This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3134392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: 1HONKbghyqIs0aKYvL2r6CQyr1wr8Scxdne/dQNrl1g= Subject key identifier: 16:F7:2B:69:6F:AC:D6:32:64:CA:C8:76:E1:95:7B:72:14:FF:84:59 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2DB9ECA8DA25A5EC9128FD31C5FF6292CB764811 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa Signing time: Thu 05 Feb 2026 09:05:24 +0000 ROA not before: Thu 05 Feb 2026 09:00:24 +0000 ROA not after: Thu 04 Feb 2027 09:05:24 +0000 asID: 834 IP address blocks: 147.125.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 04:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b9:ec:a8:da:25:a5:ec:91:28:fd:31:c5:ff:62:92:cb:76:48:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Feb 5 09:00:24 2026 GMT Not After : Feb 4 09:05:24 2027 GMT Subject: CN=16F72B696FACD63264CAC876E1957B7214FF8459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:13:d4:78:85:29:56:30:3b:da:20:f4:d8:05: 94:fd:27:e7:fa:c3:87:0b:ed:d5:24:3a:dd:17:df: 3f:26:b9:f5:8b:b6:8d:00:4f:b3:ce:5b:84:4d:d5: 0c:05:48:f9:d9:46:bb:cf:31:bc:de:07:aa:62:28: b1:72:7d:94:cf:58:6b:81:82:f6:57:b7:4a:33:45: b3:ec:83:b0:47:93:fb:cd:71:e4:3c:b2:53:fb:b3: a8:e7:5e:52:38:e8:4e:93:2f:73:31:aa:11:b9:87: 57:7f:77:4c:15:02:e6:65:ac:ba:41:cb:31:eb:52: 35:24:a2:8d:b0:e7:1e:a3:99:5a:c4:dc:a0:e2:65: 46:07:cb:b8:bc:af:95:d3:80:3e:4f:c9:25:af:d9: 6d:82:23:88:54:82:32:62:7e:9c:47:09:64:d6:ac: d6:8c:0f:ab:8a:39:9d:61:fe:9b:ef:1f:a2:ca:42: 01:f9:ad:eb:ac:4a:1e:77:b8:9d:79:48:3f:72:51: f6:ea:f4:2d:39:5d:64:dc:93:54:aa:40:59:11:17: e5:87:5f:3b:49:a5:02:aa:4a:d0:43:fa:c1:d0:78: 6d:a3:ed:b9:3f:2f:06:73:86:ee:f7:e1:04:c6:e1: eb:cd:08:cd:39:9e:dc:d9:a2:07:e6:68:3d:3b:d7: 97:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:F7:2B:69:6F:AC:D6:32:64:CA:C8:76:E1:95:7B:72:14:FF:84:59 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.149.0/24 Signature Algorithm: sha256WithRSAEncryption 88:2f:9d:c5:de:9f:be:21:95:63:6c:85:f1:d4:b3:f7:e0:9c: 29:6b:2d:69:11:f7:2f:70:d2:20:e6:fc:d4:44:64:7e:b2:1c: f2:e3:ab:a5:cf:b3:89:7e:af:b4:84:c0:6f:fc:86:13:3b:c0: e0:4c:eb:5b:10:23:75:14:85:e8:0e:2a:e4:73:49:d2:80:64: d3:e6:a1:99:5a:6d:46:7e:e0:b8:26:a0:a0:3d:3d:a0:aa:4b: 9f:ee:b5:9c:df:65:05:8c:08:3d:59:cb:82:45:d3:63:6f:91: 52:08:bd:b2:23:64:fa:34:22:91:71:61:ac:0f:87:74:aa:fd: 08:4c:b9:79:e8:63:ed:89:da:a0:30:3a:0e:fb:aa:68:59:e1: 21:ff:f7:c6:6e:c0:c1:ac:21:69:6d:53:aa:84:2a:98:9d:72: 4e:a0:00:62:84:8b:4d:91:31:43:5b:02:11:d5:ec:75:48:f1: 45:ba:f5:79:bd:01:60:fe:14:ac:67:5a:0d:2a:e3:2c:eb:1a: 5f:b5:d9:f3:c9:c3:b1:02:4f:30:6b:b5:9e:13:13:f9:f0:b4: be:16:10:8f:26:79:79:6c:e6:fc:f2:21:5e:96:19:3b:b8:9d: 1c:56:e0:4a:ea:67:82:e5:cb:40:7d:5f:c5:19:66:5a:e0:ca: 0e:fd:ae:f5 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIULbnsqNolpeyRKP0xxf9ikst2SBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAyMDUwOTAwMjRaFw0yNzAyMDQwOTA1MjRaMDMxMTAvBgNV BAMTKDE2RjcyQjY5NkZBQ0Q2MzI2NENBQzg3NkUxOTU3QjcyMTRGRjg0NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRE9R4hSlWMDvaIPTYBZT9J+f6 w4cL7dUkOt0X3z8mufWLto0AT7POW4RN1QwFSPnZRrvPMbzeB6piKLFyfZTPWGuB gvZXt0ozRbPsg7BHk/vNceQ8slP7s6jnXlI46E6TL3MxqhG5h1d/d0wVAuZlrLpB yzHrUjUkoo2w5x6jmVrE3KDiZUYHy7i8r5XTgD5PySWv2W2CI4hUgjJifpxHCWTW rNaMD6uKOZ1h/pvvH6LKQgH5reusSh53uJ15SD9yUfbq9C05XWTck1SqQFkRF+WH XztJpQKqStBD+sHQeG2j7bk/LwZzhu734QTG4evNCM05ntzZogfmaD0715czAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUFvcraW+s1jJkysh24ZV7chT/hFkwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 lTANBgkqhkiG9w0BAQsFAAOCAQEAiC+dxd6fviGVY2yF8dSz9+CcKWstaRH3L3DS IOb81ERkfrIc8uOrpc+ziX6vtITAb/yGEzvA4EzrWxAjdRSF6A4q5HNJ0oBk0+ah mVptRn7guCagoD09oKpLn+61nN9lBYwIPVnLgkXTY2+RUgi9siNk+jQikXFhrA+H dKr9CEy5eehj7YnaoDA6DvuqaFnhIf/3xm7AwawhaW1TqoQqmJ1yTqAAYoSLTZEx Q1sCEdXsdUjxRbr1eb0BYP4UrGdaDSrjLOsaX7XZ88nDsQJPMGu1nhMT+fC0vhYQ jyZ5eWzm/PIhXpYZO7idHFbgSupnguXLQH1fxRlmWuDKDv2u9Q== -----END CERTIFICATE-----Generated at Sat Feb 14 17:27:14 2026 by rpki-client