This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e2039333034.roa File: 352e3139392e31382e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: 9gSMoUpdN2/ZGyzYVi4Ib3KeLcwk6C4mPYoQBhbeAa0= Subject key identifier: 02:5C:D9:D7:56:9D:C9:26:BD:61:21:2D:EF:B3:87:81:31:34:90:7E Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 5538BE29CD55C3B90D68AE05A7D88EB84B9F84C4 Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:33:58 +0000 ROA not before: Mon 08 Dec 2025 11:28:58 +0000 ROA not after: Mon 07 Dec 2026 11:33:58 +0000 asID: 9304 IP address blocks: 5.199.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:38:be:29:cd:55:c3:b9:0d:68:ae:05:a7:d8:8e:b8:4b:9f:84:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:28:58 2025 GMT Not After : Dec 7 11:33:58 2026 GMT Subject: CN=025CD9D7569DC926BD61212DEFB387813134907E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e3:8c:88:18:55:8b:23:3f:4e:74:df:f8:53: 0e:91:38:70:17:c5:f1:1f:ae:bc:87:fe:58:d1:f1: 80:8f:e1:38:ef:47:d7:f4:aa:4b:ff:c0:af:5a:f8: 39:99:77:08:47:a2:d4:b3:28:ae:48:49:3c:18:61: 0c:4a:53:c3:d6:3f:4d:86:d9:57:40:4e:9c:86:50: 37:78:98:f5:e1:3b:10:c8:78:c5:50:b3:96:99:ca: 08:71:96:4c:84:23:d4:ad:56:29:be:f3:4c:8b:c3: a5:08:2b:9c:b2:de:e8:6d:4a:f8:9d:75:fb:dd:78: d1:e8:ad:1a:f2:e7:f4:d3:77:12:a0:de:f2:9c:af: 4c:96:80:1d:90:2a:94:ea:48:3b:13:dc:33:ca:33: cb:80:d5:ba:f7:58:f0:e3:35:1a:85:87:51:41:9f: c9:2b:d8:32:9e:ac:0a:c6:fa:6f:ca:0a:45:78:6b: c8:e9:38:d1:a7:73:d5:15:22:b6:d8:b1:d9:44:8b: 24:78:0c:2d:2c:af:f1:ad:48:e0:0c:fb:e6:35:9d: 3a:60:79:e8:5b:aa:ef:d4:58:a2:02:a2:44:45:7f: bc:54:67:c1:00:bb:81:54:cf:02:24:0a:2c:be:3f: 27:24:d9:14:e2:bf:01:21:d7:85:c6:b6:b4:d2:90: 91:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5C:D9:D7:56:9D:C9:26:BD:61:21:2D:EF:B3:87:81:31:34:90:7E X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e31382e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.18.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:df:16:33:1c:56:70:19:d8:bd:fc:f3:30:b2:5f:9b:0d:96: 0a:36:a3:2c:1e:17:88:d5:b0:a7:82:89:96:3d:6b:60:72:05: cc:ee:66:a0:ca:d2:e1:28:e8:93:98:69:39:32:a1:21:87:bb: 1a:e4:f6:47:27:46:6f:3a:49:35:b9:83:fe:e8:3b:14:bd:d3: 11:94:86:0c:06:49:a2:8a:7b:c5:c4:5e:65:95:2d:d8:b6:8d: ec:96:e7:fd:bb:c2:44:63:6f:d1:b0:17:18:33:01:69:1c:ef: 36:95:85:40:f9:55:a1:f9:9f:69:fb:2e:6a:26:9e:e4:6a:d4: 63:7e:11:c2:74:4e:cd:6f:36:8a:05:03:7c:92:37:a9:68:3b: c0:21:d3:be:f6:57:c4:32:b9:30:e1:1f:8b:1d:2c:69:05:1f: 7b:dc:e9:88:ff:0b:fb:e4:3c:3a:94:86:c1:8c:a4:e5:86:d1: 1b:a2:23:6c:bd:0f:6e:0c:f3:7d:ea:c9:ce:31:c5:b2:08:9c: 9d:49:af:00:a2:8f:cd:a4:54:31:bd:bb:8b:91:21:45:5b:00: 2e:3a:ea:1c:cd:59:22:8e:10:5a:5b:94:95:ad:da:b0:33:4d: 96:86:16:ac:82:0c:7d:7a:6d:5a:c4:a2:10:2b:7f:ee:d2:a7: 7a:8f:42:44 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUVTi+Kc1Vw7kNaK4Fp9iOuEufhMQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTI4NThaFw0yNjEyMDcxMTMzNThaMDMxMTAvBgNV BAMTKDAyNUNEOUQ3NTY5REM5MjZCRDYxMjEyREVGQjM4NzgxMzEzNDkwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC744yIGFWLIz9OdN/4Uw6ROHAX xfEfrryH/ljR8YCP4TjvR9f0qkv/wK9a+DmZdwhHotSzKK5ISTwYYQxKU8PWP02G 2VdATpyGUDd4mPXhOxDIeMVQs5aZyghxlkyEI9StVim+80yLw6UIK5yy3uhtSvid dfvdeNHorRry5/TTdxKg3vKcr0yWgB2QKpTqSDsT3DPKM8uA1br3WPDjNRqFh1FB n8kr2DKerArG+m/KCkV4a8jpONGnc9UVIrbYsdlEiyR4DC0sr/GtSOAM++Y1nTpg eehbqu/UWKICokRFf7xUZ8EAu4FUzwIkCiy+Pyck2RTivwEh14XGtrTSkJERAgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUAlzZ11adySa9YSEt77OHgTE0kH4wHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzEzODJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABccSMA0G CSqGSIb3DQEBCwUAA4IBAQBu3xYzHFZwGdi9/PMwsl+bDZYKNqMsHheI1bCngomW PWtgcgXM7magytLhKOiTmGk5MqEhh7sa5PZHJ0ZvOkk1uYP+6DsUvdMRlIYMBkmi invFxF5llS3Yto3sluf9u8JEY2/RsBcYMwFpHO82lYVA+VWh+Z9p+y5qJp7katRj fhHCdE7NbzaKBQN8kjepaDvAIdO+9lfEMrkw4R+LHSxpBR973OmI/wv75Dw6lIbB jKTlhtEboiNsvQ9uDPN96snOMcWyCJydSa8Aoo/NpFQxvbuLkSFFWwAuOuoczVki jhBaW5SVrdqwM02Whhasggx9em1axKIQK3/u0qd6j0JE -----END CERTIFICATE-----Generated at Sat Dec 20 04:20:15 2025 by rpki-client