This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133332e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3133332e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: O9dhQzx4odTsZ7Nj2l1I2DLz1NxcAnB4G0e9OHaKV6w= Subject key identifier: 11:71:F0:8E:CB:D8:76:00:2F:24:78:5E:B1:49:B1:62:FC:9D:42:FA Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 617A3F7D3697EE94A83C25B36492BE190DB7C13E Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133332e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:58 +0000 ROA not before: Thu 20 Nov 2025 10:56:58 +0000 ROA not after: Thu 19 Nov 2026 11:01:58 +0000 asID: 9304 IP address blocks: 147.125.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:7a:3f:7d:36:97:ee:94:a8:3c:25:b3:64:92:be:19:0d:b7:c1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:58 2025 GMT Not After : Nov 19 11:01:58 2026 GMT Subject: CN=1171F08ECBD876002F24785EB149B162FC9D42FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:12:86:b6:4a:87:37:78:7d:44:86:f3:de: ee:d8:dd:c1:74:ec:4d:e8:6a:6f:19:f4:39:7a:11: 76:ab:e0:dc:73:ac:e2:e0:ac:bd:ea:c6:54:65:bf: ac:87:d4:e5:6e:79:77:c5:fd:e6:b2:43:68:da:39: 9a:3e:1e:7e:9b:30:1a:ba:f9:c0:b4:63:fc:b0:41: 11:5c:1f:bf:9c:81:2f:97:d6:28:30:4f:78:11:af: a6:ec:30:01:f9:75:6e:a7:a8:47:32:6d:b9:3e:ad: 23:bc:a4:69:45:2b:ab:3b:21:fa:95:b5:d9:d6:8f: b1:cb:ee:f4:e8:d9:a3:54:b6:7e:71:d7:c7:7f:f9: bc:86:6d:78:e4:e6:ce:82:10:35:c1:50:4a:60:07: ac:9c:3c:5e:df:c4:4c:3c:22:08:41:de:8c:27:f7: 4d:86:85:28:47:d8:74:a9:76:ba:e2:c9:88:27:07: b0:c6:1b:0c:72:27:ee:49:70:e3:91:36:63:23:03: 0d:85:99:b0:1a:f4:e4:7e:f2:7c:25:2f:d8:0a:dd: b1:45:f0:2c:19:84:74:b1:3e:26:df:38:24:6e:4b: ac:1d:35:e1:85:4f:1f:fa:c0:99:ca:3a:4e:1a:f0: 4a:42:bd:14:27:3f:dc:0c:f5:ed:65:64:0e:da:64: 0d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:F0:8E:CB:D8:76:00:2F:24:78:5E:B1:49:B1:62:FC:9D:42:FA X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133332e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.133.0/24 Signature Algorithm: sha256WithRSAEncryption a5:af:2a:04:c1:15:83:c6:95:c4:4f:35:3a:84:e2:dc:82:a4: 6d:84:56:cd:f7:dd:36:2e:28:fd:4b:a6:50:4d:f6:d7:80:57: 43:0f:51:16:da:10:55:b9:10:59:bf:a7:4d:f2:21:54:8f:e3: 93:12:c5:25:f9:83:c4:5b:75:00:fa:94:55:82:ba:ef:e8:7c: b7:48:00:63:81:d6:de:c9:f4:dc:54:7c:9d:0b:e5:3e:c2:db: f2:c3:ac:90:03:5f:62:40:75:02:59:4d:7b:29:e7:62:31:d5: 02:38:e2:05:43:9b:56:0a:46:3e:6f:df:05:af:8e:43:5c:f0: d1:33:8f:75:7c:b3:2c:bb:de:37:c8:aa:2c:78:42:d5:d2:67: 5d:76:c4:32:12:ed:7f:86:57:e6:c7:7d:93:27:6f:cc:4f:31: 9a:2d:9d:e6:47:84:0e:fd:02:72:cd:47:75:2c:7d:04:f0:ca: 22:86:34:6e:7f:b1:dc:8e:6c:ab:69:ea:fb:91:81:7b:72:47: 6e:5d:90:73:61:de:4f:ba:77:b4:d8:29:3e:d6:e4:d8:6b:53: 1d:b3:94:5d:18:88:99:0c:19:6f:b9:3f:fd:99:c9:e1:fa:47: be:69:3b:f8:60:a1:95:82:48:9f:cd:17:ac:9a:6c:ec:1b:54: 1f:2b:1d:1e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUYXo/fTaX7pSoPCWzZJK+GQ23wT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NThaFw0yNjExMTkxMTAxNThaMDMxMTAvBgNV BAMTKDExNzFGMDhFQ0JEODc2MDAyRjI0Nzg1RUIxNDlCMTYyRkM5RDQyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8xKGtkqHN3h9RIbz3u7Y3cF0 7E3oam8Z9Dl6EXar4NxzrOLgrL3qxlRlv6yH1OVueXfF/eayQ2jaOZo+Hn6bMBq6 +cC0Y/ywQRFcH7+cgS+X1igwT3gRr6bsMAH5dW6nqEcybbk+rSO8pGlFK6s7IfqV tdnWj7HL7vTo2aNUtn5x18d/+byGbXjk5s6CEDXBUEpgB6ycPF7fxEw8IghB3own 902GhShH2HSpdrriyYgnB7DGGwxyJ+5JcOORNmMjAw2FmbAa9OR+8nwlL9gK3bFF 8CwZhHSxPibfOCRuS6wdNeGFTx/6wJnKOk4a8EpCvRQnP9wM9e1lZA7aZA2pAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUEXHwjsvYdgAvJHhesUmxYvydQvowHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32FMA0GCSqGSIb3DQEBCwUAA4IBAQClryoEwRWDxpXETzU6hOLcgqRthFbN9902 Lij9S6ZQTfbXgFdDD1EW2hBVuRBZv6dN8iFUj+OTEsUl+YPEW3UA+pRVgrrv6Hy3 SABjgdbeyfTcVHydC+U+wtvyw6yQA19iQHUCWU17KediMdUCOOIFQ5tWCkY+b98F r45DXPDRM491fLMsu943yKoseELV0mdddsQyEu1/hlfmx32TJ2/MTzGaLZ3mR4QO /QJyzUd1LH0E8MoihjRuf7Hcjmyraer7kYF7ckduXZBzYd5Pune02Ck+1uTYa1Md s5RdGIiZDBlvuT/9mcnh+ke+aTv4YKGVgkifzResmmzsG1QfKx0e -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:33 2025 by rpki-client