This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3132392e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: VU0Obsm01O1atDmR3mgQt6z+fssgRZzpHisopkoteHE= Subject key identifier: 9B:85:DE:4E:EE:95:95:FC:BC:1F:4E:C6:5C:AA:65:87:37:A9:9F:85 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 622CBC2459D36ABD6ADA864D1F5AD1F8ADF62618 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:53 +0000 ROA not before: Thu 20 Nov 2025 10:56:53 +0000 ROA not after: Thu 19 Nov 2026 11:01:53 +0000 asID: 9304 IP address blocks: 147.125.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:2c:bc:24:59:d3:6a:bd:6a:da:86:4d:1f:5a:d1:f8:ad:f6:26:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:53 2025 GMT Not After : Nov 19 11:01:53 2026 GMT Subject: CN=9B85DE4EEE9595FCBC1F4EC65CAA658737A99F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:69:bc:a6:ff:2a:53:1f:b9:22:52:ea:2a: 5a:a9:4f:16:0b:8b:41:cc:11:a1:6c:2c:d2:ac:cc: 45:60:69:fe:88:05:03:d4:91:e6:1f:66:4a:14:76: 0d:5e:c0:be:59:05:e0:02:f1:64:5f:7d:ff:d6:ab: 3f:1f:af:11:65:d8:b9:ab:80:07:48:a7:2a:2e:f9: b3:fb:cb:c3:93:3f:05:23:e1:12:8e:15:4a:ec:e5: b0:bc:bb:f5:ad:3d:fc:f8:f2:45:9f:ba:73:f4:8a: ef:ab:ff:5f:46:e3:bb:20:fd:57:42:64:3f:89:5d: f9:90:00:c9:5f:bb:88:66:fa:b7:c6:ac:66:2e:38: d6:ba:c0:56:b6:ea:93:e6:27:ab:76:ab:f5:50:31: 13:c3:bd:d3:3a:eb:40:de:a6:c5:f2:d2:35:6d:b3: 90:d1:93:cc:cb:64:4d:b4:43:ca:e0:ae:d4:1c:f9: 44:e8:6f:91:41:f5:c9:9f:99:12:d2:70:09:0a:b8: 40:e4:b6:b3:92:42:fa:e7:27:97:d2:04:19:5a:4b: ca:cd:37:50:15:54:98:93:66:31:3c:f9:d4:22:c6: 24:35:f2:b8:27:3d:c3:98:98:56:10:91:62:ad:81: 21:32:10:10:6c:e6:6e:00:41:16:1b:30:99:d2:91: d1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:DE:4E:EE:95:95:FC:BC:1F:4E:C6:5C:AA:65:87:37:A9:9F:85 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.129.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:67:35:63:5c:7d:9a:71:09:02:44:69:ad:1c:d7:1b:37:1f: e5:21:90:ff:04:8b:14:60:7b:10:7d:d7:ff:75:24:74:4c:77: 58:4c:c2:db:f2:a4:39:33:12:56:b6:17:91:7f:53:54:8c:2e: 9f:0d:2d:23:ef:b5:b4:3b:a9:c7:2c:1c:13:5f:c1:e4:11:36: 15:73:39:18:e3:33:8e:80:11:cd:2f:1c:dd:d0:75:83:fb:54: 6f:e9:e1:6c:2e:ed:70:29:56:a9:3d:35:69:b5:86:23:1b:7f: 07:39:d2:64:03:5b:90:90:0b:db:7d:65:7a:99:e6:8e:78:f8: a0:3f:06:53:0c:2e:a2:b8:19:59:1b:00:24:47:cd:06:f1:ac: 96:30:08:fb:b7:48:ff:47:9a:ac:cc:61:c4:87:6e:bd:ce:9f: 31:74:f2:b3:23:34:e2:a8:e7:d9:c8:6e:43:c6:2a:03:c8:71: c3:00:c1:58:a2:b9:3c:a2:f9:80:38:90:ba:ef:6f:78:6e:e9: 00:10:01:b7:0e:c4:ce:e7:51:e8:04:f6:c6:d7:ef:e7:4a:e0: ca:be:d3:69:78:b5:ff:f4:1b:3a:a3:ff:eb:0c:e7:44:cd:fd: 8c:ac:f8:73:a5:69:53:20:1b:e9:d0:16:33:72:9d:0a:08:2e: fc:96:79:b0 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYiy8JFnTar1q2oZNH1rR+K32JhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NTNaFw0yNjExMTkxMTAxNTNaMDMxMTAvBgNV BAMTKDlCODVERTRFRUU5NTk1RkNCQzFGNEVDNjVDQUE2NTg3MzdBOTlGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4pGm8pv8qUx+5IlLqKlqpTxYL i0HMEaFsLNKszEVgaf6IBQPUkeYfZkoUdg1ewL5ZBeAC8WRfff/Wqz8frxFl2Lmr gAdIpyou+bP7y8OTPwUj4RKOFUrs5bC8u/WtPfz48kWfunP0iu+r/19G47sg/VdC ZD+JXfmQAMlfu4hm+rfGrGYuONa6wFa26pPmJ6t2q/VQMRPDvdM660DepsXy0jVt s5DRk8zLZE20Q8rgrtQc+UTob5FB9cmfmRLScAkKuEDktrOSQvrnJ5fSBBlaS8rN N1AVVJiTZjE8+dQixiQ18rgnPcOYmFYQkWKtgSEyEBBs5m4AQRYbMJnSkdHPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUm4XeTu6Vlfy8H07GXKplhzepn4UwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32BMA0GCSqGSIb3DQEBCwUAA4IBAQBMZzVjXH2acQkCRGmtHNcbNx/lIZD/BIsU YHsQfdf/dSR0THdYTMLb8qQ5MxJWtheRf1NUjC6fDS0j77W0O6nHLBwTX8HkETYV czkY4zOOgBHNLxzd0HWD+1Rv6eFsLu1wKVapPTVptYYjG38HOdJkA1uQkAvbfWV6 meaOePigPwZTDC6iuBlZGwAkR80G8ayWMAj7t0j/R5qszGHEh269zp8xdPKzIzTi qOfZyG5DxioDyHHDAMFYork8ovmAOJC67294bukAEAG3DsTO51HoBPbG1+/nSuDK vtNpeLX/9Bs6o//rDOdEzf2MrPhzpWlTIBvp0BYzcp0KCC78lnmw -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:35 2025 by rpki-client