This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20323135373033.roa File: 352e3138312e3138372e302f32342d3234203d3e20323135373033.roa (raw, json) Hash identifier: EJ6RmJBNoUg0c9WoYw2Ja1OnADVswQoLG/EoG0ZGnFE= Subject key identifier: C3:DB:B1:AC:76:8E:53:5C:88:36:DB:F2:54:86:A4:79:45:B5:49:A6 Certificate issuer: /CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Certificate serial: 18A0F6453A0064EA4832561ACB23C61464A35783 Authority key identifier: A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20323135373033.roa Signing time: Sat 13 Dec 2025 12:55:32 +0000 ROA not before: Sat 13 Dec 2025 12:50:32 +0000 ROA not after: Sat 12 Dec 2026 12:55:32 +0000 asID: 215703 IP address blocks: 5.181.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.mft rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a0:f6:45:3a:00:64:ea:48:32:56:1a:cb:23:c6:14:64:a3:57:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9420e6c6f24b0e422da7fe7e420ef50354f45c6 Validity Not Before: Dec 13 12:50:32 2025 GMT Not After : Dec 12 12:55:32 2026 GMT Subject: CN=C3DBB1AC768E535C8836DBF25486A47945B549A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:28:5e:bc:33:7f:c8:e6:40:d0:b6:12:ea: 05:b7:5e:1b:67:7b:42:c2:b6:80:64:9e:af:a4:e0: ad:a2:6a:ff:2c:a0:b5:58:62:4c:12:35:ef:e8:29: 92:ca:b8:f3:c0:09:a8:1e:b3:93:87:e9:90:87:b1: 7e:bf:1b:0e:0d:e8:11:0b:c9:fd:07:f2:62:6b:6c: cd:63:8b:8b:ce:5a:ba:d5:2f:9e:13:7c:0e:9a:ae: fa:88:ea:b3:33:6f:a8:2b:1c:71:e8:7c:07:66:97: 7b:34:cb:66:fd:5e:77:99:ee:31:ab:ce:0e:23:dd: 4f:d3:e6:17:1d:88:1f:56:74:1e:27:7b:7c:4c:24: 54:4e:42:ab:19:2b:ba:04:5c:fe:9e:1b:f0:ff:fa: 61:11:dd:f0:5e:cc:53:b1:27:5a:14:b6:25:bb:33: 03:2e:3b:80:34:28:0b:ad:d3:56:37:d2:17:26:ae: 17:51:1b:62:83:41:d2:bd:bb:74:ee:f0:bd:8b:be: 02:85:f7:36:8f:f2:e0:70:b1:49:61:32:88:65:b2: 85:1d:91:f3:78:49:9d:96:11:fd:16:dd:bb:9b:1e: 56:2d:16:a9:40:78:0f:1b:9d:74:ea:8f:3c:e2:4c: a0:d6:8a:c6:8c:06:b0:f4:51:7f:52:26:4c:34:70: b6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DB:B1:AC:76:8E:53:5C:88:36:DB:F2:54:86:A4:79:45:B5:49:A6 X509v3 Authority Key Identifier: keyid:A9:42:0E:6C:6F:24:B0:E4:22:DA:7F:E7:E4:20:EF:50:35:4F:45:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/A9420E6C6F24B0E422DA7FE7E420EF50354F45C6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUIObG8ksOQi2n_n5CDvUDVPRcY.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1f9823d0-0855-41f2-ac46-59a2e98da736/1/352e3138312e3138372e302f32342d3234203d3e20323135373033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.187.0/24 Signature Algorithm: sha256WithRSAEncryption 14:08:c9:0b:9b:1a:83:4f:5d:fe:f6:7c:1b:1b:dc:27:3b:9a: 8b:a9:94:f8:11:c8:a0:68:20:11:ae:28:78:6f:89:89:4c:db: 57:86:d7:c0:a4:ef:94:c6:74:9e:a3:16:dc:37:37:c9:49:1c: 74:2d:af:1d:29:88:38:38:f2:c7:b9:0c:6a:30:d3:1e:4d:ce: 9e:2e:60:49:f7:7d:40:fa:6a:3c:9c:5a:d2:9b:2b:4d:8b:cf: 5b:f8:55:0f:b7:03:4f:6d:6e:ad:79:8c:d2:fd:d1:9c:8f:32: ab:7c:e1:40:5f:be:ad:99:db:bd:15:bf:78:8c:66:cd:5a:97: e4:47:7a:29:0e:79:51:4f:fd:63:3f:7a:9e:81:67:d8:11:d3: 67:c9:20:37:dd:a4:c7:5b:c4:f7:d5:ca:52:cb:30:94:3b:48: 27:3f:12:71:b6:62:23:f9:f4:5f:e6:a2:ce:81:7d:87:7d:9a: 85:8f:59:af:8d:25:e2:db:73:4b:42:2e:c0:6c:a2:90:b1:af: 71:5c:3e:a4:69:44:1d:d7:81:8d:d8:7a:4e:9f:1e:73:88:56: 8b:e0:12:32:39:7b:63:48:c7:0a:1c:da:2b:cd:11:9f:59:9a: 4b:e6:9d:51:12:44:69:77:41:42:fc:a7:7d:e8:9e:67:36:ff: 42:cc:6f:ae -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUGKD2RToAZOpIMlYayyPGFGSjV4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTk0MjBlNmM2ZjI0YjBlNDIyZGE3ZmU3ZTQyMGVmNTAz NTRmNDVjNjAeFw0yNTEyMTMxMjUwMzJaFw0yNjEyMTIxMjU1MzJaMDMxMTAvBgNV BAMTKEMzREJCMUFDNzY4RTUzNUM4ODM2REJGMjU0ODZBNDc5NDVCNTQ5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7qShevDN/yOZA0LYS6gW3Xhtn e0LCtoBknq+k4K2iav8soLVYYkwSNe/oKZLKuPPACages5OH6ZCHsX6/Gw4N6BEL yf0H8mJrbM1ji4vOWrrVL54TfA6arvqI6rMzb6grHHHofAdml3s0y2b9XneZ7jGr zg4j3U/T5hcdiB9WdB4ne3xMJFROQqsZK7oEXP6eG/D/+mER3fBezFOxJ1oUtiW7 MwMuO4A0KAut01Y30hcmrhdRG2KDQdK9u3Tu8L2LvgKF9zaP8uBwsUlhMohlsoUd kfN4SZ2WEf0W3bubHlYtFqlAeA8bnXTqjzziTKDWisaMBrD0UX9SJkw0cLYjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUw9uxrHaOU1yINtvyVIakeUW1SaYwHwYDVR0j BBgwFoAUqUIObG8ksOQi2n/n5CDvUDVPRcYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAtMDg1NS00MWYyLWFjNDYtNTlhMmU5OGRh NzM2LzEvQTk0MjBFNkM2RjI0QjBFNDIyREE3RkU3RTQyMEVGNTAzNTRGNDVDNi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3FVSU9iRzhrc09RaTJuX241Q0R2VURW UFJjWS5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMWY5ODIzZDAt MDg1NS00MWYyLWFjNDYtNTlhMmU5OGRhNzM2LzEvMzUyZTMxMzgzMTJlMzEzODM3 MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM1MzczMDMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA BbW7MA0GCSqGSIb3DQEBCwUAA4IBAQAUCMkLmxqDT13+9nwbG9wnO5qLqZT4Ecig aCARrih4b4mJTNtXhtfApO+UxnSeoxbcNzfJSRx0La8dKYg4OPLHuQxqMNMeTc6e LmBJ931A+mo8nFrSmytNi89b+FUPtwNPbW6teYzS/dGcjzKrfOFAX76tmdu9Fb94 jGbNWpfkR3opDnlRT/1jP3qegWfYEdNnySA33aTHW8T31cpSyzCUO0gnPxJxtmIj +fRf5qLOgX2HfZqFj1mvjSXi23NLQi7AbKKQsa9xXD6kaUQd14GN2HpOnx5ziFaL 4BIyOXtjSMcKHNorzRGfWZpL5p1REkRpd0FC/Kd96J5nNv9CzG+u -----END CERTIFICATE-----Generated at Sat Dec 20 08:02:35 2025 by rpki-client