This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: efMKM4az2tSlNdkNXSrd4nsqKEAYObtAmQLSU4WQFOs=
Subject key identifier: E6:14:EF:F2:3A:99:50:CF:72:75:E8:78:4B:90:5B:1A:43:56:57:1B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7158A82F16C6F1E13BAFF56E9C99BF8C6ADEAC7F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e20383334.roa
Signing time: Thu 05 Feb 2026 05:11:43 +0000
ROA not before: Thu 05 Feb 2026 05:06:43 +0000
ROA not after: Thu 04 Feb 2027 05:11:43 +0000
asID: 834
IP address blocks: 147.125.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:58:a8:2f:16:c6:f1:e1:3b:af:f5:6e:9c:99:bf:8c:6a:de:ac:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 5 05:06:43 2026 GMT
Not After : Feb 4 05:11:43 2027 GMT
Subject: CN=E614EFF23A9950CF7275E8784B905B1A4356571B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b4:f9:cb:20:11:12:15:8a:0e:07:61:1d:59:
e9:a6:e1:76:8a:37:6a:b5:15:a8:ba:1f:f4:d8:01:
5f:52:cb:29:3b:e6:25:90:47:5e:9e:96:3d:90:ab:
fa:c8:86:bd:ea:ac:80:cc:2e:6e:33:5e:3d:e5:a9:
2b:1e:37:31:58:d7:03:29:bf:e3:6e:c7:e4:f1:2f:
14:3d:99:40:ad:ee:04:ac:f1:86:08:06:7d:9f:82:
cb:eb:41:e1:5d:8b:8e:75:29:e2:43:d3:3d:9c:0f:
2a:c9:e1:70:d7:10:8e:64:46:e7:39:f0:a6:b2:bb:
89:27:49:95:f5:2d:38:7b:af:44:de:f1:9c:7e:2a:
33:98:d3:58:af:ea:b5:c4:4b:3b:01:4c:f6:e4:99:
9b:d1:cb:60:cf:c5:85:43:55:10:0a:ff:30:76:e1:
a5:2e:e3:49:67:4a:a2:f9:a3:e5:e4:3d:cc:5a:a9:
b9:de:9d:f5:e1:51:00:74:5c:6f:fc:e5:97:84:3e:
ef:6e:73:f4:43:dc:37:71:c5:19:3c:f9:8f:19:55:
d3:f4:25:ac:bc:74:d8:a7:39:37:24:f4:bb:a2:60:
04:cc:0f:b7:ff:d1:97:af:31:e1:33:11:73:73:bf:
8e:78:1c:4d:ab:2a:80:8b:09:fa:9d:e9:db:75:3b:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:EF:F2:3A:99:50:CF:72:75:E8:78:4B:90:5B:1A:43:56:57:1B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.128.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:31:5d:63:1b:b4:fd:9b:ad:41:bd:e4:23:d0:90:d2:85:54:
d6:b6:24:33:56:83:71:13:b8:61:de:7f:17:83:ff:3b:ef:16:
c5:49:fc:5b:1a:6a:79:52:91:1d:ac:bb:3c:95:4c:71:b3:ee:
cc:b1:c1:e1:a6:45:60:47:ec:7c:56:37:fc:95:e9:9f:c2:79:
08:23:ba:96:1d:f6:7f:f4:bf:7b:ba:00:0e:e3:c5:e7:88:73:
78:a6:63:68:90:0e:b1:4e:bb:6e:3b:c8:fd:7d:e6:f4:ef:f0:
78:ba:f2:4d:90:2d:f8:c2:b0:54:f0:bf:a8:60:bb:53:1f:70:
49:85:d5:76:3c:48:41:eb:d4:62:f7:f8:43:fb:0b:26:2d:c2:
1b:97:63:56:dc:68:25:6e:0c:de:36:01:34:7f:c8:28:74:dd:
73:eb:4b:83:3a:9b:e4:8c:2d:16:ce:94:76:02:de:c4:03:c9:
bd:52:0d:f5:f7:74:a6:53:af:1a:1e:2e:cc:57:a3:e7:9f:33:
b0:9d:a8:52:8b:7d:09:de:62:4c:01:b5:af:2c:9f:f4:dc:05:
00:9c:9e:1e:78:f3:ba:63:f7:30:e3:b3:79:e3:1e:ec:c5:3c:
e3:83:40:3d:8f:2d:0d:fd:e9:11:2a:e1:fb:dd:f7:9f:d0:03:
a4:0a:7a:e9
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUcVioLxbG8eE7r/VunJm/jGrerH8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjAyMDUwNTA2NDNaFw0yNzAyMDQwNTExNDNaMDMxMTAvBgNV
BAMTKEU2MTRFRkYyM0E5OTUwQ0Y3Mjc1RTg3ODRCOTA1QjFBNDM1NjU3MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOtPnLIBESFYoOB2EdWemm4XaK
N2q1Fai6H/TYAV9Syyk75iWQR16elj2Qq/rIhr3qrIDMLm4zXj3lqSseNzFY1wMp
v+Nux+TxLxQ9mUCt7gSs8YYIBn2fgsvrQeFdi451KeJD0z2cDyrJ4XDXEI5kRuc5
8Kayu4knSZX1LTh7r0Te8Zx+KjOY01iv6rXESzsBTPbkmZvRy2DPxYVDVRAK/zB2
4aUu40lnSqL5o+XkPcxaqbnenfXhUQB0XG/85ZeEPu9uc/RD3DdxxRk8+Y8ZVdP0
Jay8dNinOTck9LuiYATMD7f/0ZevMeEzEXNzv454HE2rKoCLCfqd6dt1O4W/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU5hTv8jqZUM9ydeh4S5BbGkNWVxswHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
gDANBgkqhkiG9w0BAQsFAAOCAQEAejFdYxu0/ZutQb3kI9CQ0oVU1rYkM1aDcRO4
Yd5/F4P/O+8WxUn8WxpqeVKRHay7PJVMcbPuzLHB4aZFYEfsfFY3/JXpn8J5CCO6
lh32f/S/e7oADuPF54hzeKZjaJAOsU67bjvI/X3m9O/weLryTZAt+MKwVPC/qGC7
Ux9wSYXVdjxIQevUYvf4Q/sLJi3CG5djVtxoJW4M3jYBNH/IKHTdc+tLgzqb5Iwt
Fs6UdgLexAPJvVIN9fd0plOvGh4uzFej558zsJ2oUot9Cd5iTAG1ryyf9NwFAJye
HnjzumP3MOOzeeMe7MU844NAPY8tDf3pESrh+933n9ADpAp66Q==
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:23:42 2026 by rpki-client