This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e2034373636.roa File: 3134372e3132352e3133302e302f32332d3234203d3e2034373636.roa (raw, json) Hash identifier: dZtE992I+IqSfG0zZFSER2YHsrWbCZjTZxOAyfAPIXY= Subject key identifier: C1:01:ED:BA:12:DF:20:65:98:35:08:9E:20:27:D7:AC:2B:56:CA:E7 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2821EF913443E064C11B782688E2A319720FA4DF Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e2034373636.roa Signing time: Wed 19 Nov 2025 09:13:53 +0000 ROA not before: Wed 19 Nov 2025 09:08:53 +0000 ROA not after: Wed 18 Nov 2026 09:13:53 +0000 asID: 4766 IP address blocks: 147.125.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 16:17:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:21:ef:91:34:43:e0:64:c1:1b:78:26:88:e2:a3:19:72:0f:a4:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 19 09:08:53 2025 GMT Not After : Nov 18 09:13:53 2026 GMT Subject: CN=C101EDBA12DF20659835089E2027D7AC2B56CAE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:64:8d:9c:ca:ef:fb:52:17:dd:7a:e8:dd: c4:33:04:cc:a0:6c:f3:8c:c9:2e:c7:75:53:f0:f1: ff:85:03:2f:cb:e2:58:13:af:81:f8:b9:46:b5:2a: 77:b4:77:c3:2e:87:3b:23:88:c7:22:d3:77:31:f1: 62:34:38:75:5c:19:74:a7:ec:6e:f9:87:21:66:0c: b3:5f:81:4b:75:22:65:8f:64:45:51:0a:86:a5:03: 95:cd:87:4c:fb:6c:f4:95:b6:e0:f9:4b:d3:f3:e2: c5:1a:5f:92:f4:14:90:8a:67:db:8a:94:7a:fc:d4: e1:53:77:1d:0e:08:01:e3:69:54:a3:61:78:6e:e0: 0f:51:10:57:d4:9b:fb:82:7d:e2:7d:ec:07:b0:17: 9b:44:e8:d3:35:dd:7d:66:41:fd:e4:0f:d1:91:bc: b3:95:4e:13:89:44:54:a6:3d:d0:f5:7b:22:3c:01: 62:65:7b:9b:7b:a7:5c:f5:f5:77:2e:11:31:97:fc: 06:58:59:d0:76:90:28:cf:a9:f1:81:63:7e:17:d6: 74:b2:38:2c:91:bb:21:59:27:da:9e:c6:f8:2b:53: d2:ac:50:ea:87:37:34:91:52:f2:bf:ad:4b:aa:b1: d6:43:85:86:6d:13:04:5e:86:1c:56:6f:13:0d:d5: 3a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:ED:BA:12:DF:20:65:98:35:08:9E:20:27:D7:AC:2B:56:CA:E7 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133302e302f32332d3234203d3e2034373636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.130.0/23 Signature Algorithm: sha256WithRSAEncryption 14:88:92:a5:d7:eb:30:d8:f4:23:47:a9:51:60:fb:a5:81:83: ee:11:bf:29:af:c5:07:65:bd:5f:27:e6:61:57:5a:c5:49:63: e3:1c:45:99:b2:41:15:b9:8e:36:ad:96:c6:a3:b1:87:92:a1: 26:97:a2:58:c7:cd:b0:f8:b0:63:99:69:50:8d:33:36:e0:1f: 98:34:63:09:81:90:f3:b9:be:92:d9:cd:82:e1:26:46:83:62: 16:da:6d:f4:e7:7e:c4:fc:0f:99:29:40:18:2a:db:c7:3e:07: 28:83:b7:e6:f9:34:2b:91:11:2c:e1:48:a7:08:2a:53:e3:dd: 6a:e6:ff:1c:76:f7:36:f7:e7:31:68:46:85:1e:94:c0:f2:d5: 70:5b:36:bc:d7:44:5d:cc:b8:94:42:a8:3d:7d:19:1f:fc:57: a6:e3:a8:53:e1:78:8d:ca:d5:93:ad:29:f3:19:59:cb:d4:3b: d8:56:eb:78:c4:fc:45:d7:ab:de:56:3c:33:dd:51:28:7f:e0: ac:7e:62:c4:50:4f:e3:cb:38:14:80:57:00:26:22:d4:2d:ef: bb:5f:1b:a9:99:be:90:a9:bf:23:d2:34:1b:d2:a5:e3:cb:96: 68:c9:e0:07:68:21:93:72:80:3c:a8:ac:25:61:69:a4:34:80: b3:93:03:b8 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUKCHvkTRD4GTBG3gmiOKjGXIPpN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMTkwOTA4NTNaFw0yNjExMTgwOTEzNTNaMDMxMTAvBgNV BAMTKEMxMDFFREJBMTJERjIwNjU5ODM1MDg5RTIwMjdEN0FDMkI1NkNBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRSGSNnMrv+1IX3Xro3cQzBMyg bPOMyS7HdVPw8f+FAy/L4lgTr4H4uUa1Kne0d8MuhzsjiMci03cx8WI0OHVcGXSn 7G75hyFmDLNfgUt1ImWPZEVRCoalA5XNh0z7bPSVtuD5S9Pz4sUaX5L0FJCKZ9uK lHr81OFTdx0OCAHjaVSjYXhu4A9REFfUm/uCfeJ97AewF5tE6NM13X1mQf3kD9GR vLOVThOJRFSmPdD1eyI8AWJle5t7p1z19XcuETGX/AZYWdB2kCjPqfGBY34X1nSy OCyRuyFZJ9qexvgrU9KsUOqHNzSRUvK/rUuqsdZDhYZtEwRehhxWbxMN1TqPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUwQHtuhLfIGWYNQieICfXrCtWyucwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzMDJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDM0MzczNjM2LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB k32CMA0GCSqGSIb3DQEBCwUAA4IBAQAUiJKl1+sw2PQjR6lRYPulgYPuEb8pr8UH Zb1fJ+ZhV1rFSWPjHEWZskEVuY42rZbGo7GHkqEml6JYx82w+LBjmWlQjTM24B+Y NGMJgZDzub6S2c2C4SZGg2IW2m30537E/A+ZKUAYKtvHPgcog7fm+TQrkREs4Uin CCpT491q5v8cdvc29+cxaEaFHpTA8tVwWza810RdzLiUQqg9fRkf/Fem46hT4XiN ytWTrSnzGVnL1DvYVut4xPxF16veVjwz3VEof+CsfmLEUE/jyzgUgFcAJiLULe+7 Xxupmb6Qqb8j0jQb0qXjy5ZoyeAHaCGTcoA8qKwlYWmkNICzkwO4 -----END CERTIFICATE-----Generated at Thu Dec 4 21:24:10 2025 by rpki-client