This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3134382e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: fPE5Sko0wB5S3yqT26BAawXxBhHY1ShXla9FF+yFu24= Subject key identifier: 5B:DB:F9:65:03:95:71:83:67:AC:14:F0:76:C9:5E:8A:3E:31:19:49 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 13C8791DBDF5F7D271ACFA6998D5F49F79040FF9 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:34:58 +0000 ROA not before: Mon 08 Dec 2025 11:29:58 +0000 ROA not after: Mon 07 Dec 2026 11:34:58 +0000 asID: 9304 IP address blocks: 147.125.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:c8:79:1d:bd:f5:f7:d2:71:ac:fa:69:98:d5:f4:9f:79:04:0f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:29:58 2025 GMT Not After : Dec 7 11:34:58 2026 GMT Subject: CN=5BDBF9650395718367AC14F076C95E8A3E311949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c0:fd:d3:f8:c9:80:3f:5a:a3:d1:86:6c:05: 6c:b4:fc:b9:cb:98:2b:21:49:e4:03:28:92:64:f6: b2:43:ea:d0:6c:3d:28:ef:69:bc:73:2a:7a:9b:ce: 46:4b:a1:e8:60:8c:51:05:3b:76:ae:79:51:17:da: 9b:51:25:3c:54:53:b9:30:6a:9f:63:65:f8:34:37: 43:8b:99:6f:0a:bd:31:fb:7a:9b:e2:b2:f9:7e:c2: 28:27:9e:ba:0f:7a:48:1e:a0:36:0f:55:ad:af:ca: 5d:87:e1:8d:89:80:c2:fa:ff:2e:38:ba:95:94:9d: 0b:d1:01:ae:68:f1:38:a4:97:3a:5d:97:78:46:29: 3b:2a:7c:02:3b:a1:87:3f:33:74:84:59:da:15:66: a4:18:d8:9d:c9:d8:3c:04:e4:96:3c:67:2a:91:e5: e5:2e:65:02:14:63:74:ba:4b:86:06:b7:21:d0:5f: f4:c1:37:d0:0b:57:e4:b4:79:0b:89:8f:97:8f:1e: d7:ef:64:9e:a0:d4:2b:e5:65:dd:a7:36:ea:79:db: e3:d1:79:ab:49:75:7b:42:5d:65:93:be:c2:58:42: d5:7a:4e:39:d9:4f:2b:99:5b:e7:0a:45:e3:96:6e: 0c:2d:e6:47:53:62:c5:61:dc:fd:b6:eb:d1:26:42: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DB:F9:65:03:95:71:83:67:AC:14:F0:76:C9:5E:8A:3E:31:19:49 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.148.0/24 Signature Algorithm: sha256WithRSAEncryption 02:25:50:79:f2:5c:1a:6c:40:b8:42:07:0f:dc:47:97:9a:b9: 5f:41:ee:26:2a:b5:2d:40:98:18:17:fc:a3:08:71:74:66:7a: 27:7b:cf:2e:75:f4:9d:48:9b:82:91:85:19:ea:1a:bd:63:7c: 5f:6d:ba:d8:92:5c:c5:b6:f4:c3:8d:de:29:a1:3c:22:86:a1: 13:c3:b2:8a:37:3b:cc:39:89:5a:f3:e1:cb:a3:d1:ff:39:b9: e8:ce:8c:6d:9b:f3:f2:0a:3b:78:72:bc:55:78:96:a0:e1:96: 9c:b2:67:10:24:b3:68:f6:a7:d6:c8:6e:b3:a5:f3:82:4b:18: 55:2b:d2:06:a9:37:4d:a8:5e:c2:3c:63:c9:7a:0a:c7:e0:fc: 48:31:09:fa:d5:5c:cd:bc:94:ba:f6:44:a3:aa:eb:ef:da:b7: 52:15:da:d8:43:45:c9:dc:35:fe:c1:6c:1e:7c:14:53:c8:2c: e3:36:a1:d7:a6:6d:2d:7f:8b:04:23:a6:31:89:1a:40:ad:1e: c4:36:21:15:29:b5:2f:f4:77:d4:89:90:d4:72:07:22:28:68: a3:c9:f1:09:3e:d0:a6:be:8f:70:09:b9:82:62:c2:9b:75:58: 73:54:dd:e1:f9:a4:c2:aa:bd:08:8a:bc:ab:01:b9:d0:d1:67: 75:ef:dc:37 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUE8h5Hb3199JxrPppmNX0n3kED/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTI5NThaFw0yNjEyMDcxMTM0NThaMDMxMTAvBgNV BAMTKDVCREJGOTY1MDM5NTcxODM2N0FDMTRGMDc2Qzk1RThBM0UzMTE5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJwP3T+MmAP1qj0YZsBWy0/LnL mCshSeQDKJJk9rJD6tBsPSjvabxzKnqbzkZLoehgjFEFO3aueVEX2ptRJTxUU7kw ap9jZfg0N0OLmW8KvTH7epvisvl+wignnroPekgeoDYPVa2vyl2H4Y2JgML6/y44 upWUnQvRAa5o8Tiklzpdl3hGKTsqfAI7oYc/M3SEWdoVZqQY2J3J2DwE5JY8ZyqR 5eUuZQIUY3S6S4YGtyHQX/TBN9ALV+S0eQuJj5ePHtfvZJ6g1CvlZd2nNup52+PR eatJdXtCXWWTvsJYQtV6TjnZTyuZW+cKReOWbgwt5kdTYsVh3P2269EmQtYbAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUW9v5ZQOVcYNnrBTwdsleij4xGUkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32UMA0GCSqGSIb3DQEBCwUAA4IBAQACJVB58lwabEC4QgcP3EeXmrlfQe4mKrUt QJgYF/yjCHF0Znone88udfSdSJuCkYUZ6hq9Y3xfbbrYklzFtvTDjd4poTwihqET w7KKNzvMOYla8+HLo9H/Obnozoxtm/PyCjt4crxVeJag4ZacsmcQJLNo9qfWyG6z pfOCSxhVK9IGqTdNqF7CPGPJegrH4PxIMQn61VzNvJS69kSjquvv2rdSFdrYQ0XJ 3DX+wWwefBRTyCzjNqHXpm0tf4sEI6YxiRpArR7ENiEVKbUv9HfUiZDUcgciKGij yfEJPtCmvo9wCbmCYsKbdVhzVN3h+aTCqr0IiryrAbnQ0Wd179w3 -----END CERTIFICATE-----Generated at Tue Dec 16 23:49:15 2025 by rpki-client