This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e203235313938.roa File: 3134372e3132352e3132382e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: E07hdgBeaVMgyoHyMQBzLJvi8A5ZH/WPSbk7gWLpc7g= Subject key identifier: C1:50:12:70:E7:65:B4:F1:79:37:B2:95:33:04:C4:43:1D:9B:68:C5 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 76ED2F3245D851041CD082E259B277D096D25A38 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e203235313938.roa Signing time: Sun 04 Jan 2026 09:49:30 +0000 ROA not before: Sun 04 Jan 2026 09:44:30 +0000 ROA not after: Sun 03 Jan 2027 09:49:30 +0000 asID: 25198 IP address blocks: 147.125.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ed:2f:32:45:d8:51:04:1c:d0:82:e2:59:b2:77:d0:96:d2:5a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 4 09:44:30 2026 GMT Not After : Jan 3 09:49:30 2027 GMT Subject: CN=C1501270E765B4F17937B2953304C4431D9B68C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:66:be:cd:9f:82:c1:df:ea:c1:bf:d6:c9:83: 46:11:ac:cd:40:57:9d:4f:92:1d:32:fb:a2:c9:6f: be:b1:e9:46:00:0d:2c:7c:97:7e:eb:e9:70:8e:53: d7:c3:fa:cb:1c:df:4c:a4:f3:24:a0:0b:bc:fc:51: 27:4d:d5:33:f9:0f:41:b3:b2:95:d7:7d:45:88:34: f9:55:5b:62:da:2a:24:b6:83:6e:7d:72:0f:65:89: 35:08:a2:52:5d:8f:8a:68:3a:b9:5a:6c:dc:cf:fc: b0:cb:40:d4:0c:bf:5f:a3:1d:93:9f:c2:9c:56:49: f9:84:91:4b:b4:8e:ea:0c:e4:be:a1:7e:b3:c1:44: fb:a8:c8:1b:ea:7f:83:69:c9:dc:23:94:b8:f0:2d: 02:74:db:68:39:3d:9a:75:88:3c:18:8e:d3:93:1b: f2:81:8b:e3:5e:2e:54:98:2c:6d:c5:e9:e7:5c:c3: 6d:97:68:83:59:0f:57:f3:c1:29:33:87:d6:5f:0b: e4:2e:05:f0:68:20:fe:32:82:8e:29:8a:0b:d7:4e: 65:67:36:24:12:61:08:75:bb:91:53:01:94:34:ac: 79:2a:72:d5:10:fe:d0:2f:d9:c3:a8:d2:77:88:a1: 71:17:fb:4e:fb:0b:11:1d:f9:d6:cc:cb:ec:b1:db: a6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:50:12:70:E7:65:B4:F1:79:37:B2:95:33:04:C4:43:1D:9B:68:C5 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.128.0/24 Signature Algorithm: sha256WithRSAEncryption a2:fd:7d:b7:77:4e:c5:bc:13:10:58:46:f9:f8:8b:f3:84:7d: e2:b2:fa:76:6a:5e:32:56:da:48:8b:98:4c:40:30:e1:51:3b: a7:8d:c7:7d:05:cf:ff:ca:9e:67:c6:bf:8e:49:ff:e5:63:fc: 72:88:97:02:6b:a5:3f:0b:67:05:9c:91:ab:a7:b4:21:c4:3b: b4:07:d6:95:22:df:fe:ac:7e:10:c8:e5:ae:fb:5b:10:03:50: 21:bf:d7:74:2f:9d:c3:c6:14:ca:fc:28:78:a7:fe:3a:02:8a: 66:ed:dc:d1:97:a4:8e:2e:dd:03:65:49:0f:0a:6d:13:c4:92: f8:70:36:84:61:1f:10:36:b1:ca:b8:30:8b:8b:48:8d:58:c3: a4:86:45:c0:c4:ee:70:8a:79:eb:b8:01:a2:22:20:03:7e:6e: 00:c7:1d:ea:28:1a:71:e5:bc:5c:b0:f1:10:68:cc:e6:83:d8: 49:8c:5b:7b:40:5d:f5:1e:01:56:0e:d3:16:4b:ac:c3:59:45: 0b:d2:c2:d3:28:71:2c:46:8f:38:a5:37:3c:7d:6b:f4:f3:e4: 8a:5b:e5:27:ff:3f:5a:64:95:71:9f:20:10:7a:d9:9a:90:5d: 5b:1c:91:37:53:db:e4:f5:37:95:46:c4:e3:2c:de:36:0b:e4: ec:11:bc:47 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgIUdu0vMkXYUQQc0ILiWbJ30JbSWjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDQwOTQ0MzBaFw0yNzAxMDMwOTQ5MzBaMDMxMTAvBgNV BAMTKEMxNTAxMjcwRTc2NUI0RjE3OTM3QjI5NTMzMDRDNDQzMUQ5QjY4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0Zr7Nn4LB3+rBv9bJg0YRrM1A V51Pkh0y+6LJb76x6UYADSx8l37r6XCOU9fD+ssc30yk8ySgC7z8USdN1TP5D0Gz spXXfUWINPlVW2LaKiS2g259cg9liTUIolJdj4poOrlabNzP/LDLQNQMv1+jHZOf wpxWSfmEkUu0juoM5L6hfrPBRPuoyBvqf4NpydwjlLjwLQJ022g5PZp1iDwYjtOT G/KBi+NeLlSYLG3F6edcw22XaINZD1fzwSkzh9ZfC+QuBfBoIP4ygo4pigvXTmVn NiQSYQh1u5FTAZQ0rHkqctUQ/tAv2cOo0neIoXEX+077CxEd+dbMy+yx26bHAgMB AAGjggI/MIICOzAdBgNVHQ4EFgQUwVAScOdltPF5N7KVMwTEQx2baMUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzUzMTM5Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACTfYAwDQYJKoZIhvcNAQELBQADggEBAKL9fbd3TsW8ExBYRvn4i/OEfeKy+nZq XjJW2kiLmExAMOFRO6eNx30Fz//KnmfGv45J/+Vj/HKIlwJrpT8LZwWckauntCHE O7QH1pUi3/6sfhDI5a77WxADUCG/13QvncPGFMr8KHin/joCimbt3NGXpI4u3QNl SQ8KbRPEkvhwNoRhHxA2scq4MIuLSI1Yw6SGRcDE7nCKeeu4AaIiIAN+bgDHHeoo GnHlvFyw8RBozOaD2EmMW3tAXfUeAVYO0xZLrMNZRQvSwtMocSxGjzilNzx9a/Tz 5Ipb5Sf/P1pklXGfIBB62ZqQXVsckTdT2+T1N5VGxOMs3jYL5OwRvEc= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:44 2026 by rpki-client