This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32322d3234203d3e2039333034.roa File: 3134372e3132352e3133362e302f32322d3234203d3e2039333034.roa (raw, json) Hash identifier: FkgqUVARstH3SjRkzlKICSTxLWyp5gCve+QHTzaDe0I= Subject key identifier: 13:BE:56:46:7B:45:3B:1F:28:E6:1D:E9:D8:79:75:DC:AE:B2:FB:02 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 148FFD8C860ED9157F4C8B60CFE56B10F38A6E5F Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32322d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 06:26:56 +0000 ROA not before: Thu 20 Nov 2025 06:21:56 +0000 ROA not after: Thu 19 Nov 2026 06:26:56 +0000 asID: 9304 IP address blocks: 147.125.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:8f:fd:8c:86:0e:d9:15:7f:4c:8b:60:cf:e5:6b:10:f3:8a:6e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 06:21:56 2025 GMT Not After : Nov 19 06:26:56 2026 GMT Subject: CN=13BE56467B453B1F28E61DE9D87975DCAEB2FB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3d:af:9c:2c:10:b5:0a:f7:28:4a:4a:d7:ac: c2:87:78:87:97:b0:4b:d8:ee:f8:19:4b:86:0e:2a: 78:f3:64:74:d6:e8:55:5e:be:9f:7f:52:77:67:90: 2a:d7:51:6f:f2:bf:87:cf:61:c4:dc:cc:7c:32:ad: 53:6a:a8:d9:01:d4:4b:ed:a8:fe:1b:c5:03:77:f9: 43:ef:dd:53:44:33:18:94:08:43:76:ec:e8:a9:48: 60:28:02:2a:93:ff:d4:43:68:9c:1b:02:57:63:38: 03:6b:b5:1b:ab:27:bd:f2:db:78:48:2a:fd:be:c8: 59:94:17:fb:0d:bd:b3:4e:27:5a:a3:6b:de:ed:a7: 05:f2:43:fc:6f:4b:07:8f:76:41:7e:b9:09:84:69: ab:78:0e:f4:f1:44:cc:04:76:30:02:b8:79:5d:26: 6e:e1:11:dd:bb:b5:4c:b5:af:54:45:c9:fb:e6:5c: 05:3a:c7:b1:95:39:5a:4d:25:e0:43:32:92:9e:94: 14:ef:fd:0d:d4:e7:e7:53:bd:5f:4b:92:8f:14:9d: 09:9b:98:a4:b9:2b:71:85:ce:3d:be:9f:81:b3:19: bc:a4:c4:e3:8a:85:7f:27:22:8d:a2:1f:70:ec:95: 96:00:59:68:79:c5:9b:bf:b7:2e:ea:2a:4f:6c:12: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BE:56:46:7B:45:3B:1F:28:E6:1D:E9:D8:79:75:DC:AE:B2:FB:02 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32322d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.136.0/22 Signature Algorithm: sha256WithRSAEncryption 83:c6:93:79:21:66:24:ab:2c:6f:d5:b8:95:38:f2:71:07:d3: 8b:d7:65:75:1d:d0:83:12:c9:c8:a4:2b:93:25:f6:93:fa:8e: e9:19:67:d3:2c:6e:f0:c9:7d:46:87:b8:a1:df:a6:19:24:1c: f6:4f:e6:eb:09:9c:df:e5:74:ee:7c:35:e5:54:75:6a:87:46: 22:39:fe:02:d3:b3:3d:09:a5:bd:59:b2:80:05:83:86:01:21: d8:57:23:69:46:9e:e6:c6:0b:ab:ae:0a:53:df:70:94:47:c3: 0e:6b:31:da:d4:9b:cc:50:b7:19:b3:56:89:33:a7:64:91:18: f5:ca:08:d5:1a:f2:ca:53:a7:3b:bf:03:0f:bf:5e:38:57:2a: 25:27:fb:13:2c:50:09:ff:07:b6:d5:ca:0b:68:98:b3:9c:11: d3:67:de:69:d6:73:ea:6b:44:3f:09:be:2a:20:11:8d:17:9d: 7c:f2:2f:3e:4b:b7:43:0d:d6:22:cb:15:0a:f5:4b:6c:e1:9b: b3:bc:cd:bb:51:ef:c0:36:21:06:64:d8:2f:c1:e3:1a:d7:3f: 61:fa:f2:74:62:2d:c1:d6:0f:11:bf:d6:8f:3d:90:76:b4:43: 98:21:bc:69:71:da:00:bf:57:80:3d:ae:0f:dd:cf:ca:42:ac: da:e5:e0:8e -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUFI/9jIYO2RV/TItgz+VrEPOKbl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAwNjIxNTZaFw0yNjExMTkwNjI2NTZaMDMxMTAvBgNV BAMTKDEzQkU1NjQ2N0I0NTNCMUYyOEU2MURFOUQ4Nzk3NURDQUVCMkZCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPa+cLBC1CvcoSkrXrMKHeIeX sEvY7vgZS4YOKnjzZHTW6FVevp9/UndnkCrXUW/yv4fPYcTczHwyrVNqqNkB1Evt qP4bxQN3+UPv3VNEMxiUCEN27OipSGAoAiqT/9RDaJwbAldjOANrtRurJ73y23hI Kv2+yFmUF/sNvbNOJ1qja97tpwXyQ/xvSwePdkF+uQmEaat4DvTxRMwEdjACuHld Jm7hEd27tUy1r1RFyfvmXAU6x7GVOVpNJeBDMpKelBTv/Q3U5+dTvV9Lko8UnQmb mKS5K3GFzj2+n4GzGbykxOOKhX8nIo2iH3DslZYAWWh5xZu/ty7qKk9sEuDRAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUE75WRntFOx8o5h3p2Hl13K6y+wIwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC k32IMA0GCSqGSIb3DQEBCwUAA4IBAQCDxpN5IWYkqyxv1biVOPJxB9OL12V1HdCD EsnIpCuTJfaT+o7pGWfTLG7wyX1Gh7ih36YZJBz2T+brCZzf5XTufDXlVHVqh0Yi Of4C07M9CaW9WbKABYOGASHYVyNpRp7mxgurrgpT33CUR8MOazHa1JvMULcZs1aJ M6dkkRj1ygjVGvLKU6c7vwMPv144VyolJ/sTLFAJ/we21coLaJiznBHTZ95p1nPq a0Q/Cb4qIBGNF5188i8+S7dDDdYiyxUK9Uts4ZuzvM27Ue/ANiEGZNgvweMa1z9h +vJ0Yi3B1g8Rv9aPPZB2tEOYIbxpcdoAv1eAPa4P3c/KQqza5eCO -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:34 2025 by rpki-client