This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134372e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134372e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: gksOQRhbFckmB9NX40psRlHrQx1RQvZxYtJjtl0lpIM= Subject key identifier: 72:0A:99:0D:13:28:B9:37:D8:44:39:D6:A7:D8:37:30:4C:BC:9A:E6 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 3B27A697043057F3988699D9B37D1220EA96DD03 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134372e302f32342d3234203d3e2039333034.roa Signing time: Thu 20 Nov 2025 11:01:54 +0000 ROA not before: Thu 20 Nov 2025 10:56:54 +0000 ROA not after: Thu 19 Nov 2026 11:01:54 +0000 asID: 9304 IP address blocks: 147.125.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:27:a6:97:04:30:57:f3:98:86:99:d9:b3:7d:12:20:ea:96:dd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 20 10:56:54 2025 GMT Not After : Nov 19 11:01:54 2026 GMT Subject: CN=720A990D1328B937D84439D6A7D837304CBC9AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:54:34:c3:75:9f:c5:5e:f1:14:5b:f1:64: bf:ad:66:6e:5d:c3:a3:c5:62:5e:b3:76:65:28:4c: cb:27:3b:a2:64:ce:6b:73:a2:b4:65:4c:2f:db:c6: 4e:5a:26:0c:fc:f8:c2:2f:f8:3f:99:de:55:ce:d8: dd:1d:ee:b7:9a:c4:85:8f:ea:55:eb:ba:7a:13:88: 69:2a:e3:a2:63:c4:eb:83:63:d6:2d:98:97:89:fc: 7f:d9:69:e5:59:e9:3b:89:89:09:d1:76:ed:85:a8: 27:4e:f1:26:e7:78:e4:4a:d2:fd:cb:3e:e6:23:c1: ad:1e:25:3c:a7:7e:ce:f3:46:81:9e:68:2f:41:23: 23:09:14:30:a7:9f:f1:3b:d4:fa:2c:88:c2:85:59: de:d2:bf:0c:0b:2a:25:15:f2:74:b0:db:5f:ce:db: ec:d9:60:01:f3:5c:eb:37:e4:88:66:37:5c:1b:9a: dd:f6:ca:4d:2a:f7:34:52:43:d5:46:0b:16:17:ef: ce:0e:db:3a:b6:a0:76:f4:e2:c4:1d:52:c8:4d:b7: 58:b5:d6:e4:3d:ba:da:77:03:cb:b7:9d:54:9e:ca: 1b:29:16:c4:f8:2d:0e:f4:f4:62:a8:62:61:ce:5d: b7:11:86:4c:a6:d3:41:13:34:ea:fa:ee:41:87:59: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0A:99:0D:13:28:B9:37:D8:44:39:D6:A7:D8:37:30:4C:BC:9A:E6 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134372e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.147.0/24 Signature Algorithm: sha256WithRSAEncryption 96:aa:65:68:85:f2:32:b7:15:ab:bc:c9:a4:b6:a8:5b:b2:1b: bf:c4:06:b4:9e:39:57:27:56:c5:b2:87:61:53:76:38:cb:78: 7c:07:4b:14:1d:ce:04:8a:26:10:e4:4b:49:e7:16:51:bc:b9: c8:d0:85:b0:43:4a:da:bc:6e:56:bb:d5:cb:d0:21:3d:dd:7e: f5:0a:96:83:cb:95:60:91:61:8c:4d:bc:8b:98:d3:68:71:0b: 33:ba:d6:3b:c7:e1:bc:da:54:17:9a:b8:8b:b4:99:90:45:b8: cf:c6:57:d3:ae:be:e3:c2:8e:36:13:99:a3:32:43:56:ed:91: 2f:00:cf:81:db:33:a2:ef:f0:bd:7d:ac:5e:76:b9:1e:b7:06: c4:8b:1c:f8:d7:06:b7:ff:e3:3f:7c:85:ea:cf:15:d1:b6:99: 4d:44:50:d3:a7:a3:9a:0a:20:c0:57:9b:c3:42:c8:01:1a:8b: 50:37:97:bb:96:33:19:18:28:82:b7:dc:b0:67:64:40:9a:0f: 23:f0:6f:6a:10:d1:a4:e4:5f:e1:1f:cf:4a:ca:92:a2:ba:89: 78:e0:81:a4:31:8f:d0:ce:34:fb:6e:a8:8c:78:e8:57:e7:bf: 53:c4:80:e3:e1:e5:d7:16:69:f5:b7:d5:9d:e0:52:6e:e0:15: db:2c:10:99 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUOyemlwQwV/OYhpnZs30SIOqW3QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMjAxMDU2NTRaFw0yNjExMTkxMTAxNTRaMDMxMTAvBgNV BAMTKDcyMEE5OTBEMTMyOEI5MzdEODQ0MzlENkE3RDgzNzMwNENCQzlBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7wFQ0w3WfxV7xFFvxZL+tZm5d w6PFYl6zdmUoTMsnO6JkzmtzorRlTC/bxk5aJgz8+MIv+D+Z3lXO2N0d7reaxIWP 6lXrunoTiGkq46JjxOuDY9YtmJeJ/H/ZaeVZ6TuJiQnRdu2FqCdO8SbneORK0v3L PuYjwa0eJTynfs7zRoGeaC9BIyMJFDCnn/E71PosiMKFWd7SvwwLKiUV8nSw21/O 2+zZYAHzXOs35IhmN1wbmt32yk0q9zRSQ9VGCxYX784O2zq2oHb04sQdUshNt1i1 1uQ9utp3A8u3nVSeyhspFsT4LQ709GKoYmHOXbcRhkym00ETNOr67kGHWRgTAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUcgqZDRMouTfYRDnWp9g3MEy8muYwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32TMA0GCSqGSIb3DQEBCwUAA4IBAQCWqmVohfIytxWrvMmktqhbshu/xAa0njlX J1bFsodhU3Y4y3h8B0sUHc4EiiYQ5EtJ5xZRvLnI0IWwQ0ravG5Wu9XL0CE93X71 CpaDy5VgkWGMTbyLmNNocQszutY7x+G82lQXmriLtJmQRbjPxlfTrr7jwo42E5mj MkNW7ZEvAM+B2zOi7/C9faxedrketwbEixz41wa3/+M/fIXqzxXRtplNRFDTp6Oa CiDAV5vDQsgBGotQN5e7ljMZGCiCt9ywZ2RAmg8j8G9qENGk5F/hH89KypKiuol4 4IGkMY/QzjT7bqiMeOhX579TxIDj4eXXFmn1t9Wd4FJu4BXbLBCZ -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:33 2025 by rpki-client