This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135372e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3135372e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: /g3ni35f6goZNqgB5IStu7CTu2p4KtfGheuh+nSnA24= Subject key identifier: 32:F3:53:D0:EC:86:7F:B2:E4:14:02:ED:02:0C:55:F5:32:11:A6:5C Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 5E38F60E1B073206019E0670467634E5E41DB1A1 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135372e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:34:57 +0000 ROA not before: Mon 08 Dec 2025 11:29:57 +0000 ROA not after: Mon 07 Dec 2026 11:34:57 +0000 asID: 9304 IP address blocks: 147.125.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:38:f6:0e:1b:07:32:06:01:9e:06:70:46:76:34:e5:e4:1d:b1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:29:57 2025 GMT Not After : Dec 7 11:34:57 2026 GMT Subject: CN=32F353D0EC867FB2E41402ED020C55F53211A65C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f1:f4:46:61:7c:b9:3b:da:a1:47:0e:8d:20: 21:5f:6b:79:af:d3:c7:50:bc:c8:10:16:3b:48:2f: 25:25:3a:1b:c2:5c:33:31:8c:0e:4c:91:0b:87:b9: 62:a4:44:62:4e:55:7b:6c:fc:96:00:34:9c:55:2e: 5e:88:4b:0b:3c:e7:8b:1b:bd:e9:b1:d4:76:c9:f7: ee:82:87:f7:25:b7:05:df:f4:b1:9c:e6:8e:c7:75: 10:82:96:fb:fd:29:8a:5d:7e:4d:57:7a:76:7c:76: e9:38:1c:f6:f6:ea:3e:b1:dc:e0:06:b5:14:09:b6: 32:3e:42:96:06:76:0f:9a:4f:ac:81:c8:d9:b2:af: 43:1c:65:6b:11:2f:92:66:64:f4:59:d0:61:45:8d: 3d:c3:09:ac:34:7c:b2:d5:5d:52:af:da:a3:b2:d4: f2:2f:e7:05:36:ce:3a:53:f0:bf:db:cc:72:ca:10: 5e:a2:fb:6b:f4:83:c2:25:59:f0:66:b4:0a:fb:0d: d1:66:3e:ec:1f:46:e3:c8:b6:61:b0:5c:07:62:06: 27:2b:66:a2:14:7c:60:a7:1a:df:01:c5:f4:42:ad: 32:e1:48:f4:a0:e1:04:6a:2e:7d:54:10:32:df:f2: 9e:5d:dc:5b:32:b2:16:aa:8d:64:54:89:b7:f4:8d: 46:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:53:D0:EC:86:7F:B2:E4:14:02:ED:02:0C:55:F5:32:11:A6:5C X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135372e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.157.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:3a:f4:51:c6:70:56:2a:47:33:10:30:80:8c:6d:9d:e3:6c: e8:ea:02:75:11:28:53:96:f1:67:58:22:f3:14:01:95:b1:df: a3:bd:13:d1:2c:2d:f6:6b:e3:35:b4:bc:23:28:ad:5e:8c:d4: 93:92:fc:5a:d1:52:da:b1:c6:52:b1:2b:a9:27:5a:ad:fb:19: d2:f0:95:29:79:de:ac:33:34:eb:0e:ec:2c:db:16:1a:dd:64: a6:58:0d:10:d0:c1:71:6f:04:05:90:69:b8:e4:81:73:a3:92: f7:95:dd:f2:99:66:19:56:af:4d:8b:9b:95:73:d5:6c:5c:80: 7e:19:dc:87:00:5e:db:24:fe:f1:0a:cc:bc:dd:b7:ac:74:24: 42:11:df:56:bb:59:65:f7:74:a0:d1:5b:ad:94:c5:91:8c:5c: ac:81:65:f7:03:a8:a7:7e:cf:ad:0c:89:16:2b:45:72:79:df: cc:ce:eb:59:84:c2:57:67:27:73:94:be:f0:7f:18:dd:ce:c8: b7:b3:74:1b:52:9a:8f:cc:80:4b:24:7a:56:c0:9e:ec:04:0a: 03:4b:40:1c:31:c7:c7:ce:ed:e5:e3:51:3a:25:77:15:a2:6e: 5b:e8:f5:13:cb:a4:ec:51:39:39:93:fa:83:a7:6b:fb:38:e5: 6c:c9:b9:49 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUXjj2DhsHMgYBngZwRnY05eQdsaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTI5NTdaFw0yNjEyMDcxMTM0NTdaMDMxMTAvBgNV BAMTKDMyRjM1M0QwRUM4NjdGQjJFNDE0MDJFRDAyMEM1NUY1MzIxMUE2NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8fRGYXy5O9qhRw6NICFfa3mv 08dQvMgQFjtILyUlOhvCXDMxjA5MkQuHuWKkRGJOVXts/JYANJxVLl6ISws854sb vemx1HbJ9+6Ch/cltwXf9LGc5o7HdRCClvv9KYpdfk1XenZ8duk4HPb26j6x3OAG tRQJtjI+QpYGdg+aT6yByNmyr0McZWsRL5JmZPRZ0GFFjT3DCaw0fLLVXVKv2qOy 1PIv5wU2zjpT8L/bzHLKEF6i+2v0g8IlWfBmtAr7DdFmPuwfRuPItmGwXAdiBicr ZqIUfGCnGt8BxfRCrTLhSPSg4QRqLn1UEDLf8p5d3FsyshaqjWRUibf0jUa9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUMvNT0OyGf7LkFALtAgxV9TIRplwwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32dMA0GCSqGSIb3DQEBCwUAA4IBAQBuOvRRxnBWKkczEDCAjG2d42zo6gJ1EShT lvFnWCLzFAGVsd+jvRPRLC32a+M1tLwjKK1ejNSTkvxa0VLascZSsSupJ1qt+xnS 8JUped6sMzTrDuws2xYa3WSmWA0Q0MFxbwQFkGm45IFzo5L3ld3ymWYZVq9Ni5uV c9VsXIB+GdyHAF7bJP7xCsy83besdCRCEd9Wu1ll93Sg0VutlMWRjFysgWX3A6in fs+tDIkWK0Vyed/MzutZhMJXZydzlL7wfxjdzsi3s3QbUpqPzIBLJHpWwJ7sBAoD S0AcMcfHzu3l41E6JXcVom5b6PUTy6TsUTk5k/qDp2v7OOVsyblJ -----END CERTIFICATE-----Generated at Tue Dec 16 23:58:06 2025 by rpki-client