This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20383334.roa File: 3134372e3132352e3135382e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: VY9I8ACMHG2L8cJ6ulI//+O30UrDRyPBnrxGx+IjV7A= Subject key identifier: 94:21:A9:FB:45:02:8F:D8:8B:CF:68:CF:12:7B:EF:A7:8B:23:DE:AD Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 538B3A79CCC0B4A3B68310F9A0BA944485F174F5 Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20383334.roa Signing time: Mon 08 Dec 2025 11:35:24 +0000 ROA not before: Mon 08 Dec 2025 11:30:24 +0000 ROA not after: Mon 07 Dec 2026 11:35:24 +0000 asID: 834 IP address blocks: 147.125.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8b:3a:79:cc:c0:b4:a3:b6:83:10:f9:a0:ba:94:44:85:f1:74:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:30:24 2025 GMT Not After : Dec 7 11:35:24 2026 GMT Subject: CN=9421A9FB45028FD88BCF68CF127BEFA78B23DEAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:48:fa:04:09:7e:c3:e7:4e:97:97:24:f1: 16:55:05:88:f5:40:fd:21:d0:2c:92:3b:5a:99:51: f5:d7:f1:6f:c7:bd:a1:d9:91:d6:29:37:75:77:41: 4d:ff:05:0a:ee:f9:8d:f6:86:19:fd:56:ed:a4:de: 90:78:3a:33:3c:b5:0d:b9:38:6a:c2:fb:37:d9:78: bb:8e:af:3e:f9:4c:8a:d4:0f:a9:93:b1:79:aa:37: 3f:95:51:04:50:f5:09:a9:c8:56:e1:0b:1e:43:ff: 09:53:00:1d:93:d9:a0:b5:ee:2c:2d:a4:a8:11:66: ad:b0:e1:9b:b5:e8:77:b1:66:03:98:d1:92:8d:ba: 7f:21:c6:f2:8f:3f:09:a5:32:c0:c0:c2:d4:95:9f: 87:de:f3:cf:19:ac:78:5d:1e:d7:b4:ee:15:1d:35: 4a:00:e5:9c:a1:db:88:94:7e:d6:81:37:14:5d:a0: 0c:ed:41:60:06:80:83:37:c3:f5:da:44:74:2e:4c: 41:57:45:1d:7c:6a:f6:cd:a5:d8:a9:41:cb:0c:de: 29:2b:dd:0e:57:23:55:77:34:19:52:df:d9:95:b0: 29:18:30:fa:4f:b8:ab:6b:44:a0:b0:f6:4a:99:15: 85:c2:5f:2a:37:d0:ec:2b:b9:d1:68:4b:fd:22:47: d7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:21:A9:FB:45:02:8F:D8:8B:CF:68:CF:12:7B:EF:A7:8B:23:DE:AD X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135382e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.158.0/24 Signature Algorithm: sha256WithRSAEncryption 28:1b:33:7e:32:a9:29:a7:73:87:50:57:3d:7a:ae:21:92:09: 46:a9:3f:77:fd:bc:d4:d7:ef:2f:6d:11:17:88:8a:de:35:57: 70:6a:02:1d:55:34:76:b9:c0:a4:f4:a1:37:88:72:d6:aa:0b: 51:2f:90:88:00:9a:7f:83:12:93:b0:a9:bf:e8:3e:07:94:be: 73:05:6f:84:59:83:44:eb:44:ea:d9:aa:83:7c:07:5e:75:36: e3:fc:b5:17:50:ef:48:70:93:77:fb:da:20:ff:fa:ac:5f:58: cf:d6:a5:f7:b2:9a:a8:63:53:1e:8f:3d:7a:a6:27:04:a4:68: 24:f0:b3:4a:d8:54:33:4f:a4:56:48:6a:e6:72:58:8e:37:dc: 98:13:6a:7a:88:4e:8a:fa:75:87:e4:28:24:6c:7a:98:b8:57: 67:77:c9:a3:fe:70:c3:00:98:67:6f:9e:6a:a3:54:31:5e:7c: 97:ca:17:b8:5d:fb:58:ba:52:bb:7c:49:bb:d8:b7:63:68:6d: fe:a1:6c:20:9f:c6:b2:27:f8:c6:58:0e:32:b6:20:db:23:c6: bc:81:e2:a7:e1:3e:20:ce:f5:bd:08:f6:58:4f:b1:73:a7:30: a9:9c:31:69:95:a9:db:c0:b7:dd:71:16:e4:0f:d1:5f:57:69: df:53:eb:90 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgIUU4s6eczAtKO2gxD5oLqURIXxdPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTMwMjRaFw0yNjEyMDcxMTM1MjRaMDMxMTAvBgNV BAMTKDk0MjFBOUZCNDUwMjhGRDg4QkNGNjhDRjEyN0JFRkE3OEIyM0RFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwkj6BAl+w+dOl5ck8RZVBYj1 QP0h0CySO1qZUfXX8W/HvaHZkdYpN3V3QU3/BQru+Y32hhn9Vu2k3pB4OjM8tQ25 OGrC+zfZeLuOrz75TIrUD6mTsXmqNz+VUQRQ9QmpyFbhCx5D/wlTAB2T2aC17iwt pKgRZq2w4Zu16HexZgOY0ZKNun8hxvKPPwmlMsDAwtSVn4fe888ZrHhdHte07hUd NUoA5Zyh24iUftaBNxRdoAztQWAGgIM3w/XaRHQuTEFXRR18avbNpdipQcsM3ikr 3Q5XI1V3NBlS39mVsCkYMPpPuKtrRKCw9kqZFYXCXyo30OwrudFoS/0iR9cNAgMB AAGjggI7MIICNzAdBgNVHQ4EFgQUlCGp+0UCj9iLz2jPEnvvp4sj3q0wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9 njANBgkqhkiG9w0BAQsFAAOCAQEAKBszfjKpKadzh1BXPXquIZIJRqk/d/281Nfv L20RF4iK3jVXcGoCHVU0drnApPShN4hy1qoLUS+QiACaf4MSk7Cpv+g+B5S+cwVv hFmDROtE6tmqg3wHXnU24/y1F1DvSHCTd/vaIP/6rF9Yz9al97KaqGNTHo89eqYn BKRoJPCzSthUM0+kVkhq5nJYjjfcmBNqeohOivp1h+QoJGx6mLhXZ3fJo/5wwwCY Z2+eaqNUMV58l8oXuF37WLpSu3xJu9i3Y2ht/qFsIJ/Gsif4xlgOMrYg2yPGvIHi p+E+IM71vQj2WE+xc6cwqZwxaZWp28C33XEW5A/RX1dp31PrkA== -----END CERTIFICATE-----Generated at Mon Dec 15 23:28:07 2025 by rpki-client