This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35312e302f32342d3234203d3e2039333034.roa File: 352e3139392e35312e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: t/ZGO4/KAURuZWwGtTAg5kH+hDUCFNvJ9k5GGSwZqPE= Subject key identifier: 36:45:2A:D8:AD:36:5F:1F:C2:7D:76:0E:A4:92:93:84:49:4B:98:C7 Certificate issuer: /CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Certificate serial: 2BD4E68E54E2A555757B1ACE9512388D588D185C Authority key identifier: 4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35312e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:33:59 +0000 ROA not before: Mon 08 Dec 2025 11:28:59 +0000 ROA not after: Mon 07 Dec 2026 11:33:59 +0000 asID: 9304 IP address blocks: 5.199.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.mft rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:d4:e6:8e:54:e2:a5:55:75:7b:1a:ce:95:12:38:8d:58:8d:18:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b3aca3a7c652a9faf8e4e119bd2f7bf54afde76 Validity Not Before: Dec 8 11:28:59 2025 GMT Not After : Dec 7 11:33:59 2026 GMT Subject: CN=36452AD8AD365F1FC27D760EA4929384494B98C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:83:cb:5d:5a:99:56:e6:57:02:38:6d:16:4c: 05:b3:86:cd:ca:dc:99:25:71:3f:bf:04:3a:d9:2d: 61:ca:64:94:96:6c:a7:44:4f:63:37:f9:38:51:52: 36:91:07:d9:a8:29:ec:12:1b:63:a1:f8:dc:81:09: ff:e6:d7:87:26:4a:1f:a9:fe:7d:0c:e4:b0:08:d0: cb:8b:a7:f2:ab:7b:33:76:71:ea:cb:12:43:79:79: 69:59:12:f8:c1:13:1b:0c:2b:1e:3a:81:dc:5f:b4: ce:ab:9f:6b:96:ec:06:3b:2d:f4:c3:f1:f4:7a:25: 19:2d:84:3c:b3:eb:75:ec:a7:83:ae:22:66:6c:76: f5:6b:f7:63:8b:34:49:1c:a7:c0:0d:37:5b:f0:0f: 78:9e:ad:45:e8:bf:08:08:19:cc:4c:a9:6d:bd:c7: c5:97:b2:10:5a:8c:20:d7:4f:b6:e5:4c:ee:6a:e6: 82:43:81:3a:76:25:6c:4c:ff:ef:c2:00:c1:0d:6c: 3f:eb:70:26:12:58:85:9c:02:91:c6:ce:f0:59:ef: 49:2c:65:60:da:99:01:86:24:a1:f4:23:fd:9f:e1: 50:b9:99:fc:ff:ea:ef:81:4d:61:d5:71:9a:8e:4a: 91:cf:75:9c:88:e1:28:d6:53:39:0e:9f:1c:52:b4: 16:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:45:2A:D8:AD:36:5F:1F:C2:7D:76:0E:A4:92:93:84:49:4B:98:C7 X509v3 Authority Key Identifier: keyid:4B:3A:CA:3A:7C:65:2A:9F:AF:8E:4E:11:9B:D2:F7:BF:54:AF:DE:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/4B3ACA3A7C652A9FAF8E4E119BD2F7BF54AFDE76.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SzrKOnxlKp-vjk4Rm9L3v1Sv3nY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0d854c77-fd8b-425a-bd55-82e1d7faa782/0/352e3139392e35312e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.199.51.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:f3:f9:55:d0:d1:ec:43:6e:a5:e9:80:a8:bf:a9:46:69:68: d6:5a:20:33:19:d5:49:5d:20:ce:b3:1b:0e:99:16:05:d0:4c: fa:69:17:cc:2d:7c:b6:da:31:1a:0a:7f:46:6f:a5:67:c6:f4: c8:36:ec:65:72:b8:a1:55:9a:4c:c5:9d:21:6c:b0:12:ee:34: 51:c9:92:6e:83:72:10:1f:b8:7a:86:fa:6f:c9:6a:c5:3f:35: 73:c2:34:a9:46:3f:1e:57:b3:86:29:0d:49:98:29:8b:91:0e: 1d:35:e3:d3:21:12:7f:07:c9:58:08:4c:d3:a6:0e:1b:6d:c8: 50:0f:ce:0e:64:93:45:e5:1a:dd:89:c1:aa:5e:a3:db:fb:c9: 0e:ff:1a:3f:e4:52:19:9f:06:80:6b:e1:08:fd:82:5f:f7:ad: 7d:27:40:d8:4a:76:00:9e:6a:6e:ea:5c:19:fc:55:e0:17:04: 27:eb:48:f3:82:1f:cb:6d:2e:1a:e0:ec:ed:97:ed:4f:53:76: cc:d4:63:95:aa:9f:76:26:2f:ec:1c:cc:3a:45:14:12:36:a3: 42:e3:d2:5f:c8:d5:78:65:90:a6:80:48:f5:8c:f3:d3:8b:a3: b1:00:a7:76:d7:08:64:f5:19:df:6c:e1:e1:15:9d:63:cd:ea: e7:27:5a:b5 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgIUK9TmjlTipVV1exrOlRI4jViNGFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGIzYWNhM2E3YzY1MmE5ZmFmOGU0ZTExOWJkMmY3YmY1 NGFmZGU3NjAeFw0yNTEyMDgxMTI4NTlaFw0yNjEyMDcxMTMzNTlaMDMxMTAvBgNV BAMTKDM2NDUyQUQ4QUQzNjVGMUZDMjdENzYwRUE0OTI5Mzg0NDk0Qjk4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRg8tdWplW5lcCOG0WTAWzhs3K 3JklcT+/BDrZLWHKZJSWbKdET2M3+ThRUjaRB9moKewSG2Oh+NyBCf/m14cmSh+p /n0M5LAI0MuLp/KrezN2cerLEkN5eWlZEvjBExsMKx46gdxftM6rn2uW7AY7LfTD 8fR6JRkthDyz63Xsp4OuImZsdvVr92OLNEkcp8ANN1vwD3ierUXovwgIGcxMqW29 x8WXshBajCDXT7blTO5q5oJDgTp2JWxM/+/CAMENbD/rcCYSWIWcApHGzvBZ70ks ZWDamQGGJKH0I/2f4VC5mfz/6u+BTWHVcZqOSpHPdZyI4SjWUzkOnxxStBa/AgMB AAGjggI3MIICMzAdBgNVHQ4EFgQUNkUq2K02Xx/CfXYOpJKThElLmMcwHwYDVR0j BBgwFoAUSzrKOnxlKp+vjk4Rm9L3v1Sv3nYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzctZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFh NzgyLzAvNEIzQUNBM0E3QzY1MkE5RkFGOEU0RTExOUJEMkY3QkY1NEFGREU3Ni5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1N6cktPbnhsS3AtdmprNFJtOUwzdjFT djNuWS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMGQ4NTRjNzct ZmQ4Yi00MjVhLWJkNTUtODJlMWQ3ZmFhNzgyLzAvMzUyZTMxMzkzOTJlMzUzMTJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABcczMA0G CSqGSIb3DQEBCwUAA4IBAQBb8/lV0NHsQ26l6YCov6lGaWjWWiAzGdVJXSDOsxsO mRYF0Ez6aRfMLXy22jEaCn9Gb6VnxvTINuxlcrihVZpMxZ0hbLAS7jRRyZJug3IQ H7h6hvpvyWrFPzVzwjSpRj8eV7OGKQ1JmCmLkQ4dNePTIRJ/B8lYCEzTpg4bbchQ D84OZJNF5RrdicGqXqPb+8kO/xo/5FIZnwaAa+EI/YJf9619J0DYSnYAnmpu6lwZ /FXgFwQn60jzgh/LbS4a4Oztl+1PU3bM1GOVqp92Ji/sHMw6RRQSNqNC49JfyNV4 ZZCmgEj1jPPTi6OxAKd21whk9RnfbOHhFZ1jzernJ1q1 -----END CERTIFICATE-----Generated at Sat Dec 20 04:20:06 2025 by rpki-client