This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20323134303235.roa File: 3134372e3132352e3134392e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 4hUpsnp1q1UJLFTpVV7occUdodJAvFa3xnZaWjIRRnQ= Subject key identifier: 23:42:97:9C:95:A0:B2:E8:AA:59:F5:C6:8E:4E:CA:1C:EE:04:BD:74 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 7E9007631068086FE3A7C0E2264FBECE0B7F4C64 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20323134303235.roa Signing time: Mon 05 Jan 2026 11:10:07 +0000 ROA not before: Mon 05 Jan 2026 11:05:07 +0000 ROA not after: Mon 04 Jan 2027 11:10:07 +0000 asID: 214025 IP address blocks: 147.125.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:90:07:63:10:68:08:6f:e3:a7:c0:e2:26:4f:be:ce:0b:7f:4c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 5 11:05:07 2026 GMT Not After : Jan 4 11:10:07 2027 GMT Subject: CN=2342979C95A0B2E8AA59F5C68E4ECA1CEE04BD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:c1:ca:bb:61:c8:ba:42:38:4a:54:20:7e: 71:11:a3:cb:37:7d:5b:85:00:7f:3d:ca:15:ab:0e: 58:bc:29:1a:6d:a2:7a:ab:d6:04:7a:a1:ad:c5:c9: 21:f0:15:2d:bd:93:ca:29:7e:58:0a:b3:c7:1c:b1: 85:45:80:ee:06:8c:5e:75:09:1e:4e:23:27:49:7c: 4a:a1:ae:3d:85:73:57:72:ce:aa:7f:16:04:c5:13: cb:2b:b8:63:5c:58:8c:da:1e:c1:94:a7:81:df:55: ca:a3:83:b8:dd:31:86:bc:d2:0a:14:3b:ca:bf:b7: 61:46:fc:b9:24:49:0f:0f:65:51:6a:c7:37:11:39: ed:6d:d6:66:5d:59:ad:66:4f:0b:b2:4c:53:39:9e: d5:0d:ff:c3:e9:0e:27:5c:37:fd:d2:40:c1:41:1b: 25:5a:a6:45:16:2c:f2:dd:79:fa:a0:4b:14:f4:ea: 61:c5:f6:27:28:03:36:70:53:a8:6b:e9:86:34:0c: f6:a8:62:a2:6a:c4:74:b2:8d:db:96:60:d6:0f:62: f6:14:d7:50:4d:47:81:f7:24:96:61:53:ea:b6:e4: 1f:d5:98:3f:5f:97:59:3d:a8:8f:14:4f:0e:76:f7: b7:4a:90:91:5b:b6:44:a1:c0:50:0b:af:0a:45:47: e9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:42:97:9C:95:A0:B2:E8:AA:59:F5:C6:8E:4E:CA:1C:EE:04:BD:74 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.149.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:b8:66:52:82:4e:78:51:cd:b1:55:ec:e9:93:8d:12:d6:6f: e4:65:0a:a7:fd:81:dd:c7:c5:f9:44:00:75:2a:55:60:c3:38: ff:b8:8e:54:49:46:56:58:82:94:90:a7:d2:a1:2c:db:1d:2f: c2:32:05:2f:37:dd:19:ac:df:12:ce:c3:ad:9e:d6:35:0a:63: 59:f6:0d:7d:d9:0f:d2:03:9f:61:25:72:ea:af:46:d1:03:b0: a5:12:82:cc:0a:32:67:c5:32:29:28:25:80:9c:68:33:84:a1: 14:3b:73:89:21:ba:bf:d7:b2:e2:d1:80:38:95:17:bf:96:b4: 51:22:26:b8:bc:90:70:47:42:63:a8:43:e0:44:ec:ba:45:c2: 54:c0:c1:41:9e:55:4d:12:7f:b8:ac:40:de:05:83:ae:fd:96: fe:17:10:35:e8:18:c9:4f:4e:99:80:24:9f:ad:0e:e0:25:f7: be:36:63:23:11:ac:f0:8a:de:af:c3:97:06:a6:a6:6f:f8:0e: 46:64:4f:52:28:c3:28:55:92:34:9a:0a:a5:66:aa:fb:92:f7: 9b:6f:ba:ca:08:73:ef:6d:1c:6c:51:f8:8b:8e:01:44:04:86: 20:f2:d9:00:2f:a7:06:0e:22:4f:06:aa:27:ae:d0:21:db:32: bd:98:7d:2b -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUfpAHYxBoCG/jp8DiJk++zgt/TGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDUxMTA1MDdaFw0yNzAxMDQxMTEwMDdaMDMxMTAvBgNV BAMTKDIzNDI5NzlDOTVBMEIyRThBQTU5RjVDNjhFNEVDQTFDRUUwNEJENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9usHKu2HIukI4SlQgfnERo8s3 fVuFAH89yhWrDli8KRptonqr1gR6oa3FySHwFS29k8opflgKs8ccsYVFgO4GjF51 CR5OIydJfEqhrj2Fc1dyzqp/FgTFE8sruGNcWIzaHsGUp4HfVcqjg7jdMYa80goU O8q/t2FG/LkkSQ8PZVFqxzcROe1t1mZdWa1mTwuyTFM5ntUN/8PpDidcN/3SQMFB GyVapkUWLPLdefqgSxT06mHF9icoAzZwU6hr6YY0DPaoYqJqxHSyjduWYNYPYvYU 11BNR4H3JJZhU+q25B/VmD9fl1k9qI8UTw5297dKkJFbtkShwFALrwpFR+nNAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQUI0KXnJWgsuiqWfXGjk7KHO4EvXQwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9lTANBgkqhkiG9w0BAQsFAAOCAQEALLhmUoJOeFHNsVXs6ZONEtZv5GUK p/2B3cfF+UQAdSpVYMM4/7iOVElGVliClJCn0qEs2x0vwjIFLzfdGazfEs7DrZ7W NQpjWfYNfdkP0gOfYSVy6q9G0QOwpRKCzAoyZ8UyKSglgJxoM4ShFDtziSG6v9ey 4tGAOJUXv5a0USImuLyQcEdCY6hD4ETsukXCVMDBQZ5VTRJ/uKxA3gWDrv2W/hcQ NegYyU9OmYAkn60O4CX3vjZjIxGs8Irer8OXBqamb/gORmRPUijDKFWSNJoKpWaq +5L3m2+6yghz720cbFH4i44BRASGIPLZAC+nBg4iTwaqJ67QIdsyvZh9Kw== -----END CERTIFICATE-----Generated at Mon Jan 19 05:24:31 2026 by rpki-client