This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135392e302f32342d3234203d3e2039333034.roa File: 3134372e3132352e3135392e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: jIkSJ+O8//CrTv8SxGyt9Ys8UYnVqp0K5ixzQKJPFtY= Subject key identifier: B1:E9:A3:4F:2B:49:AD:D4:9A:86:08:8F:99:75:9B:1D:06:B5:05:0F Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Certificate serial: 2158523DC9EB6DE4CD161B59D97EC0A08304695A Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135392e302f32342d3234203d3e2039333034.roa Signing time: Mon 08 Dec 2025 11:34:59 +0000 ROA not before: Mon 08 Dec 2025 11:29:59 +0000 ROA not after: Mon 07 Dec 2026 11:34:59 +0000 asID: 9304 IP address blocks: 147.125.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:58:52:3d:c9:eb:6d:e4:cd:16:1b:59:d9:7e:c0:a0:83:04:69:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea Validity Not Before: Dec 8 11:29:59 2025 GMT Not After : Dec 7 11:34:59 2026 GMT Subject: CN=B1E9A34F2B49ADD49A86088F99759B1D06B5050F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:47:00:3f:5f:f0:2c:e4:8c:e7:13:13:8e:bd: e5:d6:23:f3:fe:e5:f7:36:07:8f:dc:36:2a:25:6f: a2:7b:1f:c6:7e:1f:ab:59:0d:6b:1b:35:c4:22:57: af:5b:7a:d1:a9:49:cf:96:c0:f3:c2:dd:aa:67:40: ad:f2:a5:61:6c:1a:c1:aa:06:94:de:14:51:54:76: 8d:7f:ee:9c:27:f6:69:00:64:b3:4f:ac:3c:42:a7: 08:88:53:08:fd:cf:3b:df:84:9e:53:b6:63:b0:fe: e0:66:a4:43:e2:c7:12:27:ea:c9:da:b4:6b:f4:eb: 48:5f:c6:d7:70:a0:ff:d5:a0:8b:b8:db:98:41:26: af:d9:33:a3:b3:31:8b:43:3a:b9:0c:5b:1d:e0:3d: 7c:2e:d5:94:57:ac:91:bc:5b:f1:58:a6:9c:80:56: 57:8e:f6:ef:47:0b:24:7c:a1:37:c3:49:40:df:af: e2:fa:43:d0:49:d5:36:a2:b6:cf:5e:62:a6:86:53: a9:8f:f8:a2:8d:fa:39:36:6a:45:75:79:f4:4a:1b: eb:6e:16:98:55:2d:67:b2:49:ca:30:fe:59:9a:69: 54:b7:80:fd:8d:5e:f5:81:0c:e1:6b:0c:32:35:15: 70:ed:60:40:4e:8e:c2:81:64:ca:8b:01:0e:ed:20: 61:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E9:A3:4F:2B:49:AD:D4:9A:86:08:8F:99:75:9B:1D:06:B5:05:0F X509v3 Authority Key Identifier: keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3135392e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.125.159.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:21:ef:5f:b4:b9:77:77:3d:46:9c:3a:5d:bf:41:57:d6:e2: bd:35:4a:da:1a:a4:75:11:2c:a8:d0:f9:ac:73:f4:4d:85:8c: 3b:05:13:ee:dc:b4:24:fd:99:6f:99:78:c0:fe:47:13:7a:77: ef:6d:a3:4a:c9:f0:62:62:e4:09:92:a2:91:c7:e1:0b:74:cf: da:84:79:de:ec:ef:c3:60:48:43:77:ee:46:ef:03:3c:26:34: 32:57:6a:42:44:14:d5:e2:4d:20:bf:46:77:0d:3f:14:46:36: b2:ef:40:8d:18:7b:3e:34:20:4a:64:f5:20:63:29:12:99:b3: 96:98:c4:30:9d:e8:25:d2:b3:60:4f:21:0a:3a:a4:b8:0d:93: e4:7c:a3:7f:0d:2b:cd:ad:d4:b9:84:77:4c:2f:06:d6:6b:16: 20:65:94:28:7f:fa:28:e5:a3:ee:af:60:8c:d7:d5:49:b6:48: 1a:fa:ba:37:7f:a4:35:67:8a:74:27:3c:15:e1:00:71:e0:4d: 27:ba:94:07:b8:26:d8:20:ec:7f:c7:f1:b0:13:92:91:a6:ce: 86:4f:2f:04:01:1c:d1:46:af:86:99:ca:1f:fb:5b:89:4b:b6: 71:a0:21:07:a2:0e:a1:c6:60:17:aa:a6:a2:85:5a:51:01:c8: b8:93:dd:2c -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgIUIVhSPcnrbeTNFhtZ2X7AoIMEaVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl YjVhNzZlYTAeFw0yNTEyMDgxMTI5NTlaFw0yNjEyMDcxMTM0NTlaMDMxMTAvBgNV BAMTKEIxRTlBMzRGMkI0OUFERDQ5QTg2MDg4Rjk5NzU5QjFEMDZCNTA1MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqRwA/X/As5IznExOOveXWI/P+ 5fc2B4/cNiolb6J7H8Z+H6tZDWsbNcQiV69betGpSc+WwPPC3apnQK3ypWFsGsGq BpTeFFFUdo1/7pwn9mkAZLNPrDxCpwiIUwj9zzvfhJ5TtmOw/uBmpEPixxIn6sna tGv060hfxtdwoP/VoIu425hBJq/ZM6OzMYtDOrkMWx3gPXwu1ZRXrJG8W/FYppyA VleO9u9HCyR8oTfDSUDfr+L6Q9BJ1Taits9eYqaGU6mP+KKN+jk2akV1efRKG+tu FphVLWeyScow/lmaaVS3gP2NXvWBDOFrDDI1FXDtYEBOjsKBZMqLAQ7tIGE9AgMB AAGjggI9MIICOTAdBgNVHQ4EFgQUsemjTytJrdSahgiPmXWbHQa1BQ8wHwYDVR0j BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0 YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx MzUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA k32fMA0GCSqGSIb3DQEBCwUAA4IBAQB/Ie9ftLl3dz1GnDpdv0FX1uK9NUraGqR1 ESyo0Pmsc/RNhYw7BRPu3LQk/ZlvmXjA/kcTenfvbaNKyfBiYuQJkqKRx+ELdM/a hHne7O/DYEhDd+5G7wM8JjQyV2pCRBTV4k0gv0Z3DT8URjay70CNGHs+NCBKZPUg YykSmbOWmMQwnegl0rNgTyEKOqS4DZPkfKN/DSvNrdS5hHdMLwbWaxYgZZQof/oo 5aPur2CM19VJtkga+ro3f6Q1Z4p0JzwV4QBx4E0nupQHuCbYIOx/x/GwE5KRps6G Ty8EARzRRq+Gmcof+1uJS7ZxoCEHog6hxmAXqqaihVpRAci4k90s -----END CERTIFICATE-----Generated at Tue Dec 16 23:49:15 2025 by rpki-client