This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20323134303235.roa File: 3134372e3132352e3135382e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: 0KSoE93T+pfTRpAAkenGHCEkfEuR3SCDfDL5Xi+XnYg= Subject key identifier: D5:C1:54:52:2F:C9:E9:E3:2C:11:53:CE:0E:CD:0A:F0:CF:0E:84:B5 Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 019AEEE3CD63249A928FE7F8BC98486E43D74072 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20323134303235.roa Signing time: Wed 07 Jan 2026 04:41:58 +0000 ROA not before: Wed 07 Jan 2026 04:36:58 +0000 ROA not after: Wed 06 Jan 2027 04:41:58 +0000 asID: 214025 IP address blocks: 147.125.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 19:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ee:e3:cd:63:24:9a:92:8f:e7:f8:bc:98:48:6e:43:d7:40:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Jan 7 04:36:58 2026 GMT Not After : Jan 6 04:41:58 2027 GMT Subject: CN=D5C154522FC9E9E32C1153CE0ECD0AF0CF0E84B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4a:27:b3:bf:2b:d7:d4:64:2d:b7:1c:18:42: 4d:6d:50:54:b7:c3:12:d5:02:ea:30:9a:63:bb:32: fb:e3:c8:08:6d:76:b4:b0:0a:42:9d:10:6b:94:d1: b9:ac:f9:3d:1b:88:ea:0d:c0:c8:23:d7:67:53:6c: 74:93:2e:18:bf:29:cb:28:05:d8:d3:13:cb:f2:f0: 73:eb:7b:21:ff:09:08:cf:4d:ab:d5:7e:8e:f4:84: 3a:f0:44:4b:58:1c:cd:b3:07:c8:a3:e7:51:2f:04: 51:f5:2d:b0:13:d4:69:24:05:21:96:b4:40:6d:c1: 43:6a:a8:77:d7:4c:1c:e1:71:99:84:fb:4e:b8:6c: 3d:c4:91:35:d3:52:b2:87:9a:ef:bc:d2:b7:32:6f: e8:5e:10:a5:bd:86:09:38:92:42:4b:bf:33:67:07: a4:2c:b7:67:c1:1f:02:c9:4e:30:4d:51:a3:a0:36: 4d:62:1c:80:6b:91:69:16:7a:49:c9:65:b2:1e:26: 09:8a:0b:d1:6e:7d:86:56:85:ba:c2:99:65:c1:48: d5:f7:8d:c3:66:1f:45:a9:6a:3c:70:07:5c:5a:a9: 59:da:8e:0f:69:5d:dd:9b:6a:9a:6c:55:35:08:f1: ae:31:02:f1:88:44:05:e9:57:f5:9b:49:ac:74:42: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:54:52:2F:C9:E9:E3:2C:11:53:CE:0E:CD:0A:F0:CF:0E:84:B5 X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.158.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:29:35:fd:f5:55:54:f0:f2:f0:9d:c8:8c:be:11:b1:0f:19: ef:2c:d6:fa:95:ec:c1:b3:b8:df:8c:fb:d9:07:03:56:f4:2f: 07:a0:05:e7:8f:c8:b1:04:81:67:c2:3f:64:0a:b9:06:12:56: c5:f5:32:d5:6d:e1:df:0d:9c:c1:6c:1d:6c:08:8d:86:68:d2: ad:a1:fc:27:50:06:78:86:bb:12:35:5d:c0:8f:25:aa:38:43: d7:ab:c0:ce:4e:ca:75:31:a9:fc:30:65:73:24:9c:81:ac:47: 8e:81:f4:a3:cb:26:18:b4:bc:b0:1d:ae:02:b5:8b:66:22:58: 75:32:ba:a9:57:ed:c4:58:4b:c7:2c:af:e4:84:3d:dd:60:8f: f4:53:8d:1d:b2:38:61:f6:86:d5:3c:32:ef:6a:12:9a:f3:76: 91:e8:d7:19:0a:49:2d:0e:6a:42:f5:a2:08:cd:33:09:fe:a1: 1d:d4:f3:9f:bd:e9:be:4f:c9:a7:93:bd:e4:86:9c:31:1c:24: af:e0:3a:0a:04:9a:ec:79:45:e3:1f:53:32:f1:62:75:bd:a4: 40:86:72:3d:30:3a:d5:f3:cc:88:da:b7:3d:c7:58:8a:6e:a2: d0:70:ae:e7:89:fd:36:8f:ee:f4:67:61:10:6e:73:4c:43:fd: e6:7f:b8:3f -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgIUAZru481jJJqSj+f4vJhIbkPXQHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNjAxMDcwNDM2NThaFw0yNzAxMDYwNDQxNThaMDMxMTAvBgNV BAMTKEQ1QzE1NDUyMkZDOUU5RTMyQzExNTNDRTBFQ0QwQUYwQ0YwRTg0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCFSiezvyvX1GQttxwYQk1tUFS3 wxLVAuowmmO7MvvjyAhtdrSwCkKdEGuU0bms+T0biOoNwMgj12dTbHSTLhi/Kcso BdjTE8vy8HPreyH/CQjPTavVfo70hDrwREtYHM2zB8ij51EvBFH1LbAT1GkkBSGW tEBtwUNqqHfXTBzhcZmE+064bD3EkTXTUrKHmu+80rcyb+heEKW9hgk4kkJLvzNn B6Qst2fBHwLJTjBNUaOgNk1iHIBrkWkWeknJZbIeJgmKC9FufYZWhbrCmWXBSNX3 jcNmH0WpajxwB1xaqVnajg9pXd2bappsVTUI8a4xAvGIRAXpV/WbSax0QsDXAgMB AAGjggJBMIICPTAdBgNVHQ4EFgQU1cFUUi/J6eMsEVPODs0K8M8OhLUwHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgbEGCCsGAQUFBwELBIGkMIGhMIGeBggrBgEFBQcwC4aBkXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzNDMwMzIzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAJN9njANBgkqhkiG9w0BAQsFAAOCAQEAHSk1/fVVVPDy8J3IjL4RsQ8Z7yzW +pXswbO434z72QcDVvQvB6AF54/IsQSBZ8I/ZAq5BhJWxfUy1W3h3w2cwWwdbAiN hmjSraH8J1AGeIa7EjVdwI8lqjhD16vAzk7KdTGp/DBlcyScgaxHjoH0o8smGLS8 sB2uArWLZiJYdTK6qVftxFhLxyyv5IQ93WCP9FONHbI4YfaG1Twy72oSmvN2kejX GQpJLQ5qQvWiCM0zCf6hHdTzn73pvk/Jp5O95IacMRwkr+A6CgSa7HlF4x9TMvFi db2kQIZyPTA61fPMiNq3PcdYim6i0HCu54n9No/u9GdhEG5zTEP95n+4Pw== -----END CERTIFICATE-----Generated at Mon Jan 19 05:24:31 2026 by rpki-client