This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134352e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134352e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: cW9qtbiaXS25ASuellroHsX98eO+o8wE4yHH48mrauc= Subject key identifier: 95:53:C4:DB:EE:F4:6D:1F:4B:00:A1:10:1F:9F:4C:E2:82:EB:AA:A4 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 089BC4D4B189ECFE04089C2BD3C6065D3ABA1EC5 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134352e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:56 +0000 ROA not before: Thu 20 Nov 2025 10:56:56 +0000 ROA not after: Thu 19 Nov 2026 11:01:56 +0000 asID: 9304 IP address blocks: 147.125.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9b:c4:d4:b1:89:ec:fe:04:08:9c:2b:d3:c6:06:5d:3a:ba:1e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:56 2025 GMT Not After : Nov 19 11:01:56 2026 GMT Subject: CN=9553C4DBEEF46D1F4B00A1101F9F4CE282EBAAA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8d:ac:df:02:c6:4b:21:af:4c:0d:07:8d:8f: 5d:54:99:34:b0:9d:f8:c3:60:4b:56:bb:f7:42:8d: 9e:2c:a3:8f:43:13:a2:f5:a3:5d:80:e4:71:9b:17: 43:01:5e:50:3a:e7:37:7c:32:27:b6:8e:8c:2d:00: 1d:9f:bc:1b:1c:b6:86:4e:f7:4d:30:6a:33:c7:b4: 8e:1a:8b:ba:35:95:05:42:6b:83:6c:ab:62:18:69: 13:02:c9:19:67:50:e1:11:4f:a8:5f:fc:7d:c8:ac: 07:01:e9:a5:99:09:a1:be:81:59:7c:00:80:3c:de: a6:fc:2d:0a:b2:63:04:09:36:68:57:24:80:b6:ba: bf:52:4e:5a:84:8f:8e:59:76:56:36:58:e4:03:18: 33:d2:d2:6c:49:4e:51:b2:33:33:74:b6:b0:ff:73: a6:57:d8:ae:47:32:99:0f:6b:a5:16:21:e9:24:d6: af:93:23:19:60:18:a0:4f:34:ea:5a:db:c4:a2:16: 10:59:8d:c5:25:c6:35:eb:0e:40:4e:6e:4e:a6:56: af:48:13:fa:d5:ea:b3:59:7d:2a:65:33:46:bb:a0: 14:dd:96:74:31:70:ba:48:c9:fe:ba:84:f0:36:cc: 4a:7f:7f:ed:45:7e:1d:8a:1f:c7:56:15:e3:ed:3c: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:53:C4:DB:EE:F4:6D:1F:4B:00:A1:10:1F:9F:4C:E2:82:EB:AA:A4 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134352e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.145.0/24 Signature Algorithm: sha256WithRSAEncryption a2:e7:5c:a3:39:84:8e:aa:8f:70:ba:ea:b1:12:78:45:ec:4f: da:01:5f:45:0a:e4:ad:92:e3:8a:38:69:61:5f:7f:ab:50:ed: 39:d5:c1:8b:4e:ee:98:0b:23:bc:93:0b:81:bb:16:2e:ea:d6: 8e:a4:dc:bf:3f:b5:11:55:da:9f:3e:59:d6:70:3e:ec:d7:29: 03:28:86:7c:f8:96:9d:d5:92:96:03:7c:42:52:04:42:a8:2d: 6f:c6:85:72:92:8c:02:cf:38:b6:2b:49:7f:53:1c:22:83:88: 88:d9:65:6a:34:78:48:71:53:e3:34:25:48:a4:5b:53:48:64: 9c:b7:c6:12:d5:2a:9b:c5:ca:da:ed:fd:50:7e:68:0f:23:cc: 63:8d:3b:a8:32:16:12:77:53:a9:ca:92:9d:57:93:8e:44:a6: 3c:da:6c:77:fe:f3:9f:02:d7:d4:c7:92:89:e1:3c:17:23:0e: 1c:88:61:36:e6:47:5a:81:2d:09:43:ce:5b:78:db:92:f3:ed: c0:bf:9a:2a:0f:bb:39:83:94:13:5a:be:e0:81:ec:d2:55:45: 45:8a:e1:11:a7:32:33:16:5b:22:eb:2b:19:52:51:39:5a:a0: 8f:78:fd:93:79:8b:38:78:41:df:1d:80:93:f1:aa:5f:f5:0a: fb:b8:7f:4f -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUCJvE1LGJ7P4ECJwr08YGXTq6HsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NTZaFw0yNjExMTkxMTAxNTZaMDMxMTAvBgNV BAMTKDk1NTNDNERCRUVGNDZEMUY0QjAwQTExMDFGOUY0Q0UyODJFQkFBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtjazfAsZLIa9MDQeNj11UmTSw nfjDYEtWu/dCjZ4so49DE6L1o12A5HGbF0MBXlA65zd8Mie2jowtAB2fvBsctoZO 900wajPHtI4ai7o1lQVCa4Nsq2IYaRMCyRlnUOERT6hf/H3IrAcB6aWZCaG+gVl8 AIA83qb8LQqyYwQJNmhXJIC2ur9STlqEj45ZdlY2WOQDGDPS0mxJTlGyMzN0trD/ c6ZX2K5HMpkPa6UWIekk1q+TIxlgGKBPNOpa28SiFhBZjcUlxjXrDkBObk6mVq9I E/rV6rNZfSplM0a7oBTdlnQxcLpIyf66hPA2zEp/f+1Ffh2KH8dWFePtPEvtAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUlVPE2+70bR9LAKEQH59M4oLrqqQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32RMA0GCSqGSIb3DQEBCwUAA4IBAQCi51yjOYSOqo9wuuqxEnhF7E/aAV9FCuSt kuOKOGlhX3+rUO051cGLTu6YCyO8kwuBuxYu6taOpNy/P7URVdqfPlnWcD7s1ykD KIZ8+Jad1ZKWA3xCUgRCqC1vxoVykowCzzi2K0l/Uxwig4iI2WVqNHhIcVPjNCVI pFtTSGSct8YS1Sqbxcra7f1QfmgPI8xjjTuoMhYSd1OpypKdV5OORKY82mx3/vOf AtfUx5KJ4TwXIw4ciGE25kdagS0JQ85beNuS8+3Av5oqD7s5g5QTWr7ggezSVUVF iuERpzIzFlsi6ysZUlE5WqCPeP2TeYs4eEHfHYCT8apf9Qr7uH9P -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client