This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135312e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3135312e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: V3qeriRHqJXTDyI/1rtHUZ4pW7SyKVusONZ7bbnSus4= Subject key identifier: 1D:1C:25:BA:28:90:C6:35:80:A5:34:AC:5A:76:11:CE:A4:15:C9:CE Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 1F85E4CF865537D3989D656DC4C43F0036409641 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135312e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:24 +0000 ROA not before: Mon 08 Dec 2025 11:30:24 +0000 ROA not after: Mon 07 Dec 2026 11:35:24 +0000 asID: 834 IP address blocks: 147.125.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:85:e4:cf:86:55:37:d3:98:9d:65:6d:c4:c4:3f:00:36:40:96:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:24 2025 GMT Not After : Dec 7 11:35:24 2026 GMT Subject: CN=1D1C25BA2890C63580A534AC5A7611CEA415C9CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:53:91:5d:a3:b0:50:d2:b9:c4:21:f4:e5:c5: 69:4b:8d:81:62:af:52:84:ef:1f:fe:e1:0a:1f:bf: 7b:7d:27:33:f1:ff:7e:21:bc:8e:8a:96:5e:d0:fe: 85:2c:e9:16:30:99:2e:fb:4e:64:1d:3c:e4:6e:f4: d5:0a:a0:ea:36:d6:65:88:4f:7b:e8:80:58:ed:cc: d1:52:7d:e8:ba:9d:60:ea:da:cc:f9:99:21:b3:1d: bd:41:15:bb:38:88:c2:c1:9c:8d:34:d9:45:42:dd: cd:7e:84:70:ec:8e:f1:18:81:05:0b:fd:34:69:4b: 85:7e:9e:66:44:9f:b8:fc:10:bb:7c:53:6f:c3:a8: 6c:1a:01:45:20:3d:c8:29:22:45:43:f5:9f:ec:03: ea:ab:9e:f5:27:d8:10:a0:d4:c2:3f:64:d2:2d:55: bc:1f:2c:f9:ff:cc:47:20:91:d0:d5:ae:78:e0:4b: 6e:de:49:fe:b8:35:0c:f1:f8:44:11:18:9f:e0:ab: e7:2a:c9:22:66:29:2e:e5:33:da:d2:64:78:8f:58: cf:35:58:7b:3f:9c:72:36:6c:08:5f:78:b8:7e:4b: c1:05:6d:86:63:b1:a1:81:c7:68:c3:eb:22:9b:88: b3:88:7c:2b:cc:cd:49:28:86:01:d7:bf:19:c3:ce: e8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1C:25:BA:28:90:C6:35:80:A5:34:AC:5A:76:11:CE:A4:15:C9:CE X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135312e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.151.0/24 Signature Algorithm: sha256WithRSAEncryption 35:13:c4:e9:6f:c4:a0:91:ce:87:af:74:6e:d9:8e:b3:1e:77: 76:43:8b:0a:5c:34:03:af:f1:b5:41:39:ec:65:20:24:6d:29: 38:0f:39:93:64:0a:58:f8:9c:8b:45:05:92:4a:c3:d5:cb:3d: c4:a9:a7:0d:72:89:21:53:5c:f7:83:03:b1:e1:cb:16:24:a9: 69:e9:16:3d:e2:ff:0f:50:b3:ce:80:3a:8f:5e:18:67:af:61: bc:1b:67:0b:d7:89:dd:41:47:c5:20:f5:4b:39:ce:f1:c6:88: b9:d9:22:7b:d6:d6:12:9b:69:e7:a7:7a:b7:79:76:e1:af:cf: 2b:02:ac:2e:07:8f:40:8b:ab:c4:93:32:f5:86:75:d2:9f:76: a9:94:ee:c0:c3:94:e9:46:04:6e:e5:55:ef:66:d9:02:8b:83: c7:f6:fc:57:14:ea:92:29:a4:d4:f1:2e:65:ac:a1:69:42:43: e5:67:b3:3b:20:48:72:cf:e8:36:31:a9:af:53:3a:5c:22:c5: f7:4f:97:44:e0:2c:45:13:4a:72:34:3b:5d:11:61:fc:3a:d5: cc:4f:c7:81:56:a5:04:f9:ff:a3:3f:89:64:c8:19:89:25:95: ed:2f:11:ce:3d:30:69:bd:2e:5a:11:3b:dc:d7:07:2b:e3:cc: 8f:29:e9:76 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUH4Xkz4ZVN9OYnWVtxMQ/ADZAlkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMjRaFw0yNjEyMDcxMTM1MjRaMDMxMTAvBgNV BAMTKDFEMUMyNUJBMjg5MEM2MzU4MEE1MzRBQzVBNzYxMUNFQTQxNUM5Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJU5Fdo7BQ0rnEIfTlxWlLjYFi r1KE7x/+4Qofv3t9JzPx/34hvI6Kll7Q/oUs6RYwmS77TmQdPORu9NUKoOo21mWI T3vogFjtzNFSfei6nWDq2sz5mSGzHb1BFbs4iMLBnI002UVC3c1+hHDsjvEYgQUL /TRpS4V+nmZEn7j8ELt8U2/DqGwaAUUgPcgpIkVD9Z/sA+qrnvUn2BCg1MI/ZNIt VbwfLPn/zEcgkdDVrnjgS27eSf64NQzx+EQRGJ/gq+cqySJmKS7lM9rSZHiPWM81 WHs/nHI2bAhfeLh+S8EFbYZjsaGBx2jD6yKbiLOIfCvMzUkohgHXvxnDzuh3AgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUHRwluiiQxjWApTSsWnYRzqQVyc4wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 lzANBgkqhkiG9w0BAQsFAAOCAQEANRPE6W/EoJHOh690btmOsx53dkOLClw0A6/x tUE57GUgJG0pOA85k2QKWPici0UFkkrD1cs9xKmnDXKJIVNc94MDseHLFiSpaekW PeL/D1CzzoA6j14YZ69hvBtnC9eJ3UFHxSD1SznO8caIudkie9bWEptp56d6t3l2 4a/PKwKsLgePQIurxJMy9YZ10p92qZTuwMOU6UYEbuVV72bZAouDx/b8VxTqkimk 1PEuZayhaUJD5WezOyBIcs/oNjGpr1M6XCLF90+XROAsRRNKcjQ7XRFh/DrVzE/H gValBPn/oz+JZMgZiSWV7S8Rzj0wab0uWhE73NcHK+PMjynpdg== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:11 2025 by rpki-client