This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134342e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: EIImIt5897y3cTpEvhpvMM8oOF69lZqN+6BEd29D8mc= Subject key identifier: F2:AA:B9:87:13:F0:69:CD:34:7E:E5:E1:EC:89:B5:19:67:DF:D2:81 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 591C02E9E1BE9612AEFBDA4952FDCEAC59ADD45B Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:57 +0000 ROA not before: Thu 20 Nov 2025 10:56:57 +0000 ROA not after: Thu 19 Nov 2026 11:01:57 +0000 asID: 9304 IP address blocks: 147.125.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:1c:02:e9:e1:be:96:12:ae:fb:da:49:52:fd:ce:ac:59:ad:d4:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:57 2025 GMT Not After : Nov 19 11:01:57 2026 GMT Subject: CN=F2AAB98713F069CD347EE5E1EC89B51967DFD281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fa:ad:f1:e8:25:42:a0:1e:dd:be:08:58:c4: f5:0e:b1:f6:57:8a:40:ab:27:ac:3b:3a:5d:d6:55: 45:16:c5:61:7e:ee:e4:40:27:69:dd:e8:13:31:98: ba:7f:8c:7a:01:bb:9e:0a:f0:1f:f5:28:2e:3c:91: 6f:d1:0f:94:19:42:74:25:df:9a:7f:cd:9a:e1:94: 72:0c:35:e9:90:17:cf:87:f7:69:76:03:b5:08:31: 17:65:fb:40:36:b1:a8:3c:45:95:47:ba:f6:a8:90: 98:2e:c4:a1:0f:e1:e3:20:e4:46:da:0f:a9:8d:2a: fb:1a:26:13:cc:ac:17:a2:bc:ef:a6:48:d7:30:57: ca:4f:aa:f8:26:80:ec:ab:5e:29:bd:e9:d1:f2:a3: 60:63:b1:37:fd:ab:35:da:4b:f4:00:43:41:39:af: a4:8c:02:a7:de:0c:61:ad:a2:bb:68:3e:5b:65:14: f2:6f:a4:a5:56:93:64:87:a1:9f:37:08:73:2a:44: 09:70:b6:6b:62:09:0e:68:15:31:ce:00:67:56:da: a0:f6:62:f6:7e:8b:3e:20:c7:b2:ba:85:b7:af:f7: ef:69:17:69:5b:4b:8f:e9:26:03:6f:09:e5:06:44: 5c:c8:ee:45:1c:4a:63:9b:93:19:58:83:82:70:b2: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AA:B9:87:13:F0:69:CD:34:7E:E5:E1:EC:89:B5:19:67:DF:D2:81 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.144.0/24 Signature Algorithm: sha256WithRSAEncryption a4:7b:bd:41:51:aa:f8:e0:96:f8:2d:73:bc:27:1a:93:a2:e7: cc:3c:fa:40:f3:83:1f:08:d4:7b:ba:a3:83:ab:66:3c:bf:70: 09:92:df:1e:92:97:30:55:d7:9c:05:19:27:72:82:d3:0c:d4: b5:51:d1:49:c1:e4:5c:47:9e:1a:ca:9b:99:e2:eb:1c:33:fb: 82:21:6f:b2:27:89:5b:6c:7b:c4:38:6b:8f:44:a3:11:d3:24: d4:ac:d8:90:75:81:7c:e4:1d:8b:88:fa:97:73:7e:69:aa:58: 85:8f:ea:1f:34:62:d4:fa:f8:08:1c:4b:50:19:10:83:e8:0a: 3d:17:89:e4:79:72:09:8c:e2:2a:3f:e2:d2:14:17:4f:3d:a3: 54:a1:cf:b7:dc:97:8e:a6:b8:f6:48:ff:7f:c3:8b:b2:9c:78: 70:cc:50:cd:01:e7:9f:26:10:18:77:0c:60:1d:17:2c:01:f4: cb:b6:b4:0f:a3:95:31:fd:de:75:d3:ef:00:68:99:c0:5f:74: b5:22:8c:f2:1a:28:e9:d1:24:a4:16:59:35:a0:44:31:97:57: 96:9b:3f:40:3a:8e:d9:73:67:bf:a2:c5:dc:e4:00:c4:65:71: d3:6e:6a:fe:04:96:de:50:6d:b8:90:c6:18:79:35:db:b2:98: 9b:5c:ee:07 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWRwC6eG+lhKu+9pJUv3OrFmt1FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NTdaFw0yNjExMTkxMTAxNTdaMDMxMTAvBgNV BAMTKEYyQUFCOTg3MTNGMDY5Q0QzNDdFRTVFMUVDODlCNTE5NjdERkQyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+q3x6CVCoB7dvghYxPUOsfZX ikCrJ6w7Ol3WVUUWxWF+7uRAJ2nd6BMxmLp/jHoBu54K8B/1KC48kW/RD5QZQnQl 35p/zZrhlHIMNemQF8+H92l2A7UIMRdl+0A2sag8RZVHuvaokJguxKEP4eMg5Eba D6mNKvsaJhPMrBeivO+mSNcwV8pPqvgmgOyrXim96dHyo2BjsTf9qzXaS/QAQ0E5 r6SMAqfeDGGtortoPltlFPJvpKVWk2SHoZ83CHMqRAlwtmtiCQ5oFTHOAGdW2qD2 YvZ+iz4gx7K6hbev9+9pF2lbS4/pJgNvCeUGRFzI7kUcSmObkxlYg4JwskrPAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQU8qq5hxPwac00fuXh7Im1GWff0oEwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32QMA0GCSqGSIb3DQEBCwUAA4IBAQCke71BUar44Jb4LXO8JxqToufMPPpA84Mf CNR7uqODq2Y8v3AJkt8ekpcwVdecBRkncoLTDNS1UdFJweRcR54aypuZ4uscM/uC IW+yJ4lbbHvEOGuPRKMR0yTUrNiQdYF85B2LiPqXc35pqliFj+ofNGLU+vgIHEtQ GRCD6Ao9F4nkeXIJjOIqP+LSFBdPPaNUoc+33JeOprj2SP9/w4uynHhwzFDNAeef JhAYdwxgHRcsAfTLtrQPo5Ux/d510+8AaJnAX3S1IozyGijp0SSkFlk1oEQxl1eW mz9AOo7Zc2e/osXc5ADEZXHTbmr+BJbeUG24kMYYeTXbspibXO4H -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:33 2025 by rpki-client