This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134362e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134362e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: hGaanriRRXi/QvcNfPI6DoXhom4hGKFr4GzRVQPFaq4= Subject key identifier: 39:11:5D:86:21:EF:BE:89:38:80:E3:B9:DF:9D:67:9F:C6:5D:C5:51 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 04B19EED341F663C703E6AAB9839A38FCC878602 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134362e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:55 +0000 ROA not before: Thu 20 Nov 2025 10:56:55 +0000 ROA not after: Thu 19 Nov 2026 11:01:55 +0000 asID: 9304 IP address blocks: 147.125.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:9e:ed:34:1f:66:3c:70:3e:6a:ab:98:39:a3:8f:cc:87:86:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:55 2025 GMT Not After : Nov 19 11:01:55 2026 GMT Subject: CN=39115D8621EFBE893880E3B9DF9D679FC65DC551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ac:9a:38:25:30:a6:cc:f2:ed:e9:f7:30:58: 8d:6f:40:4c:73:8f:ca:ed:1b:01:d2:1d:93:57:0d: 4e:d2:27:1f:de:d7:8e:e3:61:ac:f2:2f:27:f2:2b: 45:b2:a0:d3:53:38:6f:8b:94:8c:b3:05:31:4e:41: c8:ce:9e:65:15:49:9f:a9:dc:2c:4c:0e:f1:19:62: f7:0c:0a:8b:ed:f2:32:48:8f:71:cf:ea:4d:06:37: 07:ac:93:33:5a:77:f7:59:59:1a:80:a2:0b:b3:df: ff:58:9c:e1:7b:f4:60:59:26:f8:d8:63:88:fc:a5: be:c8:00:d3:c6:ce:4d:67:5c:fd:b4:9b:81:ea:4c: c3:1a:72:02:bd:81:a2:9f:4a:8d:7f:b5:f6:94:65: f6:e2:87:42:d5:97:47:b6:60:55:e3:1f:83:d0:55: 82:1b:66:11:6a:03:24:2e:fe:32:f7:c3:6c:9a:ad: 35:dd:76:eb:45:f2:c8:79:c3:42:d3:8b:29:1f:1c: 0e:48:82:7a:71:e1:c4:c8:d7:60:5c:c1:23:e6:e3: a7:0a:91:ac:32:7a:57:ce:b2:a2:8c:fc:17:e1:1c: 65:0c:a1:13:90:d2:d0:93:01:9f:9d:40:7c:28:13: 14:aa:e3:ac:e3:51:8c:4d:06:bb:73:73:2c:7b:63: c9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:11:5D:86:21:EF:BE:89:38:80:E3:B9:DF:9D:67:9F:C6:5D:C5:51 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134362e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.146.0/24 Signature Algorithm: sha256WithRSAEncryption 12:72:86:19:0f:6f:4d:a5:c3:f4:76:f9:1a:d4:7d:e4:4e:75: bd:2b:53:34:47:64:58:0a:1b:c1:76:1b:74:16:72:18:33:44: 92:8d:71:5a:14:d5:5c:ce:ef:be:a4:e3:0e:e1:34:8e:8b:94: fd:53:00:83:fd:ea:93:74:2d:72:f2:e2:a2:33:38:9a:3a:51: 8f:3f:a2:0a:8c:af:e6:05:e3:a3:58:bb:19:d1:0f:d8:7b:da: 78:cf:1d:d7:77:2b:ba:23:de:de:94:62:a2:f5:21:e8:41:99: ea:18:d1:0e:82:f4:71:ce:9a:0b:bb:a3:a1:78:7e:a9:a6:2f: 7f:ed:f7:e2:8f:04:ae:57:98:db:d9:3a:89:59:c7:f5:45:84: c4:2b:0f:b2:3f:85:eb:29:2c:ec:8b:94:fd:75:e3:55:ac:85: f6:95:20:12:62:03:49:c5:4e:6c:5e:29:90:b4:ed:c6:ee:02: 6b:76:79:02:c1:07:8b:cd:c8:c1:54:c6:93:97:6a:ad:de:36: 78:6a:4f:f9:3a:e9:a0:12:cd:b6:b0:32:30:8f:04:56:43:4c: e5:de:2a:ab:ce:eb:28:99:f5:ae:ee:ae:ff:1f:89:8f:6a:2e: fc:e1:b0:32:2b:61:93:66:b0:1b:56:77:24:6e:9a:b8:1f:f4: 77:65:47:69 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUBLGe7TQfZjxwPmqrmDmjj8yHhgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NTVaFw0yNjExMTkxMTAxNTVaMDMxMTAvBgNV BAMTKDM5MTE1RDg2MjFFRkJFODkzODgwRTNCOURGOUQ2NzlGQzY1REM1NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgrJo4JTCmzPLt6fcwWI1vQExz j8rtGwHSHZNXDU7SJx/e147jYazyLyfyK0WyoNNTOG+LlIyzBTFOQcjOnmUVSZ+p 3CxMDvEZYvcMCovt8jJIj3HP6k0GNweskzNad/dZWRqAoguz3/9YnOF79GBZJvjY Y4j8pb7IANPGzk1nXP20m4HqTMMacgK9gaKfSo1/tfaUZfbih0LVl0e2YFXjH4PQ VYIbZhFqAyQu/jL3w2yarTXddutF8sh5w0LTiykfHA5Ignpx4cTI12BcwSPm46cK kawyelfOsqKM/BfhHGUMoROQ0tCTAZ+dQHwoExSq46zjUYxNBrtzcyx7Y8kfAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUORFdhiHvvok4gOO5351nn8ZdxVEwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32SMA0GCSqGSIb3DQEBCwUAA4IBAQAScoYZD29NpcP0dvka1H3kTnW9K1M0R2RY ChvBdht0FnIYM0SSjXFaFNVczu++pOMO4TSOi5T9UwCD/eqTdC1y8uKiMziaOlGP P6IKjK/mBeOjWLsZ0Q/Ye9p4zx3Xdyu6I97elGKi9SHoQZnqGNEOgvRxzpoLu6Oh eH6ppi9/7ffijwSuV5jb2TqJWcf1RYTEKw+yP4XrKSzsi5T9deNVrIX2lSASYgNJ xU5sXimQtO3G7gJrdnkCwQeLzcjBVMaTl2qt3jZ4ak/5OumgEs22sDIwjwRWQ0zl 3iqrzusomfWu7q7/H4mPai784bAyK2GTZrAbVnckbpq4H/R3ZUdp -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:32 2025 by rpki-client