This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: ANr8XXh09KUyzgwcX1TtpzJnucEBIMCK4LHigcZ15sc= Subject key identifier: E8:8D:B2:F1:0E:BA:6D:0A:0B:DF:F0:3C:DB:8C:2C:06:4A:64:9C:A7 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 276C986FC0BFD434C631B4E814F8F291ED1250E3 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:59 +0000 ROA not before: Thu 20 Nov 2025 10:56:59 +0000 ROA not after: Thu 19 Nov 2026 11:01:59 +0000 asID: 9304 IP address blocks: 147.125.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:6c:98:6f:c0:bf:d4:34:c6:31:b4:e8:14:f8:f2:91:ed:12:50:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:59 2025 GMT Not After : Nov 19 11:01:59 2026 GMT Subject: CN=E88DB2F10EBA6D0A0BDFF03CDB8C2C064A649CA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:56:b7:1a:76:79:58:e1:4c:b5:3a:c4:59: 60:0b:4c:0e:7e:10:f3:84:eb:dd:68:39:be:37:30: a0:4d:36:d6:03:b9:90:87:3e:cf:27:70:21:1b:19: 3c:44:fb:df:e8:3c:f8:95:8f:8f:54:fd:e2:43:67: 62:fc:35:e8:80:4a:80:b1:b0:fb:9c:74:da:59:21: 6e:ba:2a:8a:c4:38:17:4d:a0:89:56:e5:78:08:a4: eb:00:46:e9:ca:96:6b:89:68:01:b2:c7:86:49:d6: 6f:7a:ad:7b:88:b2:c2:43:db:31:83:65:7f:b8:21: 06:c7:e0:1b:68:44:dd:a3:61:57:1d:51:79:8e:9a: a3:e0:08:9c:21:91:b4:4d:ec:26:78:56:ba:53:4f: 12:4b:15:61:ab:c1:88:70:90:23:18:e1:cd:1e:2b: 12:e2:12:0f:7b:55:45:10:bc:40:e9:67:88:32:78: f2:55:79:20:1b:70:c3:da:81:e2:71:e9:83:81:e4: 9a:3c:8e:34:63:ca:c5:bf:58:4f:c3:58:ae:da:0c: 04:f1:bb:51:76:57:2d:ee:50:16:65:5b:26:bb:d9: 0c:13:ba:90:8e:37:77:ab:c4:29:cc:73:6d:a8:54: 91:71:98:6c:b5:c9:74:7f:49:2f:80:d8:77:f8:73: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8D:B2:F1:0E:BA:6D:0A:0B:DF:F0:3C:DB:8C:2C:06:4A:64:9C:A7 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.132.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:79:12:39:c2:88:b5:07:7e:34:ca:18:4b:79:10:4e:74:0e: a9:5c:bb:6d:b1:4f:e0:25:d9:cb:7b:68:2e:2e:58:d6:8d:e5: 30:0e:5f:05:72:9d:4a:db:ad:4e:2f:71:0e:8d:c4:e8:52:f5: e2:71:0b:10:db:b0:79:cc:d1:96:c3:4a:c0:50:91:65:fc:91: 14:bb:94:d7:f1:50:84:5e:88:7a:ec:6c:12:d2:7f:19:9f:07: 3e:f1:cc:37:b3:40:c9:47:a3:77:a2:cb:88:16:ce:4b:52:52: d4:a1:50:83:87:62:b7:19:43:be:e3:43:6d:eb:c3:3a:3e:41: 22:87:12:c2:69:5e:ac:02:a8:8f:29:c1:a1:a7:5e:b6:03:91: 83:83:4a:fc:b4:8e:19:48:72:5f:34:4e:2f:9f:8f:24:a8:76: 44:c6:df:84:46:25:ed:48:11:40:c0:cb:c8:0c:cc:3e:2a:a0: cf:74:eb:00:ff:67:f3:d9:4a:16:b7:91:21:df:da:21:c7:6d: 55:66:38:09:b6:37:76:11:ff:2f:84:0d:c0:ad:d8:15:66:f7: 83:44:81:51:e2:de:bf:90:60:68:90:1a:f8:6b:b3:e0:ed:64: fd:47:c6:0f:ea:fd:80:6f:2b:a0:84:42:6f:ee:ba:be:ba:eb: 32:6d:a2:4e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUJ2yYb8C/1DTGMbToFPjyke0SUOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NTlaFw0yNjExMTkxMTAxNTlaMDMxMTAvBgNV BAMTKEU4OERCMkYxMEVCQTZEMEEwQkRGRjAzQ0RCOEMyQzA2NEE2NDlDQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFVa3GnZ5WOFMtTrEWWALTA5+ EPOE691oOb43MKBNNtYDuZCHPs8ncCEbGTxE+9/oPPiVj49U/eJDZ2L8NeiASoCx sPucdNpZIW66KorEOBdNoIlW5XgIpOsARunKlmuJaAGyx4ZJ1m96rXuIssJD2zGD ZX+4IQbH4BtoRN2jYVcdUXmOmqPgCJwhkbRN7CZ4VrpTTxJLFWGrwYhwkCMY4c0e KxLiEg97VUUQvEDpZ4gyePJVeSAbcMPageJx6YOB5Jo8jjRjysW/WE/DWK7aDATx u1F2Vy3uUBZlWya72QwTupCON3erxCnMc22oVJFxmGy1yXR/SS+A2Hf4c3QPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU6I2y8Q66bQoL3/A824wsBkpknKcwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32EMA0GCSqGSIb3DQEBCwUAA4IBAQAbeRI5woi1B340yhhLeRBOdA6pXLttsU/g JdnLe2guLljWjeUwDl8Fcp1K261OL3EOjcToUvXicQsQ27B5zNGWw0rAUJFl/JEU u5TX8VCEXoh67GwS0n8Znwc+8cw3s0DJR6N3osuIFs5LUlLUoVCDh2K3GUO+40Nt 68M6PkEihxLCaV6sAqiPKcGhp162A5GDg0r8tI4ZSHJfNE4vn48kqHZExt+ERiXt SBFAwMvIDMw+KqDPdOsA/2fz2UoWt5Eh39ohx21VZjgJtjd2Ef8vhA3ArdgVZveD RIFR4t6/kGBokBr4a7Pg7WT9R8YP6v2AbyughEJv7rq+uusybaJO -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:35 2025 by rpki-client