This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134302e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: yGMgZeEZihWsU6nSw9CKT+mXRs4Xqh6Anx1XzVGEtk8= Subject key identifier: EE:21:F3:68:0A:51:88:B6:8E:2F:9A:2F:71:18:D3:FC:B1:9F:57:9A Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1EB091BBAA50C81A8BE9522287D40B0933FF7FA3 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:58:36 +0000 ROA not before: Thu 20 Nov 2025 10:53:36 +0000 ROA not after: Thu 19 Nov 2026 10:58:36 +0000 asID: 9304 IP address blocks: 147.125.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b0:91:bb:aa:50:c8:1a:8b:e9:52:22:87:d4:0b:09:33:ff:7f:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:53:36 2025 GMT Not After : Nov 19 10:58:36 2026 GMT Subject: CN=EE21F3680A5188B68E2F9A2F7118D3FCB19F579A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ea:5c:8f:33:31:15:a1:65:a7:00:28:ad:3f: e8:9d:41:b1:a7:8c:fe:5b:ee:ca:00:03:4e:d7:34: e2:54:f0:46:64:4d:5b:e0:9c:f0:78:7c:7c:84:c3: e0:df:d6:05:84:2b:2d:fe:17:6c:46:31:97:ef:16: 38:26:1d:75:08:29:d9:c3:d6:a1:7e:cb:41:0d:3b: 49:96:3a:29:76:30:81:86:5f:2d:8f:5b:6d:4e:48: 6d:a6:84:f6:38:49:51:9d:0e:1b:78:64:46:a2:24: d5:57:32:99:45:d4:3a:4a:05:b9:e6:43:f7:a8:cc: 61:05:99:09:3c:8e:3c:43:34:4c:00:f3:4a:30:1c: 2f:11:15:aa:54:2d:10:ea:f8:4d:3a:69:bf:d5:c4: 19:9a:d9:76:8b:b0:2d:9c:6a:b8:c1:a8:97:7e:7d: 9a:c0:15:fe:e7:d0:d2:04:26:33:8d:9b:7d:e1:ae: 1c:30:7b:1c:75:04:8d:1d:26:99:c8:9a:ce:92:56: 3f:d7:d6:3d:48:ef:82:98:6f:55:39:c3:5f:8d:8b: b6:76:42:4b:dc:90:22:79:d1:65:fc:b4:09:e0:18: 3e:bd:16:61:5f:e8:ae:5b:5d:92:75:02:72:04:19: 37:41:68:27:27:2a:21:a1:87:a6:fe:6f:06:eb:08: 16:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:21:F3:68:0A:51:88:B6:8E:2F:9A:2F:71:18:D3:FC:B1:9F:57:9A X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.140.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:8c:3f:b3:3e:18:0c:45:02:b0:6c:43:e9:3b:2d:e0:b6:01: ce:fe:75:b9:7e:9a:a9:a6:f8:41:68:19:ca:2c:e0:60:ad:38: 35:93:03:b6:85:45:e0:9e:dd:94:6b:bd:41:80:78:59:a5:a3: 50:1c:9b:9a:3a:74:d1:be:8f:ef:e1:d3:77:47:60:30:e3:cd: 4a:2c:f7:b4:90:23:82:6d:67:c6:2a:11:b7:1e:12:24:02:09: 6c:24:0c:4d:d1:a1:03:54:1b:6d:d9:af:94:16:ae:07:e1:df: 6a:37:99:23:d1:bd:ea:ea:34:41:40:46:14:b3:4b:91:ee:f0: f3:54:6b:e8:8e:49:68:8e:0d:67:3f:31:74:ee:f5:b8:12:bd: ac:1f:c9:1b:88:65:26:2f:1b:75:90:94:06:76:6a:2c:f6:a5: 9d:e2:67:1b:ea:f1:87:75:1a:b7:2e:04:d2:3c:91:2d:e1:de: 69:90:80:27:48:9d:ab:dd:a7:d0:11:f0:37:d8:1c:47:53:24: 39:a8:69:ed:97:9b:1a:a7:eb:6c:d0:c9:85:ca:0b:41:89:c0: 05:ce:f5:dd:0f:5c:54:b1:f2:6f:2b:38:c8:15:c6:ab:ce:29: f3:e9:f9:1e:1c:1c:d8:4c:12:8f:31:44:c8:5d:42:c8:bd:57: 77:ce:58:20 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUHrCRu6pQyBqL6VIih9QLCTP/f6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUzMzZaFw0yNjExMTkxMDU4MzZaMDMxMTAvBgNV BAMTKEVFMjFGMzY4MEE1MTg4QjY4RTJGOUEyRjcxMThEM0ZDQjE5RjU3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM6lyPMzEVoWWnACitP+idQbGn jP5b7soAA07XNOJU8EZkTVvgnPB4fHyEw+Df1gWEKy3+F2xGMZfvFjgmHXUIKdnD 1qF+y0ENO0mWOil2MIGGXy2PW21OSG2mhPY4SVGdDht4ZEaiJNVXMplF1DpKBbnm Q/eozGEFmQk8jjxDNEwA80owHC8RFapULRDq+E06ab/VxBma2XaLsC2carjBqJd+ fZrAFf7n0NIEJjONm33hrhwwexx1BI0dJpnIms6SVj/X1j1I74KYb1U5w1+Ni7Z2 QkvckCJ50WX8tAngGD69FmFf6K5bXZJ1AnIEGTdBaCcnKiGhh6b+bwbrCBZfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU7iHzaApRiLaOL5ovcRjT/LGfV5owHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32MMA0GCSqGSIb3DQEBCwUAA4IBAQBfjD+zPhgMRQKwbEPpOy3gtgHO/nW5fpqp pvhBaBnKLOBgrTg1kwO2hUXgnt2Ua71BgHhZpaNQHJuaOnTRvo/v4dN3R2Aw481K LPe0kCOCbWfGKhG3HhIkAglsJAxN0aEDVBtt2a+UFq4H4d9qN5kj0b3q6jRBQEYU s0uR7vDzVGvojklojg1nPzF07vW4Er2sH8kbiGUmLxt1kJQGdmos9qWd4mcb6vGH dRq3LgTSPJEt4d5pkIAnSJ2r3afQEfA32BxHUyQ5qGntl5sap+ts0MmFygtBicAF zvXdD1xUsfJvKzjIFcarzinz6fkeHBzYTBKPMUTIXULIvVd3zlgg -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client