This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135302e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3135302e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: PpliUkM6RwVlc67jyMOV7b/v4NQG/E8WqBQojbkaJFQ= Subject key identifier: 6D:E7:C4:83:3B:0D:A4:1C:01:F4:52:21:74:98:4A:15:AF:03:B8:8E Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 51654BDD549053FFE826CB6112102A4B05E47F98 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135302e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:35:00 +0000 ROA not before: Mon 08 Dec 2025 11:30:00 +0000 ROA not after: Mon 07 Dec 2026 11:35:00 +0000 asID: 9304 IP address blocks: 147.125.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:65:4b:dd:54:90:53:ff:e8:26:cb:61:12:10:2a:4b:05:e4:7f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:00 2025 GMT Not After : Dec 7 11:35:00 2026 GMT Subject: CN=6DE7C4833B0DA41C01F4522174984A15AF03B88E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:6c:b4:8e:ad:26:78:37:1f:d8:fe:5c:e6: 7e:0b:53:1c:90:b3:83:e2:e5:21:28:0a:5c:d3:29: c2:30:09:12:85:26:21:a4:be:7a:28:d8:65:7f:41: 6c:fb:73:a5:ab:21:97:8a:ca:55:59:dc:a2:f8:93: bd:c7:22:bf:d2:80:df:50:61:a2:1b:d0:02:a7:fe: 5a:bb:7c:5d:58:67:48:ff:b5:99:9c:58:99:89:a7: 16:03:e4:a8:bb:91:54:ad:30:46:85:e9:cb:95:c1: e3:cb:e3:70:58:e6:07:3c:2c:36:86:f1:21:6e:0d: a1:97:f6:ee:10:78:d7:50:31:28:e1:d9:7c:f5:3d: 02:7e:a9:fc:f4:3c:0a:99:5a:89:f8:e8:95:2d:d6: d6:71:1f:86:03:a7:59:e8:63:0e:8f:c3:49:08:42: 2c:07:f1:ea:7b:18:bc:6f:c4:c3:a3:78:a5:ad:e7: 0d:d9:fd:8d:94:af:da:c0:91:2f:f1:3d:f8:d2:80: 65:2d:ff:5d:0d:a4:2e:d3:26:45:f8:e8:8f:09:01: 42:5f:5c:cc:10:85:84:91:bb:e9:bc:2f:6e:55:45: 4c:d8:1f:ce:a7:10:ad:67:97:28:8d:6e:d1:93:fb: d5:f7:e8:9e:9d:90:b2:f6:52:90:d0:2c:85:fb:95: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E7:C4:83:3B:0D:A4:1C:01:F4:52:21:74:98:4A:15:AF:03:B8:8E X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135302e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.150.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:09:86:64:63:ea:71:e3:69:85:fe:a1:82:a0:1b:81:37:1f: 54:40:55:ee:0c:e3:f3:c3:b7:16:25:89:b2:47:d5:bd:99:cc: cc:c7:e2:91:64:c6:e9:4c:90:11:4e:43:36:61:ad:34:7d:36: ad:2f:79:22:df:ef:16:07:75:35:32:0b:04:b4:cf:fa:d2:65: ee:19:5e:c0:70:e1:29:a1:bc:e3:ec:53:5b:11:c8:aa:78:cc: cf:be:0c:ad:9e:49:12:89:a7:6d:58:6f:6a:6d:d2:59:cb:26: 7d:39:fa:fe:41:e1:6e:23:c3:fc:ab:c4:47:a0:1b:f3:a4:37: e5:1f:ab:68:6e:83:8a:ae:48:c7:d8:b9:d4:b4:dc:26:22:bf: c4:cc:d0:04:42:67:32:bc:06:89:84:48:7f:33:54:a6:05:87: b9:dd:2b:d8:b9:99:52:01:ae:44:8c:f2:54:0f:58:c7:08:ee: dd:c2:e4:a0:29:bf:2a:e0:db:68:9e:6d:4a:b4:3d:15:f4:df: fd:5c:0e:99:a2:56:0b:b1:bd:a9:d9:e7:c8:d6:3d:d4:bc:b3: 82:a9:5a:f3:64:26:3c:ac:59:72:6e:29:bb:f7:99:8e:74:3f: 38:b7:1d:4b:9e:cd:e3:c5:61:72:bc:3c:b5:ca:7b:2b:89:a1: 68:d6:c3:8b -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUUWVL3VSQU//oJsthEhAqSwXkf5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMDBaFw0yNjEyMDcxMTM1MDBaMDMxMTAvBgNV BAMTKDZERTdDNDgzM0IwREE0MUMwMUY0NTIyMTc0OTg0QTE1QUYwM0I4OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtX2y0jq0meDcf2P5c5n4LUxyQ s4Pi5SEoClzTKcIwCRKFJiGkvnoo2GV/QWz7c6WrIZeKylVZ3KL4k73HIr/SgN9Q YaIb0AKn/lq7fF1YZ0j/tZmcWJmJpxYD5Ki7kVStMEaF6cuVwePL43BY5gc8LDaG 8SFuDaGX9u4QeNdQMSjh2Xz1PQJ+qfz0PAqZWon46JUt1tZxH4YDp1noYw6Pw0kI QiwH8ep7GLxvxMOjeKWt5w3Z/Y2Ur9rAkS/xPfjSgGUt/10NpC7TJkX46I8JAUJf XMwQhYSRu+m8L25VRUzYH86nEK1nlyiNbtGT+9X36J6dkLL2UpDQLIX7lWqjAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUbefEgzsNpBwB9FIhdJhKFa8DuI4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32WMA0GCSqGSIb3DQEBCwUAA4IBAQB9CYZkY+px42mF/qGCoBuBNx9UQFXuDOPz w7cWJYmyR9W9mczMx+KRZMbpTJARTkM2Ya00fTatL3ki3+8WB3U1MgsEtM/60mXu GV7AcOEpobzj7FNbEciqeMzPvgytnkkSiadtWG9qbdJZyyZ9Ofr+QeFuI8P8q8RH oBvzpDflH6toboOKrkjH2LnUtNwmIr/EzNAEQmcyvAaJhEh/M1SmBYe53SvYuZlS Aa5EjPJUD1jHCO7dwuSgKb8q4Ntonm1KtD0V9N/9XA6ZolYLsb2p2efI1j3UvLOC qVrzZCY8rFlybim795mOdD84tx1Lns3jxWFyvDy1ynsriaFo1sOL -----END CERTIFICATE-----Generated at Tue Dec 16 23:49:16 2025 by rpki-client