This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134332e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134332e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: 9sURe2d5iFz0CxidG5/R0pZ/2Kh13n6A0dqbVsSS2Vo= Subject key identifier: 2A:D2:87:C3:29:D3:7D:C4:13:C4:27:67:A9:4E:24:7F:F4:C0:C1:C1 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 398DF0FE2F666B556F2640E53F0DB05FCCE5FCA0 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134332e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:58 +0000 ROA not before: Thu 20 Nov 2025 10:56:58 +0000 ROA not after: Thu 19 Nov 2026 11:01:58 +0000 asID: 9304 IP address blocks: 147.125.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8d:f0:fe:2f:66:6b:55:6f:26:40:e5:3f:0d:b0:5f:cc:e5:fc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:58 2025 GMT Not After : Nov 19 11:01:58 2026 GMT Subject: CN=2AD287C329D37DC413C42767A94E247FF4C0C1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:89:3c:59:80:0b:0b:f2:72:6a:a8:f5:51:44: ed:36:f8:5e:02:db:d9:23:e3:eb:19:6f:0d:af:c5: 25:44:b2:9b:25:33:f2:c4:a9:df:4d:2b:68:60:af: 0f:fd:cb:2b:89:fb:35:bf:29:62:63:4d:ba:3c:1f: 82:57:b0:7b:f5:0b:16:a2:bb:b5:de:59:88:91:b6: 4f:fd:54:95:de:ab:5e:39:f2:31:e6:d3:2a:1b:8d: 3b:3b:f8:b2:ef:cd:bd:26:12:43:19:0e:fc:86:5d: c6:69:56:f3:0f:14:bc:98:e0:3b:a1:3c:64:81:c5: 9a:dc:e2:73:24:c5:43:89:c0:4a:0f:39:db:19:4a: 51:a5:84:a1:8a:16:9f:2c:72:20:15:17:5f:2d:01: 84:b8:ab:3d:9f:9a:ff:89:09:c6:6c:a6:f8:5c:6b: 9c:b1:a4:52:2f:01:24:61:ed:3b:fb:ba:cc:86:b8: 33:b3:85:2b:4b:f0:62:ee:1f:67:04:e5:f0:a5:40: 62:75:e6:27:de:4c:c9:3a:7d:10:0b:cc:fa:36:0a: 86:9f:a1:13:44:44:37:b8:0e:1d:f5:d6:5f:e3:64: b8:12:99:76:fd:c1:f8:96:f3:10:6f:a8:eb:69:9a: a1:94:45:b4:63:fa:41:66:9a:1b:0a:e1:21:07:63: e1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:D2:87:C3:29:D3:7D:C4:13:C4:27:67:A9:4E:24:7F:F4:C0:C1:C1 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134332e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.143.0/24 Signature Algorithm: sha256WithRSAEncryption 58:11:bc:d7:99:23:8b:48:fd:df:2b:1a:88:75:4e:00:1e:72: 8e:93:6a:72:67:8d:d1:99:0c:38:f3:86:17:13:53:0f:a1:18: c5:74:83:82:2c:2e:f2:6d:93:0f:07:30:f3:24:8c:a5:bc:7f: 3f:14:95:8d:11:92:d6:d7:11:a4:98:fb:f6:b1:74:fd:68:45: 06:ca:b4:80:91:87:cf:ea:cb:5a:52:48:60:7a:38:81:30:ed: 3f:da:f6:28:5c:67:93:e4:58:d9:1e:92:28:df:12:03:24:25: 36:63:ba:e2:55:c5:b1:70:46:59:82:d5:08:04:d7:16:aa:ee: 30:36:bd:59:e7:ad:e2:95:b1:62:02:aa:9c:01:66:aa:21:ea: 7c:3d:d8:40:46:0c:42:a0:21:e3:b8:78:bb:36:c5:ba:22:45: 46:8b:6d:cd:57:1d:29:ba:95:45:59:c7:fa:e6:e7:35:71:e1: 69:38:74:91:0f:39:61:2c:40:b9:06:4a:63:42:89:b0:cf:2e: 6b:d2:f8:d1:da:01:52:05:66:10:1c:09:cf:db:cf:3b:fa:d2: a7:35:ef:59:1f:ed:46:c8:4c:fa:ee:ee:84:58:94:91:77:13: dd:01:5c:12:75:9b:69:f2:08:40:ed:bd:cc:32:17:dc:f6:be: 49:84:23:76 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOY3w/i9ma1VvJkDlPw2wX8zl/KAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NThaFw0yNjExMTkxMTAxNThaMDMxMTAvBgNV BAMTKDJBRDI4N0MzMjlEMzdEQzQxM0M0Mjc2N0E5NEUyNDdGRjRDMEMxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0iTxZgAsL8nJqqPVRRO02+F4C 29kj4+sZbw2vxSVEspslM/LEqd9NK2hgrw/9yyuJ+zW/KWJjTbo8H4JXsHv1Cxai u7XeWYiRtk/9VJXeq1458jHm0yobjTs7+LLvzb0mEkMZDvyGXcZpVvMPFLyY4Duh PGSBxZrc4nMkxUOJwEoPOdsZSlGlhKGKFp8sciAVF18tAYS4qz2fmv+JCcZspvhc a5yxpFIvASRh7Tv7usyGuDOzhStL8GLuH2cE5fClQGJ15ifeTMk6fRALzPo2Coaf oRNERDe4Dh311l/jZLgSmXb9wfiW8xBvqOtpmqGURbRj+kFmmhsK4SEHY+GlAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUKtKHwynTfcQTxCdnqU4kf/TAwcEwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32PMA0GCSqGSIb3DQEBCwUAA4IBAQBYEbzXmSOLSP3fKxqIdU4AHnKOk2pyZ43R mQw484YXE1MPoRjFdIOCLC7ybZMPBzDzJIylvH8/FJWNEZLW1xGkmPv2sXT9aEUG yrSAkYfP6staUkhgejiBMO0/2vYoXGeT5FjZHpIo3xIDJCU2Y7riVcWxcEZZgtUI BNcWqu4wNr1Z563ilbFiAqqcAWaqIep8PdhARgxCoCHjuHi7NsW6IkVGi23NVx0p upVFWcf65uc1ceFpOHSRDzlhLEC5BkpjQomwzy5r0vjR2gFSBWYQHAnP2887+tKn Ne9ZH+1GyEz67u6EWJSRdxPdAVwSdZtp8ghA7b3MMhfc9r5JhCN2 -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client