This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3134392e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: cuQzv/zMaBEhZIjNpu4WosqckHPLs0VL4Ozat5rCLww= Subject key identifier: C8:64:CB:63:B7:9D:79:45:28:D1:ED:68:D3:0C:5B:EE:87:DF:86:68 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 766D665FAC84A92E3A63D6F2E7CDC755621AB10F Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:24 +0000 ROA not before: Mon 08 Dec 2025 11:30:24 +0000 ROA not after: Mon 07 Dec 2026 11:35:24 +0000 asID: 834 IP address blocks: 147.125.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6d:66:5f:ac:84:a9:2e:3a:63:d6:f2:e7:cd:c7:55:62:1a:b1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:24 2025 GMT Not After : Dec 7 11:35:24 2026 GMT Subject: CN=C864CB63B79D794528D1ED68D30C5BEE87DF8668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:90:f3:91:70:ad:25:c7:59:94:d6:92:4a: 97:89:83:d4:54:9b:a3:81:81:d2:33:40:04:33:f3: 54:70:74:24:0f:3e:cc:cc:98:6f:b5:43:7b:f7:4f: a3:39:b9:f6:ee:92:a7:4b:10:8c:cc:cb:17:b9:06: bd:80:66:48:39:b3:a0:9f:b8:6d:32:d8:45:62:f7: 1e:a4:de:0c:0a:d4:60:8c:ae:ac:b8:6b:52:d9:5b: f8:6c:c3:a2:b9:de:91:cf:b1:b9:8f:e8:29:d6:6c: 0e:ff:61:f2:14:68:88:3d:b5:b0:cb:54:00:12:7f: 27:84:78:ca:2a:6d:dd:cf:a1:c2:b8:f8:58:a6:ab: 10:32:2e:4e:8a:97:55:05:4d:c5:68:99:10:a9:22: c6:6a:88:67:e3:d9:e7:c9:d5:ec:82:ef:3e:bc:75: 23:6b:0e:e3:18:0e:33:79:68:f1:65:23:4c:53:25: 0e:7c:48:c8:7d:fe:f6:a5:c0:c8:89:fe:58:5b:a8: d0:58:42:ab:74:a7:7f:f6:f6:7b:6e:e2:25:26:ac: 7e:59:06:22:70:25:9e:1a:ef:92:7e:6e:dc:df:7f: f7:19:e1:4f:a1:ac:1b:c3:78:c7:b6:d7:d4:a6:02: e5:8c:ae:e7:41:2b:d5:39:9b:6c:ab:bb:51:50:f8: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:64:CB:63:B7:9D:79:45:28:D1:ED:68:D3:0C:5B:EE:87:DF:86:68 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134392e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.149.0/24 Signature Algorithm: sha256WithRSAEncryption 73:b9:9a:fd:8e:9e:7d:74:3e:31:cf:de:24:d4:e9:38:ba:c1: 4b:fc:9b:2d:7c:1e:85:42:16:65:32:4d:d1:b1:32:6a:a2:11: 54:41:67:42:94:c2:25:6e:ee:9e:78:42:85:e7:70:6c:fc:33: a1:6c:bc:1c:28:93:71:57:cc:b1:e7:6c:19:10:38:11:94:ff: e3:5b:df:53:78:3b:f4:a9:28:d2:53:ef:39:db:0b:08:a9:36: 4f:1c:70:ae:c9:d0:79:a7:6c:4a:44:e8:a9:60:54:9e:33:ae: f2:40:2f:95:69:35:52:8e:15:24:2b:e4:b2:75:69:2c:56:4f: 0f:6c:a4:ef:8e:99:df:a4:bf:76:9b:57:86:95:82:47:9a:2c: 08:b2:ff:b1:aa:cc:ca:31:53:28:a0:cb:c0:8b:c4:76:b0:1f: fe:27:09:01:3e:79:a7:fb:95:c9:22:c5:b9:dd:ea:bc:06:d8: f6:af:17:30:b2:10:03:97:c3:0a:6f:22:87:c5:3f:28:09:d0: 4f:ab:34:76:18:f7:a6:db:93:77:d4:0d:c0:07:d6:fd:89:61: 09:05:ae:2b:ba:54:d9:82:a5:77:1f:8c:0e:75:71:4b:7c:40: 46:f5:ec:a3:31:dc:c3:35:00:e5:de:4f:c1:18:c3:65:f8:73: 26:0d:e3:86 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUdm1mX6yEqS46Y9by583HVWIasQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMjRaFw0yNjEyMDcxMTM1MjRaMDMxMTAvBgNV BAMTKEM4NjRDQjYzQjc5RDc5NDUyOEQxRUQ2OEQzMEM1QkVFODdERjg2NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq0ZDzkXCtJcdZlNaSSpeJg9RU m6OBgdIzQAQz81RwdCQPPszMmG+1Q3v3T6M5ufbukqdLEIzMyxe5Br2AZkg5s6Cf uG0y2EVi9x6k3gwK1GCMrqy4a1LZW/hsw6K53pHPsbmP6CnWbA7/YfIUaIg9tbDL VAASfyeEeMoqbd3PocK4+FimqxAyLk6Kl1UFTcVomRCpIsZqiGfj2efJ1eyC7z68 dSNrDuMYDjN5aPFlI0xTJQ58SMh9/valwMiJ/lhbqNBYQqt0p3/29ntu4iUmrH5Z BiJwJZ4a75J+btzff/cZ4U+hrBvDeMe219SmAuWMrudBK9U5m2yru1FQ+Bo9AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUyGTLY7edeUUo0e1o0wxb7offhmgwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 lTANBgkqhkiG9w0BAQsFAAOCAQEAc7ma/Y6efXQ+Mc/eJNTpOLrBS/ybLXwehUIW ZTJN0bEyaqIRVEFnQpTCJW7unnhChedwbPwzoWy8HCiTcVfMsedsGRA4EZT/41vf U3g79Kko0lPvOdsLCKk2TxxwrsnQeadsSkToqWBUnjOu8kAvlWk1Uo4VJCvksnVp LFZPD2yk746Z36S/dptXhpWCR5osCLL/sarMyjFTKKDLwIvEdrAf/icJAT55p/uV ySLFud3qvAbY9q8XMLIQA5fDCm8ih8U/KAnQT6s0dhj3ptuTd9QNwAfW/YlhCQWu K7pU2YKldx+MDnVxS3xARvXsozHcwzUA5d5PwRjDZfhzJg3jhg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:07 2025 by rpki-client