This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134312e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134312e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: Tulb/3xujHXPswMWGTr/+X0q3hmF5yMj3FlE+uBwPik= Subject key identifier: CD:28:A0:81:00:78:4D:AB:C4:3A:59:62:DE:8A:5A:19:72:B3:3F:BD Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 6F33CCB68F5CC30107348ED25FD1E2C1000717DA Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134312e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 10:58:35 +0000 ROA not before: Thu 20 Nov 2025 10:53:35 +0000 ROA not after: Thu 19 Nov 2026 10:58:35 +0000 asID: 9304 IP address blocks: 147.125.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:33:cc:b6:8f:5c:c3:01:07:34:8e:d2:5f:d1:e2:c1:00:07:17:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:53:35 2025 GMT Not After : Nov 19 10:58:35 2026 GMT Subject: CN=CD28A08100784DABC43A5962DE8A5A1972B33FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2a:fa:9a:60:35:48:62:ee:6b:38:9e:15:5e: 2e:70:ae:8c:e5:4b:25:c8:00:5c:c8:9b:19:76:88: 7a:51:57:d1:32:6c:49:26:d7:6b:0b:40:ef:e8:81: 7b:16:78:99:b6:e7:fa:0d:f0:5f:5c:04:01:75:fb: 3f:7d:8d:bf:22:15:68:3a:68:2e:50:e2:55:d8:73: e9:e9:c7:70:d6:f2:93:5a:93:7e:c0:31:4d:a4:3e: b1:8a:55:f5:d6:82:1e:44:ec:e6:80:d9:7b:bf:a3: c2:d1:c0:b7:bf:b8:f0:90:fc:04:f6:4c:6e:85:0f: 77:10:ee:f7:98:46:c1:f8:c3:36:f3:ad:3a:36:15: a4:50:7b:fd:58:57:b2:44:53:b3:a3:2d:c1:61:bd: 4b:bc:f6:bd:6e:2e:92:c1:dd:d5:56:a5:84:64:fc: 88:e0:ca:71:7e:88:94:a0:f7:a0:5b:69:dd:a9:27: 44:c3:e4:01:57:40:39:e6:1e:25:74:92:48:9f:05: 39:ae:e6:3a:ef:26:d2:ee:43:97:d5:4f:27:9c:f9: 68:62:0d:f2:6d:af:95:8d:f7:05:d2:bf:ec:72:2a: 7d:64:e5:fa:eb:30:66:42:e2:69:d7:2a:9d:c9:f8: 76:c0:0e:5d:ec:58:bd:ff:f0:88:f4:17:30:73:66: 5e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:A0:81:00:78:4D:AB:C4:3A:59:62:DE:8A:5A:19:72:B3:3F:BD X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134312e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.141.0/24 Signature Algorithm: sha256WithRSAEncryption 01:c4:94:91:50:60:54:0f:1c:ac:5f:3e:93:be:ee:79:0f:22: 52:2a:63:36:de:36:49:8f:3d:32:cb:41:33:c4:ea:28:e9:0e: 1a:23:69:28:9a:17:92:74:66:54:8b:d7:7a:27:65:5a:05:3c: 57:f2:cb:1c:c6:53:20:8e:e9:ff:9f:f8:d4:e5:5f:80:11:db: fc:be:40:96:35:1a:86:41:64:47:11:c5:ab:9f:8e:d2:d6:dd: 7f:2a:26:b4:f0:f0:fc:92:57:75:c2:c5:98:ce:5d:ab:0d:ff: 2d:06:0e:48:4e:df:0d:b2:8c:ad:5c:d7:fc:c5:76:65:e8:bc: a6:5d:b6:23:58:e6:df:9f:3b:0c:a1:7e:df:77:18:0b:15:a9: 22:53:f8:68:09:e7:6b:3c:35:c4:84:a1:c5:00:01:2b:33:e3: c1:64:28:9a:96:fe:62:de:3c:f1:23:e7:cb:aa:21:f6:bd:19: fb:98:33:52:0a:ba:2c:9d:85:8a:7d:17:57:98:22:0b:26:6e: 26:94:b3:51:ca:30:5e:3f:72:6a:f6:d7:94:3e:43:4a:d4:7c: d9:51:52:1d:ce:df:db:58:5d:2e:73:c3:6b:57:1c:6f:86:0a: dc:5d:38:8f:f1:e1:50:fa:1d:d9:bb:7d:57:00:55:2e:6b:89: 75:72:cd:a5 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUbzPMto9cwwEHNI7SX9HiwQAHF9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDUzMzVaFw0yNjExMTkxMDU4MzVaMDMxMTAvBgNV BAMTKENEMjhBMDgxMDA3ODREQUJDNDNBNTk2MkRFOEE1QTE5NzJCMzNGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KvqaYDVIYu5rOJ4VXi5wrozl SyXIAFzImxl2iHpRV9EybEkm12sLQO/ogXsWeJm25/oN8F9cBAF1+z99jb8iFWg6 aC5Q4lXYc+npx3DW8pNak37AMU2kPrGKVfXWgh5E7OaA2Xu/o8LRwLe/uPCQ/AT2 TG6FD3cQ7veYRsH4wzbzrTo2FaRQe/1YV7JEU7OjLcFhvUu89r1uLpLB3dVWpYRk /IjgynF+iJSg96Bbad2pJ0TD5AFXQDnmHiV0kkifBTmu5jrvJtLuQ5fVTyec+Whi DfJtr5WN9wXSv+xyKn1k5frrMGZC4mnXKp3J+HbADl3sWL3/8Ij0FzBzZl4fAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUzSiggQB4TavEOlli3opaGXKzP70wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32NMA0GCSqGSIb3DQEBCwUAA4IBAQABxJSRUGBUDxysXz6Tvu55DyJSKmM23jZJ jz0yy0EzxOoo6Q4aI2komheSdGZUi9d6J2VaBTxX8sscxlMgjun/n/jU5V+AEdv8 vkCWNRqGQWRHEcWrn47S1t1/Kia08PD8kld1wsWYzl2rDf8tBg5ITt8NsoytXNf8 xXZl6LymXbYjWObfnzsMoX7fdxgLFakiU/hoCedrPDXEhKHFAAErM+PBZCialv5i 3jzxI+fLqiH2vRn7mDNSCrosnYWKfRdXmCILJm4mlLNRyjBeP3Jq9teUPkNK1HzZ UVIdzt/bWF0uc8NrVxxvhgrcXTiP8eFQ+h3Zu31XAFUua4l1cs2l -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:34 2025 by rpki-client