302f32322d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:22 +0000 ROA not before: Mon 08 Dec 2025 11:30:22 +0000 ROA not after: Mon 07 Dec 2026 11:35:22 +0000 asID: 834 IP address blocks: 5.199.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:67:df:eb:c2:bf:25:07:d4:79:5d:aa:ce:34:8f:b4:68:3b:f1:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:30:22 2025 GMT Not After : Dec 7 11:35:22 2026 GMT Subject: CN=33E1804FCFCAB970677EC6BE04C630C0FEC7B415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:a9:b0:da:e7:9c:d3:1f:ea:62:a1:ef:50: 0a:1a:aa:66:80:c0:b3:cd:27:50:c1:67:26:c9:0c: 6b:87:00:68:33:4c:c8:ac:80:d8:f7:94:e7:0a:2c: 36:53:c8:c9:4f:74:b7:32:f4:42:fe:a0:3b:83:79: bd:60:cb:92:3c:9c:a4:cb:a8:3c:5e:90:5f:ef:7e: dc:09:fb:5b:35:98:b1:7f:45:5f:43:0e:d8:b0:4a: 53:f9:e6:7b:80:7d:56:3b:ff:48:22:df:6a:ed:77: 45:cb:d8:29:53:6b:52:8f:8b:dd:68:74:50:1b:d8: e5:b8:a6:90:da:1d:1e:57:73:39:de:dd:88:04:92: 8d:2e:a2:98:72:5c:fb:a6:7c:df:60:42:e8:13:e5: 1b:64:fe:22:ac:e2:3d:24:2b:17:55:17:cf:2a:7a: bd:10:98:6e:f3:8a:b8:06:4b:39:55:cc:08:ec:ce: 66:95:a5:3a:da:16:a6:d2:31:c3:22:5a:7b:ca:f3: 9d:e2:04:2a:37:01:c2:4e:c7:7f:ce:a5:3c:aa:f0: d7:8d:c6:03:e6:f5:85:96:79:da:2e:59:40:e1:92: 0b:b7:db:84:89:7b:c7:6f:10:54:42:47:21:5f:e6: 4f:48:37:60:5e:a8:3b:e6:60:a6:57:5e:8c:a2:ca: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E1:80:4F:CF:CA:B9:70:67:7E:C6:BE:04:C6:30:C0:FE:C7:B4:15 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35322e302f32322d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.52.0/22 Signature Algorithm: sha256WithRSAEncryption 25:d8:c6:65:4f:a2:df:d6:63:1c:0b:b3:21:6b:f4:41:69:b9: d2:10:55:ad:07:fd:c1:e5:5a:b8:02:64:e6:49:e7:8c:72:bf: aa:8a:23:95:b0:86:81:4b:01:6c:47:89:32:22:6a:f8:18:bf: fc:c1:bd:0d:05:69:e0:4f:88:2e:fa:4c:90:7e:d2:01:83:a2: f1:e1:b5:72:cd:96:2d:49:5e:eb:3b:eb:1d:62:4a:3d:f0:e7: 76:de:9d:1e:d2:29:70:cd:f9:a5:62:a0:4d:ba:e8:9d:dc:0c: 5f:33:df:3a:43:55:25:2a:1a:44:76:6b:e4:d6:e5:aa:e2:19: 00:96:41:6a:d1:ef:03:c7:fc:19:01:f1:50:6f:31:7b:63:d0: d2:fc:ae:13:9b:1f:e4:b8:5f:ac:9e:49:2a:83:94:53:62:f1: ee:8b:8c:7b:f9:b6:c4:50:b4:98:ad:e8:0b:2f:2a:87:92:55: 5b:18:d3:4c:93:89:14:d1:96:2a:ba:1a:7f:36:86:4f:72:69: 5a:c7:a8:19:e6:fc:b1:90:45:0e:7f:88:b8:7c:ce:b0:c3:63: 57:11:43:0e:0d:ff:42:13:81:14:47:34:17:6f:4f:bf:39:ed: 76:e5:5b:d3:b9:55:71:60:2f:14:c5:3b:88:d7:b3:5b:53:17: 08:de:77:d4 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgIUBWff68K/JQfUeV2qzjSPtGg78WMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTMwMjJaFw0yNjEyMDcxMTM1MjJaMDMxMTAvBgNV BAMTKDMzRTE4MDRGQ0ZDQUI5NzA2NzdFQzZCRTA0QzYzMEMwRkVDN0I0MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSqmw2uec0x/qYqHvUAoaqmaA wLPNJ1DBZybJDGuHAGgzTMisgNj3lOcKLDZTyMlPdLcy9EL+oDuDeb1gy5I8nKTL qDxekF/vftwJ+1s1mLF/RV9DDtiwSlP55nuAfVY7/0gi32rtd0XL2ClTa1KPi91o dFAb2OW4ppDaHR5Xczne3YgEko0uophyXPumfN9gQugT5Rtk/iKs4j0kKxdVF88q er0QmG7zirgGSzlVzAjszmaVpTraFqbSMcMiWnvK853iBCo3AcJOx3/OpTyq8NeN xgPm9YWWedouWUDhkgu324SJe8dvEFRCRyFf5k9IN2BeqDvmYKZXXoyiyoZjAgMB AAGjggI1MIICMTAdBgNVHQ4EFgQUM+GAT8/KuXBnfsa+BMYwwP7HtBUwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgaUGCCsGAQUFBwELBIGYMIGVMIGSBggrBgEFBQcwC4aBhXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzMjJl MzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAK BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAgXHNDANBgkq hkiG9w0BAQsFAAOCAQEAJdjGZU+i39ZjHAuzIWv0QWm50hBVrQf9weVauAJk5knn jHK/qoojlbCGgUsBbEeJMiJq+Bi//MG9DQVp4E+ILvpMkH7SAYOi8eG1cs2WLUle 6zvrHWJKPfDndt6dHtIpcM35pWKgTbrondwMXzPfOkNVJSoaRHZr5NblquIZAJZB atHvA8f8GQHxUG8xe2PQ0vyuE5sf5LhfrJ5JKoOUU2Lx7ouMe/m2xFC0mK3oCy8q h5JVWxjTTJOJFNGWKroafzaGT3JpWseoGeb8sZBFDn+IuHzOsMNjVxFDDg3/QhOB FEc0F29PvzntduVb07lVcWAvFMU7iNezW1MXCN531A== -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:37 2025 by rpki-client