This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135322e302f32322d3232203d3e2035363530.roa File: 3134372e3132352e3135322e302f32322d3232203d3e2035363530.roa (raw, json) Hash identifier: i6LkDQII74cQ9HExnpAAXNSYNyuCUT6HGkq/be6nAU0= Subject key identifier: C8:39:D5:8E:03:8B:80:03:EE:3A:E1:FF:3F:CA:2F:BE:16:FC:03:A8 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 586AF97DEC18723332023E0AEA52D183F8A19D67 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135322e302f32322d3232203d3e2035363530.roa Signing time: Wed 05 Nov 2025 14:16:46 +0000 ROA not before: Wed 05 Nov 2025 14:11:46 +0000 ROA not after: Wed 04 Nov 2026 14:16:46 +0000 asID: 5650 IP address blocks: 147.125.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:29:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:6a:f9:7d:ec:18:72:33:32:02:3e:0a:ea:52:d1:83:f8:a1:9d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Nov 5 14:11:46 2025 GMT Not After : Nov 4 14:16:46 2026 GMT Subject: CN=C839D58E038B8003EE3AE1FF3FCA2FBE16FC03A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:56:7e:d5:0e:82:2c:58:6a:68:84:c8:80: 8f:22:e2:7c:5e:ca:8d:e9:fb:37:85:e5:c1:86:11: 34:e5:4f:49:ad:8e:99:4a:14:29:76:57:3c:1e:61: d8:75:05:cb:bf:c3:56:85:c4:61:22:34:9e:81:86: 6f:b4:23:a2:56:49:7a:e0:88:6d:38:cf:3a:70:7f: a7:56:e6:a5:7b:70:94:15:b0:68:7a:64:db:90:61: c6:c8:6f:f3:8a:ea:9e:28:19:62:69:fa:e3:da:76: 1f:dc:bc:30:1d:da:fe:b1:63:da:b2:ef:4c:a7:97: 1a:33:f4:7d:42:28:fd:18:6f:2e:f4:ec:4e:d0:92: 3e:f4:84:33:52:ed:e1:91:b4:0d:8a:67:a6:52:44: c7:fe:fd:8d:05:17:cc:a7:2d:8d:75:ae:87:55:f9: 1a:e0:fe:2c:96:68:98:17:16:57:6a:f5:7e:e5:19: 9d:f5:cd:f1:b4:c1:6e:a6:34:e2:5a:98:60:94:f6: 63:3c:f0:55:8e:b5:bc:9f:81:b6:dc:67:fc:38:90: b3:db:a3:2b:b9:75:70:e5:60:0f:02:c4:2c:b9:08: c2:00:11:81:38:41:f1:fb:ad:16:f8:20:40:01:04: e5:52:62:5e:ff:90:f5:31:70:06:34:ef:c9:44:6e: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:39:D5:8E:03:8B:80:03:EE:3A:E1:FF:3F:CA:2F:BE:16:FC:03:A8 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135322e302f32322d3232203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.152.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:b6:c3:ca:06:ce:29:33:26:23:c9:fa:64:55:c8:6e:04:98: a4:51:39:55:d4:82:82:9e:f8:94:28:f9:12:fe:2c:32:db:c2: 2d:cc:80:e9:0c:fd:c9:ef:fb:ac:8f:d6:a4:2e:de:a3:e1:03: e7:be:ab:29:eb:fe:1c:70:76:18:0a:bc:e7:66:bb:b1:9d:6e: b1:a3:e7:e0:b9:e5:95:67:03:72:db:a9:ed:34:fc:fb:ec:d7: 9b:c9:59:79:86:6b:39:72:69:8e:c5:4a:8d:ef:13:93:43:ff: f2:f5:56:e0:ee:58:7d:5d:ec:2d:3f:b1:94:3a:f8:d6:00:52: 70:1c:88:0c:01:b5:3d:f9:20:04:38:ef:ce:c5:c1:93:e1:6c: b7:b5:21:44:ef:c1:07:64:e8:2a:75:d1:a4:55:6d:23:2e:e5: 66:b6:75:89:f2:38:be:6f:37:fe:61:71:01:96:19:60:68:11: ef:25:80:04:62:f5:09:71:3e:e9:55:19:8a:e2:90:f2:5f:65: 73:bd:71:a6:ff:73:5c:d9:d2:53:e4:73:61:74:53:81:dc:47: 03:73:e7:ff:09:9a:69:ff:56:18:ea:69:e9:d6:56:48:14:6d: f5:09:a1:98:c9:2e:33:53:a7:f0:40:8e:0e:9f:bc:4c:74:fc: 38:e7:33:00 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUWGr5fewYcjMyAj4K6lLRg/ihnWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTExMDUxNDExNDZaFw0yNjExMDQxNDE2NDZaMDMxMTAvBgNV BAMTKEM4MzlENThFMDM4QjgwMDNFRTNBRTFGRjNGQ0EyRkJFMTZGQzAzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpU1Z+1Q6CLFhqaITIgI8i4nxe yo3p+zeF5cGGETTlT0mtjplKFCl2VzweYdh1Bcu/w1aFxGEiNJ6Bhm+0I6JWSXrg iG04zzpwf6dW5qV7cJQVsGh6ZNuQYcbIb/OK6p4oGWJp+uPadh/cvDAd2v6xY9qy 70ynlxoz9H1CKP0Yby707E7Qkj70hDNS7eGRtA2KZ6ZSRMf+/Y0FF8ynLY11rodV +Rrg/iyWaJgXFldq9X7lGZ31zfG0wW6mNOJamGCU9mM88FWOtbyfgbbcZ/w4kLPb oyu5dXDlYA8CxCy5CMIAEYE4QfH7rRb4IEABBOVSYl7/kPUxcAY078lEbr/rAgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUyDnVjgOLgAPuOuH/P8ovvhb8A6gwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzYzNTMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC k32YMA0GCSqGSIb3DQEBCwUAA4IBAQAftsPKBs4pMyYjyfpkVchuBJikUTlV1IKC nviUKPkS/iwy28ItzIDpDP3J7/usj9akLt6j4QPnvqsp6/4ccHYYCrznZruxnW6x o+fgueWVZwNy26ntNPz77NebyVl5hms5cmmOxUqN7xOTQ//y9Vbg7lh9XewtP7GU OvjWAFJwHIgMAbU9+SAEOO/OxcGT4Wy3tSFE78EHZOgqddGkVW0jLuVmtnWJ8ji+ bzf+YXEBlhlgaBHvJYAEYvUJcT7pVRmK4pDyX2VzvXGm/3Nc2dJT5HNhdFOB3EcD c+f/CZpp/1YY6mnp1lZIFG31CaGYyS4zU6fwQI4On7xMdPw45zMA -----END CERTIFICATE-----Generated at Thu Dec 4 07:38:20 2025 by rpki-client