This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3136342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: /VU51aC7VBjG+0kttVWzV1GD5eb8u2OYsi9ygVJmfvU=
Subject key identifier: B1:11:DA:C8:92:14:3B:42:46:B7:47:5B:EA:7A:50:9F:F5:B8:24:DF
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5B5D2C3872084C7D73EBDF6211BEFE664BB2603D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
Signing time: Sun 08 Feb 2026 09:12:36 +0000
ROA not before: Sun 08 Feb 2026 09:07:36 +0000
ROA not after: Sun 07 Feb 2027 09:12:36 +0000
asID: 834
IP address blocks: 147.125.164.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Feb 2026 04:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:5d:2c:38:72:08:4c:7d:73:eb:df:62:11:be:fe:66:4b:b2:60:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Feb 8 09:07:36 2026 GMT
Not After : Feb 7 09:12:36 2027 GMT
Subject: CN=B111DAC892143B4246B7475BEA7A509FF5B824DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:82:f6:f4:04:42:95:f7:64:2d:1c:ce:ab:
82:20:0f:bc:20:67:2a:12:0b:b5:96:7c:db:aa:91:
67:da:15:0f:44:48:7d:df:3d:10:2f:4a:1f:8d:7e:
f0:94:83:41:52:9e:ab:57:26:ef:fe:02:6d:f7:91:
0e:3d:21:8d:75:e7:10:80:05:89:34:11:7b:fd:b1:
b1:fe:b7:54:5d:fc:cf:f8:37:11:9a:6e:1c:b4:30:
b9:3b:82:28:67:c9:81:a1:e6:a8:75:66:eb:b7:9d:
98:0f:9b:37:ec:eb:12:60:fa:6e:c8:f5:a3:91:e7:
99:4e:32:5c:58:b9:7b:a1:4f:c5:47:ca:e1:73:d4:
2a:f5:d1:cd:77:eb:4d:e2:d2:ea:50:d9:c9:d2:95:
24:71:39:4c:92:0f:bc:ec:ad:80:fb:49:6f:2c:4c:
9e:b0:ce:2c:8b:5a:a9:e7:31:a0:a6:64:43:3c:b8:
25:f4:96:22:c7:8d:b6:e9:f3:f3:6c:83:33:37:41:
fc:d9:10:bf:66:6b:c5:38:4b:cc:34:eb:52:92:ad:
38:7c:66:ad:12:4b:f1:bc:08:88:9f:32:44:ee:2f:
d3:bc:90:bd:d1:e5:bb:02:af:ab:3c:9f:22:97:a5:
63:4a:b4:08:4a:c8:c4:27:68:0b:c3:65:b9:18:e2:
28:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:11:DA:C8:92:14:3B:42:46:B7:47:5B:EA:7A:50:9F:F5:B8:24:DF
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.164.0/22
Signature Algorithm: sha256WithRSAEncryption
81:08:89:16:08:c6:b9:03:0d:36:f0:3e:e1:b4:ce:02:db:47:
a9:da:04:e4:47:47:eb:fd:08:09:0e:d6:4b:3a:f6:57:ca:8e:
96:e2:70:70:3a:6d:eb:5b:69:f9:a4:28:47:bf:73:80:f9:3e:
9a:1a:f1:a8:84:ca:ae:1e:a0:05:55:1e:ec:a2:aa:e1:e1:3c:
36:1e:06:a8:fd:b4:a5:e1:e6:c4:fa:20:a1:90:be:02:40:65:
95:e0:7d:12:af:97:7b:2c:31:2e:27:58:08:6e:29:00:55:7f:
d5:7b:82:10:a3:be:46:42:6a:af:54:6a:ce:8b:54:21:74:e7:
c4:29:4c:75:a8:a1:4c:9f:74:da:4e:6a:9d:2f:0d:a1:4b:77:
d4:4f:10:0c:09:a2:83:1c:73:10:2b:d7:63:06:c9:e6:6b:19:
94:56:f8:02:a9:25:ee:7b:cb:95:61:43:1d:8d:3a:5b:9b:6c:
25:46:d1:56:7a:97:74:d5:cc:fc:ff:f8:60:d6:50:4e:ca:26:
6d:b3:85:6e:2f:0a:16:d8:43:c4:d2:d3:c5:6b:f5:b0:d5:b3:
5f:74:38:29:cd:54:23:79:36:53:b3:00:51:3f:0e:9d:15:db:
8e:0a:d3:b8:b7:24:dc:1c:ec:1a:46:42:1e:67:e8:dc:92:7e:
53:2a:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:24:33 2026 by rpki-client